last executing test programs: 6m1.927211529s ago: executing program 4 (id=2765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) process_vm_readv(r0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/70, 0x46}], 0x1, &(0x7f0000001cc0)=[{&(0x7f00000017c0)=""/80, 0x50}, {&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/239, 0xef}, {&(0x7f0000001a40)=""/137, 0x89}, {&(0x7f0000001b00)=""/191, 0xbf}, {&(0x7f0000001bc0)=""/66, 0x42}, {&(0x7f0000001c40)=""/85, 0x55}], 0x7, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4018, r1}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map, 0x26, 0x0, 0x7fffffff, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x10, 0x40, 0x9, 0x9, {{0x1c, 0x4, 0x3, 0x7, 0x70, 0x64, 0x0, 0x0, 0x2f, 0x0, @local, @multicast2, {[@noop, @timestamp_addr={0x44, 0x34, 0xf4, 0x1, 0x3, [{@multicast2, 0x5}, {@rand_addr=0x64010100, 0xffffffff}, {@private=0xa010100, 0x2}, {@multicast1, 0x7}, {@empty, 0x401}, {@broadcast, 0x9}]}, @timestamp={0x44, 0x1c, 0x9d, 0x0, 0x6, [0x8, 0xff, 0x684, 0x4, 0x0, 0x4]}, @timestamp={0x44, 0x8, 0x50, 0x0, 0x4, [0x3]}]}}}}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x14, 0x18, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x22}, @map_fd={0x18, 0xa}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0xffffffff, 0x1000, &(0x7f0000000540)=""/4096, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001580)={0x1, 0x9, 0x6, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000015c0)=[{0x5, 0x1, 0x8, 0x7}, {0x1, 0x4, 0x3, 0xc}, {0x1, 0x2, 0xe, 0x6}, {0x0, 0x2, 0xe, 0x8}, {0x5, 0x3, 0x5}], 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex=r5, r3, 0xe, 0x10, 0x0, @void, @value=r6, @void, @void, r4}, 0x20) 6m0.727881068s ago: executing program 4 (id=2768): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0xffff, 0x4}, 0x10, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0xa, 0x5, 0x1, 0x101, 0x3c6, 0x7, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbcde, 0x7ff, 0x1, 0x8, 0xffff, 0xe, 0x4, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0xdaae, 0x5, 0x9, 0x6, 0x9, 0x0, 0x3a23, 0x1000, 0x8, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x6, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x4, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0xd, 0x5, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0xfffffff7, 0x8, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x400, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0x8, 0x0, 0xffffffff, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0xfff, 0x3, 0x5, 0x0, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x10000001, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x80000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x9, 0x8c0, 0x9, 0x2, 0x9, 0x7, 0x6, 0x2, 0x81, 0x8, 0xffffff20, 0x55f2, 0x5, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x897, 0x8, 0x8e8, 0x6, 0x101, 0xfffff410, 0xd, 0x7ff, 0x2, 0x4, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x6, 0x100, 0x1, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x6, 0x7, 0x1, 0x9, 0x0, 0x4, 0x9, 0x100, 0x3, 0x3c, 0x1000, 0x3, 0x2, 0x15, 0x8000, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {0x2, 0xe, 0x1, 0x7}, 0x4b, [0x1, 0x3, 0x2f, 0xa, 0x10001, 0x7, 0x6, 0x200, 0xd1, 0xab22, 0x1, 0x3ff, 0x3, 0x7, 0x2, 0x7, 0x4, 0x3, 0x8, 0x6, 0x9, 0x8, 0x3b3, 0x4, 0x0, 0x5579, 0x93, 0x40, 0x3, 0x7, 0x8, 0x3ff, 0x8, 0x7ff, 0x7, 0x3, 0x6, 0x8, 0x4800000, 0x6, 0x9, 0x7, 0x9, 0x627, 0x0, 0x1, 0x9, 0x10000, 0x1, 0x805, 0x1, 0x5, 0x7ff, 0x200, 0xa77, 0x0, 0x4, 0x9, 0x0, 0x7, 0x3ff, 0x4, 0x9, 0x1], [0x2, 0x10, 0x9, 0xa4, 0xffffffe3, 0x0, 0x7, 0xc, 0x8, 0x6, 0x200, 0x7, 0x4, 0x9, 0x2, 0x3800000, 0x0, 0x5, 0x1, 0x9, 0xa, 0x0, 0xf8, 0x0, 0x2, 0x8, 0x10, 0x5, 0x8000, 0xcb6, 0x6a14, 0x9, 0x7f, 0x400, 0x2, 0x9, 0x1, 0x2, 0x5, 0x10001, 0x9, 0x1, 0x87, 0x0, 0xd, 0xe1c3, 0x5, 0x3f4, 0x7, 0x8, 0x5, 0x4, 0x101, 0xffff, 0x10001, 0x100, 0x6, 0x9, 0x0, 0xffff, 0x8, 0xffffffa8, 0x90a, 0x80], [0x2, 0xe, 0xa, 0x4, 0x1, 0x28149df4, 0x1, 0x7, 0x3, 0x9, 0x568, 0x6, 0x90, 0x3, 0xfffffffc, 0x7fffffff, 0x0, 0x5, 0x8, 0xd, 0xfffffffe, 0x0, 0xfffffffb, 0x1, 0x347c, 0x1, 0x96, 0x3, 0x7, 0x8, 0x5, 0x200, 0x7, 0x100, 0x4, 0x4, 0x8, 0x8, 0x4ae, 0x6, 0xff, 0x1ef, 0x5bd7, 0x9, 0x6, 0x1000, 0x2, 0x1, 0x8eee, 0x0, 0x7, 0x2, 0xd75, 0x4, 0x7fff, 0x6, 0x7b, 0x0, 0x0, 0x5, 0x10, 0x1, 0xfffffecd], [0x4, 0x9, 0x5, 0xcf, 0x6, 0x1c000000, 0xc234, 0x5, 0xb, 0x40, 0x101, 0x6, 0x468ecafe, 0x800, 0x2, 0x8001, 0x6, 0x3, 0x7fffffff, 0x7fffffff, 0x7f, 0x5, 0x8, 0x8, 0x1, 0x0, 0x1, 0x7, 0x0, 0x9, 0x1, 0x7ff, 0x1, 0x8, 0x7, 0xd, 0xb, 0x6, 0xffffffff, 0x6, 0x8, 0xfffffffb, 0x0, 0x26, 0x1ff, 0xffffffff, 0x101, 0xbb41, 0x100, 0x1, 0xff, 0x4e8, 0xfffffff6, 0x9, 0xe087, 0xfffff577, 0x9, 0x10001, 0x1, 0x0, 0x4, 0xfffffff9, 0x3ff]}, 0x45c) 6m0.483105708s ago: executing program 4 (id=2770): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x9, &(0x7f0000000640)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @initr0, @exit]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000240)={0xfff, 0x101, 0x1}) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x407}}}, 0x7) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1, 0xee, 0x97e) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 5m58.143310085s ago: executing program 4 (id=2771): unshare(0x22020600) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x90000, 0x0) memfd_create(&(0x7f0000000000)='/dev/kvm\x00', 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0xffffffffffffffb5}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'rose0\x00', 0x1}) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x11c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x19, 0x45, "04158e52b345b084a2d116eba8e5f68d877630e7a4"}, @NL80211_ATTR_TESTDATA={0x22, 0x45, "c01bdba1746fe02c538c7994bc536665c97a3798995e4a4b07e2e59ccd93"}, @NL80211_ATTR_TESTDATA={0xc8, 0x45, "d10e9e949e4b0225d46e55e0bad06554ba723fbd5a842b9ea087d48ac199341f7f0f124873a059821b375bfeb215e65e1135956910af6433f508f347c15fc3a082477f59ed6dc3b1999eb3634c01a3173a7b4450ae08b04ea4dbc83089fa1a0e5198f775b08a81a9ea0f11633524bfccc608592acc9de09136db4ba442eb26dddf13f48ef1cefe82a03f8b690f25452fffdd8e9f2ba78b82515bc8423a536049093ad467183c36f54df98dbf7e05a6c2eefabf7d04799bea219b9a23ffd6151a80a8b056"}]}, 0x11c}}, 0x40000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000ec0)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/6, 0x7d) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) 5m56.2303649s ago: executing program 4 (id=2782): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000007000000000000000900000d00000000060000000100000007000000030000000e000000040000000900000005000000f5ff0000010000000d00000003000000040000000200000010000000030000000c000000010000000000002e2e2e003c15779c98037892dc6d71cd865f71c0e3aec559f2d6bea46a284b79ac1ccad7bcc86a335e5f121941ae7e2a0e51af7553051541e1f7f3ac1db241d9d8a25b5ea1db1ee6fefddb555e8a6d5f24d89a1233d86d4b7223deb164fa3d66cbc8825734071bd7c776c6843f9bcc743f69d398d1a3575f1767686a985ab08c7c27969345"], 0x0, 0xfe7d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) mount$afs(&(0x7f0000000000)=@cell={0x23, 'syz0:', 'syz0', '.backup'}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x1200810, &(0x7f0000000580)={[{@flock_write}], [{@dont_measure}]}) r3 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r4 = socket(0xa, 0x801, 0x0) getsockopt(r4, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000) dup3(0xffffffffffffffff, r4, 0x80000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) socket$alg(0x26, 0x5, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)='veth0_to_team\x00') ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r5, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) 5m53.337752547s ago: executing program 4 (id=2787): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0xffffffd2) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0xc) ppoll(&(0x7f0000000240)=[{r3, 0x4600}, {0xffffffffffffffff, 0x4000}, {r3, 0x40}, {r0, 0x1a0}, {r4, 0x1060}, {r1, 0x2062}, {r0, 0x420}, {0xffffffffffffffff, 0x80}], 0x8, &(0x7f0000000300), &(0x7f0000000340)={[0x81]}, 0x8) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x30, 0x0, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2b}]}]}, 0x30}}, 0x0) munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a0, 0x98, 0x0, 0x138, 0x138, 0x0, 0x308, 0x308, 0x308, 0x308, 0x308, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0x0, 'bond_slave_0\x00', 'veth0_to_bond\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xa}}}, {{@ip={@loopback, @private=0xa010102, 0xffffff00, 0xff, 'ip6tnl0\x00', 'veth0_vlan\x00', {}, {}, 0x5e, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, 0x4e21}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e01060000"], 0x164}}, 0x0) 5m37.695679814s ago: executing program 32 (id=2787): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0xffffffd2) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0xc) ppoll(&(0x7f0000000240)=[{r3, 0x4600}, {0xffffffffffffffff, 0x4000}, {r3, 0x40}, {r0, 0x1a0}, {r4, 0x1060}, {r1, 0x2062}, {r0, 0x420}, {0xffffffffffffffff, 0x80}], 0x8, &(0x7f0000000300), &(0x7f0000000340)={[0x81]}, 0x8) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x30, 0x0, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2b}]}]}, 0x30}}, 0x0) munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a0, 0x98, 0x0, 0x138, 0x138, 0x0, 0x308, 0x308, 0x308, 0x308, 0x308, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0x0, 'bond_slave_0\x00', 'veth0_to_bond\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xa}}}, {{@ip={@loopback, @private=0xa010102, 0xffffff00, 0xff, 'ip6tnl0\x00', 'veth0_vlan\x00', {}, {}, 0x5e, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, 0x4e21}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e01060000"], 0x164}}, 0x0) 1m15.288885974s ago: executing program 3 (id=3383): syz_open_dev$media(&(0x7f0000000180), 0x1, 0x200) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x10000a81, &(0x7f0000000400)={0x0, 0xffffe001, 0x0, 0x3, 0x33c}, &(0x7f00000003c0)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0xfffffffd, 0x0, 0x32315842, 0x0, 0x0, [{}, {0x0, 0x200}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff}]}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r7, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7aa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r11 = dup(r10) write$P9_RLERRORu(r11, &(0x7f00000006c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYRES16=r6], 0xa1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d07002c6d6f3dd2165a0a59285b8b8582769a355769356d3317e0d4980ee8221f948edb0b4872fee8fc6303379f166e527bc0a56bcbf4714cdb7ea31ae111a03c38ce434f899a342d6b066ac9f6bca3da7b37653a5ef3b77280d3accc78236a262789a611600bae9802414eda71fe5ab2f9c6fbbf76a987af1074929744ce99e71fad774dc79fc56be40cdfc6de7b437562e99d1c0ff85a6c011f57187642a3119fa962a8e639023bac5ae3dfd4e8c4f4330ed1b6fd4e9d71e8a8abbafb9d7055ee083bb1593b604e303e25cf9da6bb3c5e028e25c49e1d8a9325bdea", @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',k']) write$binfmt_misc(r7, &(0x7f0000000300), 0xfdef) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x4, &(0x7f0000000040)) 1m13.251146212s ago: executing program 3 (id=3388): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000080)=0xb, 0x4) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0xff32, 0x0, 0x0, &(0x7f0000000000)=""/10, 0x17}}], 0x400000000000078, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) timer_create(0x2, &(0x7f0000000300)={0x0, 0x27, 0x4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x21, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xd0, 0xb, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x2, 0xe, 0x1, {0x22, 0x126}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb4, 0x9, 0x6}}}}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 1m11.289447623s ago: executing program 3 (id=3394): timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) timerfd_create(0x0, 0xc0000) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x2, 0x0) 1m10.366626909s ago: executing program 3 (id=3396): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) chroot(0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0xfe33) 1m10.015073631s ago: executing program 3 (id=3399): r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$IPC_SET(0x0, 0x0, 0x13, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000070000000000000000000000000000ff0f00000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000030000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702183f06000014000000b7030000000000008500000005000800bca900000000000035090100000000009500000000f9ffffb6020000000040a5739a00fe00000000b509000000000000dbaa00fea0000011bf8600000000000007080000ddff029abfa400000000000007040000f0ffffffc74200000800000018223d00", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000000)=0x6) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') 1m8.552158611s ago: executing program 3 (id=3401): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r2, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8081) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xa8, 0x24, 0xf0b, 0x0, 0x200000, {0x0, 0x0, 0x12, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x7c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x2}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x31c6d305}, @TCA_HTB_DIRECT_QLEN={0x1b, 0x5, 0xfffffffc}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10000, 0x5e80000}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x1}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0xa8}, 0x1, 0x7a00, 0x0, 0x4010041}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r6, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d733459a7a2800018008000100000000001c00038006000300a0aa800006000100000000000800020002000000050002"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x10) 52.936720059s ago: executing program 33 (id=3401): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r2, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8081) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xa8, 0x24, 0xf0b, 0x0, 0x200000, {0x0, 0x0, 0x12, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x7c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x2}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x31c6d305}, @TCA_HTB_DIRECT_QLEN={0x1b, 0x5, 0xfffffffc}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10000, 0x5e80000}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x1}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0xa8}, 0x1, 0x7a00, 0x0, 0x4010041}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r6, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d733459a7a2800018008000100000000001c00038006000300a0aa800006000100000000000800020002000000050002"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x10) 16.0985948s ago: executing program 0 (id=3522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000480)=ANY=[@ANYBLOB]) 14.52865528s ago: executing program 6 (id=3527): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='sys_enter\x00', r0, 0x0, 0xfffffffffffffefd}, 0x18) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000003002000000000000200000005000000450000009500ffffffff0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x20800) syz_io_uring_setup(0x2a28, &(0x7f0000000480)={0x0, 0x7ea0, 0x800, 0x0, 0x38, 0x0, r1}, &(0x7f0000000500), &(0x7f0000000440)) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = dup(r7) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = syz_io_uring_setup(0x7ab1, &(0x7f00000003c0)={0x0, 0x576, 0x0, 0x0, 0xf7}, &(0x7f0000000540)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r10, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r10, 0x4ac9, 0x3900, 0x1800000000000000, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r13]) ioctl$MEDIA_IOC_ENUM_LINKS(r13, 0xc0287c02, &(0x7f0000000400)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_LIMIT={0xfffffffffffffe34, 0x2, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0xfffffffffffffff8, 0x5, 0x1}]}}]}, 0x58}}, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r14, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x8, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000084000000000000008a00000018420000bf"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xff7, &(0x7f0000002e00)=""/4087, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000f, @void, @value}, 0x94) 12.641259748s ago: executing program 5 (id=3529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000340)={0x0, 0xffffffffffffff9c, &(0x7f0000000140)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x4044041}, 0x8000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9f}, 0x9) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYRES8=r1], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.536496313s ago: executing program 6 (id=3530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8, 0x4}]}, 0xa0}, 0x1, 0xfffff000}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffc, 0x0}}], 0x58}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x7655b000) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x24, &(0x7f00000001c0)={0x20, 0x30, 0x3, '\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock(&(0x7f0000a86000/0x2000)=nil, 0x2000) 11.569536293s ago: executing program 0 (id=3536): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x40) ppoll(&(0x7f0000000240)=[{r0, 0xe4}], 0x1, 0x0, 0x0, 0x0) 11.295175996s ago: executing program 0 (id=3537): unshare(0x22020400) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000680)={0x0, 0x11, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e00)={0x34, &(0x7f0000000b00)={0x20, 0x7, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)={0x20, 0x24, 0x6c, {0x6c, 0x23, "015eaf297500adf008b221a1b42a8865f73583444067c9f5b84fd0603cb191780948b900e66394306bdfc375630f995d78a9a0b2dfc2b002306a1c43daca0fe62e12727e063281bf7cbeee755efb768a7d5859111af5a49f753e5aaaf9cf3ae462a6807a3c81fa85919e"}}, &(0x7f0000000100)={0x0, 0x3, 0xa6, @string={0xa6, 0x3, "2152fb61b80838acced2625ebdca06c4740f8304da1ae0dccfa4eae861d5f8183144813f6dcc8af140df9ca4d56c32a777ec3f1b5559bff51530c6e42901a4931087889674c9307f95208f77e8794efaf8f9a7bfdce0fb6b6f97e9f962408703a01e5dc75eb87de655482f446a744b13dd900da96c32bd8a5541643586b0b7ccba825e525f48bd02911a3ff8c2e7ec630cbf037cfe0e5ccf9556ad447f86451fc1fb9a2e"}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x20, 0x30, 0x9a, "0b9e4b244e3944cac4d8ee1df51ae704cbd7f2b320a00d4aaa7e680345e07325ae57f8ea8804e12e7ba307c10434f406212f49f6ef4c60d178b1f6303c4bcd4159c4fac6ce11e9572349f891ef3718a270665b32585df6fda24a3752338e1ba9cb515aefac13cc08866bba87e6f99aadafbc32270c1aa03a12354fc7820c331ab4dd851ebfe5f8079dfb7a5b04509e0e799b2c7c354cb13ad905"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x81, 0x2, "47ff"}, &(0x7f0000000340)={0x20, 0x82, 0x2, 'eT'}, &(0x7f0000000380)={0x20, 0x83, 0x1, 'y'}, &(0x7f00000003c0)={0x20, 0x84, 0x1, "95"}, &(0x7f0000000400)={0x20, 0x85, 0x3, '[*?'}}) unshare(0x2000000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r2, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) io_uring_enter(0xffffffffffffffff, 0x100000, 0x2, 0xf, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff4, 0xffffffff, 0x8, 0x200000}, 0x10) write(r3, &(0x7f0000000040)="240000001e005f0214fffffffffffff807000000b80000000000f2ff080008000d000000", 0x24) poll(&(0x7f00000000c0)=[{r1, 0x12}], 0x1, 0x7) 10.64591985s ago: executing program 2 (id=3538): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x41, 0x1}}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x248, 0x228, 0x25a, 0x248, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a}, 0x5002, 0x118, 0x138, 0x52020000, {0x0, 0x6802000000000000}, [@common=@unspec=@limit={{0x48}, {0x28f5c, 0x80000000, 0x8, 0x5, 0x3, 0x0, 0x4}}, @common=@unspec=@state={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@local, @empty, [0x0, 0xff], [0xffffffff], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffe, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) io_setup(0x81, &(0x7f0000000180)=0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xe0, @empty}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000002340)=[&(0x7f00000036c0)={0x0, 0x300, 0x0, 0x5, 0x6, r3, 0x0}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={r10, 0x1, 0x6}, 0x10) 10.153749505s ago: executing program 1 (id=3540): unshare(0x20600) r0 = timerfd_create(0x9, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) close(r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x10000000) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={{r1}, 0xf96, 0x1dc984a1, 0x7}) 9.267087638s ago: executing program 5 (id=3541): mkdir(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000)={0x46}, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000500)="b4a8152a8f050000000000000000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) socket$can_bcm(0x1d, 0x2, 0x2) 9.247156156s ago: executing program 1 (id=3542): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0xb0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r3, r2, 0x0) listen(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x0, 0xff, 0x8, 0x1}, {0xfffd, 0x7, 0x0, 0x8001}, {0x1, 0x4, 0x5, 0x7}, {0x3, 0x8, 0xe6, 0x286}, {0x5, 0x6, 0x2, 0x1}]}) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0xffff, 0x0, 0x10, {[@generic={0x0, 0x2}]}}}}}}}}, 0x0) 9.239012948s ago: executing program 2 (id=3543): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000001c0)="c4e17ff0be000000009a00380000990064660f388181f6ffffff66ba4100b8f6d70000eff30f5ec4c4e13dd5610c66baf80cb8a466fd83ef66bafc0ced66baa000ed0f0966b8b7000f00d8", 0x4b}], 0x1, 0x6, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffff4, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r3, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES8=r2], 0x40c}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0x138, 0x16, 0x633, 0x0, 0x80000000, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {0x0, 0x0, 0xfffffffffffffffd}, {0x5, 0x3, 0xffffffffffffffff, 0x80000000005}, {0x4}, 0x2, 0x2, 0xa, 0x4, 0x7}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x309, 0x0, 0x0, {0xa, 0x0, 0x20}, [@RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x4, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x8}}]}, 0x38}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x19c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20004000}, 0x48) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) setsockopt$inet6_opts(r9, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="2e06040306280200fc0000000000dcbf00000000000000012001000000000000000000000000000200"/56], 0x38) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r9, r10, 0xf, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, &(0x7f00000000c0), 0x400}}, 0x30) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r7]) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r12) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000240)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f00000005c0)=0xe8) mount$pvfs2(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1004000, &(0x7f0000000480)=ANY=[@ANYBLOB="2e2c73797a30002c6f626a5f726f6c653d200100000000000000000000000000022c666f776e65723e", @ANYRESDEC=r12, @ANYBLOB="2c7063723d30303030303030303030303030303030303032312c6f626a5f726f6c653d2e2cee3a3a2c646566636f6e746578743973797361646d5f752c657569643e", @ANYRES16, @ANYBLOB=',obj_user=syz0\x00,subj_type=%!::\',func=KEXEC_KERNEL_CHECK,\x00']) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000080)) 9.163083571s ago: executing program 6 (id=3544): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000140)={0x0, @reserved}) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)={0x1024, 0x1c, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x1004, 0x8, 0x0, 0x0, @binary="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"}, @typed={0xc, 0x64, 0x0, 0x0, @u64=0x200}]}, 0x1024}, 0x1, 0x0, 0x0, 0x4000000}, 0x34000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x0) unshare(0x20000400) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r6, &(0x7f00000000c0)=ANY=[], 0xffffff6a) ioctl$TIOCGPTLCK(r3, 0x80045439, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x30, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @loopback}}}}}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r9, 0x0, 0x850) 8.966716541s ago: executing program 1 (id=3545): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000003840)={0x8, {"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", 0x1000}}, 0x1059) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000200)={0x0, 0x1}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000002340)=0x0) io_submit(r4, 0x0, &(0x7f0000000400)) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f00000001c0)='./file0\x00') iopl(0x3) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x668c0, 0x180) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e7400090000ff7f0000100109050b362f"], 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000014) fcntl$setsig(r5, 0xa, 0x38) fcntl$setlease(r5, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bda000/0x4000)=nil, 0xfffffffffffffea3, &(0x7f00000000c0)='\x00#\x0f\x01bK\xd1\xd8\xc8\xe3Z(\x03\xa1\x8b\x19#\x8fZ\x10Gk\x01\xd5\xc6r\x88\x97\xbb\xd9\xca=\xffa\xeb\b\xb2\x90\x1a\x03;\xae\xddc\nI\xcd\xf59>\xc4ZE\xac\xd3\x1f\xe7\xc5\xe5(\xed\xbb+\xfd\xe3\xb2\xf8\x9d\xf1\b\xff9\".Be\xf6\xb0\x0e\x86\xa3\x1c\x10\x88\xf4\xa2\xa0\x81\vN2N\xf1\xa5\x96\x94\x91\xa2S\x96@\xf1\x15\x9a{\xb9O{\x01*\xe98\xea\xcd\xcd\x04Y\x03\xf5>\x93\xb8') mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) 8.313847956s ago: executing program 6 (id=3546): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x2c9ab000) r2 = openat(r1, &(0x7f0000000080)='./file1\x00', 0x42, 0x1a1) fcntl$lock(r2, 0x7, &(0x7f0000000140)) fcntl$lock(r2, 0x6, &(0x7f0000000380)={0x1, 0x0, 0x101, 0x1}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r4, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfd}, 0xc) r5 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r5, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfd, 0xfddbdf25}, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) iopl(0x3) fsmount(0xffffffffffffffff, 0x1, 0x2) mkdir(&(0x7f0000000000)='./file1\x00', 0x2) r6 = socket(0x0, 0x80000, 0x1) r7 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmsg$kcm(r6, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 8.208917594s ago: executing program 2 (id=3547): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x40) ppoll(&(0x7f0000000240)=[{r0, 0xe4}], 0x1, 0x0, 0x0, 0x0) 8.207654566s ago: executing program 5 (id=3548): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mlockall(0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x4, 0x9}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f00000005c0)) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) brk(0x75555ede6001) syz_usb_connect(0x3, 0x40, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc3, 0x38, 0xe4, 0x20, 0x41e, 0x3f02, 0xd71, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x0, 0x40, 0x10, 0x0, [{{0x9, 0x4, 0xf, 0x0, 0x0, 0xff, 0xfa, 0xa8, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0x4df2, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0xcb}]}]}}]}}]}}, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) (async) mlockall(0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x4, 0x9}]}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)) (async) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f00000005c0)) (async) socket$inet6_sctp(0xa, 0x0, 0x84) (async) brk(0x75555ede6001) (async) syz_usb_connect(0x3, 0x40, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc3, 0x38, 0xe4, 0x20, 0x41e, 0x3f02, 0xd71, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x0, 0x40, 0x10, 0x0, [{{0x9, 0x4, 0xf, 0x0, 0x0, 0xff, 0xfa, 0xa8, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0x4df2, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0xcb}]}]}}]}}]}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) (async) 8.081310033s ago: executing program 0 (id=3549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)=0x3) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) recvmmsg(r2, &(0x7f0000000340)=[{{&(0x7f0000000540)=@caif, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000700)=""/91, 0x5b}, {&(0x7f0000000780)=""/74, 0x4a}, {&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/210, 0xd2}], 0x5, &(0x7f0000000a80)=""/84, 0x54}, 0x67}], 0x1, 0x40010000, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x20000040) 8.006077368s ago: executing program 6 (id=3550): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) socket(0x1e, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000000180c2c73059ad1a7b57f49aa1aba79744423f80080345fdff1c00000000001190780800"], 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 7.983943822s ago: executing program 2 (id=3551): r0 = syz_open_procfs(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x409, 0x40001012, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000000180)={0x20, 0x0, 0x0}) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}) io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x4000008) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) ioperm(0x0, 0x7, 0x40000000000006) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 7.8753935s ago: executing program 0 (id=3552): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000) r1 = getuid() quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001dc0)={{0x14}, [@NFT_MSG_NEWSET={0x180c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPR={0x100, 0x11, 0x0, 0x1, @target={{0xb}, @val={0xf0, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0xe4, 0x3, "c38ea784aea0077cffc22f4c94f90e9bb8704adf59a86ba6b3a5e89781db001727eb9b6207bb2a3e67fb0453c40414c563c7c29be909abcb8c6f8f6dfdb3de1c6f6341f54c8f7c5ab743696ed7bae6197ea58f2301cf047c3a28d7e32b791a62fb667904b25c664150743028b7c7edbb213ba1625caca6a40a1bf0a5b513e7acd27f35e9cb6752edf612d062fd9ad397595ef1bec06724095d3a42fddb7f454ad9e927887d7082647bc0d6f938604df5cf208ca300c1576e152cc994862ccc240510c44c9badb0f406ae766d14e4efbcc53fb368d44c998221a9c08df0b54200"}]}}}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xb9, 0xd, 0x1, 0x0, "8aa891d2515697959c726963b8c635b0620a3e81c0778dfeaf39cc025b6b367d355723a6a32b69f0ea257f92c9bdeb40787150c5c8929201a13e48cac23b4fa55744f1823e8a9357c9820b79b3366ed07482f3201b97e537e1ecf2e79c7632d57c2bfb182a7c951b3fb656ee274b08e09750f28d56815ca6052743c05dd696ea3b73d67a45137ed73cae7468ceb6faba9a699e2bbd0e6243c373cc5a9b8a41b247aa997694311d87f1d51e1d44e2a63b005abbd9b9"}, @NFTA_SET_EXPRESSIONS={0x130, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0xcc, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x89, 0x3, "15691abb5b323d3f57986f6f501fc0db0e832631dadf869605dce94cc8c3a3e2c2ab9123dfe2e20cba0f2b2aac74e6f646614740731a57298f28533deacf37b140b415a580f05237d14045e1d98922149399067cad422a51b9f6e2754748935445515b96210acceadea967826277ab024477f9f19a479fef6ab45d335472ddd30d0277f57c"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_DESC={0x150, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x93}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x454}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0x12c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x31a1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaaf9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5d}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xedf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf412}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}]}]}, @NFTA_SET_EXPRESSIONS={0x137c, 0x12, 0x0, 0x1, [{0x1354, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1344, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x1328, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "4968a029a08691e44768c92dfd7c22b276e46bb588923c59e41fca748dc4543dfb0f31308122fd7ca0ce9dd95bc182be5228b965b0cc8b538324c3e8f6d89addb7837c2a0ded72fd3f4c6fb97954493530ce0a5554d306a35b9645efdeb82cbe455ea901a8ab487613fb54d262bd4e1d22009d051a44624d3c7cc4e9dbd711a010a599b57aa300b957d1d68762f533a5e71968a710cf79bdf11b185100e8883e9530f6c2a7553a454eca2e9c0658353217a387a98540cf1692dd64afd8b80ef892de65e82c6f35e405ce53b6278e2942ea2f962dc47ba34e917bbb2fe3bf2610cecc2965d67858510499ac92c62c1f9c5e34f4bc19692869a8fafb867ae54c8965ec65efcd29369ffb7e040c98fb5ef4179f225c7e33c409a65f9976f6b53b26a9deb82e72a4091e7cd3d863ccaa9c3899336f83c72e3cf6897a7406079c908d0e0d450b7f536caf812bfb2ae5e57d828d8dec317bac53013d4a355842254e815eba04e39cca42df243ccec3f1bf1e19e6a9f5ec55bdc9b49c4153d2dd271edc8fe9c1ffdc1094319e479f90814199185bd1b097cb0c538f3ca0c9ac2f8ada812ce61e19de13e228766b6dedec3ed077e704225a35e1764ff28fad9dda89f123e3ae9731373b0d93ae0f10881c02cb1c618d62e49b15c5ba7d5b9d95b9cb6814197882359f04f3c64d21f72c7d583c7a8697c7a7ca0dfbceb9bda30f3f639ac12a82318795cdd9aaf99085cb86e1daacd628975ce2f6d1876703817f30bb88d2925d311c706c3671d18837a53141942b047fcc22f50ba9ccc8636473bed05997fbd94ddc916e06819c0a3b11b697249f0c791f8cedc14a4abe7f0a84d197eac7eb2db68db80c909b6a077833d565d7c465ca708d75d82427feefb05b8846fc1a2817da770f523969823a1aaf9360e57104484f72cb68631856612f96691c1f509bd8fcbd853d0993dbab5a420079bf0a4f363c72ede5b63ebebb5a4ca618fd16d59006cb067d588a4b46610f5b28a6142480b4b1759a89490f73f9ec5f2da3dcc2fb42dc889bcf1c8c54e2ff8bec70502e811f930519c1e4e16672f8140696d2aa7c5a6efc04534a99e859a9677496b164b12bb6c865e46b875d3f5e8494d96d8b3c11c3cb17dbd756babaa80d5afe7301288bf69714bbc7ec8cb71a64585262f72de5a39a4e5cae6574f62ba0dd6db7ccf0966646b9d8ae7b9891b6f703208a8b7269ecb6236045c9c28ca380308c01660e8935c17c1536fb037e6ee9108b81a31ef8e2317ef6a1fad7527d06247e964d989ba2a54c48c3e4f641224b24eef47e4a54cec63817e543518c147ce69facdd880a7769d93e46de11049c674efa1ec5541ad83d2fc4db7a8c7f4c0cc431e3bfcb7d5b88d031f5cb9e183f377a0535fde58090c20acc2790af047a2df846fead72920de9dc2a0bbd55001289656e9d364d9bfea6e74137504f535e37e47d7dd7cdd78f50735445d94686333259977960fbe362f2d5f8927a97e65c6150b13bfaed20add990d25832f3507374766e17eb845e2bfa8adb09e8e4b83572a1d2d8f9bfd5afb0961c166b0983368e3a9f9739fd772b331f64d23f01641797d1aff7b223ce4be387abc8494a42bc5e09021e5f972afaa1f7ede7bf32a9afb07d3b8f006f40edeeda4bbe055e4a114d5fbc7a709a742c10accde5cd1f08f8b96fc3fb6e9dd7418f1183d5654ed65dac66ad8ad99415c283fa74a84e5644da013f1360e836e18fb06256c3ca2be8079209df5afb9a428cadc239b32fe64eac9f1deb097e4c584cf825222289c0456d974c48e2d7a930184af26f06b71897018b4970bed472c088e35d2500f3aa9cf97635fb530edd98de0ca8fe9f8c3b56e15cd96dbbfa14ad59fc7b1f08067384468a042c73373ccaa948a9ad5eac15f3db60e4c69d990b176345bc6fbd6f5addcd3b09737d55532ed2b403e0b6ffc4b2ebaa25ec044964b34091188aeb307e60e9ac713f3a33c4e69a63be5e018304f350165d7c0447ea8dc20e5cbfda73774d0e0703df33bde512db3b4b88b133fb8aeaefba17886a0601bae6e95a497e5ed5fffbdaf94f6dd7898d65f0564c98f1f1568e3868139863c9d73e993170acccc52deb8dc0b77ee018130ea703519a1da9ef2b11a02df2973ce8d8f6851daa710899d18d126a54d21a1e84100b667315d4c15336f9266ae1219af189384e17bcb5ff5086673612ee4bfdb8a838a08d72f7a8bea818bb1e8b3921ae3d9dc93ea57b8e5b610f6aa17aa56f63c9a2afb70aeeb13ed003dae6c94ab38573b46bb4ad287c40cf82fdea340abd4b87f3bf0dc2b914b2b9874a4a2de37e460849bafc85f7e544429e4cff2cc7a61689ab058316dac13a5eac39285371c02b351691f5d37767c685746888a616884de965a8be2cacbfafd9dcd9f29395c3715861f3bab63219258e525086e23235d94abb994be3766dd1aad1ac723b226c1511b8a096dbad50609057c7abc35e6bce2c80f1a2567b76aa261dc126bece07ee5a6509b0e52ef74fe88b10c766c34d95a6db533db269c108948880082c14a93008e670b54a73812700c1d3bb80a4a494663187a55c96b73f64e6506cf47efb5f0e6b03cc767989b19d0214556118e7e4e7f1cdaf8c521aab476b8db6fac79d9586eb2b70fd7886fe87b2da8416e194a5f5796c834cafb4c6b18d5770aabced1a7087e76aa9bc2f49ad0c9528e20bef2744a8d5f6536654beb1fe9961ad86c4213592b179075c64c566d2e376f3fdba69d893c3a7e8aed84c8d220d749f095b44bca7d5039bf9e8c92356312d216649c7520f60b76da2dc3e12929bb53922c34d6436ec18abcc23de10e5047158d6852b73123ba48a2bc4addc959fb238856dc88e06f468ef6483798a5adaa739990a52760b99043ad01db26670f617c821aa37f0f05ab213b2649b02e3f55792b9799986547e62a7a101ba8f145a378557e23ec5d6de536a898144001b653185078ca2636006207565a59b51caf5ab924af1dd6a059b3fb72523a8bdb2c05fd0194caea1ed5f4144becbbcf8ae1dbca5b0d31dde439128384cff3a2ee79f45bba875965311145961517ad862682a216104b92dc50ee67b71e1c2b5ce1ba013061de98dc4e549bc68b99b35c841b8adc0a7822d1e434871cf64efa7ce8a0d427e5d55e2387cb497bcb0aba1506ea15e10a0ac51100d0be6af52e71fdd5f92c87de0384df86ab902f36c06828a4a0d58e21901bb4105070e1cf1f24922451d45c8c1d2562e36c42015af145d55644d6e3cfd0b63b36ac5503753f6ab04b7f6d84afdfbf5f2893b3d2980840f6caf55317affce8a5227eb5a0ff801921157bf1d95f0260ebeb67835cfe134a861c14224008cf6e7086c10ec4e6db48d2662925b6fe0df98b9bd424ea8792eb7303dbaec737a49549412a3a9b5c6e6cc7ecb699d604a44394f65e9edbfef8b64207e5394c3b708840256dd8ad2eb0218da76be8c3948e8a11e93bd73cd8c8c0a215bd29bdba4b27078f0554634eeb822e8a3c6ce8f554d78a78ac79420832ba03525fbb8ff6c78c5691fe65d53ecf958aee696836900c7f0fae6035f4d0411991e76c03f4e41016de0a9e3c15f58316d546ec100559c82d94e05acefbdf53e7f6c30b9bc4f23068ffe03396019fd7837b387916ed485c45d72142233f21391083ea06c30fb0e4b602bdea2e60a4c5e94f47120ae08002a429d8dcb7585d4a6de27b109f8a302b8b414b21f6899525abf033c687bbd0bde6cf2a1714abc6c1f1afe1c795b7d1a17cf88137056000d15319a26954ca5ed14d0a813744a4ab68076e1d802eef543880a0f2eb9537741338b7f86b0d89b505a6ce4097653f0788654e2cf2250d62b2653a6b9d27598f0344abce1baa3b42752535ed8319a0500aab0d005606b7f62732cbc38b2ffe020bd5987d46bb7607402cbd67e7848aecec45bc1d907f888232d8dfee06275400fbadfb5be8ac75c38cec65329664b7bfb8dfaaf0c1c82a7d7caa11d97777b54ac9c0d0a7972381aa4053e0bb29bf510c49fc9a555e5a20e80d7d56a7efad286da336e67d068e910335c43cae4e1955311cfe9df01c903c709bb6c47a59ce867781dc82344f6d1ba7559e6ebd9d33417aeafb02350aaa578c96e91d7b8f1a89db31823d2f5f5c359780f0a59c35199d6841c82e1f058104c747866f7936d84434c4992cea0f698de1b5246c188638835abe9954dc2aab064923763d8f4f5c5c0a505adb6752b9231b6c3df10e9077befc7a8648876cd2e1dfe7be7650181e760eccd297c3aa2c0b6c39cc392a52672ee6c84ded8db692f6e69f80422b4094b33b1e69fd27f65414171c44b20bc532f01cd19db3b8759656b0fa847b6a8709b3a331d759e75dbabd7f550722be42b97fe7f4dd233063272a4936a6f5ef20fefe20a1d4db03cd94fa2d671d1bc6edd47d6977351e42710b62b12a13cecaea641ed857e2358a0021ea04ae30a72f3945adda5f78af8dd0145f5c00557e92439ec3290e56337b4bf7e2b3d26e1a6faebe4bc2fbb56c43f25f0d2a4d93ae9fcaa5be6341911f3019e601076b715f4c309f358e92a7043d7989a9a97d066f9e0f0fddb8f6aedd1b63d67bc43ff2a054a3eb232dfc004ca30d1a9ac48854bf3803f088804f8438b1ec3731c32ce23fada4ccc9ee063ae027f2897043eceabf14bf99db322f7046488b40580c9d5dc0d9807f9c3ba05c96ff5d03c6d67c46a05f232ec203517d5bdf52a0e8cbe63061fe842769ce4e4ee7afee15a0e4b210cabdee40cb7bcd9d5a79ebd93e6a75e40edd73abebda666de27b7346172cf6370b21ee31e57907728106eef6deef9d9f46553fa213c7b802e307422aaf66beb01a1e96fe9077ab202046b151ceafbff1009841a4ab1d15a8bb81d57cdff02139160a1cc71bef09e22272c2936242ee7a31fca91fd6cb51ef912bc05666acce2ffba91ab706b76b24eb53aa95210f47ebb40cc1408ab8a408e3d7c5cb6312ad5d6e2f6f2dc654a0392f9bff42a22bb52df0f4519158da586d933e32e0fe89499c6b7685e8f19e772314ef91707b356858f3355d42e499db745c60e391997b82caed0035ec79ec967bc3e9a8701f23047d5540d6e21b3c999a04c8b24480c07a5c908a0cfa262690e60291dbf971eaa0eb3b2d150d2783c9ab1b110ce2bfcdeab81f5f6236e6fa345385e8cf976d2361b842d064ee4eb706cb3af6ad45a7d9740909dd6ee34555af01ea40b20fa9f46dd16e5cd806e69544ce50836ddb9af546a5d031973fc54ce1f0ac7916cf9a371d4cf003ee8a3093141824a38e35449c56ad452c50b7f82ebd8769915dba6b14dd654f34feb89156300ab2cb77f9e13154b68e07ab9469991ee7742fcfb87f4580c7bd1cddbaf0b20a0c7d11fafc6cffbf53bdbbaa0004aa7b67adbd2443e85a0a98d89c05bb7794458b608e793b29f84bc7f6f2452afbeb48a89fc0476f55c96e231f80fb590a75ecd31ec0f44344a787c3b559316f726ac0c25be0ffe407ada2ba0a3546d6d83c51710e051b5c3d6ec5600feac6f03f57040ff3a65154ef4d1bbb91afcf0e728756db42e2ec866de97a121765ff26f1a024629a8da796019e09e6078e04c8a1939486b1d85662f45c05388f5cad9382a422af383c5c9c4610e9558353ed731a2baad46c2fcf2dfc907e187eee35c4034815952f139a5d24d23bad0284ce748fa021a09eabbbfd1119c4e783d6239f203c765041741d3699a122555edfbc46b18f31ca69499cafa8a07e96d1c9d3f9a9faa43c8f4fa56"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x3e, 0x1, "a3a61d40fd4b842cfe3afe42c70558baa720316cc528ebec1bdaaaf0c7f1e03a66ef9d578b806fa8a39cad864009ec1fe7d513a0e20801e38655"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x85, 0x1, "3ca2ea21be140bb55f18eeb33445bed1a2474fad6e3af4fb83bd0470296e61f7193a37fee43800936e6c5ed7e9ac054148cbe12c8e00d74e9f995e8bf1da12ec3af98ede3ade1287eafce1bc92b30abe452a2dd7bfc570504db8f285207805cbc58f287585c400dfaf002dad3d93039bf83b7b72c2e6a1a60961e5d933462170f3"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "ff4e9daaf9edd6daebada882996d2a36b20b856ada42e952789c72096bed7fc11ebc94e97a321361c28944dca85245d960a2b30e9d60935f4cfb6eb606750c387ac33da0f3702f5472b2c94992c3b6c52f4018a0e6975ec6a9873f3fd5bd429d213a9b23515cb706026f7face24af7cadde33626ae0308ef2b38f3a19a75eb563f447a3afb206c77a9fe1ff7fbe57143313403b85c91525da56745929ad3e77ec0e12bdf5c764ee5c5cd094575"}, @NFTA_DATA_VALUE={0xa9, 0x1, "a99cc2542eb33ec25ae63d1397c9f59ee398874b59faf5ecfdc20d9032ee0099daea60de47721b3d70e4b9accf0a1f8ffb69b6e99bc9dbd29d3aa27f4466bc3d749bc001fadfa0fe2e255beb1d5e434cfc350d27e3c060d32be6885dbb9db1894050162dd42670daa6bc98b0f23c0ac62c8b0cafae7a64888de416de46b3fff6fad9178a9fe23132e87855d885e24dc29be3b10175684edff50bfd6c7242721da6ba4fecb9"}, @NFTA_DATA_VALUE={0x43, 0x1, "79bdd3a3bfc4a70717eb83214ccef065efefedd76a56ba77c8ad35e7f126e497ed8a7faa06bb8e6dacaef074bba396c20f5dde1c61ff134f9472d1ee9b726c"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x1834}}, 0x20004004) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) syz_open_dev$evdev(&(0x7f00000003c0), 0x1006, 0x454040) syz_io_uring_setup(0x28e9, &(0x7f0000000500)={0x0, 0x5885, 0x4, 0x8000003, 0x1ac}, &(0x7f0000000280)=0x0, &(0x7f0000000400)) utimes(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000300)={{}, {0x77359400}}) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x60, 0x3, 0x14, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0x7, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaabb080045199078ffffffff64010100"], 0x26) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x60000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) 6.816587971s ago: executing program 2 (id=3553): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x41, 0x1}}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x248, 0x228, 0x25a, 0x248, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a}, 0x5002, 0x118, 0x138, 0x52020000, {0x0, 0x6802000000000000}, [@common=@unspec=@limit={{0x48}, {0x28f5c, 0x80000000, 0x8, 0x5, 0x3, 0x0, 0x4}}, @common=@unspec=@state={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@local, @empty, [0x0, 0xff], [0xffffffff], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffe, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) io_setup(0x81, &(0x7f0000000180)=0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xe0, @empty}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000002340)=[&(0x7f00000036c0)={0x0, 0x300, 0x0, 0x5, 0x6, r3, 0x0}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={r10, 0x1, 0x6}, 0x10) 6.081892946s ago: executing program 1 (id=3554): r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000feffffffdd110000000000007301a5"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 5.827625237s ago: executing program 5 (id=3555): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r6, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2500, 0x7f20, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x1, 0x94, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010100, @private, {[@timestamp_addr={0x44, 0x2c, 0x71, 0x1, 0xf, [{@local, 0x40}, {@broadcast, 0xc000000}, {@multicast2, 0x101}, {@multicast1, 0x4}, {@multicast1, 0x6}]}, @rr={0x7, 0x7, 0x61, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa5, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@local, 0x200}, {@multicast1, 0x5}, {@rand_addr=0x64010101, 0x7}, {@rand_addr=0x640100fe, 0x800}, {@multicast1, 0x6}, {@remote, 0x3}, {@multicast1, 0x464}, {@loopback, 0xffff0001}]}]}}}}}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYRES16=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffef7, 0x10, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[], 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000047c0000040012801400018006000600800a000008"], 0x2c}}, 0x0) 3.031767048s ago: executing program 1 (id=3556): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x2, 0x800, 0x100, 0x4, 0x2, 0x6, 0xffff, 0x1}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02105b071900000026bd7000fddbdf25010014000600000008001900000000000a004e2100000800fc010000000000000000000000000001ff0000000a004e24000064192001000000000000000000000000000103000000040002003a210000080000000000000000000000000000001000000000000000010014000000000001001800074d00000800120001000400b16b6e000500000006003300093000000000008000000000ff020000000000000000000000000001ac1414aa000000000000000000000000ccb9d21a65113addfd06ae9da19c55d5549caed08a"], 0xc8}}, 0x4000004) socket(0x2b, 0x1, 0x1) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x1, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1.335640979s ago: executing program 5 (id=3557): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x3, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) read$dsp(0xffffffffffffffff, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x1100100) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_collapse_huge_page_isolate\x00', r5, 0x0, 0x1}, 0x18) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x180, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x114, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x3c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x400}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x4bf5}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x6, 0x3, "88fd"}, @NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}]}}}, {0x54, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x37, 0x1, "dcb5685b0c7b630cff385f372482e9914c55b89b5be87582293a12b7d52c5fb90f9980dc986b24cfd20c6afa90372bb5f19ab9"}]}]}}}]}, @NFTA_RULE_USERDATA={0x1f, 0x7, 0x1, 0x0, "479cd71a36de67a20aa194b519af08a9ddd0b7b9fc9484116fa449"}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}]}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1f0}}, 0x0) write$vga_arbiter(r6, &(0x7f0000000040)=@target={'target ', {'PCI:', '0', ':', '0', ':', '2', '.', '0'}}, 0x13) 1.330866083s ago: executing program 2 (id=3558): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) write$P9_RVERSION(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x6, 0x0, 0xffff0000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000008000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000b0fdcc7ea8000000000040000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socket$netlink(0x10, 0x3, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.139196219s ago: executing program 6 (id=3559): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x5, 0x200, 0x10, 0xffffffffffffffff, 0x1685, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x4, @void, @value, @void, @value}, 0x50) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) ppoll(&(0x7f00000001c0)=[{r0, 0x4200}, {r1, 0x7}, {r2, 0x100}, {r3, 0x6b8a61585277fff}, {r0, 0x1242}], 0x5, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f00000002c0)={[0x10001]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='auxv\x00') preadv(r8, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x10}]}}]}, 0x48}}, 0x4000) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioperm(0x0, 0x2, 0x2) clock_settime(0x0, &(0x7f0000000140)={0x77359400}) r11 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @local, 0x1}, 0x1c) io_uring_register$IORING_UNREGISTER_NAPI(r11, 0x1c, &(0x7f0000000180), 0x1) 1.136447174s ago: executing program 0 (id=3560): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ff8d, 0x101}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x8000) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000000}) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) 383.393348ms ago: executing program 1 (id=3561): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=3562): socket(0x11, 0x800000003, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x71, &(0x7f00000002c0)="1a00000002000000", 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000001840)=""/105, 0x69}, {&(0x7f00000018c0)=""/147, 0x93}], 0x8}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "701e1630b7"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x88}}, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(r7) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): 072695][ T5906] smsc95xx v2.0.0 [ 1416.078792][T17302] chnl_net:caif_netlink_parms(): no params data found [ 1416.088086][ T5902] usb 6-1: USB disconnect, device number 13 [ 1416.103252][ T5902] ch341 6-1:0.0: device disconnected [ 1416.297389][T17318] netlink: 'syz.1.3163': attribute type 1 has an invalid length. [ 1416.307433][T17318] netlink: 'syz.1.3163': attribute type 3 has an invalid length. [ 1416.315871][T17318] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3163'. [ 1416.603835][ T3454] bridge_slave_1: left allmulticast mode [ 1416.843429][ T3454] bridge_slave_1: left promiscuous mode [ 1416.860505][ T3454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.900423][ T3454] bridge_slave_0: left allmulticast mode [ 1416.917874][ T3454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.083402][ T5906] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1417.094985][ T5906] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1417.302489][ T3454] bond1 (unregistering): (slave gretap2): Releasing active interface [ 1417.359245][ T3454] bond4 (unregistering): (slave gretap3): Releasing active interface [ 1417.466065][ T3454] dvmrp0 (unregistering): left allmulticast mode [ 1417.738493][ T5841] Bluetooth: hci1: command tx timeout [ 1418.254446][ T5906] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1418.281616][ T5906] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1418.293786][ T5906] usb 4-1: USB disconnect, device number 85 [ 1418.465271][ T3454] bond0 (unregistering): left promiscuous mode [ 1418.471630][ T3454] bond_slave_0: left promiscuous mode [ 1418.477826][ T3454] bond_slave_1: left promiscuous mode [ 1418.484949][ T3454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1418.496076][ T3454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.509166][ T3454] bond0 (unregistering): Released all slaves [ 1418.685308][ T3454] bond1 (unregistering): Released all slaves [ 1418.698310][ T3454] bond2 (unregistering): Released all slaves [ 1418.713092][ T3454] bond3 (unregistering): Released all slaves [ 1419.028477][ T3454] bond4 (unregistering): Released all slaves [ 1419.105662][T17318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3163'. [ 1420.033197][ T5841] Bluetooth: hci1: command tx timeout [ 1420.117725][ T3454] IPVS: stopping master sync thread 10812 ... [ 1420.661573][ T30] kauditd_printk_skb: 1839 callbacks suppressed [ 1420.662490][ T30] audit: type=1400 audit(1742656843.624:158597): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17342 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1420.719893][T17344] Option ' ' to dns_resolver key: bad/missing value [ 1421.344532][T17346] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1421.359913][T17348] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1421.366562][T17348] audit: audit_lost=17519 audit_rate_limit=0 audit_backlog_limit=64 [ 1421.374675][T17348] audit: backlog limit exceeded [ 1421.379595][T17348] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1421.386120][T17348] audit: audit_lost=17520 audit_rate_limit=0 audit_backlog_limit=64 [ 1421.394184][T17348] audit: backlog limit exceeded [ 1421.403628][T17348] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1421.410365][T17348] audit: audit_lost=17521 audit_rate_limit=0 audit_backlog_limit=64 [ 1421.462769][T17302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.699664][T17302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.707606][T17302] bridge_slave_0: entered allmulticast mode [ 1421.717429][T17302] bridge_slave_0: entered promiscuous mode [ 1421.727805][T17302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.736953][T17302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.744314][T17302] bridge_slave_1: entered allmulticast mode [ 1421.751533][T17302] bridge_slave_1: entered promiscuous mode [ 1421.953099][T17353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3168'. [ 1421.962411][T17353] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1422.233830][ T5841] Bluetooth: hci1: command tx timeout [ 1423.959054][T17302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1424.005957][T17302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1424.349124][T17369] block device autoloading is deprecated and will be removed. [ 1424.968586][ T1206] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1424.986786][T17302] team0: Port device team_slave_0 added [ 1425.111206][T17302] team0: Port device team_slave_1 added [ 1425.266472][ T1206] usb 2-1: Using ep0 maxpacket: 32 [ 1425.385439][ T1206] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1425.575842][ T1206] usb 2-1: config 0 has no interface number 0 [ 1425.676812][ T30] kauditd_printk_skb: 1269 callbacks suppressed [ 1425.676895][ T30] audit: type=1400 audit(1742656848.634:159741): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=17372 comm="syz.0.3177" path="/dev/fuse" dev="devtmpfs" ino=99 [ 1425.881684][ T1206] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1425.891276][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.899364][ T1206] usb 2-1: Product: syz [ 1425.905365][ T30] audit: type=1400 audit(1742656848.634:159742): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=17365 comm="syz.1.3175" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1425.935777][ T3454] team0: left promiscuous mode [ 1425.945577][ T1206] usb 2-1: Manufacturer: syz [ 1425.969471][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1425.969612][ T3454] team_slave_0: left promiscuous mode [ 1425.976070][ C1] audit: audit_lost=17564 audit_rate_limit=0 audit_backlog_limit=64 [ 1425.988699][ T1206] usb 2-1: SerialNumber: syz [ 1425.989480][ C1] audit: backlog limit exceeded [ 1425.989798][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1425.994380][T16060] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1425.999046][ C1] audit: audit_lost=17565 audit_rate_limit=0 audit_backlog_limit=64 [ 1425.999066][ C1] audit: backlog limit exceeded [ 1425.999378][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1426.027470][ T3454] team_slave_1: left promiscuous mode [ 1426.059174][ T1206] usb 2-1: config 0 descriptor?? [ 1426.091193][ T1206] smsc95xx v2.0.0 [ 1426.120410][ T3454] : left promiscuous mode [ 1426.125719][ T3454] hsr_slave_1: left promiscuous mode [ 1426.136787][ T3454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1426.146842][ T3454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1426.150070][T17377] fuse: Bad value for 'fd' [ 1426.166017][ T3454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1426.176328][ T3454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1426.230036][ T3454] veth1_macvtap: left promiscuous mode [ 1426.236236][ T3454] veth0_macvtap: left promiscuous mode [ 1426.252410][ T3454] veth1_vlan: left promiscuous mode [ 1426.258263][ T3454] veth0_vlan: left promiscuous mode [ 1426.512478][ T1206] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1426.527475][ T1206] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1426.627355][T17383] Option ' ' to dns_resolver key: bad/missing value [ 1427.136484][ T1206] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1427.147627][T15290] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1427.157133][T15290] Bluetooth: hci3: Injecting HCI hardware error event [ 1427.168953][ T5841] Bluetooth: hci3: hardware error 0x00 [ 1427.177532][ T1206] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1427.191972][ T5875] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1427.203629][ T1206] usb 2-1: USB disconnect, device number 84 [ 1427.422261][ T5875] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1427.433640][ T5875] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1427.445856][ T5875] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1427.458889][ T5875] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1427.469619][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.495214][T17379] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1427.511426][ T5875] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1427.518888][ T5875] usb 4-1: invalid MIDI in EP 0 [ 1427.589973][ T5875] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1427.775790][ T5875] usb 4-1: USB disconnect, device number 86 [ 1427.914620][ T3454] team0 (unregistering): Port device team_slave_1 removed [ 1427.984437][ T3454] team0 (unregistering): Port device team_slave_0 removed [ 1429.157537][T17397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3183'. [ 1429.166841][T17397] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1429.314849][ T5841] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1429.688070][T17302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1429.696669][T17302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1429.727837][T17302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1429.985222][T17302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1429.999617][T17302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1430.035314][T17302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1430.200203][T17399] 9pnet_fd: Insufficient options for proto=fd [ 1430.764819][T16738] audit_log_start: 1793 callbacks suppressed [ 1430.764834][T16738] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1430.777910][ T30] audit: type=1400 audit(1742656853.244:161376): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17400 comm="syz.0.3184" name="newroot" dev="tmpfs" ino=2 [ 1430.797027][ C0] vkms_vblank_simulate: vblank timer overrun [ 1430.810723][T16738] audit: audit_lost=17620 audit_rate_limit=0 audit_backlog_limit=64 [ 1430.818977][ T30] audit: type=1400 audit(1742656853.244:161377): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17400 comm="syz.0.3184" name="/" dev="devtmpfs" ino=1 [ 1430.839705][T17302] hsr_slave_0: entered promiscuous mode [ 1430.846745][T17406] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1430.853514][T16738] audit: backlog limit exceeded [ 1430.861324][T17302] hsr_slave_1: entered promiscuous mode [ 1430.878324][T17406] audit: audit_lost=17621 audit_rate_limit=0 audit_backlog_limit=64 [ 1430.886903][T16738] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1430.894739][T17302] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1430.902374][T16738] audit: audit_lost=17622 audit_rate_limit=0 audit_backlog_limit=64 [ 1431.070559][T17302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1431.078619][T17302] Cannot create hsr debugfs directory [ 1431.115915][T17404] netlink: 'syz.0.3184': attribute type 1 has an invalid length. [ 1431.123766][T17404] netlink: 'syz.0.3184': attribute type 3 has an invalid length. [ 1431.132162][T17404] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3184'. [ 1431.169612][T17404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3184'. [ 1432.920886][ T3454] IPVS: stop unused estimator thread 0... [ 1433.079729][ T5902] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1433.239571][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 1433.257673][ T5902] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1433.283250][ T5902] usb 2-1: config 0 has no interface number 0 [ 1433.301836][T17257] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1433.321925][ T5902] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1433.352603][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.379367][ T5902] usb 2-1: Product: syz [ 1433.393439][T17432] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3194'. [ 1433.396426][ T5902] usb 2-1: Manufacturer: syz [ 1433.420134][ T5902] usb 2-1: SerialNumber: syz [ 1433.427968][ T5902] usb 2-1: config 0 descriptor?? [ 1433.442176][T17302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1433.446089][ T5902] smsc95xx v2.0.0 [ 1433.685450][T17302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1433.699722][T17257] usb 4-1: Using ep0 maxpacket: 8 [ 1433.746104][T17428] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1433.764109][T17302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1433.931010][T17439] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1434.201780][T17302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1434.343351][T17257] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1434.365744][T17257] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1434.394194][T17257] usb 4-1: can't read configurations, error -71 [ 1434.522653][T17302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1434.573239][ T5902] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1434.590462][ T5902] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1434.615725][T17302] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.655635][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.662933][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.697433][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.704698][ T3454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1434.766976][T17302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1434.777860][T17302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1435.098698][T17447] Option ' ' to dns_resolver key: bad/missing value [ 1435.460279][T17257] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1435.769943][T17257] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1435.781627][ T30] kauditd_printk_skb: 1808 callbacks suppressed [ 1435.781647][ T30] audit: type=1400 audit(1742656858.744:163147): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=17445 comm="syz.3.3197" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1435.792833][ T5902] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1435.815558][T15288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1435.826790][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1435.833445][ C1] audit: audit_lost=17637 audit_rate_limit=0 audit_backlog_limit=64 [ 1435.833659][T17444] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1435.841470][ C1] audit: backlog limit exceeded [ 1435.843424][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1435.859569][ C1] audit: audit_lost=17638 audit_rate_limit=0 audit_backlog_limit=64 [ 1435.867618][ C1] audit: backlog limit exceeded [ 1435.878264][T17448] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1435.889879][T17257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.897942][T17257] usb 4-1: Product: syz [ 1435.922591][T17257] usb 4-1: Manufacturer: syz [ 1435.923912][ T5902] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1435.927238][T17257] usb 4-1: SerialNumber: syz [ 1435.976446][T17257] usb 4-1: config 0 descriptor?? [ 1435.997414][T17257] ch341 4-1:0.0: ch341-uart converter detected [ 1436.187450][ T5902] usb 2-1: USB disconnect, device number 85 [ 1436.445210][T17302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1436.546953][T17302] veth0_vlan: entered promiscuous mode [ 1436.567602][T17302] veth1_vlan: entered promiscuous mode [ 1436.593392][T17302] veth0_macvtap: entered promiscuous mode [ 1436.604083][T17302] veth1_macvtap: entered promiscuous mode [ 1436.625576][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.653794][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.683721][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.703478][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.737815][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.781673][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.807030][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.817885][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.828181][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.847179][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.858971][T17302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1437.688062][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.735337][T17257] ch341-uart ttyUSB0: failed to read break control: -71 [ 1437.739782][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.766454][T17257] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1437.773978][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.807732][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.825960][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.826692][T17257] usb 4-1: USB disconnect, device number 88 [ 1437.837895][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.866832][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.888571][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.890865][T17257] ch341 4-1:0.0: device disconnected [ 1437.936699][T17302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1437.998492][T17302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.030052][T17302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.039539][ T94] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1438.049110][T17302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.065351][T17302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.207332][ T94] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1438.241065][ T94] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.249130][ T94] usb 2-1: Product: syz [ 1438.430221][ T6474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.448562][ T6474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.637027][T17477] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1438.960457][T17478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3206'. [ 1439.215236][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.249011][T17478] vlan2: entered promiscuous mode [ 1439.264604][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.282431][T17478] bridge0: entered promiscuous mode [ 1439.295398][ T94] usb 2-1: Manufacturer: syz [ 1439.300798][ T94] usb 2-1: SerialNumber: syz [ 1439.313833][ T94] usb 2-1: config 0 descriptor?? [ 1439.322408][ T94] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 086 [ 1439.372701][T17478] bridge0: left promiscuous mode [ 1439.646606][T17483] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3207'. [ 1439.848890][T17489] Option ' ' to dns_resolver key: bad/missing value [ 1440.328671][ T94] i2c i2c-1: failure reading functionality [ 1440.349372][ T94] i2c i2c-1: connected i2c-tiny-usb device [ 1440.364431][ T94] usb 2-1: USB disconnect, device number 86 [ 1440.793935][ T30] kauditd_printk_skb: 3429 callbacks suppressed [ 1440.793996][ T30] audit: type=1400 audit(1742656863.754:165860): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="*" requested=x pid=17302 comm="syz-executor" name="/" dev="cgroup" ino=1 [ 1440.824625][ T30] audit: type=1400 audit(1742656863.754:165861): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="*" requested=x pid=17302 comm="syz-executor" name="syz2" dev="cgroup" ino=177 [ 1440.848736][ T30] audit: type=1400 audit(1742656863.754:165862): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="*" requested=w pid=17302 comm="syz-executor" name="memory.soft_limit_in_bytes" dev="cgroup" ino=193 [ 1440.898674][ T30] audit: type=1400 audit(1742656863.754:165863): lsm=SMACK fn=smack_file_open action=granted subject="_" object="*" requested=r pid=17302 comm="syz-executor" path="/syzcgroup/cpu/syz2/memory.soft_limit_in_bytes" dev="cgroup" ino=193 [ 1441.068927][ T30] audit: type=1400 audit(1742656863.924:165864): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17302 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1441.285367][ T30] audit: type=1400 audit(1742656863.924:165865): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17302 comm="syz-executor" name="syzcgroup" dev="tmpfs" ino=8 [ 1441.486393][ T30] audit: type=1400 audit(1742656864.094:165866): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="*" requested=x pid=17302 comm="syz-executor" name="/" dev="cgroup" ino=1 [ 1441.533635][T17022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1441.539737][T16060] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1441.541623][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1441.676433][T17498] CIFS: Unable to determine destination address [ 1441.771705][T17499] netlink: 'syz.1.3210': attribute type 1 has an invalid length. [ 1441.823143][T17503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'. [ 1441.861027][T17503] netlink: 'syz.0.3212': attribute type 19 has an invalid length. [ 1441.895420][T17503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3212'. [ 1442.526873][T17513] fuse: Unknown parameter 'grou00000000000000000000' [ 1443.715759][T17522] Option ' ' to dns_resolver key: bad/missing value [ 1444.410456][T17523] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1445.809501][ T30] kauditd_printk_skb: 1703 callbacks suppressed [ 1445.809524][ T30] audit: type=1400 audit(1742656868.384:167370): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17524 comm="syz.5.3219" name="newroot" dev="tmpfs" ino=2 [ 1445.892575][T17531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3221'. [ 1445.894609][T17526] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1445.903260][ T30] audit: type=1400 audit(1742656868.384:167371): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17524 comm="syz.5.3219" name="/" dev="devtmpfs" ino=1 [ 1445.928151][T17531] 8021q: VLANs not supported on vcan0 [ 1445.931598][T17532] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1445.936997][ T30] audit: type=1400 audit(1742656868.384:167372): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17524 comm="syz.5.3219" name="char" dev="devtmpfs" ino=1320 [ 1445.946669][T17526] audit: audit_lost=17947 audit_rate_limit=0 audit_backlog_limit=64 [ 1445.961899][ T30] audit: type=1400 audit(1742656868.384:167373): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17524 comm="syz.5.3219" name="char" dev="devtmpfs" ino=1320 [ 1445.987958][ T30] audit: type=1400 audit(1742656868.384:167374): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17524 comm="syz.5.3219" name="/" dev="devtmpfs" ino=1 [ 1446.011113][ T30] audit: type=1400 audit(1742656868.384:167375): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=17524 comm="syz.5.3219" name="tty1" dev="devtmpfs" ino=20 [ 1446.031101][ T30] audit: type=1400 audit(1742656868.384:167376): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=17524 comm="syz.5.3219" path="/dev/tty1" dev="devtmpfs" ino=20 [ 1447.919984][T17549] fuse: Unknown parameter 'grou00000000000000000000' [ 1450.844936][T17562] openvswitch: netlink: Message has 8 unknown bytes. [ 1450.864113][ T30] kauditd_printk_skb: 1569 callbacks suppressed [ 1450.864135][ T30] audit: type=1400 audit(1742656873.704:168543): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=17565 comm="syz.2.3230" saddr=10.128.0.169 src=30008 daddr=10.128.1.178 dest=33704 netif=eth0 [ 1451.414905][ T30] audit: type=1400 audit(1742656873.774:168544): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17561 comm="syz.0.3231" name="newroot" dev="tmpfs" ino=2 [ 1451.439852][ T30] audit: type=1400 audit(1742656873.774:168545): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17561 comm="syz.0.3231" name="/" dev="proc" ino=1 [ 1451.458513][ T30] audit: type=1400 audit(1742656873.774:168546): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17561 comm="syz.0.3231" name="/" dev="proc" ino=1 [ 1451.476572][T17302] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1451.479139][ T30] audit: type=1400 audit(1742656873.774:168547): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17561 comm="syz.0.3231" name="455" dev="proc" ino=58127 [ 1451.486149][T17576] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1451.502969][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1451.502995][ C1] audit: audit_lost=18082 audit_rate_limit=0 audit_backlog_limit=64 [ 1451.503014][ C1] audit: backlog limit exceeded [ 1453.565084][T17580] xt_CT: No such helper "pptp" [ 1454.307305][T17592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3237'. [ 1454.317909][T17592] 8021q: VLANs not supported on vcan0 [ 1455.316172][T17602] fuse: Unknown parameter 'grou00000000000000000000' [ 1455.719764][T17610] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.107088][T14308] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1456.109713][ T30] kauditd_printk_skb: 1953 callbacks suppressed [ 1456.109733][ T30] audit: type=1400 audit(1742656878.714:170467): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.178 dest=33704 netif=eth0 [ 1456.146383][ T94] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1456.154951][ T30] audit: type=1400 audit(1742656878.794:170468): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17607 comm="syz.5.3244" name="newroot" dev="tmpfs" ino=2 [ 1456.176763][ T30] audit: type=1400 audit(1742656878.794:170469): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17607 comm="syz.5.3244" name="/" dev="devtmpfs" ino=1 [ 1456.195942][ T30] audit: type=1400 audit(1742656878.794:170470): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17607 comm="syz.5.3244" name="char" dev="devtmpfs" ino=1320 [ 1456.215624][ T5906] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1456.224082][ T30] audit: type=1400 audit(1742656878.794:170471): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17607 comm="syz.5.3244" name="char" dev="devtmpfs" ino=1320 [ 1456.246296][ T30] audit: type=1400 audit(1742656878.794:170472): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17607 comm="syz.5.3244" name="/" dev="devtmpfs" ino=1 [ 1456.265518][ T30] audit: type=1400 audit(1742656878.794:170473): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=17607 comm="syz.5.3244" name="tty1" dev="devtmpfs" ino=20 [ 1456.285464][ T30] audit: type=1400 audit(1742656878.794:170474): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=17607 comm="syz.5.3244" path="/dev/tty1" dev="devtmpfs" ino=20 [ 1456.305082][ T30] audit: type=1400 audit(1742656879.064:170475): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5180 comm="syslogd" name="/" dev="sda1" ino=2 [ 1456.328357][ T94] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1456.342132][ T94] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1456.352629][ T30] audit: type=1400 audit(1742656879.064:170476): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5180 comm="syslogd" name="var" dev="sda1" ino=1906 [ 1456.371687][ T94] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1456.385084][ T94] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1456.394789][ T94] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.408023][T17600] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1456.445074][ T5906] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1456.451919][T14308] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1456.467226][ T5906] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1456.474910][T14308] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1456.487787][ T94] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1456.489056][T14308] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1456.495811][ T5906] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1456.522251][ T94] usb 2-1: invalid MIDI in EP 0 [ 1456.546139][T14308] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1456.549825][ T5906] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1456.569604][T14308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.575622][ T94] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1456.587472][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.604494][T17606] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1456.616801][T17604] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1456.624742][T14308] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1456.650131][T14308] usb 4-1: invalid MIDI in EP 0 [ 1456.708534][ T94] usb 2-1: USB disconnect, device number 87 [ 1456.728448][T14308] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1456.729222][ T5906] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1456.766755][ T5906] usb 3-1: invalid MIDI in EP 0 [ 1457.411244][ T5906] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1457.441045][T14308] usb 4-1: USB disconnect, device number 89 [ 1457.468375][ T5906] usb 3-1: USB disconnect, device number 95 [ 1458.506535][T17628] netlink: 'syz.1.3248': attribute type 1 has an invalid length. [ 1458.514755][T17628] netlink: 'syz.1.3248': attribute type 3 has an invalid length. [ 1458.522906][T17628] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3248'. [ 1458.610051][T17628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3248'. [ 1460.097986][T17635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3251'. [ 1460.160221][T17635] 8021q: VLANs not supported on vcan0 [ 1460.305253][T17639] fuse: Unknown parameter 'group_i00000000000000000000' [ 1461.121853][ T30] kauditd_printk_skb: 1915 callbacks suppressed [ 1461.121923][ T30] audit: type=1400 audit(1742656884.084:172314): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17302 comm="syz-executor" name="11" dev="tmpfs" ino=75 [ 1461.639659][ T30] audit: type=1400 audit(1742656884.084:172315): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17640 comm="syz.0.3254" name="newroot" dev="tmpfs" ino=2 [ 1461.642244][T17648] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1461.700624][T16738] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1461.707165][T16738] audit: audit_lost=18121 audit_rate_limit=0 audit_backlog_limit=64 [ 1461.720844][T17651] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1461.727433][T17651] audit: audit_lost=18122 audit_rate_limit=0 audit_backlog_limit=64 [ 1461.736090][T16738] audit: backlog limit exceeded [ 1461.749505][T16738] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1461.756053][T16738] audit: audit_lost=18123 audit_rate_limit=0 audit_backlog_limit=64 [ 1465.369585][T17673] nbd3: detected capacity change from 0 to 18 [ 1465.378933][T17673] block nbd3: shutting down sockets [ 1466.141132][ T30] kauditd_printk_skb: 1169 callbacks suppressed [ 1466.141152][ T30] audit: type=1400 audit(1742656889.104:173211): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17676 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1466.725456][ T30] audit: type=1400 audit(1742656889.104:173212): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17676 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1466.744867][ C0] vkms_vblank_simulate: vblank timer overrun [ 1466.856971][ T30] audit: type=1400 audit(1742656889.104:173213): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17676 comm="syz-executor" name="43" dev="tmpfs" ino=242 [ 1466.947551][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1466.954140][ C1] audit: audit_lost=18215 audit_rate_limit=0 audit_backlog_limit=64 [ 1466.962233][ C1] audit: backlog limit exceeded [ 1466.967501][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1466.974079][ C1] audit: audit_lost=18216 audit_rate_limit=0 audit_backlog_limit=64 [ 1466.982120][ C1] audit: backlog limit exceeded [ 1466.998528][T17302] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1467.187363][T17683] misc userio: Invalid payload size [ 1467.331211][T17689] fuse: Unknown parameter 'group_i00000000000000000000' [ 1468.900177][T17697] xt_CT: No such helper "pptp" [ 1469.182517][T17707] netlink: 412 bytes leftover after parsing attributes in process `syz.2.3273'. [ 1469.231115][T17707] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3273'. [ 1471.525577][ T30] kauditd_printk_skb: 2460 callbacks suppressed [ 1471.525601][ T30] audit: type=1400 audit(1742656894.234:174647): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=17703 comm="syz.0.3272" saddr=10.128.0.169 src=30008 daddr=10.128.1.178 dest=33704 netif=eth0 [ 1471.604592][T16060] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1471.612214][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1471.618751][ C1] audit: audit_lost=18563 audit_rate_limit=0 audit_backlog_limit=64 [ 1471.626825][ C1] audit: backlog limit exceeded [ 1471.632194][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1471.638733][ C1] audit: audit_lost=18564 audit_rate_limit=0 audit_backlog_limit=64 [ 1471.646790][ C1] audit: backlog limit exceeded [ 1471.652140][T16060] audit: audit_lost=18565 audit_rate_limit=0 audit_backlog_limit=64 [ 1471.652273][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1472.032591][T17730] Invalid source name [ 1474.023015][T17738] netlink: 'syz.5.3280': attribute type 1 has an invalid length. [ 1474.068212][T17738] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3280'. [ 1474.141412][T17738] netlink: 'syz.5.3280': attribute type 1 has an invalid length. [ 1474.238445][T17747] Option ' ' to dns_resolver key: bad/missing value [ 1475.212115][T17738] netlink: 'syz.5.3280': attribute type 2 has an invalid length. [ 1475.542552][T17750] netlink: 'syz.0.3284': attribute type 1 has an invalid length. [ 1475.550478][T17750] netlink: 'syz.0.3284': attribute type 3 has an invalid length. [ 1475.558202][T17750] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3284'. [ 1475.628059][T17750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3284'. [ 1475.790916][T17752] fuse: Unknown parameter 'group_i00000000000000000000' [ 1476.149891][ T5909] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1476.424844][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 1476.548511][ T30] kauditd_printk_skb: 1584 callbacks suppressed [ 1476.548662][ T30] audit: type=1400 audit(1742656899.414:176121): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=17753 comm="syz.1.3286" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1476.581672][ T5909] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1476.659940][ T5909] usb 2-1: config 0 has no interface number 0 [ 1476.796953][ T30] audit: type=1400 audit(1742656899.534:176122): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=17753 comm="syz.1.3286" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1476.830472][ T5909] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1476.879596][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.904072][ T5909] usb 2-1: Product: syz [ 1476.909685][ T30] audit: type=1400 audit(1742656899.554:176123): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=17753 comm="syz.1.3286" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1476.926564][ T5909] usb 2-1: Manufacturer: syz [ 1476.961702][ T5909] usb 2-1: SerialNumber: syz [ 1476.989715][ T5909] usb 2-1: config 0 descriptor?? [ 1477.007058][ T30] audit: type=1400 audit(1742656899.684:176124): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=17753 comm="syz.1.3286" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1477.026874][ C0] vkms_vblank_simulate: vblank timer overrun [ 1477.034745][ T5909] smsc95xx v2.0.0 [ 1477.044039][T15288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1477.051412][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1477.057977][ C1] audit: audit_lost=18603 audit_rate_limit=0 audit_backlog_limit=64 [ 1477.066077][ C1] audit: backlog limit exceeded [ 1477.071894][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1477.078449][ C1] audit: audit_lost=18604 audit_rate_limit=0 audit_backlog_limit=64 [ 1478.146280][ T5909] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1478.749924][ T5909] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1479.023998][ T5909] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1479.047882][ T5909] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1479.095628][ T5909] usb 2-1: USB disconnect, device number 88 [ 1481.083298][T17785] netlink: 'syz.2.3294': attribute type 1 has an invalid length. [ 1481.099768][T17785] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3294'. [ 1481.108830][T17785] netlink: 'syz.2.3294': attribute type 1 has an invalid length. [ 1481.129289][T17785] netlink: 'syz.2.3294': attribute type 2 has an invalid length. [ 1481.195084][T17793] netlink: 'syz.5.3296': attribute type 1 has an invalid length. [ 1481.202941][T17793] netlink: 'syz.5.3296': attribute type 3 has an invalid length. [ 1481.210774][T17793] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3296'. [ 1481.221756][T17793] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3296'. [ 1481.247637][T17795] fuse: Unknown parameter 'group_id00000000000000000000' [ 1481.551940][ T30] kauditd_printk_skb: 1344 callbacks suppressed [ 1481.551961][ T30] audit: type=1400 audit(1742656904.514:177433): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17798 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1481.577672][ C0] vkms_vblank_simulate: vblank timer overrun [ 1481.604903][T17022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1481.612620][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1481.619187][ C1] audit: audit_lost=18617 audit_rate_limit=0 audit_backlog_limit=64 [ 1481.627321][ C1] audit: backlog limit exceeded [ 1481.633276][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1481.639905][ C1] audit: audit_lost=18618 audit_rate_limit=0 audit_backlog_limit=64 [ 1481.647939][ C1] audit: backlog limit exceeded [ 1481.653159][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1481.659757][ C1] audit: audit_lost=18619 audit_rate_limit=0 audit_backlog_limit=64 [ 1483.638456][T17801] netlink: 'syz.5.3298': attribute type 1 has an invalid length. [ 1483.661440][T17801] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3298'. [ 1483.733505][T17801] netlink: 'syz.5.3298': attribute type 1 has an invalid length. [ 1483.770035][T17801] netlink: 'syz.5.3298': attribute type 2 has an invalid length. [ 1485.865584][T17817] xt_CT: No such helper "pptp" [ 1486.065403][T17821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3302'. [ 1486.079656][T17821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3302'. [ 1486.566557][ T30] kauditd_printk_skb: 1392 callbacks suppressed [ 1486.566889][ T30] audit: type=1400 audit(1742656909.504:178418): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=17302 comm="syz-executor" path="/22" dev="tmpfs" ino=132 [ 1486.592529][ C0] vkms_vblank_simulate: vblank timer overrun [ 1486.956552][T17302] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1486.964727][T17830] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1486.979852][ T30] audit: type=1400 audit(1742656909.524:178419): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17302 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1487.017262][T17302] audit: audit_lost=18756 audit_rate_limit=0 audit_backlog_limit=64 [ 1487.027946][T17830] audit: audit_lost=18757 audit_rate_limit=0 audit_backlog_limit=64 [ 1487.039644][T17830] audit: backlog limit exceeded [ 1487.053748][ T30] audit: type=1400 audit(1742656909.524:178420): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17302 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1487.058236][ T5180] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1487.074723][T17302] audit: backlog limit exceeded [ 1489.553357][T17848] Option ' ' to dns_resolver key: bad/missing value [ 1490.626976][T17851] fuse: Unknown parameter 'group_id00000000000000000000' [ 1491.684918][ T30] kauditd_printk_skb: 1454 callbacks suppressed [ 1491.684938][ T30] audit: type=1400 audit(1742656914.644:179714): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17022 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1491.710767][ C0] vkms_vblank_simulate: vblank timer overrun [ 1491.739267][T17022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1491.746814][T17867] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1491.753662][T17863] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1491.762416][T17867] audit: audit_lost=18812 audit_rate_limit=0 audit_backlog_limit=64 [ 1491.769630][ T30] audit: type=1400 audit(1742656914.674:179715): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5180 comm="syslogd" name="/" dev="sda1" ino=2 [ 1491.773531][T17022] audit: audit_lost=18813 audit_rate_limit=0 audit_backlog_limit=64 [ 1491.802213][ T5877] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1491.810238][T17863] audit: audit_lost=18814 audit_rate_limit=0 audit_backlog_limit=64 [ 1491.834639][T17869] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.007037][T17869] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1492.013901][T17869] audit: audit_lost=18815 audit_rate_limit=0 audit_backlog_limit=64 [ 1493.122162][ T5877] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1493.196646][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.454352][ T5877] usb 4-1: Product: syz [ 1493.537740][ T5877] usb 4-1: Manufacturer: syz [ 1493.545251][ T5877] usb 4-1: SerialNumber: syz [ 1493.559779][T17864] netlink: 'syz.0.3311': attribute type 1 has an invalid length. [ 1493.582339][ T5877] usb 4-1: config 0 descriptor?? [ 1493.810115][ T5877] ch341 4-1:0.0: ch341-uart converter detected [ 1493.927235][T17864] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3311'. [ 1494.256299][T17864] netlink: 'syz.0.3311': attribute type 1 has an invalid length. [ 1494.289880][T17864] netlink: 'syz.0.3311': attribute type 2 has an invalid length. [ 1495.689818][ T5877] usb 4-1: failed to send control message: -110 [ 1495.696221][ T5877] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 1495.732852][ T5877] usb 4-1: USB disconnect, device number 90 [ 1495.739779][ T5877] ch341 4-1:0.0: device disconnected [ 1496.690388][ T30] kauditd_printk_skb: 1645 callbacks suppressed [ 1496.690408][ T30] audit: type=1400 audit(1742656919.654:181255): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17022 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1496.748116][ T30] audit: type=1400 audit(1742656919.654:181256): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17022 comm="syz-executor" name="31" dev="tmpfs" ino=180 [ 1496.941258][ T30] audit: type=1400 audit(1742656919.654:181257): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=17022 comm="syz-executor" name="31" dev="tmpfs" ino=180 [ 1497.049535][T17906] Option ' ' to dns_resolver key: bad/missing value [ 1497.324840][T16060] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1497.325019][T16060] audit: audit_lost=18850 audit_rate_limit=0 audit_backlog_limit=64 [ 1497.325073][T16060] audit: backlog limit exceeded [ 1497.325155][T16060] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1497.325205][T16060] audit: audit_lost=18851 audit_rate_limit=0 audit_backlog_limit=64 [ 1497.325257][T16060] audit: backlog limit exceeded [ 1497.325383][T16060] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1500.450328][ T5877] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1500.789546][ T5877] usb 6-1: Using ep0 maxpacket: 16 [ 1500.820290][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1500.852223][ T5877] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 1500.904166][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.946540][ T5877] usb 6-1: config 0 descriptor?? [ 1501.451662][ T5877] aquacomputer_d5next 0003:0C70:F00A.000B: unknown main item tag 0x0 [ 1501.472000][ T5877] aquacomputer_d5next 0003:0C70:F00A.000B: unknown main item tag 0x0 [ 1501.744299][ T30] kauditd_printk_skb: 1296 callbacks suppressed [ 1501.744329][ T30] audit: type=1400 audit(1742656924.704:182117): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17926 comm="syz.5.3327" name="102" dev="tmpfs" ino=544 [ 1501.789632][ T5877] aquacomputer_d5next 0003:0C70:F00A.000B: unknown main item tag 0x0 [ 1501.797844][ T5877] aquacomputer_d5next 0003:0C70:F00A.000B: unknown main item tag 0x0 [ 1501.831600][T17927] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1501.852933][T15288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1501.853062][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1501.866339][ C1] audit: audit_lost=18998 audit_rate_limit=0 audit_backlog_limit=64 [ 1501.874427][ C1] audit: backlog limit exceeded [ 1501.879800][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1501.886322][ C1] audit: audit_lost=18999 audit_rate_limit=0 audit_backlog_limit=64 [ 1501.894332][ C1] audit: backlog limit exceeded [ 1501.899348][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1501.916233][ T5877] aquacomputer_d5next 0003:0C70:F00A.000B: unknown main item tag 0x0 [ 1501.991747][ T5877] aquacomputer_d5next 0003:0C70:F00A.000B: hidraw0: USB HID v0.05 Device [HID 0c70:f00a] on usb-dummy_hcd.5-1/input0 [ 1504.294608][T14308] usb 6-1: USB disconnect, device number 14 [ 1504.357996][T17957] Option ' ' to dns_resolver key: bad/missing value [ 1505.353351][T17961] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1506.788570][ T30] kauditd_printk_skb: 1640 callbacks suppressed [ 1506.788624][ T30] audit: type=1400 audit(1742656928.824:183335): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=6036 comm="kworker/1:2H" saddr=10.128.0.169 src=30008 daddr=10.128.1.178 dest=33704 netif=eth0 [ 1507.097076][T17962] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1507.112506][T17960] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1507.130176][ T5180] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1507.200878][T17962] audit: audit_lost=19142 audit_rate_limit=0 audit_backlog_limit=64 [ 1507.213712][T17960] audit: audit_lost=19143 audit_rate_limit=0 audit_backlog_limit=64 [ 1507.238244][T17962] audit: backlog limit exceeded [ 1507.243446][ T5180] audit: audit_lost=19144 audit_rate_limit=0 audit_backlog_limit=64 [ 1507.298422][T17962] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1507.326637][ T5180] audit: backlog limit exceeded [ 1507.399246][T17959] xt_CT: No such helper "pptp" [ 1507.711483][T17963] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3338'. [ 1507.720690][T17963] 8021q: VLANs not supported on vcan0 [ 1507.790555][T17968] Invalid source name [ 1509.751713][T17976] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1510.399589][ T5877] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1510.603844][ T5877] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1510.619764][ T5877] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1510.632767][ T5877] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1510.649268][ T5877] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1510.660395][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.672520][T17982] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1510.693701][ T5877] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1510.710171][ T5877] usb 6-1: invalid MIDI in EP 0 [ 1510.805245][ T5877] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1510.971290][ T5875] usb 6-1: USB disconnect, device number 15 [ 1512.466076][ T30] kauditd_printk_skb: 1735 callbacks suppressed [ 1512.466097][ T30] audit: type=1400 audit(1742656934.484:184648): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15288 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1512.491766][ C0] vkms_vblank_simulate: vblank timer overrun [ 1512.514551][T17302] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1512.559687][T17302] audit: audit_lost=19286 audit_rate_limit=0 audit_backlog_limit=64 [ 1512.567741][T17302] audit: backlog limit exceeded [ 1512.583590][T16060] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1512.591351][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1512.597948][ C1] audit: audit_lost=19287 audit_rate_limit=0 audit_backlog_limit=64 [ 1512.606040][ C1] audit: backlog limit exceeded [ 1512.606783][T16060] audit: audit_lost=19288 audit_rate_limit=0 audit_backlog_limit=64 [ 1512.612044][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1513.260421][T18007] Option ' ' to dns_resolver key: bad/missing value [ 1513.279932][ T94] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1515.600975][T18015] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1515.608068][T14308] IPVS: starting estimator thread 0... [ 1515.740966][T18019] IPVS: using max 20 ests per chain, 48000 per kthread [ 1517.508125][ T30] kauditd_printk_skb: 1014 callbacks suppressed [ 1517.508559][ T30] audit: type=1400 audit(1742656940.404:185471): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=17022 comm="syz-executor" name="37" dev="tmpfs" ino=211 [ 1517.839175][T17022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1517.856286][T17302] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1517.871231][T16060] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1517.877847][T16060] audit: audit_lost=19353 audit_rate_limit=0 audit_backlog_limit=64 [ 1517.879473][T17302] audit: audit_lost=19354 audit_rate_limit=0 audit_backlog_limit=64 [ 1517.895852][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1517.902451][ C1] audit: audit_lost=19355 audit_rate_limit=0 audit_backlog_limit=64 [ 1517.909587][T17022] audit: audit_lost=19356 audit_rate_limit=0 audit_backlog_limit=64 [ 1517.910482][ C1] audit: backlog limit exceeded [ 1517.922720][T18012] team0: Port device team_slave_1 removed [ 1520.876332][T18052] Option ' ' to dns_resolver key: bad/missing value [ 1521.770220][ T94] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1521.774927][T18066] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1522.259526][ T94] usb 2-1: Using ep0 maxpacket: 16 [ 1522.306774][ T94] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1522.378999][ T94] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1522.407740][ T94] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1522.459440][ T94] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.467523][ T94] usb 2-1: Product: syz [ 1522.481985][ T94] usb 2-1: Manufacturer: syz [ 1522.486644][ T94] usb 2-1: SerialNumber: syz [ 1522.509948][ T30] kauditd_printk_skb: 1371 callbacks suppressed [ 1522.509968][ T30] audit: type=1400 audit(1742656945.464:186813): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 1522.511057][ T94] usb 2-1: config 0 descriptor?? [ 1522.516285][ T30] audit: type=1400 audit(1742656945.464:186814): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28 comm="kdevtmpfs" name="bus" dev="devtmpfs" ino=718 [ 1522.516327][ T30] audit: type=1400 audit(1742656945.464:186815): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28 comm="kdevtmpfs" name="usb" dev="devtmpfs" ino=719 [ 1522.546691][ T94] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1522.560754][ T30] audit: type=1400 audit(1742656945.464:186816): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28 comm="kdevtmpfs" name="002" dev="devtmpfs" ino=723 [ 1522.585702][T15288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1522.615489][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1522.619055][ T30] audit: type=1400 audit(1742656945.464:186817): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=28 comm="kdevtmpfs" name="002" dev="devtmpfs" ino=723 [ 1522.622059][ C1] audit: audit_lost=19366 audit_rate_limit=0 audit_backlog_limit=64 [ 1522.622081][ C1] audit: backlog limit exceeded [ 1522.622772][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1522.641121][ C0] vkms_vblank_simulate: vblank timer overrun [ 1522.708403][T14308] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1522.709481][ T94] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1522.934204][T14308] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1522.975750][T14308] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1523.127976][T14308] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1523.282053][T14308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.351014][ T94] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1523.358885][ T94] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1523.423000][ T94] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1523.653616][T18071] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1524.353694][ T94] em28xx 2-1:0.0: No AC97 audio processor [ 1524.463262][T14308] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1524.475899][ T94] usb 2-1: USB disconnect, device number 89 [ 1524.536439][ T94] em28xx 2-1:0.0: Disconnecting em28xx [ 1524.566855][ T94] em28xx 2-1:0.0: Freeing device [ 1524.699658][ T5877] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1524.847319][T14308] usb 3-1: USB disconnect, device number 96 [ 1524.875021][ T5877] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1524.902250][ T5877] usb 4-1: not running at top speed; connect to a high speed hub [ 1524.919732][ T94] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1524.921180][ T5877] usb 4-1: config 3 has an invalid interface number: 106 but max is 0 [ 1524.965324][ T5877] usb 4-1: config 3 has no interface number 0 [ 1524.987343][ T5877] usb 4-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1525.011578][ T5877] usb 4-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1525.033085][ T5877] usb 4-1: config 3 interface 106 has no altsetting 0 [ 1525.054305][ T5877] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 1525.069751][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.088086][ T5877] usb 4-1: Product: syz [ 1525.098235][ T5877] usb 4-1: Manufacturer: syz [ 1525.103084][ T5877] usb 4-1: SerialNumber: syz [ 1525.122577][T18079] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1525.130108][T18079] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1525.135504][ T94] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1525.175970][ T94] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1525.219714][ T94] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1525.257517][ T94] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1525.279457][ T94] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.311767][T18082] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1525.329871][ T94] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1525.349028][ T94] usb 2-1: invalid MIDI in EP 0 [ 1525.466235][ T94] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1525.644193][ T94] usb 2-1: USB disconnect, device number 90 [ 1526.482981][ T5877] kobil_sct 4-1:3.106: KOBIL USB smart card terminal converter detected [ 1526.509108][ T5877] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1526.526835][ T5877] usb 4-1: USB disconnect, device number 92 [ 1526.613570][ T5877] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1526.722088][ T5877] kobil_sct 4-1:3.106: device disconnected [ 1526.754827][T18105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3375'. [ 1526.755339][T18104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3372'. [ 1526.774447][T18104] 8021q: VLANs not supported on vcan0 [ 1526.933577][T18108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3375'. [ 1526.945166][T18108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1527.544309][ T30] kauditd_printk_skb: 1519 callbacks suppressed [ 1527.544332][ T30] audit: type=1400 audit(1742656950.474:188309): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=18097 comm="syz.1.3374" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1527.569585][ T1206] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1527.574385][T18108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1527.641088][ T30] audit: type=1400 audit(1742656950.544:188310): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=18097 comm="syz.1.3374" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1527.690744][T16738] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1527.690769][T17302] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1527.697285][T16738] audit: audit_lost=19377 audit_rate_limit=0 audit_backlog_limit=64 [ 1527.704994][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1527.718801][ C1] audit: audit_lost=19378 audit_rate_limit=0 audit_backlog_limit=64 [ 1527.726873][ C1] audit: backlog limit exceeded [ 1527.732265][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1527.738818][ C1] audit: audit_lost=19379 audit_rate_limit=0 audit_backlog_limit=64 [ 1527.859072][ T1206] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1527.878926][ T1206] usb 2-1: config 0 has no interface number 0 [ 1527.999608][ T1206] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1528.045289][ T1206] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1528.067178][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.109753][ T1206] usb 2-1: Product: syz [ 1528.118790][ T1206] usb 2-1: Manufacturer: syz [ 1528.179503][ T5909] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1528.226129][ T1206] usb 2-1: SerialNumber: syz [ 1528.590062][ T1206] usb 2-1: config 0 descriptor?? [ 1528.805670][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1528.833535][ T1206] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 1528.859706][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1528.897539][ T5909] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1528.920424][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.944872][ T5909] usb 3-1: config 0 descriptor?? [ 1529.110078][T18103] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 18103 comm: syz.1.3374) [ 1529.389155][T18130] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1530.422640][ T5875] usb 2-1: USB disconnect, device number 91 [ 1530.442165][ T5875] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 1530.718215][T18135] 9pnet: Could not find request transport:  [ 1530.880040][ T5909] usbhid 3-1:0.0: can't add hid device: -71 [ 1531.038775][ T5909] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1531.048586][ T5909] usb 3-1: USB disconnect, device number 97 [ 1531.222188][T18146] netlink: 'syz.1.3385': attribute type 1 has an invalid length. [ 1531.669704][T18146] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3385'. [ 1531.678796][T18146] netlink: 'syz.1.3385': attribute type 1 has an invalid length. [ 1531.760145][T18146] netlink: 'syz.1.3385': attribute type 2 has an invalid length. [ 1532.564817][ T30] kauditd_printk_skb: 2405 callbacks suppressed [ 1532.564838][ T30] audit: type=1400 audit(1742656955.524:190526): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=18157 comm="syz.3.3388" opid=18157 ocomm="syz.3.3388" [ 1532.590322][ C0] vkms_vblank_simulate: vblank timer overrun [ 1532.688087][ T30] audit: type=1400 audit(1742656955.524:190527): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18157 comm="syz.3.3388" name="newroot" dev="tmpfs" ino=2 [ 1532.707250][ C0] vkms_vblank_simulate: vblank timer overrun [ 1532.742667][T18159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3388'. [ 1532.756903][T18159] 8021q: VLANs not supported on vcan0 [ 1532.806248][ T30] audit: type=1400 audit(1742656955.524:190528): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18157 comm="syz.3.3388" name="/" dev="devtmpfs" ino=1 [ 1532.852725][ T30] audit: type=1400 audit(1742656955.524:190529): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18157 comm="syz.3.3388" name="cpu" dev="devtmpfs" ino=85 [ 1532.884845][T16060] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1532.892703][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1532.899296][ C1] audit: audit_lost=19443 audit_rate_limit=0 audit_backlog_limit=64 [ 1532.907791][ C1] audit: backlog limit exceeded [ 1532.912908][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1532.919480][ C1] audit: audit_lost=19444 audit_rate_limit=0 audit_backlog_limit=64 [ 1535.549163][T18195] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1536.539499][ T1206] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1536.764510][T18203] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3401'. [ 1536.931454][T13758] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1537.121103][T13758] usb 3-1: Using ep0 maxpacket: 16 [ 1537.177008][T13758] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.270649][T13758] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1537.321025][T13758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.329087][T13758] usb 3-1: Product: syz [ 1537.393320][T13758] usb 3-1: Manufacturer: syz [ 1537.430633][T13758] usb 3-1: SerialNumber: syz [ 1537.474357][T13758] usb 3-1: config 0 descriptor?? [ 1537.529537][ T1206] usb 2-1: Using ep0 maxpacket: 8 [ 1537.560625][ T1206] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1537.569291][ T1206] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1537.720005][ T1206] usb 2-1: can't read configurations, error -71 [ 1537.751786][ T30] kauditd_printk_skb: 2231 callbacks suppressed [ 1537.751805][ T30] audit: type=1400 audit(1742656960.714:192158): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=18197 comm="syz.2.3400" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1537.928796][ T30] audit: type=1400 audit(1742656960.884:192159): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13 comm="kworker/u8:1" saddr=10.128.0.169 src=30008 daddr=10.128.1.178 dest=33704 netif=eth0 [ 1538.061995][ T30] audit: type=1400 audit(1742656961.024:192160): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=15288 comm="syz-executor" opid=18185 ocomm="syz.0.3397" [ 1538.183120][T15290] Bluetooth: hci1: command 0x0406 tx timeout [ 1538.199603][ T30] audit: type=1400 audit(1742656961.024:192161): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=15288 comm="syz-executor" opid=18185 ocomm="syz.0.3397" [ 1538.251750][ T30] audit: type=1400 audit(1742656961.064:192162): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=18197 comm="syz.2.3400" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1538.256794][T17022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1538.282761][ T30] audit: type=1400 audit(1742656961.184:192163): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5180 comm="syslogd" name="/" dev="sda1" ino=2 [ 1538.301951][ T30] audit: type=1400 audit(1742656961.184:192164): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5180 comm="syslogd" name="var" dev="sda1" ino=1906 [ 1538.321555][ T30] audit: type=1400 audit(1742656961.184:192165): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5180 comm="syslogd" name="var" dev="sda1" ino=1906 [ 1538.340564][T17022] audit: audit_lost=19646 audit_rate_limit=0 audit_backlog_limit=64 [ 1539.012148][T18220] FAULT_INJECTION: forcing a failure. [ 1539.012148][T18220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1539.283369][T18220] CPU: 1 UID: 0 PID: 18220 Comm: syz.5.3403 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1539.283402][T18220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1539.283416][T18220] Call Trace: [ 1539.283424][T18220] [ 1539.283435][T18220] dump_stack_lvl+0x241/0x360 [ 1539.283466][T18220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1539.283487][T18220] ? __pfx__printk+0x10/0x10 [ 1539.283523][T18220] ? __pfx_lock_release+0x10/0x10 [ 1539.283563][T18220] should_fail_ex+0x40a/0x550 [ 1539.283601][T18220] _copy_from_user+0x2d/0xb0 [ 1539.283633][T18220] copy_msghdr_from_user+0xae/0x680 [ 1539.283670][T18220] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1539.283698][T18220] ? __fget_files+0x2a/0x410 [ 1539.283724][T18220] ? __fget_files+0x2a/0x410 [ 1539.283757][T18220] __sys_sendmmsg+0x32b/0x720 [ 1539.283793][T18220] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1539.283830][T18220] ? __pfx_lock_release+0x10/0x10 [ 1539.283858][T18220] ? kstrtouint_from_user+0x128/0x190 [ 1539.283907][T18220] ? ksys_write+0x22a/0x2b0 [ 1539.283935][T18220] ? __pfx_lock_release+0x10/0x10 [ 1539.283978][T18220] ? sb_end_write+0xe9/0x1c0 [ 1539.284000][T18220] ? vfs_write+0x7fa/0xd10 [ 1539.284028][T18220] ? __mutex_unlock_slowpath+0x227/0x800 [ 1539.284090][T18220] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1539.284124][T18220] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1539.284156][T18220] ? do_syscall_64+0x100/0x230 [ 1539.284198][T18220] __x64_sys_sendmmsg+0xa0/0xb0 [ 1539.284223][T18220] do_syscall_64+0xf3/0x230 [ 1539.284255][T18220] ? clear_bhb_loop+0x35/0x90 [ 1539.284288][T18220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.284317][T18220] RIP: 0033:0x7f2e7b18d169 [ 1539.284336][T18220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1539.284354][T18220] RSP: 002b:00007f2e7bf40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1539.284378][T18220] RAX: ffffffffffffffda RBX: 00007f2e7b3a6160 RCX: 00007f2e7b18d169 [ 1539.284394][T18220] RDX: 0000000000000001 RSI: 0000200000003240 RDI: 0000000000000005 [ 1539.284408][T18220] RBP: 00007f2e7bf40090 R08: 0000000000000000 R09: 0000000000000000 [ 1539.284422][T18220] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 1539.284435][T18220] R13: 0000000000000000 R14: 00007f2e7b3a6160 R15: 00007ffe518d7868 [ 1539.284467][T18220] [ 1540.099635][T16974] usb 3-1: USB disconnect, device number 98 [ 1540.138321][T18223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3406'. [ 1541.260267][T16974] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1541.420975][T18237] Malformed UNC in devname [ 1541.420975][T18237] [ 1541.439555][T16974] usb 3-1: Using ep0 maxpacket: 16 [ 1541.455311][T18237] CIFS: VFS: Malformed UNC in devname [ 1541.482254][T16974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.541215][T16974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1541.552514][T16974] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1541.653803][T18239] Invalid source name [ 1541.772447][T16974] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1541.891087][T16974] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1542.045274][T16974] usb 3-1: Manufacturer: syz [ 1542.183407][T16974] usb 3-1: config 0 descriptor?? [ 1542.799958][ T30] kauditd_printk_skb: 1867 callbacks suppressed [ 1542.799984][ T30] audit: type=1400 audit(1742656965.494:193897): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=18228 comm="syz.2.3408" path="/dev/zero" dev="devtmpfs" ino=6 [ 1542.896627][T17022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1542.930687][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1542.937341][ C1] audit: audit_lost=19692 audit_rate_limit=0 audit_backlog_limit=64 [ 1542.945400][ C1] audit: backlog limit exceeded [ 1542.951512][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1542.958458][ C1] audit: audit_lost=19693 audit_rate_limit=0 audit_backlog_limit=64 [ 1542.966509][ C1] audit: backlog limit exceeded [ 1542.971562][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1542.978114][ C1] audit: audit_lost=19694 audit_rate_limit=0 audit_backlog_limit=64 [ 1543.476197][T18251] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1543.742277][ T5875] usb 3-1: USB disconnect, device number 99 [ 1545.119614][ T1206] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1545.313791][ T1206] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1545.346845][ T1206] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.374514][ T1206] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1545.408190][T18263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3419'. [ 1545.439132][ T1206] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1545.469710][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.478194][ T1206] usb 6-1: Product: syz [ 1545.489586][T16974] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1545.497573][ T1206] usb 6-1: Manufacturer: syz [ 1545.560184][ T1206] usb 6-1: SerialNumber: syz [ 1545.703922][T16974] usb 3-1: Using ep0 maxpacket: 16 [ 1545.783996][T16974] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1545.991758][T18269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3421'. [ 1546.163858][T16974] usb 3-1: config 14 has an invalid interface number: 3 but max is 1 [ 1546.209493][T16974] usb 3-1: config 14 has an invalid interface number: 240 but max is 1 [ 1546.385341][T16974] usb 3-1: config 14 has no interface number 0 [ 1546.418696][T16974] usb 3-1: config 14 has no interface number 1 [ 1546.448100][T16974] usb 3-1: config 14 interface 3 has no altsetting 0 [ 1546.457564][T16974] usb 3-1: config 14 interface 240 has no altsetting 0 [ 1546.521060][T16974] usb 3-1: New USB device found, idVendor=05c6, idProduct=9222, bcdDevice=3c.9b [ 1546.535846][T16974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.559480][T16974] usb 3-1: Product: syz [ 1546.563726][T16974] usb 3-1: Manufacturer: syz [ 1546.568542][T16974] usb 3-1: SerialNumber: syz [ 1546.826454][T18259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3417'. [ 1546.859971][T18259] openvswitch: netlink: Flow key attr not present in new flow. [ 1546.889883][T16974] usb 3-1: unknown number of interfaces: 2 [ 1546.912407][T16974] usb 3-1: USB disconnect, device number 100 [ 1547.619783][T14308] usb 6-1: USB disconnect, device number 16 [ 1547.878361][ T30] kauditd_printk_skb: 1257 callbacks suppressed [ 1547.878381][ T30] audit: type=1400 audit(1742656970.834:195032): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16060 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1547.918321][T16060] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1547.935366][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1547.942008][ C1] audit: audit_lost=19736 audit_rate_limit=0 audit_backlog_limit=64 [ 1547.949628][T16060] audit: audit_lost=19737 audit_rate_limit=0 audit_backlog_limit=64 [ 1547.950052][ C1] audit: backlog limit exceeded [ 1547.958059][T16060] audit: backlog limit exceeded [ 1547.993990][ T30] audit: type=1400 audit(1742656970.834:195033): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16060 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1548.014056][T16060] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1548.039468][T16060] audit: audit_lost=19738 audit_rate_limit=0 audit_backlog_limit=64 [ 1549.780491][T18288] veth0_to_bridge: entered promiscuous mode [ 1549.814446][T18287] veth0_to_bridge: left promiscuous mode [ 1549.949101][T18290] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1550.245710][T18293] fuse: Unknown parameter '0x0000000000000003' [ 1550.639884][ T5875] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1550.819487][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 1550.853805][ T5875] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1550.873424][ T5875] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1550.889540][ T5875] usb 2-1: can't read configurations, error -71 [ 1551.056801][T18310] 8021q: VLANs not supported on ip_vti0 [ 1551.789482][T14308] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1551.954591][T18323] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 1552.169641][T14308] usb 3-1: Using ep0 maxpacket: 16 [ 1552.202210][T14308] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.612159][T14308] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1552.624234][T14308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.632953][T14308] usb 3-1: Product: syz [ 1552.637222][T14308] usb 3-1: Manufacturer: syz [ 1552.642959][T14308] usb 3-1: SerialNumber: syz [ 1552.650077][T14308] usb 3-1: config 0 descriptor?? [ 1552.942403][ T30] kauditd_printk_skb: 2105 callbacks suppressed [ 1552.942424][ T30] audit: type=1400 audit(1742656975.904:196969): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.178 dest=33704 netif=eth0 [ 1553.011874][ T30] audit: type=1400 audit(1742656975.934:196970): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=18313 comm="syz.2.3438" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1553.228262][ T5909] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1553.249635][ T30] audit: type=1400 audit(1742656975.954:196971): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18326 comm="syz-executor" name="/" dev="sda1" ino=2 [ 1553.279914][ T30] audit: type=1400 audit(1742656975.954:196972): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18326 comm="syz-executor" name="/" dev="sysfs" ino=1 [ 1553.324386][ T30] audit: type=1400 audit(1742656975.954:196973): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18326 comm="syz-executor" name="kernel" dev="sysfs" ino=1387 [ 1553.356651][ T30] audit: type=1400 audit(1742656975.964:196974): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18326 comm="syz-executor" name="/" dev="debugfs" ino=1 [ 1553.431023][T18321] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1553.442870][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1553.449573][ C1] audit: audit_lost=19796 audit_rate_limit=0 audit_backlog_limit=64 [ 1553.457633][ C1] audit: backlog limit exceeded [ 1553.484467][ T5909] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1553.508904][ T5909] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.569913][ T5909] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1553.633268][ T5909] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1553.642933][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.657810][ T5909] usb 6-1: Product: syz [ 1553.667813][ T5909] usb 6-1: Manufacturer: syz [ 1553.694752][ T5909] usb 6-1: SerialNumber: syz [ 1554.129561][T18339] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1554.984789][ T5875] usb 6-1: USB disconnect, device number 17 [ 1555.063886][T15290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1555.079165][T15290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1555.088430][T15290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1555.100254][T15290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1555.112224][T15290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1555.131012][T15290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1555.154288][ T5877] usb 3-1: USB disconnect, device number 101 [ 1555.307754][T11564] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.420746][T18345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3444'. [ 1555.627758][T11564] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.788066][T18355] netlink: 'syz.5.3446': attribute type 2 has an invalid length. [ 1555.821988][T18355] netlink: 'syz.5.3446': attribute type 1 has an invalid length. [ 1555.835156][T11564] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.854673][T18355] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.3446'. [ 1555.885082][T18355] nbd: couldn't find a device at index 1568768 [ 1555.999791][T11564] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.568009][T18372] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3449'. [ 1556.578269][T18372] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1557.171632][T18342] chnl_net:caif_netlink_parms(): no params data found [ 1557.229722][ T5841] Bluetooth: hci2: command tx timeout [ 1557.278680][T11564] bridge_slave_1: left allmulticast mode [ 1557.286241][T11564] bridge_slave_1: left promiscuous mode [ 1557.292599][T11564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.318372][T11564] bridge_slave_0: left allmulticast mode [ 1557.324984][T11564] bridge_slave_0: left promiscuous mode [ 1557.341131][T11564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.779314][T18386] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1558.446396][ C1] audit_log_start: 2817 callbacks suppressed [ 1558.446415][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1558.459115][ C1] audit: audit_lost=19876 audit_rate_limit=0 audit_backlog_limit=64 [ 1558.467260][ C1] audit: backlog limit exceeded [ 1558.946889][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1558.953540][ C1] audit: audit_lost=19877 audit_rate_limit=0 audit_backlog_limit=64 [ 1558.961616][ C1] audit: backlog limit exceeded [ 1559.947512][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1559.954141][ C1] audit: audit_lost=19878 audit_rate_limit=0 audit_backlog_limit=64 [ 1559.962239][ C1] audit: backlog limit exceeded [ 1560.024056][T15288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1560.064999][ T5841] Bluetooth: hci2: command tx timeout [ 1561.909501][ T5902] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1562.089704][T15290] Bluetooth: hci2: command tx timeout [ 1562.518499][ T5902] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1562.623459][ T5902] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1562.656769][ T5902] usb 6-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1562.784654][ T5902] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1562.817956][ T5902] usb 6-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1562.855350][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.941681][ T5902] usb 6-1: Product: syz [ 1562.977458][ T5902] usb 6-1: Manufacturer: syz [ 1562.989558][ T5902] usb 6-1: SerialNumber: syz [ 1563.065190][T11564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1563.146834][T11564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1563.176226][T11564] bond0 (unregistering): Released all slaves [ 1563.457867][ T30] kauditd_printk_skb: 654 callbacks suppressed [ 1563.457904][ T30] audit: type=1400 audit(1742656986.414:200208): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.178 dest=33704 netif=eth0 [ 1563.577151][ T30] audit: type=1400 audit(1742656986.534:200209): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17022 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1563.604572][T17022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1563.643670][T18409] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1563.649904][T15288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1563.657461][ T30] audit: type=1400 audit(1742656986.534:200210): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17022 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1563.657539][ T30] audit: type=1400 audit(1742656986.534:200211): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17022 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1563.699973][T15288] audit: audit_lost=19880 audit_rate_limit=0 audit_backlog_limit=64 [ 1563.708028][T15288] audit: backlog limit exceeded [ 1563.719670][T17022] audit: audit_lost=19881 audit_rate_limit=0 audit_backlog_limit=64 [ 1564.209983][T15290] Bluetooth: hci2: command tx timeout [ 1564.356885][T18342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.454628][T18342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.574606][T18418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3461'. [ 1564.585089][T18418] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1564.719185][T18342] bridge_slave_0: entered allmulticast mode [ 1565.011234][T18342] bridge_slave_0: entered promiscuous mode [ 1565.046467][T18342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.099050][T18342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.141175][T18342] bridge_slave_1: entered allmulticast mode [ 1565.155272][ T5902] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input89 [ 1565.169325][T18342] bridge_slave_1: entered promiscuous mode [ 1565.176767][T18422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3462'. [ 1565.202073][ T5902] usb 6-1: USB disconnect, device number 18 [ 1565.212949][ T5183] bcm5974 6-1:1.0: could not read from device [ 1565.231795][T18423] program syz.0.3462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1565.355043][T18425] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3463'. [ 1565.619696][T18342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1565.664608][T18342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1565.757243][T11564] hsr_slave_0: left promiscuous mode [ 1565.763094][T14308] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1565.783430][T11564] hsr_slave_1: left promiscuous mode [ 1565.800480][T11564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1565.819737][T11564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1565.859107][T11564] veth1_macvtap: left promiscuous mode [ 1565.874424][T11564] veth0_macvtap: left promiscuous mode [ 1565.883767][T11564] veth1_vlan: left promiscuous mode [ 1565.889173][T11564] veth0_vlan: left promiscuous mode [ 1565.929506][T14308] usb 3-1: Using ep0 maxpacket: 8 [ 1565.947591][T14308] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1565.967137][T14308] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1565.978981][T14308] usb 3-1: can't read configurations, error -71 [ 1566.567459][T18439] x_tables: duplicate underflow at hook 3 [ 1567.054581][T11564] team0 (unregistering): Port device team_slave_1 removed [ 1567.177128][T11564] team0 (unregistering): Port device team_slave_0 removed [ 1568.625355][ T30] kauditd_printk_skb: 1727 callbacks suppressed [ 1568.632775][ T30] audit: type=1400 audit(1742656991.564:201729): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=15288 comm="syz-executor" opid=18430 ocomm="syz.0.3465" [ 1568.660179][ T30] audit: type=1400 audit(1742656991.614:201730): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=15288 comm="syz-executor" opid=18430 ocomm="syz.0.3465" [ 1568.738773][ T30] audit: type=1400 audit(1742656991.674:201731): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=18445 comm="syz.1.3471" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1568.808985][ T30] audit: type=1400 audit(1742656991.764:201732): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=18445 comm="syz.1.3471" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1568.859552][T14308] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1568.878754][T17302] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1568.889777][T17302] audit: audit_lost=19952 audit_rate_limit=0 audit_backlog_limit=64 [ 1568.898750][T18451] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1568.911928][T18451] audit: audit_lost=19953 audit_rate_limit=0 audit_backlog_limit=64 [ 1568.920096][T17302] audit: backlog limit exceeded [ 1568.925094][ T30] audit: type=1400 audit(1742656991.814:201733): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=16060 comm="syz-executor" opid=18432 ocomm="syz.5.3466" [ 1569.099897][T14308] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1569.119198][T14308] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.358516][T14308] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1569.373502][T14308] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1569.383481][T14308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.137997][T14308] usb 2-1: Product: syz [ 1570.142524][T14308] usb 2-1: Manufacturer: syz [ 1570.147271][T14308] usb 2-1: SerialNumber: syz [ 1570.848485][T18466] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1571.354506][T18433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1571.711331][T18342] team0: Port device team_slave_0 added [ 1571.853791][T18342] team0: Port device team_slave_1 added [ 1571.899758][T14308] usb 2-1: can't set config #1, error -71 [ 1571.958140][T14308] usb 2-1: USB disconnect, device number 96 [ 1572.058573][T18342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1572.103870][T18342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1572.232310][T18342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1572.289977][T18342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1572.372101][T18342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1572.454523][T18342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1572.734565][T18342] hsr_slave_0: entered promiscuous mode [ 1572.771317][T18342] hsr_slave_1: entered promiscuous mode [ 1572.777746][T18342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1572.785470][T18342] Cannot create hsr debugfs directory [ 1573.707649][T18487] audit_log_start: 1378 callbacks suppressed [ 1573.707671][T18487] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1573.749525][ T30] audit: type=1400 audit(1742656996.664:203090): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=18487 comm="kworker/u8:10" name="ld-linux-x86-64.so.2" dev="sda1" ino=1097 [ 1573.788106][T18487] audit: audit_lost=19961 audit_rate_limit=0 audit_backlog_limit=64 [ 1573.807468][T17022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1573.818394][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1573.825119][ C1] audit: audit_lost=19962 audit_rate_limit=0 audit_backlog_limit=64 [ 1573.833181][ C1] audit: backlog limit exceeded [ 1573.838370][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1573.844959][ C1] audit: audit_lost=19963 audit_rate_limit=0 audit_backlog_limit=64 [ 1573.853070][ C1] audit: backlog limit exceeded [ 1574.456342][T18495] Invalid source name [ 1575.063513][T18342] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1575.084087][T18342] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1575.103342][T18342] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1575.127057][T18342] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1575.129765][ T5875] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 1575.301835][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1575.312466][T18342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1575.331297][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 1575.374933][ T5875] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 1575.389496][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.457641][T18342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1575.779265][ T5875] usb 2-1: config 0 descriptor?? [ 1575.790786][T18491] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1576.335858][T18507] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1576.496801][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.504050][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1576.525690][ T5875] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input90 [ 1576.645704][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.652911][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1576.730777][ T5183] bcm5974 2-1:0.0: could not read from device [ 1576.767828][ T5183] bcm5974 2-1:0.0: could not read from device [ 1576.805103][ T5183] bcm5974 2-1:0.0: could not read from device [ 1576.814971][ T5875] usb 2-1: USB disconnect, device number 97 [ 1576.833699][ T5183] bcm5974 2-1:0.0: could not read from device [ 1577.424448][T18342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1578.780330][ T30] kauditd_printk_skb: 3193 callbacks suppressed [ 1578.780352][ T30] audit: type=1400 audit(1742657001.464:206023): lsm=SMACK fn=smack_ptrace_access_check action=granted subject="_" object="_" requested=r pid=18519 comm="syz.1.3489" opid=18519 ocomm="syz.1.3489" [ 1578.823161][T17022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1578.839585][T15288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1578.846161][T15288] audit: audit_lost=20051 audit_rate_limit=0 audit_backlog_limit=64 [ 1578.854260][T15288] audit: backlog limit exceeded [ 1578.861775][T17022] audit: audit_lost=20052 audit_rate_limit=0 audit_backlog_limit=64 [ 1578.877704][T17022] audit: backlog limit exceeded [ 1578.883135][T17022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1578.885306][T18532] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1578.899598][ T30] audit: type=1400 audit(1742657001.754:206024): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18525 comm="modprobe" name="/" dev="sda1" ino=2 [ 1579.190957][ T1206] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1579.406933][ T1206] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1579.427031][ T1206] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.457842][ T1206] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1579.495105][ T1206] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1579.525299][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.566143][ T1206] usb 6-1: Product: syz [ 1579.584528][ T1206] usb 6-1: Manufacturer: syz [ 1579.632239][ T1206] usb 6-1: SerialNumber: syz [ 1580.149289][T18342] veth0_vlan: entered promiscuous mode [ 1580.183626][T18342] veth1_vlan: entered promiscuous mode [ 1580.231969][T18342] veth0_macvtap: entered promiscuous mode [ 1580.295608][T18342] veth1_macvtap: entered promiscuous mode [ 1580.362618][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1580.386917][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.433170][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1580.450303][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.450457][T13758] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1580.460632][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1580.505941][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.631110][T13758] usb 2-1: Using ep0 maxpacket: 8 [ 1580.632047][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1580.643392][T13758] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1580.724712][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.741682][T13758] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1580.741807][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1580.770019][T13758] usb 2-1: can't read configurations, error -71 [ 1581.018336][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.041125][T18342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1581.074578][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1581.099489][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.114192][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1581.136892][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.186526][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1581.197338][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.264224][T14308] usb 6-1: USB disconnect, device number 19 [ 1581.292653][T18342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1581.304326][T18342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.318679][T18342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1581.349216][T18342] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.362692][T18342] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.385187][T18342] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.415660][T18342] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.629892][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.675562][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.938263][T18560] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1582.551200][ T7801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.559139][ T7801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.841176][ T30] kauditd_printk_skb: 3235 callbacks suppressed [ 1583.841206][ T30] audit: type=1400 audit(1742657006.784:207587): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15288 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1583.868318][T15288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1583.897270][T18342] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1583.910621][T18342] audit: audit_lost=20612 audit_rate_limit=0 audit_backlog_limit=64 [ 1583.918747][T18342] audit: backlog limit exceeded [ 1583.923803][T18342] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1583.934247][T18342] audit: audit_lost=20613 audit_rate_limit=0 audit_backlog_limit=64 [ 1583.934768][T15288] audit: audit_lost=20614 audit_rate_limit=0 audit_backlog_limit=64 [ 1583.942364][T18342] audit: backlog limit exceeded [ 1583.942401][T18342] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1584.374793][T18577] netlink: 'syz.2.3500': attribute type 1 has an invalid length. [ 1584.389804][T18577] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3500'. [ 1584.398940][T18577] netlink: 'syz.2.3500': attribute type 1 has an invalid length. [ 1584.419647][T18577] netlink: 'syz.2.3500': attribute type 2 has an invalid length. [ 1585.409792][ T5875] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1585.649564][ T5875] usb 6-1: Using ep0 maxpacket: 8 [ 1585.841348][ T5875] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1585.951233][ T5875] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1586.012608][ T5875] usb 6-1: can't read configurations, error -71 [ 1586.698675][T18604] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3510'. [ 1586.708241][T18604] 8021q: VLANs not supported on vcan0 [ 1586.807603][T18610] trusted_key: encrypted_key: insufficient parameters specified [ 1587.089615][T14308] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1587.249596][T14308] usb 2-1: Using ep0 maxpacket: 8 [ 1587.265554][T14308] usb 2-1: config 9 has an invalid interface number: 166 but max is 3 [ 1587.278966][T14308] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.308820][T14308] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 4 [ 1587.319112][T14308] usb 2-1: config 9 has no interface number 0 [ 1587.325602][T14308] usb 2-1: config 9 interface 166 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1587.339225][T14308] usb 2-1: config 9 interface 166 has no altsetting 0 [ 1587.348659][ T5875] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1587.350682][T14308] usb 2-1: New USB device found, idVendor=0cf3, idProduct=0005, bcdDevice=88.95 [ 1587.365800][T14308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.374259][T14308] usb 2-1: Product: Е [ 1587.378588][T14308] usb 2-1: Manufacturer: ὠ暇藟榅귛暁ᎏẀ鷙㘵싕찘؈꺫넦稥麙═࠘毞 [ 1587.389179][T14308] usb 2-1: SerialNumber: 岟鹧倱傢䙽葺ꋈƓ࠸⼏㛎Ḽ嘝鷺휗뺪䢧䁽䀘殘䀃䔕쌔嫦ꄠٸ괬⬌风됧쥽䵪럲썉㥀恪ࡿ䛧栤炳ﱍ옱璘娲ड✟뗤꓈헞쒠ꨫꓹ᷺뤑頏㭜ꦡ酏浴彏꽮㮄妘㱜꽛纮㣿툂芋뀏◉⠻Ԋ㾇ꍭ⨈얶ⲭາ︶뵇덧℄슶絛谋ṭ喡覜緶쵞㉬襩 [ 1587.419431][ C0] vkms_vblank_simulate: vblank timer overrun [ 1587.509588][ T5875] usb 7-1: Using ep0 maxpacket: 16 [ 1587.843505][ T5875] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.854269][ T5875] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1587.878871][ T5875] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1587.898593][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.925280][ T5875] usb 7-1: Product: syz [ 1587.959149][ T5875] usb 7-1: Manufacturer: syz [ 1587.969553][ T5875] usb 7-1: SerialNumber: syz [ 1587.987394][T14308] usb 2-1: Could not find all expected endpoints [ 1588.020632][T14308] usb 2-1: USB disconnect, device number 100 [ 1588.450103][ T1206] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1588.939563][ T30] kauditd_printk_skb: 3604 callbacks suppressed [ 1588.939584][ T30] audit: type=1400 audit(1742657011.904:210676): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18629 comm="syz.1.3520" name="newroot" dev="tmpfs" ino=2 [ 1588.974315][ T30] audit: type=1400 audit(1742657011.904:210677): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18629 comm="syz.1.3520" name="/" dev="devtmpfs" ino=1 [ 1589.006593][ T30] audit: type=1400 audit(1742657011.904:210678): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=18629 comm="syz.1.3520" name="raw-gadget" dev="devtmpfs" ino=820 [ 1589.070660][ T1206] usb 6-1: Using ep0 maxpacket: 16 [ 1589.084020][T15288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1589.100828][T15288] audit: audit_lost=20787 audit_rate_limit=0 audit_backlog_limit=64 [ 1589.119838][T15288] audit: backlog limit exceeded [ 1589.120569][T18633] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1589.125056][T15288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1589.140319][T18633] audit: audit_lost=20788 audit_rate_limit=0 audit_backlog_limit=64 [ 1589.150093][ T30] audit: type=1400 audit(1742657011.904:210679): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=18629 comm="syz.1.3520" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1589.169798][ C0] vkms_vblank_simulate: vblank timer overrun [ 1589.188164][ T5877] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1589.196169][ T5875] usb 7-1: 0:2 : does not exist [ 1589.218989][ T5875] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1589.237559][ T1206] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1589.249162][ T1206] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1589.270600][ T1206] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1589.286952][ T1206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1589.296396][ T1206] usb 6-1: SerialNumber: syz [ 1589.305975][ T5875] usb 7-1: USB disconnect, device number 2 [ 1589.524574][ T1206] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 1589.536374][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 1589.544925][ T1206] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 1589.552645][ T1206] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 1589.573067][ T5877] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1589.582298][ T5877] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1589.598766][ T1206] usb 6-1: USB disconnect, device number 22 [ 1589.607819][ T5877] usb 2-1: can't read configurations, error -71 [ 1590.563088][T18645] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3523'. [ 1591.788906][T18657] 9pnet_fd: Insufficient options for proto=fd [ 1591.830323][T18652] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3527'. [ 1592.800801][T18665] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3530'. [ 1593.000050][ T5875] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1593.089786][T13758] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1593.169450][ T5875] usb 6-1: device descriptor read/64, error -71 [ 1593.301427][T13758] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1593.318610][T13758] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.339245][T13758] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1593.349086][T13758] usb 7-1: config 1 has no interface number 0 [ 1593.364873][T13758] usb 7-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1593.376031][T13758] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1593.394833][T13758] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1593.404675][T13758] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.412782][T13758] usb 7-1: Product: syz [ 1593.417220][T13758] usb 7-1: Manufacturer: syz [ 1593.459623][ T5875] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1593.477507][T13758] usb 7-1: SerialNumber: syz [ 1593.619872][ T5875] usb 6-1: device descriptor read/64, error -71 [ 1593.741396][ T5875] usb usb6-port1: attempt power cycle [ 1593.799504][ T5909] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1593.954681][ T30] kauditd_printk_skb: 2421 callbacks suppressed [ 1593.954702][ T30] audit: type=1400 audit(1742657016.914:212762): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18680 comm="syz.0.3537" name="newroot" dev="tmpfs" ino=2 [ 1593.981509][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 1593.999724][ T5909] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1594.027907][ T5909] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1594.037018][ T5909] usb 2-1: can't read configurations, error -71 [ 1594.048383][ T30] audit: type=1400 audit(1742657016.944:212763): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18680 comm="syz.0.3537" name="/" dev="devtmpfs" ino=1 [ 1594.089586][ T5875] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1594.107750][ T30] audit: type=1400 audit(1742657016.944:212764): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=18680 comm="syz.0.3537" name="raw-gadget" dev="devtmpfs" ino=820 [ 1594.148809][ T30] audit: type=1400 audit(1742657016.944:212765): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=18680 comm="syz.0.3537" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1594.169820][ T5875] usb 6-1: device descriptor read/8, error -71 [ 1594.197821][ T30] audit: type=1400 audit(1742657016.944:212766): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=18680 comm="syz.0.3537" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1594.248165][ T30] audit: type=1400 audit(1742657016.944:212767): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=18675 comm="syz.1.3535" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1594.299067][ T30] audit: type=1400 audit(1742657016.954:212768): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=18675 comm="syz.1.3535" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1594.349511][ T30] audit: type=1400 audit(1742657016.954:212769): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18675 comm="syz.1.3535" name="newroot" dev="tmpfs" ino=2 [ 1594.389469][ T30] audit: type=1400 audit(1742657016.954:212770): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18675 comm="syz.1.3535" name="/" dev="devtmpfs" ino=1 [ 1594.416599][ T30] audit: type=1400 audit(1742657016.954:212771): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=18675 comm="syz.1.3535" name="vsock" dev="devtmpfs" ino=1308 [ 1594.417977][T18682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1594.436133][ C0] vkms_vblank_simulate: vblank timer overrun [ 1594.439581][ T5875] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1594.484723][T18682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1594.510324][ T5875] usb 6-1: device descriptor read/8, error -71 [ 1594.629885][ T5875] usb usb6-port1: unable to enumerate USB device [ 1594.665645][T13758] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1594.689040][T13758] usb 7-1: USB disconnect, device number 3 [ 1595.050527][T18689] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1595.999916][T18697] ALSA: mixer_oss: invalid OSS volume '' [ 1596.021899][T18696] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3543'. [ 1596.047335][T18696] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1596.259507][T18698] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 1596.397486][T18700] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3543'. [ 1596.668187][T18703] syz_tun: entered promiscuous mode [ 1596.684256][T18703] syz_tun: left promiscuous mode [ 1596.949540][T13758] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1597.111773][T13758] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1597.153832][T13758] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1597.186609][T13758] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1597.241496][T13758] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1597.261629][T13758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.284983][T18707] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1597.314925][T13758] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1597.621874][T13758] usb 2-1: invalid MIDI in EP 0 [ 1597.647154][ T1206] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1598.405067][T13758] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1598.419452][ T1206] usb 6-1: Using ep0 maxpacket: 32 [ 1598.420390][T13758] usb 2-1: USB disconnect, device number 105 [ 1598.442846][ T1206] usb 6-1: config 0 has an invalid interface number: 15 but max is 0 [ 1598.478959][ T1206] usb 6-1: config 0 has no interface number 0 [ 1598.522636][ T1206] usb 6-1: New USB device found, idVendor=041e, idProduct=3f02, bcdDevice= d.71 [ 1598.539299][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.548795][ T1206] usb 6-1: Product: syz [ 1598.561922][ T1206] usb 6-1: Manufacturer: syz [ 1598.566590][ T1206] usb 6-1: SerialNumber: syz [ 1598.586391][ T1206] usb 6-1: config 0 descriptor?? [ 1598.923938][T18739] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1599.004632][ T30] kauditd_printk_skb: 3468 callbacks suppressed [ 1599.004680][ T30] audit: type=1400 audit(1742657021.894:215757): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18735 comm="syz.2.3553" name="newroot" dev="tmpfs" ino=2 [ 1599.222753][T17022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1599.238599][T16060] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1599.273306][T17022] audit: audit_lost=21063 audit_rate_limit=0 audit_backlog_limit=64 [ 1599.281977][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1599.288642][ C1] audit: audit_lost=21064 audit_rate_limit=0 audit_backlog_limit=64 [ 1599.296714][ C1] audit: backlog limit exceeded [ 1599.302101][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1599.308647][ C1] audit: audit_lost=21065 audit_rate_limit=0 audit_backlog_limit=64 [ 1599.316689][ C1] audit: backlog limit exceeded [ 1599.553892][ T1206] usb 6-1: unknown interface protocol 0xa8, assuming v1 [ 1599.564032][ T1206] usb 6-1: cannot find UAC_HEADER [ 1599.580342][ T1206] snd-usb-audio 6-1:0.15: probe with driver snd-usb-audio failed with error -22 [ 1599.591208][ T1206] usb 6-1: USB disconnect, device number 27 [ 1600.095056][T18746] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1600.595974][T13758] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1600.789536][T13758] usb 2-1: Using ep0 maxpacket: 32 [ 1600.817223][T13758] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1600.829411][T13758] usb 2-1: config 0 has no interface number 0 [ 1600.851127][T13758] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1600.860533][T13758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.868579][T13758] usb 2-1: Product: syz [ 1600.872849][T13758] usb 2-1: Manufacturer: syz [ 1600.877498][T13758] usb 2-1: SerialNumber: syz [ 1600.884788][T13758] usb 2-1: config 0 descriptor?? [ 1600.893288][T13758] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1601.116351][T13758] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1601.144403][T13758] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1602.076163][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1602.103171][ T5875] usb 2-1: USB disconnect, device number 106 [ 1602.120969][ T5875] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1602.137325][ T5875] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1602.156921][ T5875] quatech2 2-1:0.51: device disconnected [ 1604.013728][T15288] audit_log_start: 1062 callbacks suppressed [ 1604.013751][T15288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1604.029519][ T30] audit: type=1400 audit(1742657026.924:216547): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=18755 comm="syz.5.3557" opid=18755 ocomm="syz.5.3557" [ 1604.109514][T15288] audit: audit_lost=21158 audit_rate_limit=0 audit_backlog_limit=64 [ 1604.129523][T18761] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1604.136145][T18761] audit: audit_lost=21159 audit_rate_limit=0 audit_backlog_limit=64 [ 1604.146581][T18760] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1604.153343][ T30] audit: type=1400 audit(1742657026.944:216548): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15288 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1604.189434][T15288] audit: backlog limit exceeded [ 1604.212049][T18756] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1604.218634][T18756] audit: audit_lost=21160 audit_rate_limit=0 audit_backlog_limit=64 [ 1605.190839][T18764] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1605.303432][T18771] team_slave_0: entered promiscuous mode [ 1666.064975][ C1] audit_log_start: 1296 callbacks suppressed [ 1666.065004][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1666.077628][ C1] audit: audit_lost=21468 audit_rate_limit=0 audit_backlog_limit=64 [ 1666.085673][ C1] audit: backlog limit exceeded [ 1666.565708][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1666.572361][ C1] audit: audit_lost=21469 audit_rate_limit=0 audit_backlog_limit=64 [ 1666.580410][ C1] audit: backlog limit exceeded [ 1667.066409][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1667.073040][ C1] audit: audit_lost=21470 audit_rate_limit=0 audit_backlog_limit=64 [ 1667.081078][ C1] audit: backlog limit exceeded [ 1668.568414][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1672.574709][ C1] audit_log_start: 11 callbacks suppressed [ 1672.574735][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1672.587161][ C1] audit: audit_lost=21475 audit_rate_limit=0 audit_backlog_limit=64 [ 1672.595217][ C1] audit: backlog limit exceeded [ 1673.575675][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1673.582343][ C1] audit: audit_lost=21476 audit_rate_limit=0 audit_backlog_limit=64 [ 1673.590431][ C1] audit: backlog limit exceeded [ 1675.077317][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1675.083959][ C1] audit: audit_lost=21477 audit_rate_limit=0 audit_backlog_limit=64 [ 1675.092032][ C1] audit: backlog limit exceeded [ 1675.577537][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1678.582149][ C1] audit_log_start: 8 callbacks suppressed [ 1678.582177][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1678.594536][ C1] audit: audit_lost=21481 audit_rate_limit=0 audit_backlog_limit=64 [ 1678.602580][ C1] audit: backlog limit exceeded [ 1678.607883][ T25] sched: DL replenish lagged too much [ 1679.583972][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1679.590624][ C1] audit: audit_lost=21482 audit_rate_limit=0 audit_backlog_limit=64 [ 1679.598678][ C1] audit: backlog limit exceeded [ 1680.084855][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1680.091506][ C1] audit: audit_lost=21483 audit_rate_limit=0 audit_backlog_limit=64 [ 1680.099552][ C1] audit: backlog limit exceeded [ 1681.085482][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1683.589387][ C1] audit_log_start: 11 callbacks suppressed [ 1683.589413][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1683.601866][ C1] audit: audit_lost=21488 audit_rate_limit=0 audit_backlog_limit=64 [ 1683.609919][ C1] audit: backlog limit exceeded [ 1684.090215][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1684.096813][ C1] audit: audit_lost=21489 audit_rate_limit=0 audit_backlog_limit=64 [ 1684.104887][ C1] audit: backlog limit exceeded [ 1684.590761][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1684.597353][ C1] audit: audit_lost=21490 audit_rate_limit=0 audit_backlog_limit=64 [ 1684.605522][ C1] audit: backlog limit exceeded [ 1685.091095][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1689.096009][ C1] audit_log_start: 11 callbacks suppressed [ 1689.096035][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1689.108552][ C1] audit: audit_lost=21495 audit_rate_limit=0 audit_backlog_limit=64 [ 1689.116613][ C1] audit: backlog limit exceeded [ 1689.596257][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1689.602875][ C1] audit: audit_lost=21496 audit_rate_limit=0 audit_backlog_limit=64 [ 1689.610913][ C1] audit: backlog limit exceeded [ 1690.096834][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1690.103480][ C1] audit: audit_lost=21497 audit_rate_limit=0 audit_backlog_limit=64 [ 1690.111523][ C1] audit: backlog limit exceeded [ 1690.597697][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1694.603259][ C1] audit_log_start: 11 callbacks suppressed [ 1694.603286][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1694.615702][ C1] audit: audit_lost=21502 audit_rate_limit=0 audit_backlog_limit=64 [ 1694.623740][ C1] audit: backlog limit exceeded [ 1695.103577][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1695.110198][ C1] audit: audit_lost=21503 audit_rate_limit=0 audit_backlog_limit=64 [ 1695.118210][ C1] audit: backlog limit exceeded [ 1696.606080][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1696.612694][ C1] audit: audit_lost=21504 audit_rate_limit=0 audit_backlog_limit=64 [ 1696.620748][ C1] audit: backlog limit exceeded [ 1697.106400][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1700.110487][ C1] audit_log_start: 8 callbacks suppressed [ 1700.110512][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1700.122858][ C1] audit: audit_lost=21508 audit_rate_limit=0 audit_backlog_limit=64 [ 1700.130938][ C1] audit: backlog limit exceeded [ 1700.611192][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1700.617775][ C1] audit: audit_lost=21509 audit_rate_limit=0 audit_backlog_limit=64 [ 1700.625836][ C1] audit: backlog limit exceeded [ 1701.111866][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1701.118443][ C1] audit: audit_lost=21510 audit_rate_limit=0 audit_backlog_limit=64 [ 1701.126485][ C1] audit: backlog limit exceeded [ 1702.614459][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1705.618150][ C1] audit_log_start: 17 callbacks suppressed [ 1705.618178][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1705.630681][ C1] audit: audit_lost=21517 audit_rate_limit=0 audit_backlog_limit=64 [ 1705.638799][ C1] audit: backlog limit exceeded [ 1706.618648][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1706.625289][ C1] audit: audit_lost=21518 audit_rate_limit=0 audit_backlog_limit=64 [ 1706.633347][ C1] audit: backlog limit exceeded [ 1707.119227][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1707.125865][ C1] audit: audit_lost=21519 audit_rate_limit=0 audit_backlog_limit=64 [ 1707.133935][ C1] audit: backlog limit exceeded [ 1708.120794][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1710.939387][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1710.946429][ C1] rcu: 0-...0: (1 GPs behind) idle=bddc/1/0x4000000000000000 softirq=87995/87998 fqs=1053 [ 1710.958569][ C1] rcu: hardirqs softirqs csw/system [ 1710.965074][ C1] rcu: number: 0 0 0 [ 1710.971540][ C1] rcu: cputime: 0 0 0 ==> 52500(ms) [ 1710.979380][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12/1:b..l [ 1710.987173][ C1] rcu: (detected by 1, t=10505 jiffies, g=98957, q=179 ncpus=2) [ 1710.994938][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1710.994979][ C0] NMI backtrace for cpu 0 [ 1710.994994][ C0] CPU: 0 UID: 0 PID: 18767 Comm: modprobe Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1710.995014][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1710.995027][ C0] RIP: 0010:kasan_check_range+0x7/0x290 [ 1710.995061][ C0] Code: 2f b6 e3 ff 90 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 41 57 <41> 56 41 54 53 b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37 49 39 [ 1710.995076][ C0] RSP: 0018:ffffc900000078d8 EFLAGS: 00000046 [ 1710.995091][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff819ceb76 [ 1710.995103][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff94517840 [ 1710.995124][ C0] RBP: 71a5d68fa1cc311c R08: ffffffff9451784f R09: 1ffffffff28a2f09 [ 1710.995138][ C0] R10: dffffc0000000000 R11: fffffbfff28a2f0a R12: ffff888030ba9e00 [ 1710.995151][ C0] R13: ffff888030ba9e00 R14: 1ffff11006175527 R15: 0000000000000000 [ 1710.995165][ C0] FS: 00007f9b91da3380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1710.995180][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1710.995193][ C0] CR2: 000000110c38aac9 CR3: 0000000062e8e000 CR4: 00000000003526f0 [ 1710.995214][ C0] DR0: 0000000000001000 DR1: 00000000ffffffff DR2: 0000000000000002 [ 1710.995225][ C0] DR3: 8000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1710.995237][ C0] Call Trace: [ 1710.995248][ C0] [ 1710.995257][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1710.995287][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1710.995313][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1710.995342][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1710.995363][ C0] ? nmi_handle+0x14f/0x5a0 [ 1710.995388][ C0] ? nmi_handle+0x2a/0x5a0 [ 1710.995429][ C0] ? kasan_check_range+0x7/0x290 [ 1710.995455][ C0] ? default_do_nmi+0x63/0x160 [ 1710.995483][ C0] ? exc_nmi+0x123/0x1f0 [ 1710.995501][ C0] ? end_repeat_nmi+0xf/0x53 [ 1710.995529][ C0] ? __lock_acquire+0x12b6/0x2100 [ 1710.995553][ C0] ? kasan_check_range+0x7/0x290 [ 1710.995579][ C0] ? kasan_check_range+0x7/0x290 [ 1710.995605][ C0] ? kasan_check_range+0x7/0x290 [ 1710.995630][ C0] [ 1710.995636][ C0] [ 1710.995643][ C0] __lock_acquire+0x12b6/0x2100 [ 1710.995673][ C0] lock_acquire+0x1ed/0x550 [ 1710.995696][ C0] ? debug_object_activate+0x17f/0x580 [ 1710.995725][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1710.995749][ C0] ? __lock_acquire+0x1397/0x2100 [ 1710.995780][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 1710.995803][ C0] ? debug_object_activate+0x17f/0x580 [ 1710.995828][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1710.995855][ C0] debug_object_activate+0x17f/0x580 [ 1710.995880][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1710.995901][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1710.995925][ C0] ? advance_sched+0xa02/0xca0 [ 1710.995951][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 1710.995972][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1710.995996][ C0] enqueue_hrtimer+0x30/0x3c0 [ 1710.996016][ C0] __hrtimer_run_queues+0x6cb/0xd30 [ 1710.996040][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1710.996057][ C0] ? sched_clock+0x4a/0x70 [ 1710.996076][ C0] ? read_tsc+0x9/0x20 [ 1710.996093][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1710.996120][ C0] hrtimer_interrupt+0x403/0xa40 [ 1710.996146][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1710.996174][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1710.996204][ C0] [ 1710.996210][ C0] [ 1710.996217][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1710.996242][ C0] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 1710.996271][ C0] Code: c9 50 e8 a9 2d 0c 00 48 83 c4 08 4c 89 f7 e8 fd 39 00 00 e9 de 04 00 00 4c 89 f7 e8 d0 50 73 0a e8 6b 08 39 00 fb 48 8b 5d c0 <48> 8d bb 08 16 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 1710.996287][ C0] RSP: 0018:ffffc900041cf0c8 EFLAGS: 00000282 [ 1710.996302][ C0] RAX: 304946934b25e100 RBX: ffff888030ba9e00 RCX: ffffffff9a61e903 [ 1710.996315][ C0] RDX: dffffc0000000000 RSI: ffffffff8c2ab3a0 RDI: ffffffff8c802ce0 [ 1710.996328][ C0] RBP: ffffc900041cf110 R08: ffffffff903bd177 R09: 1ffffffff2077a2e [ 1710.996341][ C0] R10: dffffc0000000000 R11: fffffbfff2077a2f R12: 1ffff110170c7ebe [ 1710.996354][ C0] R13: dffffc0000000000 R14: ffff8880b863e7c0 R15: ffff8880b863f5f0 [ 1710.996374][ C0] ? finish_task_switch+0x1e5/0x870 [ 1710.996403][ C0] __schedule+0x18c4/0x4c40 [ 1710.996436][ C0] ? __pfx___schedule+0x10/0x10 [ 1710.996461][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1710.996487][ C0] ? preempt_schedule+0xe1/0xf0 [ 1710.996509][ C0] preempt_schedule_common+0x84/0xd0 [ 1710.996534][ C0] preempt_schedule+0xe1/0xf0 [ 1710.996556][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 1710.996580][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1710.996605][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1710.996630][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1710.996656][ C0] _raw_spin_unlock_irqrestore+0x130/0x140 [ 1710.996681][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1710.996707][ C0] ? autoremove_wake_function+0x37/0x110 [ 1710.996731][ C0] __wake_up_common_lock+0x18c/0x1e0 [ 1710.996759][ C0] audit_log_end+0x1c8/0x250 [ 1710.996781][ C0] common_lsm_audit+0xd3b/0x1de0 [ 1710.996801][ C0] ? mark_lock+0x9a/0x360 [ 1710.996828][ C0] ? __pfx_common_lsm_audit+0x10/0x10 [ 1710.996847][ C0] ? __lock_acquire+0x1397/0x2100 [ 1710.996873][ C0] ? mark_lock+0x9a/0x360 [ 1710.996899][ C0] ? __lock_acquire+0x1397/0x2100 [ 1710.996924][ C0] smack_log+0x469/0x5c0 [ 1710.996948][ C0] ? __pfx_smack_log+0x10/0x10 [ 1710.996968][ C0] ? smk_access+0x4ab/0x4e0 [ 1710.996991][ C0] smk_tskacc+0x300/0x370 [ 1710.997013][ C0] smack_inode_permission+0x2db/0x380 [ 1710.997038][ C0] ? __pfx_smack_inode_permission+0x10/0x10 [ 1710.997064][ C0] ? generic_permission+0x316/0x680 [ 1710.997087][ C0] security_inode_permission+0x101/0x320 [ 1710.997115][ C0] link_path_walk+0x891/0xea0 [ 1710.997140][ C0] path_lookupat+0xa9/0x450 [ 1710.997162][ C0] filename_lookup+0x2a3/0x670 [ 1710.997181][ C0] ? __virt_addr_valid+0x183/0x530 [ 1710.997217][ C0] ? __pfx_filename_lookup+0x10/0x10 [ 1710.997246][ C0] ? strncpy_from_user+0x146/0x270 [ 1710.997271][ C0] ? getname_flags+0x1e3/0x540 [ 1710.997290][ C0] user_path_at+0x3a/0x60 [ 1710.997311][ C0] __se_sys_statfs+0xda/0x220 [ 1710.997335][ C0] ? __pfx___se_sys_statfs+0x10/0x10 [ 1710.997358][ C0] ? __might_fault+0xaa/0x120 [ 1710.997379][ C0] ? rcu_is_watching+0x15/0xb0 [ 1710.997397][ C0] ? __rseq_handle_notify_resume+0x34d/0x14e0 [ 1710.997433][ C0] ? do_syscall_64+0x100/0x230 [ 1710.997462][ C0] ? do_syscall_64+0xb6/0x230 [ 1710.997488][ C0] do_syscall_64+0xf3/0x230 [ 1710.997515][ C0] ? clear_bhb_loop+0x35/0x90 [ 1710.997540][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.997564][ C0] RIP: 0033:0x7f9b91ef768a [ 1710.997581][ C0] Code: c8 ff c3 b8 03 01 00 00 0f 05 48 3d 00 f0 ff ff 76 10 48 8b 15 8f a7 0d 00 f7 d8 64 89 02 48 83 c8 ff c3 b8 89 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 6f a7 0d 00 f7 d8 64 89 02 48 83 [ 1710.997595][ C0] RSP: 002b:00007fff2d9bc448 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 1710.997612][ C0] RAX: ffffffffffffffda RBX: 00007f9b91e1c4f8 RCX: 00007f9b91ef768a [ 1710.997625][ C0] RDX: ffffffffffffff80 RSI: 00007fff2d9bc4c0 RDI: 00007f9b91e1472a [ 1710.997639][ C0] RBP: 00007f9b91e1472a R08: 0000000000000000 R09: 000000000000000d [ 1710.997650][ C0] R10: 00007fff2d9bc270 R11: 0000000000000246 R12: 00007fff2d9bc4c0 [ 1710.997662][ C0] R13: 00007fff2d9bc638 R14: 00007fff2d9bc660 R15: 0000000000000000 [ 1710.997680][ C0] [ 1710.997973][ C1] task:kworker/u8:0 state:R running task stack:19352 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1711.755505][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1711.763412][ C1] Call Trace: [ 1711.766723][ C1] [ 1711.769682][ C1] __schedule+0x18bc/0x4c40 [ 1711.774273][ C1] ? __pfx___schedule+0x10/0x10 [ 1711.779238][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1711.785279][ C1] ? kasan_save_track+0x51/0x80 [ 1711.790189][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 1711.795524][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 1711.800681][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1711.806441][ C1] ? mark_lock+0x9a/0x360 [ 1711.810827][ C1] irqentry_exit+0x5e/0x90 [ 1711.815289][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1711.821311][ C1] RIP: 0010:lock_release+0xb8/0xa30 [ 1711.826555][ C1] Code: 08 0f 83 fe 05 00 00 89 c3 48 89 d8 48 c1 e8 06 48 8d 3c c5 70 d1 3b 90 be 08 00 00 00 e8 e0 9f 89 00 48 0f a3 1d e8 d6 9e 0e <73> 16 e8 e1 43 0a 00 84 c0 75 0d 80 3d 3d ed 88 0e 00 0f 84 fc 05 [ 1711.846210][ C1] RSP: 0018:ffffc900001177e0 EFLAGS: 00000257 [ 1711.852314][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff819cfa80 [ 1711.860441][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff903bd170 [ 1711.868459][ C1] RBP: ffffc90000117910 R08: ffffffff903bd177 R09: 1ffffffff2077a2e [ 1711.876471][ C1] R10: dffffc0000000000 R11: fffffbfff2077a2f R12: 1ffff92000022f08 [ 1711.884471][ C1] R13: ffffffff8bc782fe R14: dffffc0000000000 R15: dffffc0000000000 [ 1711.892481][ C1] ? batadv_iv_ogm_schedule+0x41e/0x10a0 [ 1711.898170][ C1] ? lock_release+0xb0/0xa30 [ 1711.902814][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1711.907880][ C1] ? batadv_iv_ogm_schedule+0x41e/0x10a0 [ 1711.913551][ C1] ? __pfx_lock_release+0x10/0x10 [ 1711.918620][ C1] ? batadv_tvlv_container_ogm_append+0x321/0x4f0 [ 1711.925106][ C1] ? batadv_tvlv_container_ogm_append+0x46a/0x4f0 [ 1711.931580][ C1] batadv_iv_ogm_schedule+0x6f3/0x10a0 [ 1711.937116][ C1] ? batadv_iv_ogm_schedule+0x41e/0x10a0 [ 1711.942824][ C1] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 1711.948762][ C1] ? batadv_send_skb_packet+0x439/0x690 [ 1711.954382][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x703/0x810 [ 1711.961511][ C1] ? process_scheduled_works+0x9c6/0x18e0 [ 1711.967282][ C1] process_scheduled_works+0xabe/0x18e0 [ 1711.972902][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1711.978926][ C1] ? assign_work+0x364/0x3d0 [ 1711.983551][ C1] worker_thread+0x870/0xd30 [ 1711.988196][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1711.993270][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1711.998424][ C1] kthread+0x7a9/0x920 [ 1712.002544][ C1] ? __pfx_kthread+0x10/0x10 [ 1712.007177][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1712.012334][ C1] ? __pfx_kthread+0x10/0x10 [ 1712.016957][ C1] ? __pfx_kthread+0x10/0x10 [ 1712.021591][ C1] ? __pfx_kthread+0x10/0x10 [ 1712.026225][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1712.031475][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1712.036714][ C1] ? __pfx_kthread+0x10/0x10 [ 1712.041365][ C1] ret_from_fork+0x4b/0x80 [ 1712.045820][ C1] ? __pfx_kthread+0x10/0x10 [ 1712.050472][ C1] ret_from_fork_asm+0x1a/0x30 [ 1712.055379][ C1] [ 1712.058434][ C1] rcu: rcu_preempt kthread starved for 5240 jiffies! g98957 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1712.069572][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1712.079590][ C1] rcu: RCU grace-period kthread stack dump: [ 1712.085523][ C1] task:rcu_preempt state:R running task stack:25784 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1712.099175][ C1] Call Trace: [ 1712.102494][ C1] [ 1712.105460][ C1] __schedule+0x18bc/0x4c40 [ 1712.110482][ C1] ? __pfx___schedule+0x10/0x10 [ 1712.115380][ C1] ? __pfx_lock_release+0x10/0x10 [ 1712.120544][ C1] ? __pfx___mod_timer+0x10/0x10 [ 1712.125525][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1712.131900][ C1] ? schedule+0x90/0x320 [ 1712.136185][ C1] schedule+0x14b/0x320 [ 1712.140394][ C1] schedule_timeout+0x15a/0x290 [ 1712.145288][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1712.150696][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1712.156035][ C1] ? prepare_to_swait_event+0x330/0x350 [ 1712.161625][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 1712.166531][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1712.171792][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1712.177997][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1712.183328][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1712.189271][ C1] ? finish_swait+0xd4/0x1e0 [ 1712.193902][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1712.199144][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 1712.203784][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1712.209054][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1712.215019][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1712.220106][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1712.225348][ C1] kthread+0x7a9/0x920 [ 1712.229487][ C1] ? __pfx_kthread+0x10/0x10 [ 1712.234150][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1712.239495][ C1] ? __pfx_kthread+0x10/0x10 [ 1712.244809][ C1] ? __pfx_kthread+0x10/0x10 [ 1712.249482][ C1] ? __pfx_kthread+0x10/0x10 [ 1712.254119][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1712.259373][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1712.264620][ C1] ? __pfx_kthread+0x10/0x10 [ 1712.269250][ C1] ret_from_fork+0x4b/0x80 [ 1712.273721][ C1] ? __pfx_kthread+0x10/0x10 [ 1712.278390][ C1] ret_from_fork_asm+0x1a/0x30 [ 1712.283222][ C1] [ 1712.286295][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1712.292662][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1712.303107][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1712.313194][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 1712.318515][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d5 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 65 5e 88 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 1712.338216][ C1] RSP: 0018:ffffc900001b7d08 EFLAGS: 00000246 [ 1712.344353][ C1] RAX: ffff88801d6f1e00 RBX: ffff888020e87864 RCX: 00000000027412e9 [ 1712.352368][ C1] RDX: 0000000000000001 RSI: ffff888020e87800 RDI: ffff888020e87864 [ 1712.360382][ C1] RBP: 000000000003a938 R08: ffff8880b873799b R09: 1ffff110170e6f33 [ 1712.368491][ C1] R10: dffffc0000000000 R11: ffffffff8c016010 R12: ffff888140fda800 [ 1712.376496][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f3261a0 [ 1712.384524][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1712.393490][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1712.400108][ C1] CR2: 00007f6196af4b6d CR3: 000000003561a000 CR4: 00000000003526f0 [ 1712.408147][ C1] DR0: 0000000000001000 DR1: 00000000ffffffff DR2: 0000000000000002 [ 1712.416157][ C1] DR3: 8000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1712.424184][ C1] Call Trace: [ 1712.427500][ C1] [ 1712.430410][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1712.436798][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 1712.442519][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1712.448372][ C1] ? seqcount_lockdep_reader_access+0x1c6/0x220 [ 1712.454663][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1712.461315][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1712.467607][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 1712.473029][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1712.478711][ C1] ? update_process_times+0x242/0x2f0 [ 1712.484130][ C1] ? tick_nohz_handler+0x37c/0x500 [ 1712.489293][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1712.494798][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 1712.500221][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1712.506013][ C1] ? read_tsc+0x9/0x20 [ 1712.510636][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1712.516749][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 1712.521922][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 1712.528141][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1712.533999][ C1] [ 1712.536955][ C1] [ 1712.539912][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1712.546201][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 1712.551887][ C1] ? acpi_safe_halt+0x21/0x30 [ 1712.556604][ C1] acpi_idle_enter+0xe4/0x140 [ 1712.561320][ C1] cpuidle_enter_state+0x109/0x470 [ 1712.566469][ C1] ? __pfx_menu_select+0x10/0x10 [ 1712.571461][ C1] cpuidle_enter+0x5d/0xa0 [ 1712.575924][ C1] do_idle+0x372/0x5c0 [ 1712.580036][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1712.586435][ C1] ? __pfx_do_idle+0x10/0x10 [ 1712.591078][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1712.596334][ C1] cpu_startup_entry+0x42/0x60 [ 1712.601178][ C1] start_secondary+0x102/0x110 [ 1712.605991][ C1] common_startup_64+0x13e/0x147 [ 1712.610975][ C1] [ 1712.615250][ C1] audit_log_start: 14 callbacks suppressed [ 1712.615274][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1712.627681][ C1] audit: audit_lost=21525 audit_rate_limit=0 audit_backlog_limit=64 [ 1712.635732][ C1] audit: backlog limit exceeded [ 1712.640791][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1712.647350][ C1] audit: audit_lost=21526 audit_rate_limit=0 audit_backlog_limit=64 [ 1712.655556][ C1] audit: backlog limit exceeded [ 1712.660843][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1712.667408][ C1] audit: audit_lost=21527 audit_rate_limit=0 audit_backlog_limit=64 [ 1712.675713][ C1] audit: backlog limit exceeded [ 1712.680941][ C1] audit: audit_backlog=65 > audit_backlog_limit=64