last executing test programs: 10m42.203749422s ago: executing program 3 (id=1661): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='kvm_unmap_hva_range\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) 10m40.074798485s ago: executing program 3 (id=1667): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='nv\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="316f825a3d29f96a392ea917017b4cd300000000bee700d6dd1fb41a20baf7f7343067fd40cdd4f16742e94b000000005d0200b7f3028100ae8180db94b9de7456ae62b0e61861f615947de10ae3c4fa199fb5fe7766a0842912179154a96fa88e161d861e77a486e10d1d1d0b90c8997e6917226fe4bb5d77e85706336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d186ac9b2382a75ac68920ca3d542aece1ba7920a8f39b270458224e74a22fa1db2f647b55a4f113a476c5902ef", 0xd1}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2", 0x76}], 0x2}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b810648f9", 0x21}], 0x1}}], 0x2, 0x0) 10m38.118990082s ago: executing program 3 (id=1673): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000000c0), 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='memory.current\x00', 0x275a, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, &(0x7f0000000100)=""/87}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x10040000) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{'acl'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '}'}}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000400)={0x8, 0x4000, 0x0, r1, 0x2}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r8, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x40}}, 0x0) 10m37.837460765s ago: executing program 3 (id=1677): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000001800)='./file0/../file0/file0\x00', 0x89901) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0xa, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0xe71b, 0x100, 0x0, 0x8f}, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000004900)=@base={0xa, 0xbf, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 10m36.868705246s ago: executing program 3 (id=1680): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x20000, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000005c0), 0x10) read(r4, &(0x7f00000027c0)=""/4062, 0xfde) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f00000006c0)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f00000002c0)=@canfd={{0x1}, 0x12, 0x2, 0x0, 0x0, "410830ab2038be1948c05740a65d6c14784fe6af764c1d67c6eb256f06bd2815bd8bc6f1e65b1c81102134d28ec3836251d496cddb5150406966d22789db3e7a"}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x1d, r5, 0x0, {0x1, 0x0, 0x1}, 0x1}, 0x18, &(0x7f0000000340)={&(0x7f00000000c0)="e73e70897173371ec94c43a17833b033d61777bd7c2d8cdaa0808c", 0x1b}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000001200)={0x1d, r7}, 0x18) connect$can_j1939(r6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 10m36.527034s ago: executing program 3 (id=1682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32], 0x50) close(0xffffffffffffffff) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000005540)=ANY=[@ANYBLOB="3001000016000100000000000000000000000000000000000000000000000000fc0200000000000000000000000000004e2000"/63, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ffffffff00000000000000000000000005000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000010000000000000000000000000000000a00000000000000000000000500000005"], 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 10m35.405237863s ago: executing program 32 (id=1682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32], 0x50) close(0xffffffffffffffff) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000005540)=ANY=[@ANYBLOB="3001000016000100000000000000000000000000000000000000000000000000fc0200000000000000000000000000004e2000"/63, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ffffffff00000000000000000000000005000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000010000000000000000000000000000000a00000000000000000000000500000005"], 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 4m37.127806791s ago: executing program 5 (id=2937): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000001500)=ANY=[], 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) ioperm(0xc210, 0x4, 0x5) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0xa, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 4m34.30634162s ago: executing program 5 (id=2944): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000340)=""/14) 4m34.203889607s ago: executing program 5 (id=2945): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x20040000) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffe00}]}, 0x3c}}, 0x0) 4m34.152702442s ago: executing program 5 (id=2946): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000003600)=""/120) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7b, 0x8ca00) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x8010, r2, 0x2) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) ioctl$VT_DISALLOCATE(r1, 0x5608) 4m31.696457655s ago: executing program 5 (id=2958): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r1 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xe000200f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0xffffffffffffff9e, 0x0, 0x0}, 0x48) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) write$cgroup_int(r6, &(0x7f0000000180)=0x3, 0x12) 4m30.712075133s ago: executing program 5 (id=2961): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc9, 0x5, 0x1, 0x8}}}}, 0xd) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x28}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f00000077c0), 0x400002c, 0x0) 4m29.96086748s ago: executing program 33 (id=2961): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc9, 0x5, 0x1, 0x8}}}}, 0xd) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x28}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f00000077c0), 0x400002c, 0x0) 1m42.475775582s ago: executing program 0 (id=3311): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, 0x1, 0x2, 0xf07, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0) 1m41.172636852s ago: executing program 0 (id=3315): r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x6, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000e80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000bc0)={0x288, r3, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @private0, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @private0, 0x2ce}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffff7f}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @private0, 0x894a}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff77c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x485c}, 0x4) syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "825ee50e"}]}}, 0x0}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x10d, 0xb, &(0x7f00000003c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty}}, {{@in=@local}, 0x0, @in6=@mcast1}}, 0xe8) r4 = syz_usb_connect$cdc_ncm(0x3, 0x13b, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x129, 0x2, 0x1, 0x87, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "ce6950"}, {0x5, 0x24, 0x0, 0x9962}, {0xd, 0x24, 0xf, 0x1, 0x779, 0x101, 0x5, 0xc}, {0x6, 0x24, 0x1a, 0x81}, [@mbim={0xc, 0x24, 0x1b, 0xfff2, 0x9, 0x0, 0x5, 0xe, 0xc}, @acm={0x4, 0x24, 0x2, 0x4}, @mdlm_detail={0xad, 0x24, 0x13, 0x3, "6b16390c8116e500761b0e5fde723a4affe45a84e939023999e22b75aae8751f56f114757dd829db653fe7235e5680e4af7b0800683a6e326c1b6e36e3739a3463ab1875423fbe5179b284dbe59e8b79f348d075fdfcce368acf81fff65c425735322687de7bc564f4c88b65f8d0909d51d32c3f812b1ae239078df4898f18bdaf89e27761e52a6dde8671c439fa670a722f73ed76d49690806895aa292c6ad2ec90918eede59aadee"}, @obex={0x5, 0x24, 0x15, 0x100}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x7, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x8, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xdf, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0xe0, 0x7}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x0, 0x6, 0x7f, 0x20}, 0x8d, &(0x7f0000000200)={0x5, 0xf, 0x8d, 0x5, [@ptm_cap={0x3}, @generic={0x5d, 0x10, 0xa, "92843ee4f67dc61a2578bcd32ee5217b841b525145b1227831b5b9ef0dfcf3bc4ab86b70d8381f693fb499236b9f014dcc425b198a940a0ae1a510c1f4fb103d9b0dfd88c5eaad9907bcb44f652442cdc1a78a42775fb1381b12"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x5, 0x401}, @ss_container_id={0x14, 0x10, 0x4, 0xf3, "8b45090adbb7d86f7c48eea7d6ff2fdb"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x6, 0x75, 0x3c6c}]}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x57, &(0x7f0000000300)=@string={0x57, 0x3, "11be0544ac742a175152235e7385ef76f71413222b7af82374cac19d1dd55c178152b3e686f1c7382c6d3480ab537cbe585cf06bd92eeb0cffde54c22d8d71c78a7a86feaed238e8434c4f27d35f1a87bd37e2b509"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44e}}, {0xfb, &(0x7f00000004c0)=@string={0xfb, 0x3, "43512ebcc16726668ba06b15df24c61860a613e9622d2506470875d22fb8e28be698fddb79ff9808c524ea87ce7cf4fbb509b4f257c467b308718d16c4e862c8ad0e0bef88a164cb6e24aa082fd9f65de69594abb5476b3c6ae2c9baef5b13b491caf6edcd883efbcc41bf5a26fb1cb93eab350d59b5f590b2cde786a01ccc3807aee677679d81af9cef861d6d6aef79b470d4f143d9de0f2fb081f92fc8a3fc3bd0530119d06f798d66ee9688333e787938303d28d7313c05b90436ecd14da42a8809fe14ca3770b14a54b8f18b5e3e639b6ea90102fd95b634fc17193c33a2268255ba3bcf2797a3c50e93c6ea926634df74ba7afe587839"}}]}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000780)={0x14, &(0x7f0000000640)={0x20, 0x7, 0xdc, {0xdc, 0x21, "59eb50a7ffe4ed8b528770a9eaebd929274eb01b1eaa8564fe7033f8d4f4b103a94836f874792998a111885ba3de9b5eb6852937d47a98a9471d48777a0166031255a9dee08fc73484ac5ccf4aeceaa9c65a811fa7805ec74965a555672f262d81265f344cd3fb09ab87f1f3defc190d02b53f86b0c3498ddb1e1baaf1a1f068f48329e2b7e5a1b6a32cb603a5f169b12ea7afe24e2aed8be7f8d42c4b96abe18b9331d6910d8a12624dcccb3b3cebbfb32772f0eab72a4f8ffd866376461094bc0e5c4d9592d15f092ef039e875a49ddd6e63b2da89c4c68ad8"}}, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x44, &(0x7f00000007c0)={0x20, 0x31, 0xaf, "1bb885e9a10f65b7b151d6cd206d459d7aff277282908a03577cc5f2b148ad2845ce99586a0615a8aef60925031666403f390e62712318465ea8fa0398dc02e254694a61e3e0f490586c76c36a3c04a31f9fc05a938c22e7addd5888525c38d08cfd27c9cb000fd633f93a492131bd83f6ecd2c25bea58ff88ea21997f4e944829768aab9c70a5f95c3a08eb1ae4d1d783aa1ff9b902e7a0dc7eaa3a3bb9783be4a085cfb2622f062ddde5f18fc6f1"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000900)={0x20, 0x80, 0x1c, {0x0, 0x2, 0x1, 0x9, 0x81, 0x14cb, 0x1, 0xc562, 0xa, 0x5e, 0x7, 0x8484}}, &(0x7f0000000940)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000980)={0x20, 0x83, 0x2}, &(0x7f00000009c0)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000a00)={0x20, 0x89, 0x2}}) 1m37.137616382s ago: executing program 0 (id=3325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, 0x1, 0x2, 0xf07, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0) 1m35.346633069s ago: executing program 0 (id=3329): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000080)='./file0/../file0/file0\x00', 0x0, 0x98d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) 1m34.650764554s ago: executing program 0 (id=3332): socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '+]\x8b\x89,'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40400c1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000008d00)=[{{&(0x7f00000024c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x80, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002540)="7c2c4b361886512ae5147b80fa9ef32ba0c83b3d0d956051523ff1e72558410ffb70402fa02ca195b1aff05b39b1663917a4b4242aa4632286d9ee632a2e0bed230172d0b6cbb70f5e1c8fd20a90957b8ab29ea7d929617b1797190e5309aac76b693847b8ef21cdf10cc2994a5b7d09afff763f5127ed6e7bcd11e24cc68b308f924c594421f5082fcc7b82b2d6bdb20ded5001eceda8437b927683e82dd6900f5830bc422bc147089e", 0xaa}, {&(0x7f0000002600)="bae8ae9277abc6e3cc10e15dfc23ccb3c19a6f3bee52cda1b2d4a100d3c801623a9c22f5696f613933bf5dccde1fcfa6d9a2e5439498ad4f502c8662c8f486809c254d5f76ea6028f44109a8600e53edc189d199463236605c7a1f98326816179000fd0eb95c40c4e25b488efebfbd7f5fbf06bb", 0x74}, {&(0x7f0000002680)="d6e49d0fbb0f5a68221682abb473cdcb47b70c6008bc328e66e1b7f184362622441b6ef9e236098e7e2489587721b08a9089cbff2cc5a616d08a5cd7", 0x3c}, {&(0x7f00000026c0)="dda0b4af62407f999264719894d6a3f409ef7ff3c8ec2fbad1cd937e24cf8125eec940695ba5aae4e74606223c2fee9372a210acb1914c2013b0be926c1124b21aa9a295d7f7c5cb08ef8b5e80a3f3bce929926701cb147226958bdaeb2c2b76c9b41c7068c783abacb8d38744dbd78409ee3ca8a151bc812841aa3dd0c55e99119f5567b44ed6b096", 0x89}, {&(0x7f0000002780)="0b137e82a24d7eb36d7597217a045b1122f33649ba57775dd27b71786be8ad6132fd4aee6de83b9f46ebffda5877a4f459187ed1a3bd936a1b4176ba19fc47142de98a84058acc0a1e791f71d19795903bdb77d162f89cfc8a2f2638ead273615bd4c0ed91d23303709c6b6bc1fee1cf0585c257c911e1b4b114a845a1b5c3b5fca07c159773010602a23167beeaa680940417d394359014a577dc8bf38234cd95c884a550932d62f034940e0f", 0xad}, {&(0x7f0000002840)="463ea2bf493d5a200bcd201f2ba446391c1eafcc8b440b1ead6f10d41f129a53c9eadb3a75d84a5f590e8eaebc81129589eba26bc7f1a18aec35d966f872430316d62831c92be345d86dcc3f33feff5c4bbd155f85ff4798e247c55a99c38643bd64443bc5cd0ec5bc0bb2bb9634ed09a4999ffd2c866758bace9f3e2c2c831c9d214f188f20bcdc9f1ab4013c9214c7eac288df0ad67cf037f9614660f39e2c57c18237d456b7536de66da5f26dbce2f0b1c6d8fa563aa5a5eb3e7a25ac5c44fba206f74eee4c539ca204818251ffdeddbee1031cab6c2942b0d366c50175ca7173c6", 0xe3}], 0x6, &(0x7f00000029c0)=[{0x10, 0x114, 0x3}, {0x38, 0x84, 0x7, "3d228c339fab6b67ee2d4fd3095a4dd17437efb5001e7af4a88d6c40f36e5e2c09a23890aa2e"}, {0x110, 0x116, 0x2, "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"}, {0x60, 0x110, 0xc, "30c5a529d7fff2dbbed5c4b3d82efae362f744b985352bad891c3bfb741446428ea07c31e0e478ecf1c2ea9705afb78e1f1f7f3b5a63b799c4d83bd85a52d3e305faa473bd3b02ca9e20a6"}, {0x10, 0x1, 0xb93}, {0x90, 0x103, 0xb93a, "585e0f841109f19319c6307bc09e1c975622797524270797ca6edcc0568fd5e6efaab0915e1f949c652daef29cb9f00cee301a7f3b9b5b3da04e82ccfecbe101396d643632cd22fa0bf316f786753bee015659f384d38a165ceeb75ebebf4199aa3138000a076fc5710b15c7311350204ce0631231dc64ab5aca6a42"}, {0x108, 0x0, 0xb, "ba127e08070c2b1d9dfa30454604245bbe5dab27d2359306911dd67061ee909acd2689b0716ee7325d77aa5d42ad031387e28848b5d72f346e8553a6a231aaa83b6783a56f9843b4c18b12a259d0a7148cd1c20317e77ffb8c5a9b1da4d56a70e0b64e047a20bb517253bb35d008bb7a495c7fe8c559db8bc16cadb08b11d3b20a2fe588c88bd3b268dd833f0e31b1766126a4aa97ae5411c02c708cf289dfd56fff68eaac560c4d8e89aee71f56ea64eb5efa938a49cfdfa0c0f17c797619bafb9a6edf5c2cc4f4df82ac7944a85ab7212c1fd4f81ee02fc2bacdd77d5474b4443d237d051b0821914e28eb77c974e991fd59b0a7"}, {0xa0, 0x114, 0x4, "7b33c682d42fbfe82d0432d86a50f3ad404108e98ada5d3c03a25df11f3800110729cc6b6ccad16cc7b3d0831b6f09b83c994b60036d08a0601cdb8b026642440f9cf63eccee1ce8da83129dac70ab16825d93360360d093d2c945e49a43c2ce95414d2c2ba462abaaf09a0755378ed24c017fc920499350642e7a0b94bc94a84440e2df0a1260c1ed1936"}], 0x400}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002e40)}, {&(0x7f0000002ec0)}], 0x2, &(0x7f0000002fc0)=[{0x80, 0x102, 0x9, "b0db16ce9367a5f3d363e2657c8471b877d75df477f0ecafcc1473f0e489fea3ca7e2937a5d0d02c77eb7cb4f958574aa93968b568192e673ad467808ab5517224ecd428a64109dd328a8d9e0c25e257767f936d9bdf11c4c2589e0d8d2c77e19fc2d01915d750c52a37"}, {0x1010, 0x6, 0x2, "0270b44577b4dd28d9f04137bc5256a1317d7485af6a4521665cdc685a913483998e5ee7414f6bff9e74f07bbf5c026d20083082090709494628804d919efc32529e6df9a1a8414fa75d765cbaf30727d54e738e51ed531227cbc2a82b265b69273068d82286ca0ddd2de46d3d8d5109ef67be876cddeaca3648f84fabbd20f9ab9cbe425e708ff1f7117dd733f2a14bbfd2b91257e8540cb1c5cf31cb72c83005602eb23b9bb554d9a6c92e6d0eb8276979e9b567f22d28b3af9fe8513ff6ee6c0bfe3366a02f5f22dea9211432cbbc0270dff4d68ad1674619db6a1d46cfb1bcc6636391b27e4884f1ea51d7e7b675299935c4110e93905cdce535de66dbad606379cd417646ac3a2956a711523e536c7f469d4ffdab082f7c348d4cf47c1e34f5f60378df960ed7f9de7c791cb3d0ec0299965a2f07a0589fe4f0910b9a5c69717e23452075fe2a7151ab59fdb5f61e232c90d970d189febaf08d1ae3e048a7c30b51583f8d2d1a60666bafaa8c115dbe7e0903e01c55727e8f056b075068193971b4898c57a7deb9082a842b3f3b4b3534ae4614cc8c64e5c3d07e3eed64bce7e16257cd18e1026cd40db2b1875bec6dd79ffaebe5ac35e612c2adacb83b4bad23f80aefdb49f45ef9b15e5a508c5876db9c76561776bcb07f4c5e317792e158341f04a259b72c65838c453414621861b936c67417fbccf6aa612935dc2e65164901d884fe781a5a80afb3079d817e318ff1b9bd2b3f05917400e07907a66d9be68172b77e36be80ef5879211c235f3ed2288e067da234b95154fb0d894eaffec75ceff93c94cccf8083b26124af33b936a85b465b61f926a59c68b391b766d368a345b698ab793ff2ade0708412c61c49bbbb9e61f389f6c8c1fce42e26a0bca5bf586fe0bbc962f94e626d7471714abc7abb93d59ed05e079ac9815d92d9b92ed556876373eadb417dc38565c3b22f76334faae03fadc41400340d1bae8c5545f926c4f9c3da1a534f4ffeb6a7a30a3590d5f5b91192ecada46f7e54fb2816b9390c06480e883a88b33f007c36649a6a8b0758ae0a7cfb964efe0e641ac24713f5d17cc8f1a19525176fe15c45a74fcbb0f405acb227b943d1efa9f6098c7c65f691e81c4e1eafb38832ac360a174c90bc0b431ec44f99eb0c9f48d2d9e9c3a163da0d4f02941e0b283cb282b2e7e5c3d86b828a9871b2045fe98d0f8512ad87781fa1f3968a50cdb6eea706fd36ad71b8a0f0bfc828aecc3ea15d8fb907bc20c29b51ad39ec677242ddafb41a293a5200ef600f385bad528a5afccadee3ef6d029b3191ff0f210a60977e777cb5054908462811612eda695c61a3cd0d87be80cf73dcd7fb9f132fc4abc11f796c0a5f49da421a6b416a1fbf57a066d0e114bebf1c2d9d98cb9a1732d0afbaa0305dc5ff4ed893adf44b0a06f12c64381e46fdc159203ab177510949008569518799e60ee0b729fed7b358d2c4271ca8f3cb47d69fcf4ea111206ba12c3f354e806718dc4da85fd9fe9dfb11b9a93e18624b6c945e64fb4a2ad3253140b3abea3aa3f968d8f2081cf93e7f345d18e0e8c930e79b5d6afaa4f3f162b767870e8eb7a29e40364be1f828ff50ae30f64e74991d2ee36f1f277d491807455fbe80eff7d9e4aec819f4e1f33dbc6e5067fe6419f09741f92bf5dc07db3105ec7facfe971998c848f6928b25b4bd73132836dd4f1ea98ebedfd48ba0218749cde6b69429d07a3b6dd5cf61f168d52ca8d9e7c03512cab7b8bafee3ce3ab9812ccc12d71a9e8f7952f1cb6df6d235e1b32d4194595f331b87b24c7d8836c9ce8b57f01767947a4c6c3a60e7758b523d561c34f5a6cc930cd3d97a04182a03a8d07bcfc0b2295c1dcb59e1e18dbec5da20813a5e6539a124e295b7e71486503b1136e0a3b2cdd774ed0d6f7746c122243fa5ce6d324e98cbe4a0e3a9b21e56ef16ba5e883794e1dba1091c215d36c351615d909b0a1c9930285399ffa8db87825a670065c029d93a268de377173425a68e31976ab2983dbfbb181b8800fe66f820d21ae649dcc903c383c4678e0c3b1b93fc04bfab1e92b76a3b8d1ddbf36bac1a1a266d8bc0d64a7f7ea7fd396d5f28a75c9fbd504a92158d1b0ebbc864abb3dc5df410fb8712ba18c8f2599121c4137ef7aaf5c788a02aaae4f1db8e0133cc5f2aa9f79aa367794498147b58f2922a72596577d6e864ee29443500fba550fefe7595a10005166d4fed45bb6e37e95a49374bb0d571e8784a69f1ac7ca5f09589da216bbb2a39effd7643ab321e8d4268766fffeaaf8f309527bee6c94f0a23a9a9f65507195c78830e9ebb5d0af11b16336351537f6b80abefaa2d42c8d8f09096ac100322f8e6d8872d979da4ec412c997f63b12dbe389e21d80e4a3d66655a391cd10dac0015b1c43415c78033c41100bbe3163178266dbe27b858f0c4a2a2a28abb614a5fc8034b34b51c2ba19ca2688ec08abaa34569a6fcf01540b2bfe6274b979635f85b2e81fc02f985d3fb1bdac10e0192c90ce50ea5fa35c226b1922bf5420f5f51e9213d6f17904c7446f59608f915433226591823b49cdf3b5f1128ed8f485023d1c3f8a52669d0d1f9d8e635cab3cbbdcf284dd113f527b916275b0f664e64eb3b6a16d6e87fb186a4c3ca6f7bcaef46c0a24af4cce1fcec199a588ed69465fcfc6af50f34721c8c603fdd9e9d229a262f52fd12b6e561b3c196e5f3167aaf9c36da8cd138ec07a3f871cbf5124aa447db7c906e411eeedffe770d3c323088a1ab460e991ecf6d61a60b28a64f1fa577e5b6956ee6341d6f497e6f89f278f70c192f8adf85ef1c422500323d94d8fa7a871c9c4bdc90a3aefc03a3ce4fe964f4cad34c1d13253ae741f17d92fd2fd4f4b4734a0afd015f7df3ce35c00beaca968d8faa75340670deb9ad97eaa061a117bb24ae5a4a0afbf88e611b0393b9ec8db1a400155d22fc08e2bcb1e53ed9db66b0ecd2b46e8b1483ad56ccf63152c685d6971aa66235ba3b380dd151d6eeef8f95205bf165eab27ee6ce6cc1091e31688a59b6c64cbe74275e73ffd064bff85325409ff60ad9c21a8bd6d47e9fa23808751d97b980eecfbcfcf9e196c8876328e7a0cc394ddddd9d2cd39336b13c84944551bf3ba160ac304775e60d27e2bfb936d305f5636dda900a4f027dae687c1efbf35550cbf12538867ce1c0dc72e378b709dab8224ec70cd3bcac4340b7d0e1530e4934e9817de5db9582067f7ca89d92ecab5b68508ca0417a0e4f9fa930eaa678a860d17d34238ff48919d73c63f0034bb762cd25cb13805b37534cebc06a1a0759637676ac989bf7efdc8d4d5d32f658a1f12b9ed5bbef0a07487b73d1379432e9d4aef35f109e8818daf8c41cd36be43c14db255b6bcd63031460363fd8b0d3907281b25ef9737cd666d74d5158c1a27d6b632cfad43886608e19b4e2ca161ee6c65fdbabbcf3710c9f326b600730c3eeabaea8a8e6e3580847e52c729f92fd76b5b8fe648160f6420e00a08244378f458b1d9d4cc5cba003bda18cdebb242ce2396780fa3acfe8ee9fa0498eac70f8050b362da4e6ce6b70f83b8c0f1a5344da13a429f1c07e9eb1be8ee5feab5de37d8a52d7607c5de8d2b436081d53e3a185ca2bd5b132ab6a215d6f452115a03ce68e94efec7ea2fe7d7c92cf497c208d2b3d51e967f013b399cc2b46654786b65336f41a24a99b3ec53ec5f24127054376b417658516ad6c9c0477506886aadf3ce6d50d7152ded44923c5c25aa9631559711b4c041518654da375014dfbfd5f2ddb7d7daaed5a8f7f691fc3da03fdc2b8db8d5f34dd90e96b9f67f41b93b6e9d25552745e5812bf683df1f9f1369f4b6951e069e3e0f4b5a9df36d5bb08bfeeefdc9f6b7c4a4fcdb84c2d32080c9eed56924991c4ab38ca70677c9adf04fcc422ed122a9b8611a4678d42d85104c908b186fa05e9a1e0b002387f9eb5f6ba1f7d27f182c71d9311d462fb127a43fd1d1f1feaff08a8f143f5fa96f6c15427e896e9370566bc81ade8cfc6eb631c09f58cb280b92772fb84bf5aee76480185fb464d8b19f63aadc0f7da83fc28b956cfea3cb771ffff3e1e4445bb6e8fd413b19fdf05a306c790bbbc3caea73a0efe523f0e640a31004768ee206028b35df51a782796e65f847150b8998f366c680356c2a451291545e4496b0db77df5d15b9eb3e379621b23e79831e712392bb0c6a0be8049b184fde12a9a61010ecc5c1bdc6045773cd4b143f7ca0a1576ad6cdb5061708efd64f0c726338f997e8bcaaf1c58b9be4466fd329959891c5f64f622e38a82c8bde68ef81d439af9a2e082c7b8b3602ea2eccdfae8f8e865f23d48f431d4362655042814d620d5027d57b1d343a83cbd37c5d348f401978675b2e5800a21fd69324035a56f4d88185597d4150f01c2df249ff6de6b7cfae7fd909b45600eea777dd974d85e7f85bf81a8859cd35a3d1318ee5ce811d27b4dd8c27275997bcab5b7d5b131b2182b81cfbdda4ae5e1d3fd5089d3ffc5e480f0aaa5d4eb2157ca11fdd772380a1ce4e0f57df21f568cb7be75d2b184aa8831fff9a4fb14d252ca49ff78c890849ca9387bbfd68f0387948ebb0463d22a4e60245bb82f72754d7c917b52ed17919b3f0b6371aacb092bdfee38ebbe7f478f53537381888d68f7e519f321f6e69e39c17e37f31be0f438ddf72716f94e615b3594ead97fce310994c91283e082a4c72fbd21fbfd36e30d74a1a2a053f5cc224e080b8af69e29d5f2ce82e3fe9eb95b7e316679afa9a3f7342804b851d90dfd8f616a5960dcc795fbc8c8c680a7e1a4fc999cf44bbbc287ff6d3f9b6c86adc17a983ac5a5a2bcf3453d1bc1dfa0de0b69710f2ce95b0c82b3cf1b73565f1981df16e5ecc7d0d797618c25c38558be20d3f638ab2bcf316ee3e3073884322fe4a0e009aed4c20a924429be7511cfc8ef439f8eceb7adb3b1586e4fc609844cc14b517289be29cf11eb9fbfbc4ccbc04baf89d7b9ad4aeb9ce363f000c33dcf2b2a7577cb74018ead7c09037ed008ea5447d04945dd26404b71483416098e18864bfbaae7b9bb9e75828f7c25f823e8c25d436146f45b2e7681d19ec4c7d74caedca56b8ed64e98549b7105926779295cbccd93d63a12f7e29336357f1697f74378de955d9b923425c0f20f92b06f1da7f63241ec21199027c49eb496c168a0c90aefd6e4e97d90f9ad557167af43a783c4f8efeb98e84bf9b07c02ee09d3a27592df23f5adf47d09ebe60f5119c6aca19a34adb901d6d19a76862c1ca2f1d5b907d187d3f08bde1ce661bc7c11e3b1b5a422898e4ba81c48a55c171b5d23a2433d1c61014451297e660f4301f8bb9d77431b0f4dd4a30ba20f3c2893bb11b0413b592eaca5cea2b5aee03a6238ce5ab40b1ff36aebca8d456cf2dcb4027a901b5440754459b0790b9470c1fda78e2bc2bec7bb8177bc4232043d93dff7227249e6b9fb90b969a8aa07fc238bdb58738cba40171559e0797842d45cc411ae097db02f4f1c63a20adcfb86572b66b4d1b9c1afd1b03d90cb121ce80908e012cb523ce10bc0ba522224f1d72295186530cf872cead41bcd8a049a50f5c55c7c65f68cd083e68ac1be3ec83260008dc32f20a6f858d39f50ebb132f09e612b27c43c02048d0e95c96bcd623f4dacc48496d152a4c5d28eb312de8925fc2903bfa52c4ddee72e31079b6285c11df6bc3b2f0bb54c494b5c50d3dc4d81839a60113d7c8e2807d61dac3b6c2f3500aeec7a3283"}, {0x10, 0x116, 0x4}, {0xe8, 0x10d, 0x7, "6f2a67ee83cb6ad4bbe20e2df20d61d27ae437ca81f44f7713315179aa46ce2dd1c4f9e0abb86d21d2bd72a9dba4068b0df8fde6c9aa839d02320b8c17e88df58146522dccfc03514df9752d43a4ed7c25309d61ba7e3b1cb46c978b6bdb064da1990d012cc9d428969d28001ce9c8a4f6909be96d65130d74f2bac122b4212676a0e25d3e86d922c41fa7bdf981a45274fdb176988506a7ff3c56f465d376aca441834fd148cfbb6e44f1af2825f1306c17d50e15644ea0c12988ae501eacc033fb8cac6dab426a243dca7f177d014bdf87"}, {0xe8, 0x113, 0x4, "3fda5abfc35dd39c610db3d7b03ce109acef46b2f35c51a29fc1333954bf46f4e559f324e756332aa3471d571d1ea3196f493d022f8646c511250ea8f01ce4527e1b8bc8e1bde52f861e6c9292227e251db6e9dd6afa57b5f15bf9a97b016918787d5ab46c485b35b4245f8fbdf69cf757a52ef9e85dfa55a75d185792c33eceddbdb082ece62e45efe641f9e470ed0e48ae0d0a8b357804239e12bae1912ee16ac494d0a1191b7641e0f2ce4d8b0813a19c2c64fad264f40b48038951133c0a60035e9fd8cc29182b693ec857d1ec938530e69294ad4964"}, {0x68, 0x114, 0x6, "41d5bbc97e3f873ceaf97f58ba43ace1462b8b8caf62befec4254ab6dc3e4b77d218bda8f140091627359385de1a92d5a8f7387d49e48036e948736a36044cd5210bacc2c34d7d02014131c3f4396841a351f8d94a"}], 0x12d8}}, {{&(0x7f00000042c0)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004340)="7f5be5efb504f36b8607f09d671ff4a48bbdc9ecb4779d24504b7e", 0x1b}], 0x1}}, {{&(0x7f00000043c0)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x7, 0xe, 0xf7, "eaff53fbcf6c103e35d09252c6eee485ca0e5250ea3346aa78eb96e144cb409796b01e655926bbeedc88dc55beefef922544ac10183a711a095d2d9342060b", 0x2d}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004440)="4b047405d43ef2dd392058db2f102cd705756eb1ea444848d464078031e50b4fdac0bb1179663e4e9d88461ad8c294f69362a738d5f5b2839a2ae85c86b37c68946fc105f92adc3d762e186881ff986817354a56404923befbdae8cd44a4fc640eee676a7004a253993c3846740f21b4f7299605f1c37120d970709004d9eeb406f61cc50565120c70e19da40d45a930894229410a9760ee553842749572c4075a2dc7ff35e412ab5339b6cecca2a2f2a33ed3cf84440ba195a3e965e82b1774e80cdfbdc39676a4ef07f73ddefab16046906888989d9636084d7c873e683fdc821ce2fb4a05b826cb64", 0xea}], 0x1}}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x4, @empty, 'veth0_to_bond\x00'}}, 0x80, &(0x7f0000004700)=[{&(0x7f0000004600)="c2308da8379ddc827c3bfe2f2073717aa39c3a36c04718632e15ef5df1fb939d2b8844f7ebbc911a31b0030ac37a1fe3ec38c7cb61874d9edbafaa1b9a79aa1e87b8d5131be54401d79e25d80729dcadd11239e39476565c205c36dbd6b35e517a8efb086ca1e4cfeeb5f92aa12eb47b69f0fdb761cdfa108efa9b43ed96b1a312aa5c36353cc7ec6e6c1b17c9254517d4fdf8466120ff23e1889f1e09d52b90aae7ed9fdb88f4d06d4cf4dbca593e00f3a51f2d8adbe921a1e5e73e98558b05a77377f2f9ac1507d2de1978f9db4b4be910cd18f155952b6e924adeaefd86306a6bfc2625c1587a97c493bfc7b6a7815d19066828", 0xf5}], 0x1, &(0x7f0000004740)=[{0xe8, 0x107, 0x3, "58e0dfc053809dfbe4d469cdd6c7f5af79feae0469c682d037cd9c31b2a64b35ef0025a5cde2728065d99038a60c88c16a88c22b5428cb50165c307f69fb6cc98e85bb501a73e287bfc3560c94b47bb44c171927b33b52dc3edc5ca3c720abb9fc85e7087b2a9b13396ffb2e8e8e62a666017dda52cf1337fece8ea8afe661753fd8771cdf7377cd4839cb34b08a65a6a0ef98dc759ce121f0b642b282ccca50658db52226f84dbec6164d213eac90434f05d526de3419900af0b5b22783a5ef0a2d1cf2455a254338807bd09cff14c828"}, {0x108, 0x116, 0x9, "b3e8f7092b3df322206096ef03824890474b566a975eff74e0fb1fb28fd7c5a99d7a785333bff20c23620a8ec22d5cf87527d4936e90a1fd9635908d2d658009b76e270cc0e475c89eeda4a5269e2d8376e2c1ed5002240423895951428bc5c3355d6fac0256e4085d83b5f6a92f77510c5f4fcd1e6abde5f0bdcc006ca93f8a702b6b8fccb917a69e51bd0ff4847f1642c249ad8c9c1e2840a160c5bbbb2222e9e3b2765237423bb9bcd5dcde4c3a07f9f8df1e6054de0433fa030b7f465584999dc9ac73b83b8c4bbba6b9f5ccea13bbab1f6a2e9073a3a76bfb1702d454c08625172d73aeaa70ff5dabe27b2073e65cc8192e803f4e1e"}, {0xb8, 0x107, 0x0, "90eadb4c7b63b3770e5c1e70af07d47d42360a1ee2124fab3b7f10a5672fcedfa1e16f3fd27766d9a834ba62b5df229655c49e1dcfc02515b7a0b931bfa7d723255bc4d9fc9e23bcf7e908c52913c87e25cf8e1dfd7b30c6f1f109a43a269f2aab524b22f07de50349acd2df87aa989e2b4674f7055d060b881fbc2bffaf1ea89001746aa0ace5156299e3de2aa5640164119b547b822e617c1237bfd595737241b2a9f866acaefc"}, {0x100, 0x10d, 0xfffffff2, "8e53d3e38818312979e3559ba73f0b0ddb891b027f361a5a8ff394cb573ad55fa28dc896f9880804e8e14954ce508f05b37b1f88da8a7aa29df9515ac7b7d9554b60973a207e5d41639d9e7a9bfb4b90b4abd3491a087fbaea45eccacf976c8fcb68889dec903801baf7893069b9b00eed406c9d81d935e89fb04aaf3ee18407fae682695a3c85a6b4d20bffc114c3f594943523d13b49b25f61966ec6ef39ed98248b0bfa4c1abeddfcc088500c813f1edcc7b6f57451348271f59543b04a97d17904b6d9849788242411f15e05670429bf119a4a4c192475d6f33cff92166737e276a390fe63e8e1148b0e"}, {0x58, 0x10c, 0x8f, "4b77346092b4cdfc8a36084d3406ff61784055ecf29d0ed6491208c98db8908235d83223ba12fcf0fe98551b6f2976a5caba5f239811527bfef44bd88b7e071f46ab"}, {0xa8, 0x102, 0x401, "ad9c8b80acc7adfefa140e083574186db9643b5c7dbddaefd94fc4aeaedfc8615d0354870e983d87d2f8da860f4192b97a4cbd6616f45efa2d53b5593b83a0552ef66fc5c77823ec8bf407579265e57aaf6c027ceb3a800063e213bb894455ce5f795208f2814a136b9da00f33e82a6bfc21925b3ff6936fef948fca1846c69adb80036112d6058283c2feab2139713b3a76aaba7a"}, {0x68, 0x10c, 0x9, "7c0cc0fb98fb4f00d88eb48af4d95fab562877b05f395a9c41f38c4de162c51047ec8be2762387abb5a54be18e7fb41f148da9f9166c9c60eaa36cdd559a2786b9b83fa1de69349725b3a9d613fbeffe4d53"}], 0x510}}, {{&(0x7f0000008640)=@l2tp={0x2, 0x0, @private=0xa010101, 0x1}, 0x80, &(0x7f0000008ac0)=[{0x0}, {&(0x7f0000008840)="f21169b7d62144b1bd0be7a52f7a401247450602270e6fa5b242ca208c47e02b68a4404b58a66d0ce2704bc04606fbb3f9d820b3fe5e3002b32f9a0449c8ebcf2a3077da7bc40ba95c1a84eb2eed2bb2cb4f94bcef88524c91cc85ec946876ec80f62afb08a7f3751a3faf7b5abe578e1f9ece2004e5a8a702d6f36a693c6e0ee12355c52f6726e8a033ba805d6be440b051dc96f4d8de6aed2e174ac94d6ef4d8bba5b030e66823392654331105f00903efb11e742f3a24667a8da49b7f40dad22940", 0xc3}, {&(0x7f0000008940)="142be03656eb80d22f847427202dbb9aee2cfda57a162a204190eb992f0b870425728a225f2f", 0x26}, {&(0x7f0000008980)="0e0d0405c071a3840da612cab745ab7004207991279a31ea12cfb70a7996440092a61198973b8cd02cf01cb15b4e40b5abac5fe701aab0291235df8f68b4700063acbc873a25d994d39ec83e38cfc4af95780aa49c42682bec1cc92b85b7b06474e6dc0bfb86a376f1cfab3d48bd0c0d4a8ef2a65a1c3f35cff5222761704d1eb025c9f5b3083de6652b1dc272d381125c640d1faf83755cdf0f06f59a067e99e7744cb7bf722dacd95987c2", 0xac}, {&(0x7f0000008a40)="a369f3da15396f2d4d4605d1ac6b3acf8b1f9e43b27c591f6e18d791055d68e3d182772d8f3a34fd7e1226220109cf05dec564cb6a176f0c1efd1e2c1e6c5207d145be1723087fc5a4121563aca4f245816e5b0974ec562b2b6c1f2cfaa0dcd8c48115e8ba341cd632d9032b5b2ddd", 0x6f}], 0x5}}, {{&(0x7f0000008b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x1, {0xa, 0x4e24, 0x73b, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}}}, 0x80, &(0x7f0000008cc0)=[{&(0x7f0000008bc0)="5d7356854f94e21dcb5433fdb7516dc2fe1f558f94f5cd688be4e811c043b4a85079875466154d597549c8d676dd0979cf350c3485c11d0db478100faa0a3e63f24dc318eb2733837dd709f3de72f097d5306eb9879704c1c27ade138bbe40d3b1bb0c15c93ebb234d958958870c5f1cc071f121464e9320dca581e91a8d6a", 0x7f}], 0x1}}], 0x7, 0x20000041) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x5}}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() r5 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000001480)=""/4096) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdir(0x0, 0x80) r6 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10042) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x0, 0x11, 0x5, 0x100, 0x6, 0x4, 0x3, 0x4, 0x5}, 0x0) mkdir(0x0, 0xb0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 1m32.430905335s ago: executing program 0 (id=3337): write$binfmt_aout(0xffffffffffffffff, 0x0, 0x8a) socket(0x37, 0x2, 0x7ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0xfefd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000002000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f736530000000cc000000000000007465616f5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b747479706500000000000000000000000000000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000400000000000000ff00000000726564697265637400000000396c27db39b2eedb0000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000005000000000000006c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f757000000000000000000000000000000800000000000000000000000000000061727000000000000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f34121000000000000000000000000000000000000eaffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00"/816]}, 0x3a8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r4, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r7, &(0x7f0000000240)=[{&(0x7f0000000140)="f9aced89f174d7ee8162d8af47da9b2d9f6d2121d4fa87d34ad531814294a95cf79eb84aba490a8d33b28d63bc13445abac137393b0052c52bd12806f9d1b423452648a99b456e37e1b5ed1edabafef4b5ad19179608dc711f4a5bdb452fdc342d051b4fbdaed8239a35ddcb8a18014e2cd41a780a7c", 0x76}], 0x1, 0x3, 0xd4bd) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000040)=0x10000) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 1m30.758728291s ago: executing program 34 (id=3337): write$binfmt_aout(0xffffffffffffffff, 0x0, 0x8a) socket(0x37, 0x2, 0x7ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0xfefd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/816]}, 0x3a8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r4, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r7, &(0x7f0000000240)=[{&(0x7f0000000140)="f9aced89f174d7ee8162d8af47da9b2d9f6d2121d4fa87d34ad531814294a95cf79eb84aba490a8d33b28d63bc13445abac137393b0052c52bd12806f9d1b423452648a99b456e37e1b5ed1edabafef4b5ad19179608dc711f4a5bdb452fdc342d051b4fbdaed8239a35ddcb8a18014e2cd41a780a7c", 0x76}], 0x1, 0x3, 0xd4bd) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000040)=0x10000) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 1m19.165729513s ago: executing program 4 (id=3369): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280000001c00010000f5ff000000000007000000", @ANYRES32=r4, @ANYBLOB="0300ef000a7e28b29a00000000000000ec8f3cd289bfba5f862d744a39811410c58680c740b2ab6f12ab19ad18ee419218f93588aaa9ec591085cb415b3b88777bd99298ccabd965207e4a6b5552b42434f53be57b76fdb7871e3e255b910ea03a17fa5ac645d5ac38b95b51b0044e5d6c0e8d47b5f1537dd9c62a66702eaedba2ab9aa6dfc02fa5fef0eec82c469c9bcc68d6ba42157b9a42c644d65d1e308e8e4a72343942cafd845c3d3313a165dde9f62b4527797e00e9ecdd87404e0be2e333b631", @ANYRES64=r1, @ANYRES64=r2], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a32000000000900030073797a31000000000900010073797a09"], 0x58}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000069b0070000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000080850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x44015}, 0x2000c010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f0000000240)={0x10007b, 0x8c, 0x220000}, 0x20) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2329012, 0x800}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000001680)=[{0x0}, {&(0x7f0000000580)=""/208, 0xd0}], 0x2}, 0x6}], 0x1, 0x0, 0x0) pipe(0x0) r9 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r9, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe800000000000000000e6d237bc000000f0ffba060004404e1f00000500070088000000e9117460a80e630a40e2a9c3ab2bf019188c257fccb8eb5c7484af0669474ef2d4567d123ea69115495ff6cdf279dfa663947b0ca9306a9100"/157], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r12}, 0x10) kexec_load(0x3e00, 0x0, 0x0, 0x0) r13 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x50000, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r13, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf250100000008000200040000001800018014000400fe8000000000000000000000000000aa08000200020000000800020000000000c39c4e83109eeee791204e9ab327958df967a7c3a543a09cf1c10ce815a01abb843decc314e3dcde2fc13968ddff8ab5da2ca703b11bfc04f6c4bc47a4eed890c20b95f5dc0f8bd53cc518dd7691b94c70607d4c41fdf2d8d7561c59ae16a578aeb5bce95b2d62572a2a7c76720a78c59d7cfac7b13ccb853468cd4ec320c597fd15996f93cf8987fad7e25baebc00c0a5e758298388c708462f335e4eb5214e629dc45178c38ac5ffe5191d1bacd4bdc5989818bf3826"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) 1m17.484740187s ago: executing program 6 (id=3373): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x43, 0x0, 0x9, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000180)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback, 0x80000006}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="140000000000000029000000080000000180"], 0x18}}], 0x1, 0x0) io_uring_setup(0x7b23, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x1cda1000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x0, 0x2000006, 0x110, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x28}}, 0x40) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004"], 0x122}, 0x1, 0x0, 0x0, 0x2}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_open_procfs(r6, &(0x7f0000000300)='fd\x00') preadv(r7, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000080)={0x8821, r7}, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x4, 0x300}}) 1m15.650594838s ago: executing program 1 (id=3374): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000500)={0xa, @pix_mp={0x7, 0x400, 0x32344d59, 0x7, 0xc, [{0x1, 0x3}, {0x6, 0xbb}, {0xdfe, 0x3}, {0x7ff, 0x8}, {0x3, 0x6}, {0x1000, 0x1}, {0x40, 0x8}, {0x418, 0x6}], 0xa, 0x3, 0x0, 0x2, 0x3}}) (fail_nth: 1) 1m15.325845739s ago: executing program 1 (id=3375): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x4, 0x6, 0x801, 0x4000}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b50000007cca8aea0000feff"], 0xc8) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r7, 0xffffffffffffffff, 0x0) 1m15.249025341s ago: executing program 6 (id=3376): socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000003c0)=0xfffffffffffffc8e, 0x80800) pipe(0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, 0x0, &(0x7f00000000c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x45, &(0x7f0000000040), 0x3b) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000400000000000000000000009500000000000000f9462b770862653a341e8b2ffbb09d5de453f54a9986a33e6e7bb34234e76ae95b885da1d4ceeeee52371ab146867901844bfe5d6fe94f0d886f8aa084aa0d40d4ae95789c6c59f8802351f7d843"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_pidfd_open(r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0287c02, &(0x7f0000000080)={{0x80000000, 0x0, 0x8, [0x400, 0x9]}, {0x80000000, 0x0, 0x2, [0x2]}, 0x0, [0x0, 0xfffffffc]}) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f00000001c0), 0x2, 0x0) pidfd_send_signal(r6, 0x32, &(0x7f0000000400)={0x1c, 0x3, 0x2}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="2b63707573657420c5302dc6d43bfafecba2135547819df763fa577ce60de286307b4e3f36dcd3ed80d9246b"], 0x8) 1m14.887777376s ago: executing program 1 (id=3377): socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_vhci(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000004000000080000000d00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001099e085000000000000a55c5a875d2612ee0708f7aaddf0e06e5b8bee49c51b69f19af8011f0f00c6ba3a69ae073844eda6eb4590f479055554c0dd205ee23fb69a4a740f3b1e42f6b77f7aae4796e83560ac46730d9507434a"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="88000000000101040000000000000000020080022400018014000180080001000000000008000200ac1414040c0002800500010000000000240002800c00028005000100000000001400018008000100e000000208000200e0000002080007400000000024000e80140001"], 0x88}}, 0x0) r2 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\tmw'], 0xa) r3 = getpid() sched_setscheduler(r3, 0x6, 0x0) sched_setaffinity(0x0, 0x0, 0x0) gettid() syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000180)) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000000000004000000ff00000020000000", @ANYRES32=0x1, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8b43}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc3508f0268be1c8}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xcfc35ee855df32e0, &(0x7f0000000040)=0x9, 0x4) 1m14.019830018s ago: executing program 6 (id=3379): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000180)=0xec91) r1 = syz_open_dev$admmidi(&(0x7f0000000280), 0x2, 0x2001) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4018, r1}, 0x18) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="183b00000100000000000000000000001834000001000000000000000000000018200000", @ANYRES32=0x1, @ANYBLOB="cb6d27310601000100e7ebff03020000d60200376676d1541fdccb7dd47963efbc9a1349248d489413b3eade5a872a709ca86c8b61d82627ebdcc10363af1028bec5ec886758fc1a0000000000005f364cc731e4bc33d114d1f56b8db7789f14c983443d126beec87f4167c78331c11604b43ed30dbf59f1a8776c4c0914e3a7adbd5d83d55017bbe982b39a9581f3ef6019ed6a17bf771fdb11c4257ad9"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x7f, &(0x7f00000000c0)=""/127, 0x41100, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xc, 0x5, 0x1}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000340)=[r2, r3], &(0x7f0000000380)=[{0x4, 0x1, 0x4, 0x9}, {0x0, 0x2, 0x7, 0x7}, {0x3, 0x1, 0x0, 0xb}, {0x4, 0x4, 0x4, 0x4}, {0x0, 0x5, 0x3, 0x1}, {0x5, 0x4, 0x6}, {0x0, 0x4, 0x6, 0x4}, {0x2, 0x5, 0x7, 0xc}, {0x4, 0x4, 0x7, 0xb}, {0x4, 0x4, 0x4, 0xb}], 0x10, 0x4, @void, @value}, 0x94) 1m13.974418015s ago: executing program 4 (id=3380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0x8005}]}}}}}}}, 0x0) 1m13.793179531s ago: executing program 2 (id=3381): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)='7', 0x1}], 0x1}}], 0x1, 0x2c000011) 1m13.689390197s ago: executing program 6 (id=3382): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="1400000035000b63", 0x8}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000001840)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/198, 0xc6}, {&(0x7f0000001600)=""/137, 0x89}, {&(0x7f0000001540)=""/182, 0xb6}, {&(0x7f00000016c0)=""/248, 0xf8}, {&(0x7f00000017c0)=""/101, 0x65}], 0x6}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000101400042cbd70008100000008004c0001000000080015000300000008004f000300000008004a00020000000800150003000000080015000500000008004f000000000008004f0002ff7f0000ad5e4b18790000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40800) io_uring_setup(0x2dcf, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x400) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x400, 0xffffffff, 0x7fffffff}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x14}}}]}, 0x78}}, 0x0) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 1m13.631550186s ago: executing program 4 (id=3383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) write$smackfs_cipsonum(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='iocharset', &(0x7f0000000100)='iocharset', 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)={[{@dyn}]}) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r4, 0x200}, &(0x7f0000000300)=0x8) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000004080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x1c, &(0x7f0000004100)={[{0x18, 0x4e00, "102fcc0d18aba7b6baafb912b8daa50795d1cde543c1f4db"}]}) 1m13.544674739s ago: executing program 1 (id=3384): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x1000000, 0x3, 0x3}, 0x10) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x202082) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='sys_exit\x00', r5}, 0x18) (async) readlink(0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="0900000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r2, @ANYRESDEC=r6, @ANYRES32=r6, @ANYBLOB], 0x48}}, 0x0) signalfd4(r1, &(0x7f0000000380)={[0x9]}, 0x8, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) (rerun: 64) 1m13.181478542s ago: executing program 2 (id=3385): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x43, 0x0, 0x9, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000180)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback, 0x80000006}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="140000000000000029000000080000000180"], 0x18}}], 0x1, 0x0) io_uring_setup(0x7b23, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x1cda1000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x0, 0x2000006, 0x110, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x28}}, 0x40) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004"], 0x122}, 0x1, 0x0, 0x0, 0x2}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_open_procfs(r6, &(0x7f0000000300)='fd\x00') preadv(r7, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000080)={0x8821, r7}, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x4, 0x300}}) 1m9.962443409s ago: executing program 6 (id=3386): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x4, 0x6, 0x801, 0x4000}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b50000007cca8aea0000feff"], 0xc8) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r7, 0xffffffffffffffff, 0x0) 1m8.974406735s ago: executing program 1 (id=3387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)={0x20, 0x1e, 0x723, 0x3, 0x0, "", [@nested={0x10, 0xa9, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x4, 0x11}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x240000d1}, 0x0) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000040)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x2}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) ioctl$SW_SYNC_IOC_INC(r7, 0x40045701, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010100000000000000000100000014000780080012400007000505001500090000000500010006000000050005000a00000005000400000000000900020073797a3000000000120003006861"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) 1m8.851572361s ago: executing program 4 (id=3388): socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = open(&(0x7f0000000340)='./file0/file0\x00', 0x30200, 0x10) accept4$unix(r3, &(0x7f0000000240)=@abs, &(0x7f00000003c0)=0xfffffffffffffc8e, 0x80800) pipe(0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, 0x0, &(0x7f00000000c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x45, &(0x7f0000000040), 0x3b) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000400000000000000000000009500000000000000f9462b770862653a341e8b2ffbb09d5de453f54a9986a33e6e7bb34234e76ae95b885da1d4ceeeee52371ab146867901844bfe5d6fe94f0d886f8aa084aa0d40d4ae95789c6c59f8802351f7d843"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_pidfd_open(r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0287c02, &(0x7f0000000080)={{0x80000000, 0x0, 0x8, [0x400, 0x9]}, {0x80000000, 0x0, 0x2, [0x2]}, 0x0, [0x0, 0xfffffffc]}) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f00000001c0), 0x2, 0x0) pidfd_send_signal(r7, 0x32, &(0x7f0000000400)={0x1c, 0x3, 0x2}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="2b63707573657420c5302dc6d43bfafecba2135547819df763fa577ce60de286307b4e3f36dcd3ed80d9246b"], 0x8) 1m7.372069483s ago: executing program 6 (id=3389): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0xc, 0x20, 0x0, 0x9, [0x5, 0xfffffff9]}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@broadcast}, {@private=0xa010100, 0xa}]}, @noop]}}}}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0800000c07000200c0ff16000100460a0fc0006600000b88907864010120ac1414"], 0xfce) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m7.363413179s ago: executing program 2 (id=3390): ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0xffffffff, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xffff], [0x50000, 0x0, 0x0, 0x200000], [0x7]], '\x00', [{}, {}, {}, {0x0, 0x8}, {0x0, 0x7}, {0x8000000, 0x5f, 0x1}, {}, {0x1, 0xfffffffc}], '\x00', 0x1000}) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x2}, 0x1c) (async) listen(r0, 0x2) (async) recvmmsg(r0, &(0x7f000000da00)=[{{&(0x7f0000009940)=@rc={0x1f, @none}, 0x80, &(0x7f0000009d40)=[{&(0x7f00000099c0)=""/143, 0x8f}, {&(0x7f0000003bc0)=""/51, 0x33}, {&(0x7f0000009a80)=""/226, 0xe2}, {&(0x7f0000009b80)=""/212, 0xd4}, {&(0x7f0000009c80)=""/146, 0x92}], 0x5, &(0x7f0000009dc0)=""/84, 0x54}}, {{&(0x7f0000009e40)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000008540)=[{&(0x7f0000004300)=""/8, 0x8}], 0x1, &(0x7f0000009ec0)=""/179, 0xb3}, 0x2}, {{&(0x7f0000009f80)=@nfc, 0x80, &(0x7f000000a500)=[{&(0x7f000000a000)=""/170, 0xaa}, {&(0x7f000000a0c0)=""/88, 0x58}, {&(0x7f000000a140)=""/252, 0xfc}, {&(0x7f000000a240)=""/185, 0xb9}, {&(0x7f000000a300)=""/186, 0xba}, {&(0x7f000000a3c0)=""/123, 0x7b}, {&(0x7f000000a440)=""/91, 0x5b}, {&(0x7f000000a4c0)=""/35, 0x23}], 0x8, &(0x7f000000a580)=""/57, 0x39}}, {{&(0x7f000000a5c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f000000a740)=[{&(0x7f000000a640)=""/201, 0xc9}], 0x1}, 0x6}, {{&(0x7f000000a780)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f000000bc80)=[{&(0x7f000000a800)=""/183, 0xb7}, {&(0x7f000000a8c0)=""/134, 0x86}, {&(0x7f000000a980)=""/4096, 0x1000}, {&(0x7f000000b980)=""/213, 0xd5}, {&(0x7f000000ba80)=""/204, 0xcc}, {&(0x7f000000bb80)=""/243, 0xf3}], 0x6}, 0x1}, {{&(0x7f000000bd00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f000000d080)=[{&(0x7f000000bd80)=""/58, 0x3a}, {&(0x7f000000bdc0)=""/214, 0xd6}, {&(0x7f000000bec0)=""/128, 0x80}, {&(0x7f000000bf40)=""/66, 0x42}, {&(0x7f000000bfc0)=""/44, 0x2c}, {&(0x7f000000c000)=""/4096, 0x1000}, {&(0x7f000000d000)=""/65, 0x41}], 0x7, &(0x7f000000d100)=""/27, 0x1b}, 0x7}, {{&(0x7f000000d140)=@can, 0x80, &(0x7f000000d400)=[{&(0x7f000000d1c0)=""/126, 0x7e}, {&(0x7f000000d240)=""/18, 0x12}, {&(0x7f000000d280)=""/201, 0xc9}, {&(0x7f000000d380)=""/64, 0x40}, {&(0x7f000000d3c0)=""/63, 0x3f}], 0x5, &(0x7f000000d480)=""/199, 0xc7}, 0x3}, {{&(0x7f000000d580)=@ieee802154={0x24, @long}, 0x80, &(0x7f000000d700)=[{&(0x7f000000d600)=""/251, 0xfb}], 0x1, &(0x7f000000d740)=""/166, 0xa6}, 0x2}, {{&(0x7f000000d800)=@generic, 0x80, &(0x7f000000d980)=[{&(0x7f000000d880)=""/247, 0xf7}], 0x1, &(0x7f000000d9c0)=""/11, 0xb}, 0xe}], 0x9, 0x20, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f000000de80)={0x1, 0x99d2}) clock_gettime(0x0, &(0x7f00000098c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000009640)=[{{&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)=""/248, 0xf8}], 0x1}, 0x5}, {{&(0x7f0000000440)=@nfc_llcp, 0x80, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001500)=""/31, 0x1f}, 0x4}, {{&(0x7f0000001540)=@generic, 0x80, &(0x7f00000039c0)=[{&(0x7f00000015c0)=""/202, 0xca}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/82, 0x52}, {&(0x7f0000002740)=""/142, 0x8e}, {&(0x7f0000002800)=""/11, 0xb}, {&(0x7f0000002840)=""/145, 0x91}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/179, 0xb3}], 0x8, &(0x7f0000003a40)=""/40, 0x28}, 0x7}, {{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003a80)=""/94, 0x5e}, {&(0x7f0000003b00)=""/143, 0x8f}, {&(0x7f0000003bc0)}, {&(0x7f0000003c00)=""/16, 0x10}, {&(0x7f0000003c40)=""/150, 0x96}], 0x5}, 0x3}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003d80)=""/149, 0x95}, {&(0x7f0000003e40)=""/139, 0x8b}, {&(0x7f0000003f00)=""/177, 0xb1}, {&(0x7f0000003fc0)=""/171, 0xab}, {&(0x7f0000004080)=""/76, 0x4c}, {&(0x7f0000004100)=""/109, 0x6d}, {&(0x7f0000004180)=""/108, 0x6c}], 0x7}, 0x8000}, {{&(0x7f0000004280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000004740)=[{&(0x7f0000004300)}, {&(0x7f0000004340)=""/66, 0x42}, {&(0x7f00000043c0)=""/28, 0x1c}, {&(0x7f0000004400)=""/174, 0xae}, {&(0x7f00000044c0)=""/122, 0x7a}, {&(0x7f0000004540)=""/223, 0xdf}, {&(0x7f0000004640)=""/224, 0xe0}], 0x7, &(0x7f00000047c0)=""/63, 0x3f}, 0x101}, {{0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/89, 0x59}, {&(0x7f0000005880)=""/56, 0x38}, {&(0x7f00000058c0)=""/50, 0x32}, {&(0x7f0000005900)=""/252, 0xfc}, {&(0x7f0000005a00)=""/173, 0xad}, {&(0x7f0000005ac0)=""/135, 0x87}, {&(0x7f0000005b80)=""/77, 0x4d}, {&(0x7f0000005c00)=""/254, 0xfe}], 0x9, &(0x7f0000005dc0)=""/195, 0xc3}, 0xd}, {{&(0x7f0000005ec0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000072c0)=[{&(0x7f0000005f40)=""/140, 0x8c}, {&(0x7f0000006000)=""/72, 0x48}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4, 0x4}, {&(0x7f00000070c0)=""/194, 0xc2}, {&(0x7f00000071c0)=""/226, 0xe2}], 0x6, &(0x7f0000007340)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000008340)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000008500)=[{&(0x7f00000083c0)=""/244, 0xf4}, {&(0x7f00000084c0)=""/11, 0xb}], 0x2, &(0x7f0000008540)}, 0x2}, {{&(0x7f0000008580)=@rc={0x1f, @none}, 0x80, &(0x7f0000008600)=[{0xfffffffffffffffe}], 0x1, &(0x7f0000008640)=""/4096, 0x1000}, 0x7fffffff}], 0xa, 0x40000040, &(0x7f0000009900)={r2, r3+60000000}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b000100000000090400000101"], 0x0) (async) creat(&(0x7f0000000240)='./bus\x00', 0x0) (async) mount(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)=',[:\x00') (async) sendmsg$nl_route_sched(r1, &(0x7f000000de40)={&(0x7f000000dc40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f000000de00)={&(0x7f000000dc80)=@deltaction={0x160, 0x31, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf06}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37e1c060}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x98}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0xc001}, 0x8004) 1m6.63001828s ago: executing program 1 (id=3391): socket$inet(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x2, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000"], 0x1a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="0e0200000200000005cd000005000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000280070673effeb09b5351f5bde05400000000018789ba916638814e5708103b494e10000000000000000020008005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8e289da649a37002c016f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887d", @ANYRES32=0x0, @ANYRES32=0x0], 0x20e) 1m6.178026767s ago: executing program 2 (id=3392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xba}, {0xc, 0x90, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x405, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008054}, 0x8000) 1m5.861679611s ago: executing program 2 (id=3393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) (fail_nth: 1) 1m5.668348283s ago: executing program 4 (id=3394): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)='7', 0x1}], 0x1}}], 0x1, 0x2c000011) 1m3.363655177s ago: executing program 2 (id=3395): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb210032000000000000400000000000000000020000000000"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000400000000000e00000020000000000000000000000006401010000000000000000000000000000000002000200000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) (async) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={r3}, 0xc) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x40, 0x7, 0x0, @private1, @loopback, 0x1, 0x8, 0x7f, 0x8}}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, 0x0, 0x18) (async) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) close_range(r8, 0xffffffffffffffff, 0x0) 55.767568036s ago: executing program 4 (id=3396): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace(0x10, r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (fail_nth: 1) 0s ago: executing program 35 (id=3391): socket$inet(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x2, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000"], 0x1a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x20e) kernel console output (not intermixed with test programs): T15588] FAULT_INJECTION: forcing a failure. [ 917.703358][T15588] name failslab, interval 1, probability 0, space 0, times 0 [ 917.753267][T15588] CPU: 0 UID: 0 PID: 15588 Comm: syz.1.2947 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 917.753298][T15588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 917.753310][T15588] Call Trace: [ 917.753322][T15588] [ 917.753331][T15588] dump_stack_lvl+0x241/0x360 [ 917.753372][T15588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 917.753395][T15588] ? __pfx__printk+0x10/0x10 [ 917.753419][T15588] ? fs_reclaim_acquire+0x93/0x130 [ 917.753443][T15588] ? __pfx___might_resched+0x10/0x10 [ 917.753465][T15588] should_fail_ex+0x3b0/0x4e0 [ 917.753496][T15588] should_failslab+0xac/0x100 [ 917.753525][T15588] __kmalloc_noprof+0xdd/0x4c0 [ 917.753541][T15588] ? kstrtouint_from_user+0x128/0x190 [ 917.753559][T15588] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 917.753584][T15588] tomoyo_realpath_from_path+0xcf/0x5e0 [ 917.753614][T15588] tomoyo_path_number_perm+0x236/0x860 [ 917.753631][T15588] ? __lock_acquire+0x1397/0x2100 [ 917.753653][T15588] ? tomoyo_path_number_perm+0x206/0x860 [ 917.753674][T15588] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 917.753725][T15588] ? __fget_files+0x2a/0x410 [ 917.753747][T15588] ? __fget_files+0x2a/0x410 [ 917.753771][T15588] security_file_ioctl+0xc6/0x2a0 [ 917.753793][T15588] __se_sys_ioctl+0x46/0x170 [ 917.753818][T15588] do_syscall_64+0xf3/0x230 [ 917.753838][T15588] ? clear_bhb_loop+0x35/0x90 [ 917.753861][T15588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.753880][T15588] RIP: 0033:0x7f92f8985d29 [ 917.753897][T15588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.753911][T15588] RSP: 002b:00007f92f97c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.753931][T15588] RAX: ffffffffffffffda RBX: 00007f92f8b75fa0 RCX: 00007f92f8985d29 [ 917.753945][T15588] RDX: 00000000200001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 917.753958][T15588] RBP: 00007f92f97c4090 R08: 0000000000000000 R09: 0000000000000000 [ 917.753969][T15588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.753980][T15588] R13: 0000000000000000 R14: 00007f92f8b75fa0 R15: 00007ffddb388f98 [ 917.754008][T15588] [ 917.755076][T15588] ERROR: Out of memory at tomoyo_realpath_from_path. [ 918.330846][ T5889] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 918.331035][ T5889] ath9k_htc: Failed to initialize the device [ 919.301852][ T5889] usb 3-1: ath9k_htc: USB layer deinitialized [ 919.363699][ T46] usb 3-1: USB disconnect, device number 74 [ 919.720918][T15611] input: syz1 as /devices/virtual/input/input37 [ 919.732853][T15611] trusted_key: syz.1.2954 sent an empty control message without MSG_MORE. [ 921.590468][ T6527] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.612020][ T6527] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.660606][T15636] veth1_to_team: entered promiscuous mode [ 921.693904][T15635] veth1_to_team: left promiscuous mode [ 921.806790][ T6527] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.962442][ T6527] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.657037][ T6527] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.725083][ T6527] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.043631][T15670] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2969'. [ 925.587858][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 925.589234][ T6527] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 925.608755][ T6527] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.723160][T15681] rdma_rxe: rxe_newlink: failed to add syz_tun [ 925.990576][T15682] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2972'. [ 926.060574][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 926.171517][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 926.194845][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 926.209070][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 926.229480][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 926.324462][ T5930] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 926.338890][T15686] program syz.1.2975 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 926.497829][ T5843] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 926.615316][ T5930] usb 3-1: config 128 has an invalid interface number: 147 but max is 0 [ 926.673481][ T5930] usb 3-1: config 128 has no interface number 0 [ 926.694227][ T5930] usb 3-1: config 128 interface 147 has no altsetting 0 [ 926.730665][ T6527] bridge_slave_1: left allmulticast mode [ 926.740400][ T6527] bridge_slave_1: left promiscuous mode [ 927.004911][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.380540][ T5930] usb 3-1: New USB device found, idVendor=adf0, idProduct=d02b, bcdDevice=13.dc [ 927.403894][ T6527] bridge_slave_0: left allmulticast mode [ 927.409597][ T6527] bridge_slave_0: left promiscuous mode [ 927.433149][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.469822][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.477949][ T5930] usb 3-1: Product: syz [ 927.484489][ T5930] usb 3-1: Manufacturer: syz [ 927.519834][ T5930] usb 3-1: SerialNumber: syz [ 928.536664][ T5843] Bluetooth: hci3: command tx timeout [ 928.682054][ T6527] dvmrp1 (unregistering): left allmulticast mode [ 928.941435][ T5930] usb 3-1: USB disconnect, device number 75 [ 930.617657][ T5843] Bluetooth: hci3: command tx timeout [ 930.812531][ T6527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 930.826939][ T6527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.838202][ T6527] bond0 (unregistering): Released all slaves [ 930.864303][T15695] vlan2: entered promiscuous mode [ 930.873017][T15695] bond0: entered promiscuous mode [ 930.878287][T15695] bond_slave_0: entered promiscuous mode [ 930.901381][T15695] bond_slave_1: entered promiscuous mode [ 930.948786][T15695] bond0: left promiscuous mode [ 930.963061][T15695] bond_slave_0: left promiscuous mode [ 930.968684][T15695] bond_slave_1: left promiscuous mode [ 931.009108][T15701] lo: entered allmulticast mode [ 931.023749][T15701] lo: left allmulticast mode [ 931.876794][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.883551][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.512512][T15752] program syz.0.2989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 932.697217][ T5843] Bluetooth: hci3: command tx timeout [ 932.797016][T15757] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 933.818877][T15764] FAULT_INJECTION: forcing a failure. [ 933.818877][T15764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.841939][ T6527] hsr_slave_0: left promiscuous mode [ 933.985233][T15764] CPU: 0 UID: 0 PID: 15764 Comm: syz.4.2994 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 933.995672][T15764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 934.005726][T15764] Call Trace: [ 934.008989][T15764] [ 934.011909][T15764] dump_stack_lvl+0x241/0x360 [ 934.016577][T15764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 934.021762][T15764] ? __pfx__printk+0x10/0x10 [ 934.026338][T15764] ? __pfx_lock_release+0x10/0x10 [ 934.031350][T15764] should_fail_ex+0x3b0/0x4e0 [ 934.036017][T15764] _copy_from_user+0x2d/0xb0 [ 934.040593][T15764] copy_msghdr_from_user+0xae/0x680 [ 934.045809][T15764] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 934.051643][T15764] ? __fget_files+0x2a/0x410 [ 934.056246][T15764] ? __fget_files+0x2a/0x410 [ 934.060829][T15764] __sys_sendmsg+0x209/0x350 [ 934.065412][T15764] ? __pfx_lock_release+0x10/0x10 [ 934.070423][T15764] ? __pfx___sys_sendmsg+0x10/0x10 [ 934.075536][T15764] ? __pfx_vfs_write+0x10/0x10 [ 934.080302][T15764] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 934.086625][T15764] ? do_syscall_64+0x100/0x230 [ 934.091374][T15764] ? do_syscall_64+0xb6/0x230 [ 934.096051][T15764] do_syscall_64+0xf3/0x230 [ 934.100569][T15764] ? clear_bhb_loop+0x35/0x90 [ 934.105257][T15764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.111137][T15764] RIP: 0033:0x7f0de6185d29 [ 934.115543][T15764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.135142][T15764] RSP: 002b:00007f0de6fcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 934.143554][T15764] RAX: ffffffffffffffda RBX: 00007f0de6375fa0 RCX: 00007f0de6185d29 [ 934.151537][T15764] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000005 [ 934.159509][T15764] RBP: 00007f0de6fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 934.167476][T15764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.175439][T15764] R13: 0000000000000000 R14: 00007f0de6375fa0 R15: 00007ffe592a6648 [ 934.183421][T15764] [ 934.823810][ T5843] Bluetooth: hci3: command tx timeout [ 935.212562][ T6527] hsr_slave_1: left promiscuous mode [ 935.225750][ T6527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 935.363251][ T6527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 935.453192][ T6527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 935.460669][ T6527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 935.561638][ T6527] veth1_macvtap: left promiscuous mode [ 936.167418][ T6527] veth0_macvtap: left promiscuous mode [ 936.173703][ T6527] veth1_vlan: left promiscuous mode [ 936.179728][ T6527] veth0_vlan: left promiscuous mode [ 939.019815][T15789] input: syz1 as /devices/virtual/input/input38 [ 939.648204][ T6527] team0 (unregistering): Port device team_slave_1 removed [ 939.784833][ T6527] team0 (unregistering): Port device team_slave_0 removed [ 942.094189][T15676] chnl_net:caif_netlink_parms(): no params data found [ 942.275562][T15808] vlan0: entered promiscuous mode [ 942.283039][T15808] bond0: entered promiscuous mode [ 942.430798][T15808] bond_slave_0: entered promiscuous mode [ 942.445795][T15808] bond_slave_1: entered promiscuous mode [ 942.499093][T15808] bond0: left promiscuous mode [ 942.594414][T15808] bond_slave_0: left promiscuous mode [ 942.731269][T15808] bond_slave_1: left promiscuous mode [ 943.342276][T15676] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.383657][T15676] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.390946][T15676] bridge_slave_0: entered allmulticast mode [ 943.439558][T15676] bridge_slave_0: entered promiscuous mode [ 943.463870][T15676] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.479692][T15676] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.489753][T15676] bridge_slave_1: entered allmulticast mode [ 943.550044][T15676] bridge_slave_1: entered promiscuous mode [ 944.310502][ T6527] IPVS: stop unused estimator thread 0... [ 944.475114][T15676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.912205][T15676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.060191][T15676] team0: Port device team_slave_0 added [ 945.091958][T15676] team0: Port device team_slave_1 added [ 945.206624][T15676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.221651][T15676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.255677][T15676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.256602][T15831] program syz.4.3009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 945.273637][T15676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.310053][T15676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.377612][T15676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.570573][T15676] hsr_slave_0: entered promiscuous mode [ 945.602416][T15676] hsr_slave_1: entered promiscuous mode [ 945.635531][T15676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 945.667326][T15676] Cannot create hsr debugfs directory [ 946.127281][T15837] overlayfs: missing 'lowerdir' [ 947.570546][T15676] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 947.615610][T15676] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 947.688804][T15676] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 947.749666][T15676] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 949.188429][T15857] overlayfs: missing 'lowerdir' [ 949.626870][T15676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.694294][T15676] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.722168][T14104] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.731458][T14104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.751038][T14104] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.760000][T14104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.136205][T15676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.245144][T15872] overlayfs: overlapping lowerdir path [ 950.471650][T15872] overlayfs: missing 'lowerdir' [ 951.309801][T15676] veth0_vlan: entered promiscuous mode [ 951.332439][T15676] veth1_vlan: entered promiscuous mode [ 951.419207][T15676] veth0_macvtap: entered promiscuous mode [ 951.438144][T15676] veth1_macvtap: entered promiscuous mode [ 951.521457][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.533189][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.545337][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.556275][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.566978][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.578478][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.613558][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.628012][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.642026][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.660460][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.674408][T15676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 951.686471][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.697711][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.707877][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.719286][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.738559][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.750984][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.781346][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.803701][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.818777][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.830396][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.849209][T15676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 951.885290][T15676] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.898058][T15676] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.910274][T15676] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.922151][T15676] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.015888][T12596] block nbd2: Receive control failed (result -32) [ 953.024963][ T5843] block nbd2: Receive control failed (result -32) [ 953.293287][T12596] Bluetooth: hci4: command 0x0406 tx timeout [ 953.349167][T15891] block nbd2: shutting down sockets [ 953.565468][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.598817][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.516698][T14103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.617463][T14103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.879892][T12596] Bluetooth: hci4: unexpected event for opcode 0x202a [ 954.883189][ T5889] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 955.065432][ T5889] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 955.084848][ T5889] usb 3-1: config 0 has no interface number 0 [ 955.890831][ T5889] usb 3-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 955.904775][ T5889] usb 3-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 955.918307][ T5889] usb 3-1: config 0 interface 153 has no altsetting 0 [ 955.994084][ T5889] usb 3-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 956.306170][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.314671][ T5889] usb 3-1: Product: syz [ 956.319279][ T5889] usb 3-1: Manufacturer: syz [ 956.324787][ T5889] usb 3-1: SerialNumber: syz [ 956.351192][ T5889] usb 3-1: config 0 descriptor?? [ 956.353404][ T29] audit: type=1326 audit(1737486555.192:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15924 comm="syz.1.3033" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92f8985d29 code=0x0 [ 956.357901][ T5889] hub 3-1:0.153: bad descriptor, ignoring hub [ 956.384805][ T5889] hub 3-1:0.153: probe with driver hub failed with error -5 [ 956.393814][ T5889] sierra 3-1:0.153: Sierra USB modem converter detected [ 956.583433][ T972] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 956.912650][T15933] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 957.040871][ T5889] usb 3-1: USB disconnect, device number 76 [ 957.067003][ T5889] sierra 3-1:0.153: device disconnected [ 957.265244][ T972] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 957.399245][ T972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.480212][ T972] usb 7-1: config 0 descriptor?? [ 958.463003][ T972] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 958.512972][ T972] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 958.544706][ T972] [drm:udl_init] *ERROR* Selecting channel failed [ 958.770088][ T972] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 958.843096][T15951] rdma_rxe: rxe_newlink: failed to add syz_tun [ 959.756345][ T972] [drm] Initialized udl on minor 2 [ 959.767370][ T972] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 959.785235][ T972] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 960.521478][ T5889] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 960.541932][ T972] usb 7-1: USB disconnect, device number 2 [ 960.555060][ T5889] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 960.571117][ T5890] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 961.147285][ T5890] usb 2-1: config 128 has an invalid interface number: 147 but max is 0 [ 961.216084][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 961.230297][ T5890] usb 2-1: config 128 has no interface number 0 [ 961.240551][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 961.262863][ T5890] usb 2-1: config 128 interface 147 has no altsetting 0 [ 961.274914][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 961.301430][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 961.317709][ T5890] usb 2-1: New USB device found, idVendor=adf0, idProduct=d02b, bcdDevice=13.dc [ 961.335631][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 961.347341][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.361014][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 961.381057][ T5890] usb 2-1: Product: syz [ 961.388535][ T5890] usb 2-1: Manufacturer: syz [ 961.395863][ T5890] usb 2-1: SerialNumber: syz [ 961.593026][ T5890] usb 2-1: USB disconnect, device number 11 [ 963.008675][T15978] Cannot find set identified by id 65534 to match [ 963.435219][T12596] Bluetooth: hci1: command tx timeout [ 964.173036][ T29] audit: type=1326 audit(1737486562.932:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15976 comm="syz.1.3047" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92f8985d29 code=0x0 [ 964.418635][T15955] chnl_net:caif_netlink_parms(): no params data found [ 965.603537][T12596] Bluetooth: hci1: command tx timeout [ 966.005425][T16009] overlayfs: overlapping lowerdir path [ 966.178507][T16010] overlayfs: missing 'lowerdir' [ 966.503013][T15956] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 966.522538][T15955] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.557173][T15955] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.567588][T15955] bridge_slave_0: entered allmulticast mode [ 966.580666][T15955] bridge_slave_0: entered promiscuous mode [ 966.592577][T15955] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.604715][T15955] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.616290][T15955] bridge_slave_1: entered allmulticast mode [ 966.628873][T15955] bridge_slave_1: entered promiscuous mode [ 966.671276][T15955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 966.688034][T15955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 966.717037][T15956] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 966.749559][T15956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.761355][T15956] usb 2-1: config 0 descriptor?? [ 966.810829][T15955] team0: Port device team_slave_0 added [ 967.026471][T15955] team0: Port device team_slave_1 added [ 967.386881][T15955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.201842][T12596] Bluetooth: hci1: command tx timeout [ 968.678893][T15955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 968.713306][T16023] Cannot find set identified by id 65534 to match [ 968.724200][T15955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.756441][T15955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.777002][T15955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 968.883869][T15955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.667676][T15955] hsr_slave_0: entered promiscuous mode [ 970.213132][T12596] Bluetooth: hci1: command tx timeout [ 970.230225][T15955] hsr_slave_1: entered promiscuous mode [ 970.263162][T15955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 970.287416][ T29] audit: type=1326 audit(1737486569.132:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16029 comm="syz.0.3061" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5f5d85d29 code=0x0 [ 970.309433][T15955] Cannot create hsr debugfs directory [ 970.415858][T16035] sp0: Synchronizing with TNC [ 970.475210][T16036] sp0: Found TNC [ 972.443659][T15956] [drm] vendor descriptor length:92 data:00 00 00 00 00 00 00 00 00 00 00 [ 972.454343][T15956] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 972.484942][T15956] [drm:udl_init] *ERROR* Selecting channel failed [ 972.505658][T15956] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 972.516648][T15956] [drm] Initialized udl on minor 2 [ 972.529462][T15956] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 972.537871][T15956] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 972.552818][T15955] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.553705][ T972] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 972.577948][ T972] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 972.584046][T16050] overlayfs: overlapping lowerdir path [ 972.626025][T16050] overlayfs: missing 'lowerdir' [ 972.763502][T15955] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.935383][T15955] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.123090][ T972] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 973.146799][T15955] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.286713][ T972] usb 1-1: too many configurations: 242, using maximum allowed: 8 [ 973.476343][T16062] overlayfs: overlapping lowerdir path [ 973.743227][T16062] overlayfs: missing 'lowerdir' [ 973.869549][ T25] usb 2-1: USB disconnect, device number 12 [ 973.878218][ T972] usb 1-1: config index 0 descriptor too short (expected 65250, got 72) [ 973.920193][ T972] usb 1-1: config index 1 descriptor too short (expected 65250, got 72) [ 973.974677][ T972] usb 1-1: config index 2 descriptor too short (expected 65250, got 72) [ 974.006831][ T972] usb 1-1: config index 3 descriptor too short (expected 65250, got 72) [ 974.035874][T15955] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 974.053797][ T972] usb 1-1: config index 4 descriptor too short (expected 65250, got 72) [ 974.078260][ T972] usb 1-1: config index 5 descriptor too short (expected 65250, got 72) [ 974.094714][T15955] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 974.116863][ T972] usb 1-1: config index 6 descriptor too short (expected 65250, got 72) [ 974.141269][T15955] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 974.155256][ T972] usb 1-1: config index 7 descriptor too short (expected 65250, got 72) [ 974.299895][T15955] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 974.438827][ T972] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 974.794051][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.838518][T16078] overlayfs: missing 'lowerdir' [ 975.046521][ T972] usb 1-1: Product: syz [ 975.071403][ T972] usb 1-1: Manufacturer: syz [ 975.076503][ T972] usb 1-1: SerialNumber: syz [ 975.093205][ T972] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 975.388507][ T5890] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 975.459777][T15955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.470491][ T29] audit: type=1326 audit(1737486574.302:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16069 comm="syz.6.3072" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b64185d29 code=0x0 [ 975.545977][T15955] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.580364][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.587558][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.368630][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.375906][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.516642][ T5890] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 976.528108][ T5890] ath9k_htc: Failed to initialize the device [ 976.556233][ T5890] usb 1-1: ath9k_htc: USB layer deinitialized [ 976.604592][T16087] overlayfs: missing 'lowerdir' [ 977.580953][T16095] overlayfs: overlapping lowerdir path [ 977.784256][T16095] overlayfs: missing 'lowerdir' [ 978.168020][ T5973] usb 1-1: USB disconnect, device number 55 [ 978.250764][T16099] overlayfs: overlapping lowerdir path [ 978.269535][T16099] overlayfs: missing 'lowerdir' [ 978.349832][T15955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.468345][T15955] veth0_vlan: entered promiscuous mode [ 978.488858][T15955] veth1_vlan: entered promiscuous mode [ 978.529098][T15955] veth0_macvtap: entered promiscuous mode [ 978.547834][T15955] veth1_macvtap: entered promiscuous mode [ 979.338453][T15955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.417466][T15955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.428217][T15955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.444341][T15955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.464667][T15955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.499208][T15955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.003784][T15955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.053435][T15955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.113614][T15955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.127841][T15955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.138758][T15955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.151452][T15955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.174338][T15955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.234854][T15955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.265658][T15955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.335826][T15955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.358377][T15955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.381650][T15955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.401003][T15955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.411350][T15955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.430494][T15955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.452348][T15955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.486397][T15955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.505004][T15955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.518110][T15955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.532065][T15955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.313657][T15955] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.324401][T15955] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.333396][T15955] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.342292][T15955] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.097469][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.110945][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.156141][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.373897][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.423115][ T972] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 982.853159][ T972] usb 1-1: too many configurations: 242, using maximum allowed: 8 [ 983.107193][ T972] usb 1-1: config index 0 descriptor too short (expected 65250, got 72) [ 983.250894][ T972] usb 1-1: config index 1 descriptor too short (expected 65250, got 72) [ 983.295914][ T972] usb 1-1: config index 2 descriptor too short (expected 65250, got 72) [ 983.315030][ T972] usb 1-1: config index 3 descriptor too short (expected 65250, got 72) [ 983.332705][ T972] usb 1-1: config index 4 descriptor too short (expected 65250, got 72) [ 983.393881][T16148] overlayfs: overlapping lowerdir path [ 983.456921][ T972] usb 1-1: config index 5 descriptor too short (expected 65250, got 72) [ 983.489918][ T972] usb 1-1: config index 6 descriptor too short (expected 65250, got 72) [ 983.645439][T16148] overlayfs: missing 'lowerdir' [ 983.859150][ T972] usb 1-1: config index 7 descriptor too short (expected 65250, got 72) [ 983.972597][ T972] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 983.990380][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.304650][T16152] overlayfs: overlapping lowerdir path [ 984.321372][T16152] overlayfs: missing 'lowerdir' [ 984.370050][ T972] usb 1-1: Product: syz [ 984.385795][ T972] usb 1-1: Manufacturer: syz [ 984.397321][ T972] usb 1-1: SerialNumber: syz [ 985.176557][ T972] usb 1-1: can't set config #1, error -71 [ 985.190441][ T972] usb 1-1: USB disconnect, device number 56 [ 985.493672][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 986.170761][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.194694][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.215780][ T25] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 986.225459][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.241971][ T25] usb 2-1: config 0 descriptor?? [ 986.651902][T16187] overlayfs: overlapping lowerdir path [ 986.661667][T16187] overlayfs: missing 'lowerdir' [ 986.696901][ T25] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 986.776657][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000C/input/input41 [ 986.836367][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 986.847466][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 986.859179][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 986.874180][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 986.888914][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 986.899245][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 986.919057][T16182] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.003179][T16195] overlayfs: overlapping lowerdir path [ 987.049788][ T25] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 987.263039][ T25] usb 2-1: USB disconnect, device number 13 [ 987.346189][T16195] overlayfs: missing 'lowerdir' [ 988.485509][T16182] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.093043][ T5843] Bluetooth: hci4: command tx timeout [ 990.122508][ T5930] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 990.923299][ T5930] usb 1-1: too many configurations: 242, using maximum allowed: 8 [ 990.956553][ T5930] usb 1-1: config index 0 descriptor too short (expected 65250, got 72) [ 990.987545][ T5930] usb 1-1: config index 1 descriptor too short (expected 65250, got 72) [ 991.100332][T16229] overlayfs: overlapping lowerdir path [ 991.134437][ T5930] usb 1-1: config index 2 descriptor too short (expected 65250, got 72) [ 991.135985][T16182] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.184631][ T5843] Bluetooth: hci4: command tx timeout [ 991.253438][ T5930] usb 1-1: config index 3 descriptor too short (expected 65250, got 72) [ 991.301087][ T5930] usb 1-1: config index 4 descriptor too short (expected 65250, got 72) [ 991.353080][T16229] overlayfs: missing 'lowerdir' [ 991.369103][ T5930] usb 1-1: config index 5 descriptor too short (expected 65250, got 72) [ 991.447609][ T5930] usb 1-1: config index 6 descriptor too short (expected 65250, got 72) [ 991.742102][T16232] overlayfs: overlapping lowerdir path [ 991.756607][T16232] overlayfs: missing 'lowerdir' [ 991.878457][T16182] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.304331][ T29] audit: type=1326 audit(1737486590.942:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16236 comm="syz.6.3117" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b64185d29 code=0x0 [ 992.601409][T16189] chnl_net:caif_netlink_parms(): no params data found [ 992.942244][T16182] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.952809][T16189] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.976494][T16189] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.991520][T16189] bridge_slave_0: entered allmulticast mode [ 993.007682][T16189] bridge_slave_0: entered promiscuous mode [ 993.019772][T16182] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.039930][T16189] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.050443][T16189] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.057951][T16189] bridge_slave_1: entered allmulticast mode [ 993.065313][T16189] bridge_slave_1: entered promiscuous mode [ 993.092710][T16182] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.124760][T16182] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.167704][ T5930] usb 1-1: unable to read config index 7 descriptor/start: -71 [ 993.177206][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.183877][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.194081][ T5930] usb 1-1: can't read configurations, error -71 [ 993.329687][ T5843] Bluetooth: hci4: command tx timeout [ 994.495614][T16189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.555418][T16189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.838323][T16258] delete_channel: no stack [ 995.415726][ T5843] Bluetooth: hci4: command tx timeout [ 995.504702][T16189] team0: Port device team_slave_0 added [ 995.605315][T16189] team0: Port device team_slave_1 added [ 995.702766][T16189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.704560][T16257] delete_channel: no stack [ 995.737071][T16189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.743594][T16272] overlayfs: overlapping lowerdir path [ 995.775891][T16272] overlayfs: missing 'lowerdir' [ 995.970285][T16276] delete_channel: no stack [ 996.039779][T16189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.403502][T16189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.413029][T16189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.465489][T16189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.704042][T16189] hsr_slave_0: entered promiscuous mode [ 996.712542][T16274] delete_channel: no stack [ 997.440774][T16189] hsr_slave_1: entered promiscuous mode [ 997.476250][T16189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 997.874258][T16189] Cannot create hsr debugfs directory [ 998.404364][T16303] program syz.6.3132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 998.480766][ T972] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 999.333342][ T972] usb 2-1: too many configurations: 242, using maximum allowed: 8 [ 999.391253][ T972] usb 2-1: config index 0 descriptor too short (expected 65250, got 72) [ 999.465387][ T972] usb 2-1: config index 1 descriptor too short (expected 65250, got 72) [ 999.536906][ T972] usb 2-1: config index 2 descriptor too short (expected 65250, got 72) [ 999.584244][ T972] usb 2-1: config index 3 descriptor too short (expected 65250, got 72) [ 999.604265][ T972] usb 2-1: config index 4 descriptor too short (expected 65250, got 72) [ 999.613966][ T972] usb 2-1: config index 5 descriptor too short (expected 65250, got 72) [ 999.644038][ T972] usb 2-1: config index 6 descriptor too short (expected 65250, got 72) [ 999.686194][ T972] usb 2-1: config index 7 descriptor too short (expected 65250, got 72) [ 999.688755][T16189] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.712232][ T972] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 999.730399][ T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.761947][ T972] usb 2-1: Product: syz [ 999.782541][ T972] usb 2-1: Manufacturer: syz [ 999.801746][ T972] usb 2-1: SerialNumber: syz [ 999.894483][ T972] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 999.983137][ T5890] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1000.138344][T16189] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.529778][T16189] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.799400][T16189] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.093242][ T5890] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1001.106021][ T5890] ath9k_htc: Failed to initialize the device [ 1001.172811][ T5890] usb 2-1: ath9k_htc: USB layer deinitialized [ 1001.282387][T16316] overlayfs: overlapping lowerdir path [ 1001.618214][T16316] overlayfs: missing 'lowerdir' [ 1001.831025][T16189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1001.885587][T16189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1001.903868][ T9] usb 2-1: USB disconnect, device number 14 [ 1001.960896][T16189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1002.009936][T16189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1003.195802][T16320] delete_channel: no stack [ 1003.451762][T16318] delete_channel: no stack [ 1005.018682][T16189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.852266][T16189] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.908917][T16256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.916804][T16256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.055749][T16256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.063005][T16256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.852463][T16189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1006.866351][T16189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1008.284939][ T5843] block nbd0: Receive control failed (result -32) [ 1008.292516][T12596] block nbd0: Receive control failed (result -32) [ 1008.300647][T16353] block nbd0: shutting down sockets [ 1008.781729][ T972] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1009.041676][T16189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1009.133469][ T972] usb 7-1: too many configurations: 242, using maximum allowed: 8 [ 1009.820185][ T972] usb 7-1: config index 0 descriptor too short (expected 65250, got 72) [ 1009.837196][T16374] delete_channel: no stack [ 1010.809777][T16373] delete_channel: no stack [ 1013.764935][T16189] veth0_vlan: entered promiscuous mode [ 1014.022839][T16189] veth1_vlan: entered promiscuous mode [ 1014.056842][T16189] veth0_macvtap: entered promiscuous mode [ 1014.068308][T16189] veth1_macvtap: entered promiscuous mode [ 1014.263880][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.274517][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.294814][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.298121][ T972] usb 7-1: unable to read config index 1 descriptor/start: -71 [ 1014.322671][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.342949][ T972] usb 7-1: can't read configurations, error -71 [ 1014.343015][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.382959][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.410476][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.436255][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.457487][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.478823][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.489931][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.511220][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.599028][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.609701][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.635030][T16189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.416223][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1015.459580][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.470532][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1015.483323][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.496417][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1015.508623][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.530895][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1015.550064][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.561114][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1015.572980][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.563032][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.691512][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.733212][T16189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.767763][T16189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.811083][T16189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1017.054346][T16189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.073494][T16189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.113710][T16430] block nbd6: Device being setup by another task [ 1017.179295][T16189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.227576][ T5848] block nbd6: Receive control failed (result -32) [ 1017.359345][T16437] program syz.2.3166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1017.370288][T16189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.605920][T16431] block nbd6: shutting down sockets [ 1017.809570][T16442] program syz.0.3165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1017.944136][ T8475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.970350][ T8475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.145357][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.163409][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.757910][T15956] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1019.985826][T11093] infiniband syz1: set down [ 1020.054776][ T8460] smc: removing ib device syz1 [ 1020.073078][T15956] usb 2-1: too many configurations: 242, using maximum allowed: 8 [ 1020.132416][T15956] usb 2-1: config index 0 descriptor too short (expected 65250, got 72) [ 1020.214216][T15956] usb 2-1: config index 1 descriptor too short (expected 65250, got 72) [ 1020.257788][T15956] usb 2-1: config index 2 descriptor too short (expected 65250, got 72) [ 1020.344167][T15956] usb 2-1: config index 3 descriptor too short (expected 65250, got 72) [ 1020.418971][T15956] usb 2-1: config index 4 descriptor too short (expected 65250, got 72) [ 1020.868213][T15956] usb 2-1: config index 5 descriptor too short (expected 65250, got 72) [ 1020.979199][T15956] usb 2-1: config index 6 descriptor too short (expected 65250, got 72) [ 1021.633033][T15956] usb 2-1: config index 7 descriptor too short (expected 65250, got 72) [ 1021.664785][T15956] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1021.702828][T15956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.743151][T15956] usb 2-1: Product: syz [ 1021.758757][T15956] usb 2-1: Manufacturer: syz [ 1021.783446][T15956] usb 2-1: SerialNumber: syz [ 1022.078093][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1022.111706][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1022.161941][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1022.197022][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1022.207307][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1022.237216][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1023.365294][T16490] Cannot find set identified by id 65534 to match [ 1024.347801][ T5843] block nbd6: Receive control failed (result -32) [ 1024.354673][ T5848] block nbd6: Receive control failed (result -32) [ 1024.541664][ T5848] Bluetooth: hci0: command tx timeout [ 1024.721434][T16479] block nbd6: shutting down sockets [ 1025.102707][T16498] overlayfs: overlapping lowerdir path [ 1025.126573][T16498] overlayfs: missing 'lowerdir' [ 1025.975253][T15956] usb 2-1: can't set config #1, error -71 [ 1025.983474][T16480] chnl_net:caif_netlink_parms(): no params data found [ 1026.063971][T15956] usb 2-1: USB disconnect, device number 15 [ 1026.275610][T16514] overlayfs: overlapping lowerdir path [ 1026.315164][T16514] overlayfs: missing 'lowerdir' [ 1026.390064][T16519] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3189'. [ 1026.614679][ T5848] Bluetooth: hci0: command tx timeout [ 1027.307282][T16521] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3186'. [ 1027.347079][T16519] bond0: Unable to set down delay as MII monitoring is disabled [ 1028.112265][T16480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.121045][T16480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.128600][T16480] bridge_slave_0: entered allmulticast mode [ 1028.140051][T16480] bridge_slave_0: entered promiscuous mode [ 1028.149379][T16480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.157541][T16480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.165960][T16480] bridge_slave_1: entered allmulticast mode [ 1028.173935][T16480] bridge_slave_1: entered promiscuous mode [ 1028.500587][T16539] Cannot find set identified by id 65534 to match [ 1029.247373][ T5848] Bluetooth: hci0: command tx timeout [ 1029.480050][T16480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.586878][T16546] overlayfs: overlapping lowerdir path [ 1029.615885][T16480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.652717][T16548] overlayfs: missing 'lowerdir' [ 1029.731291][T16480] team0: Port device team_slave_0 added [ 1030.517284][T16480] team0: Port device team_slave_1 added [ 1030.626391][T16480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.671524][T16480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.770577][T16480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.375691][ T5843] Bluetooth: hci0: command tx timeout [ 1031.643883][T16480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.689693][T16480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.847068][T16480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.973325][T15956] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1032.076069][T16480] hsr_slave_0: entered promiscuous mode [ 1032.097253][T16480] hsr_slave_1: entered promiscuous mode [ 1032.117978][T16480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1032.143210][T16480] Cannot create hsr debugfs directory [ 1032.150173][T15956] usb 3-1: too many configurations: 242, using maximum allowed: 8 [ 1032.164026][T15956] usb 3-1: config index 0 descriptor too short (expected 65250, got 72) [ 1032.211578][T15956] usb 3-1: config index 1 descriptor too short (expected 65250, got 72) [ 1032.251723][T15956] usb 3-1: config index 2 descriptor too short (expected 65250, got 72) [ 1032.277904][T15956] usb 3-1: config index 3 descriptor too short (expected 65250, got 72) [ 1032.294148][T15956] usb 3-1: config index 4 descriptor too short (expected 65250, got 72) [ 1032.306245][T15956] usb 3-1: config index 5 descriptor too short (expected 65250, got 72) [ 1032.318605][T15956] usb 3-1: config index 6 descriptor too short (expected 65250, got 72) [ 1033.306038][T15956] usb 3-1: config index 7 descriptor too short (expected 65250, got 72) [ 1033.316590][T15956] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1033.326100][T15956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.336398][T15956] usb 3-1: Product: syz [ 1033.340697][T15956] usb 3-1: Manufacturer: syz [ 1033.455518][T15956] usb 3-1: SerialNumber: syz [ 1033.464675][T15956] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1033.507331][ T5890] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1034.613059][ T5890] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1034.623652][ T5890] ath9k_htc: Failed to initialize the device [ 1034.665072][ T5890] usb 3-1: ath9k_htc: USB layer deinitialized [ 1035.075723][T16587] Cannot find set identified by id 65534 to match [ 1035.742975][ T5930] usb 3-1: USB disconnect, device number 77 [ 1035.753381][ T29] audit: type=1326 audit(1737486634.592:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16578 comm="syz.1.3202" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92f8985d29 code=0x0 [ 1037.230001][T16480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.522038][T16480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.043210][T15956] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1038.123306][T16480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.033112][T15956] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1039.169480][T15956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.203671][T15956] usb 3-1: config 0 descriptor?? [ 1039.265554][T16620] program syz.1.3211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1039.493128][T15956] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1039.498806][T16480] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.512085][T15956] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1039.513066][T15956] [drm:udl_init] *ERROR* Selecting channel failed [ 1039.970583][ T29] audit: type=1326 audit(1737486638.782:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16621 comm="syz.6.3213" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b64185d29 code=0x0 [ 1040.068882][T15956] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1040.103080][T15956] [drm] Initialized udl on minor 2 [ 1040.148440][T15956] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1040.162027][T15956] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1040.191879][ T5890] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1040.224849][T15956] usb 3-1: USB disconnect, device number 78 [ 1040.230978][ T5890] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1040.617314][T16480] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1041.358008][T16480] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1041.432327][T15956] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1041.536347][T16480] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1041.679084][T16480] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1042.035640][T15956] usb 3-1: too many configurations: 242, using maximum allowed: 8 [ 1042.054286][T15956] usb 3-1: config index 0 descriptor too short (expected 65250, got 72) [ 1043.046081][T16646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3221'. [ 1043.585097][T16480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.696779][T16480] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.228150][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.235390][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.253640][T16659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3224'. [ 1044.286892][ T8460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.295661][ T8460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1044.433269][ T5890] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1044.474080][T16662] overlayfs: overlapping lowerdir path [ 1044.545160][T15956] usb 3-1: unable to read config index 1 descriptor/start: -71 [ 1044.572946][T15956] usb 3-1: can't read configurations, error -71 [ 1044.609430][T16662] overlayfs: missing 'lowerdir' [ 1046.509880][ T5890] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1046.571916][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.626697][ T5890] usb 7-1: config 0 descriptor?? [ 1046.697939][ T5890] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1046.739170][ T5890] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1046.783342][ T5890] [drm:udl_init] *ERROR* Selecting channel failed [ 1047.585574][ T5890] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1047.665248][ T5890] [drm] Initialized udl on minor 2 [ 1047.685260][ T5890] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1047.711124][ T5890] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1047.729696][ T972] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1047.741717][ T5890] usb 7-1: USB disconnect, device number 5 [ 1047.748044][ T972] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1047.955098][T16480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.010339][T16480] veth0_vlan: entered promiscuous mode [ 1048.025997][T16480] veth1_vlan: entered promiscuous mode [ 1048.812138][T16480] veth0_macvtap: entered promiscuous mode [ 1048.867475][T16480] veth1_macvtap: entered promiscuous mode [ 1048.883621][T16700] program syz.2.3234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1048.983980][T16480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.151131][T16480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.162750][T16480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.178073][T16480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.282523][T16480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.427025][T16480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.617333][T16480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.796065][T16480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.850261][T16480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.899255][T16480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.002949][T16480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.033117][T16480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.053083][T16480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.073047][T16480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.084320][ T972] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1050.104469][T16480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.156540][T16480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.208969][T16480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.265449][ T972] usb 7-1: too many configurations: 242, using maximum allowed: 8 [ 1050.940733][ T972] usb 7-1: config index 0 descriptor too short (expected 65250, got 72) [ 1050.979731][ T972] usb 7-1: config index 1 descriptor too short (expected 65250, got 72) [ 1051.015963][T16480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.115114][ T972] usb 7-1: config index 2 descriptor too short (expected 65250, got 72) [ 1051.136650][ T972] usb 7-1: config index 3 descriptor too short (expected 65250, got 72) [ 1051.156486][ T972] usb 7-1: config index 4 descriptor too short (expected 65250, got 72) [ 1051.172240][ T972] usb 7-1: config index 5 descriptor too short (expected 65250, got 72) [ 1051.194333][T16480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.213395][ T972] usb 7-1: config index 6 descriptor too short (expected 65250, got 72) [ 1051.233078][T16480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.253912][ T972] usb 7-1: config index 7 descriptor too short (expected 65250, got 72) [ 1051.264687][T16480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.287261][ T972] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1051.305024][ T972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.315365][T16480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.339201][ T972] usb 7-1: Product: syz [ 1051.349367][T16480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.370073][ T972] usb 7-1: Manufacturer: syz [ 1051.380680][ T972] usb 7-1: SerialNumber: syz [ 1051.387979][T16480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.413745][ T972] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1051.439831][T16480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.469750][T16480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.491516][T16480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.516538][ T9] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1051.534205][T16480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.560006][T16480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.576547][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 1051.593011][T16480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.604352][T16480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.616313][T16480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.628231][T16480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.646360][T16480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.663931][ T3509] vlan2: left allmulticast mode [ 1051.669245][ T3509] gretap0: left allmulticast mode [ 1051.675822][ T3509] vlan2: left promiscuous mode [ 1051.680905][ T3509] gretap0: left promiscuous mode [ 1051.686928][ T3509] bridge0: port 3(vlan2) entered disabled state [ 1051.786462][ T3509] bridge_slave_1: left allmulticast mode [ 1051.792456][ T3509] bridge_slave_1: left promiscuous mode [ 1051.814233][ T3509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.938646][ T3509] bridge_slave_0: left allmulticast mode [ 1051.960400][ T3509] bridge_slave_0: left promiscuous mode [ 1051.985724][ T3509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.532990][ T9] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1052.603149][ T9] ath9k_htc: Failed to initialize the device [ 1052.690551][ T9] usb 7-1: ath9k_htc: USB layer deinitialized [ 1053.814982][ T5930] usb 7-1: USB disconnect, device number 6 [ 1054.878242][ T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1054.879668][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.893242][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.860221][ T25] usb 2-1: device descriptor read/all, error -71 [ 1058.293775][ T29] audit: type=1326 audit(1737486657.032:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16737 comm="syz.2.3244" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8cb2b85d29 code=0x0 [ 1058.718571][ T29] audit: type=1326 audit(1737486657.322:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16738 comm="syz.6.3243" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b64185d29 code=0x0 [ 1059.067593][ T29] audit: type=1326 audit(1737486657.912:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16750 comm="syz.4.3245" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc203785d29 code=0x0 [ 1063.058876][T16790] overlayfs: overlapping lowerdir path [ 1063.369121][T16791] overlayfs: missing 'lowerdir' [ 1063.668217][ T3509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1063.995894][ T3509] bond0 (unregistering): Released all slaves [ 1064.832578][T16480] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.889222][T16480] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.963036][T16480] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.971876][T16480] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.124732][ T29] audit: type=1326 audit(1737486665.962:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16809 comm="syz.4.3257" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc203785d29 code=0x0 [ 1067.204773][ T3509] hsr_slave_0: left promiscuous mode [ 1067.265835][ T3509] hsr_slave_1: left promiscuous mode [ 1067.363991][ T3509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.493789][ T3509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.599411][ T3509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.757595][ T3509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.783643][ T3509] batman_adv: batadv0: Removing interface: macvtap0 [ 1069.002316][ T3509] macvlan1: left allmulticast mode [ 1069.012326][ T3509] veth1_vlan: left allmulticast mode [ 1069.018662][ T3509] veth1_macvtap: left promiscuous mode [ 1069.025026][ T3509] veth1_vlan: left promiscuous mode [ 1069.030545][ T3509] veth0_vlan: left promiscuous mode [ 1069.943824][T16835] FAULT_INJECTION: forcing a failure. [ 1069.943824][T16835] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.961393][T16835] CPU: 0 UID: 0 PID: 16835 Comm: syz.1.3265 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 1069.973538][T16835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1069.984589][T16835] Call Trace: [ 1069.988266][T16835] [ 1069.991735][T16835] dump_stack_lvl+0x241/0x360 [ 1069.997557][T16835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1070.002907][T16835] ? __pfx__printk+0x10/0x10 [ 1070.008755][T16835] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1070.015243][T16835] ? __pfx___might_resched+0x10/0x10 [ 1070.021411][T16835] should_fail_ex+0x3b0/0x4e0 [ 1070.030441][T16835] should_failslab+0xac/0x100 [ 1070.037058][T16835] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1070.044325][T16835] ? __alloc_skb+0x1c3/0x440 [ 1070.049383][T16835] __alloc_skb+0x1c3/0x440 [ 1070.053907][T16835] ? __pfx___alloc_skb+0x10/0x10 [ 1070.058954][T16835] ? __lock_acquire+0x1397/0x2100 [ 1070.064146][T16835] ppp_write+0xb1/0x3e0 [ 1070.068610][T16835] vfs_writev+0x5a9/0xba0 [ 1070.074791][T16835] ? __pfx_ppp_write+0x10/0x10 [ 1070.081086][T16835] ? __pfx_vfs_writev+0x10/0x10 [ 1070.086179][T16835] ? vfs_write+0x730/0xd30 [ 1070.092332][T16835] ? __fget_files+0x2a/0x410 [ 1070.097416][T16835] ? __fget_files+0x395/0x410 [ 1070.103275][T16835] ? __fget_files+0x2a/0x410 [ 1070.108934][T16835] __x64_sys_pwritev+0x1b7/0x2d0 [ 1070.113981][T16835] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1070.119586][T16835] ? do_syscall_64+0x100/0x230 [ 1070.124725][T16835] ? do_syscall_64+0xb6/0x230 [ 1070.129543][T16835] do_syscall_64+0xf3/0x230 [ 1070.134240][T16835] ? clear_bhb_loop+0x35/0x90 [ 1070.139000][T16835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.148854][T16835] RIP: 0033:0x7f92f8985d29 [ 1070.155329][T16835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1070.176755][T16835] RSP: 002b:00007f92f97c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1070.185428][T16835] RAX: ffffffffffffffda RBX: 00007f92f8b75fa0 RCX: 00007f92f8985d29 [ 1070.196735][T16835] RDX: 0000000000000001 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1070.205803][T16835] RBP: 00007f92f97c4090 R08: 0000000000000007 R09: 0000000000000000 [ 1070.215103][T16835] R10: 00000000000000f1 R11: 0000000000000246 R12: 0000000000000001 [ 1070.224584][T16835] R13: 0000000000000000 R14: 00007f92f8b75fa0 R15: 00007ffddb388f98 [ 1070.238770][T16835] [ 1070.322069][T16837] FAULT_INJECTION: forcing a failure. [ 1070.322069][T16837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1070.347181][T16837] CPU: 1 UID: 0 PID: 16837 Comm: syz.1.3266 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 1070.362340][T16837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1070.376460][T16837] Call Trace: [ 1070.380060][T16837] [ 1070.383300][T16837] dump_stack_lvl+0x241/0x360 [ 1070.389074][T16837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1070.396427][T16837] ? __pfx__printk+0x10/0x10 [ 1070.401789][T16837] ? __pfx_lock_release+0x10/0x10 [ 1070.408025][T16837] should_fail_ex+0x3b0/0x4e0 [ 1070.414599][T16837] _copy_from_user+0x2d/0xb0 [ 1070.420091][T16837] do_sock_getsockopt+0x1d1/0x7e0 [ 1070.426901][T16837] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1070.435136][T16837] ? __fget_files+0x2a/0x410 [ 1070.441204][T16837] ? __fget_files+0x395/0x410 [ 1070.448385][T16837] ? __fget_files+0x2a/0x410 [ 1070.454918][T16837] __x64_sys_getsockopt+0x2a1/0x370 [ 1070.461878][T16837] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 1070.469243][T16837] ? do_syscall_64+0x100/0x230 [ 1070.474811][T16837] ? do_syscall_64+0xb6/0x230 [ 1070.481085][T16837] do_syscall_64+0xf3/0x230 [ 1070.486760][T16837] ? clear_bhb_loop+0x35/0x90 [ 1070.491451][T16837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.497349][T16837] RIP: 0033:0x7f92f8985d29 [ 1070.501785][T16837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1070.523805][T16837] RSP: 002b:00007f92f97c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1070.533925][T16837] RAX: ffffffffffffffda RBX: 00007f92f8b75fa0 RCX: 00007f92f8985d29 [ 1070.542992][T16837] RDX: 0000000000000013 RSI: 0000000000000112 RDI: 0000000000000004 [ 1070.551965][T16837] RBP: 00007f92f97c4090 R08: 0000000020000240 R09: 0000000000000000 [ 1070.561381][T16837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.570534][T16837] R13: 0000000000000000 R14: 00007f92f8b75fa0 R15: 00007ffddb388f98 [ 1070.579746][T16837] [ 1070.735241][T16842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3267'. [ 1071.233117][ T3509] team0 (unregistering): Port device team_slave_1 removed [ 1071.329443][ T3509] team0 (unregistering): Port device team_slave_0 removed [ 1072.099607][T16821] vlan3: entered promiscuous mode [ 1072.105241][T16821] dummy0: entered promiscuous mode [ 1072.202995][T14732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.211787][T14732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.364830][ T6528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.417936][ T6528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.444095][T16848] overlayfs: overlapping lowerdir path [ 1073.114594][T16848] overlayfs: missing 'lowerdir' [ 1076.507669][T16870] infiniband syz1: set active [ 1076.512526][T16870] infiniband syz1: added syz_tun [ 1076.690187][T16870] RDS/IB: syz1: added [ 1076.732347][T16870] smc: adding ib device syz1 with port count 1 [ 1076.738807][T16870] smc: ib device syz1 port 1 has pnetid [ 1076.792998][ T9] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1076.970239][ T29] audit: type=1326 audit(1737486675.812:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16856 comm="syz.0.3171" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b93d85d29 code=0x0 [ 1077.316286][ T9] usb 2-1: config 128 has an invalid interface number: 147 but max is 0 [ 1077.346894][ T9] usb 2-1: config 128 has no interface number 0 [ 1077.386665][ T9] usb 2-1: config 128 interface 147 has no altsetting 0 [ 1077.420310][ T9] usb 2-1: New USB device found, idVendor=adf0, idProduct=d02b, bcdDevice=13.dc [ 1077.454038][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.480435][ T9] usb 2-1: Product: syz [ 1077.555121][ T3509] IPVS: stop unused estimator thread 0... [ 1077.576707][ T9] usb 2-1: Manufacturer: syz [ 1077.581558][ T9] usb 2-1: SerialNumber: syz [ 1077.658088][T16882] Cannot find set identified by id 65534 to match [ 1078.355416][ T9] usb 2-1: can't set config #128, error -71 [ 1078.363145][ T9] usb 2-1: USB disconnect, device number 18 [ 1078.502289][T16888] vlan2: entered promiscuous mode [ 1078.531464][T16888] dummy0: entered promiscuous mode [ 1078.539386][T16891] ubi: mtd0 is already attached to ubi0 [ 1078.780203][T16896] sp0: Synchronizing with TNC [ 1079.022910][T16900] sp0: Found TNC [ 1080.743343][T16908] program syz.4.3282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1080.904201][T16915] FAULT_INJECTION: forcing a failure. [ 1080.904201][T16915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1080.960836][T16915] CPU: 0 UID: 0 PID: 16915 Comm: syz.6.3286 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 1080.975024][T16915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1080.986433][T16915] Call Trace: [ 1080.989746][T16915] [ 1080.992809][T16915] dump_stack_lvl+0x241/0x360 [ 1080.998398][T16915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1081.003915][T16915] ? __pfx__printk+0x10/0x10 [ 1081.011684][T16915] ? __pfx_lock_release+0x10/0x10 [ 1081.017356][T16915] should_fail_ex+0x3b0/0x4e0 [ 1081.022760][T16915] _copy_from_user+0x2d/0xb0 [ 1081.027579][T16915] copy_msghdr_from_user+0xae/0x680 [ 1081.032867][T16915] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1081.038712][T16915] ? __fget_files+0x2a/0x410 [ 1081.043336][T16915] ? __fget_files+0x2a/0x410 [ 1081.047968][T16915] __sys_sendmsg+0x209/0x350 [ 1081.052667][T16915] ? __pfx_lock_release+0x10/0x10 [ 1081.057716][T16915] ? __pfx___sys_sendmsg+0x10/0x10 [ 1081.062866][T16915] ? __pfx_vfs_write+0x10/0x10 [ 1081.067688][T16915] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1081.074042][T16915] ? do_syscall_64+0x100/0x230 [ 1081.078836][T16915] ? do_syscall_64+0xb6/0x230 [ 1081.083552][T16915] do_syscall_64+0xf3/0x230 [ 1081.088102][T16915] ? clear_bhb_loop+0x35/0x90 [ 1081.092824][T16915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.098752][T16915] RIP: 0033:0x7f2b64185d29 [ 1081.103285][T16915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1081.123010][T16915] RSP: 002b:00007f2b64fa1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1081.131461][T16915] RAX: ffffffffffffffda RBX: 00007f2b64375fa0 RCX: 00007f2b64185d29 [ 1081.139551][T16915] RDX: 0000000000008004 RSI: 0000000020000380 RDI: 0000000000000004 [ 1081.147560][T16915] RBP: 00007f2b64fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.155570][T16915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.163573][T16915] R13: 0000000000000000 R14: 00007f2b64375fa0 R15: 00007ffc1dfb20a8 [ 1081.171593][T16915] [ 1081.195065][T16921] x_tables: duplicate underflow at hook 1 [ 1081.565042][T16934] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1083.393285][T16140] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1083.807991][T16936] overlayfs: overlapping lowerdir path [ 1084.357570][T16140] usb 1-1: config 128 has an invalid interface number: 147 but max is 0 [ 1084.553628][T16140] usb 1-1: config 128 has no interface number 0 [ 1084.560104][T16140] usb 1-1: config 128 interface 147 has no altsetting 0 [ 1084.577149][T16140] usb 1-1: string descriptor 0 read error: -71 [ 1084.587691][T16140] usb 1-1: New USB device found, idVendor=adf0, idProduct=d02b, bcdDevice=13.dc [ 1084.599992][T16941] FAULT_INJECTION: forcing a failure. [ 1084.599992][T16941] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.623113][T16140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.632329][T16941] CPU: 1 UID: 0 PID: 16941 Comm: syz.1.3293 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 1084.642798][T16941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1084.655029][T16941] Call Trace: [ 1084.655042][T16941] [ 1084.655051][T16941] dump_stack_lvl+0x241/0x360 [ 1084.655083][T16941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1084.655105][T16941] ? __pfx__printk+0x10/0x10 [ 1084.655129][T16941] ? fs_reclaim_acquire+0x93/0x130 [ 1084.655152][T16941] ? __pfx___might_resched+0x10/0x10 [ 1084.655175][T16941] should_fail_ex+0x3b0/0x4e0 [ 1084.655206][T16941] should_failslab+0xac/0x100 [ 1084.655235][T16941] __kmalloc_noprof+0xdd/0x4c0 [ 1084.655253][T16941] ? kstrtouint_from_user+0x128/0x190 [ 1084.655271][T16941] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1084.655299][T16941] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1084.655449][T16941] tomoyo_path_number_perm+0x236/0x860 [ 1084.655567][T16941] ? __lock_acquire+0x1397/0x2100 [ 1084.655597][T16941] ? tomoyo_path_number_perm+0x206/0x860 [ 1084.655619][T16941] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1084.655710][T16941] ? __fget_files+0x2a/0x410 [ 1084.655742][T16941] ? __fget_files+0x2a/0x410 [ 1084.655765][T16941] security_file_ioctl+0xc6/0x2a0 [ 1084.655787][T16941] __se_sys_ioctl+0x46/0x170 [ 1084.655813][T16941] do_syscall_64+0xf3/0x230 [ 1084.655834][T16941] ? clear_bhb_loop+0x35/0x90 [ 1084.655858][T16941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.655877][T16941] RIP: 0033:0x7f92f8985d29 [ 1084.655894][T16941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1084.655909][T16941] RSP: 002b:00007f92f97c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1084.655931][T16941] RAX: ffffffffffffffda RBX: 00007f92f8b75fa0 RCX: 00007f92f8985d29 [ 1084.655946][T16941] RDX: 0000000020000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1084.655958][T16941] RBP: 00007f92f97c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.655970][T16941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.655983][T16941] R13: 0000000000000000 R14: 00007f92f8b75fa0 R15: 00007ffddb388f98 [ 1084.656023][T16941] [ 1084.671908][T16140] usb 1-1: can't set config #128, error -71 [ 1084.676261][T16140] usb 1-1: USB disconnect, device number 59 [ 1084.806845][T16941] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1084.807422][T16941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1084.848601][T16930] overlayfs: missing 'lowerdir' [ 1085.772427][T16957] FAULT_INJECTION: forcing a failure. [ 1085.772427][T16957] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.772458][T16957] CPU: 1 UID: 0 PID: 16957 Comm: syz.2.3299 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 1085.772479][T16957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1085.772492][T16957] Call Trace: [ 1085.772501][T16957] [ 1085.772510][T16957] dump_stack_lvl+0x241/0x360 [ 1085.772542][T16957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1085.772567][T16957] ? __pfx__printk+0x10/0x10 [ 1085.772592][T16957] ? fs_reclaim_acquire+0x93/0x130 [ 1085.772617][T16957] ? __pfx___might_resched+0x10/0x10 [ 1085.772640][T16957] should_fail_ex+0x3b0/0x4e0 [ 1085.772673][T16957] should_failslab+0xac/0x100 [ 1085.772702][T16957] __kmalloc_noprof+0xdd/0x4c0 [ 1085.772730][T16957] ? kstrtouint_from_user+0x128/0x190 [ 1085.772749][T16957] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1085.772778][T16957] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1085.772816][T16957] tomoyo_path_number_perm+0x236/0x860 [ 1085.772832][T16957] ? __lock_acquire+0x1397/0x2100 [ 1085.772853][T16957] ? tomoyo_path_number_perm+0x206/0x860 [ 1085.772872][T16957] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1085.772927][T16957] ? __fget_files+0x2a/0x410 [ 1085.772951][T16957] ? __fget_files+0x2a/0x410 [ 1085.772973][T16957] security_file_ioctl+0xc6/0x2a0 [ 1085.772996][T16957] __se_sys_ioctl+0x46/0x170 [ 1085.773022][T16957] do_syscall_64+0xf3/0x230 [ 1085.773042][T16957] ? clear_bhb_loop+0x35/0x90 [ 1085.773065][T16957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.773084][T16957] RIP: 0033:0x7f8cb2b85d29 [ 1085.773102][T16957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1085.773118][T16957] RSP: 002b:00007f8cb3a97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1085.773141][T16957] RAX: ffffffffffffffda RBX: 00007f8cb2d75fa0 RCX: 00007f8cb2b85d29 [ 1085.773156][T16957] RDX: 0000000020000240 RSI: 00000000c0585605 RDI: 0000000000000003 [ 1085.773170][T16957] RBP: 00007f8cb3a97090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.773182][T16957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1085.773194][T16957] R13: 0000000000000000 R14: 00007f8cb2d75fa0 R15: 00007ffc3694fa38 [ 1085.773228][T16957] [ 1085.776420][T16957] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1085.843285][T16958] tap0: tun_chr_ioctl cmd 3489698846 [ 1086.709149][ T9] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1086.884508][ T9] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1086.884540][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.905583][ T9] usb 3-1: config 0 descriptor?? [ 1087.370767][T16963] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3300'. [ 1087.453180][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 1087.591466][T16945] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1087.630231][T16947] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1087.978815][T16982] FAULT_INJECTION: forcing a failure. [ 1087.978815][T16982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.148424][T16982] CPU: 1 UID: 0 PID: 16982 Comm: syz.6.3307 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 1088.158901][T16982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1088.168982][T16982] Call Trace: [ 1088.172281][T16982] [ 1088.175239][T16982] dump_stack_lvl+0x241/0x360 [ 1088.180032][T16982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1088.185252][T16982] ? __pfx__printk+0x10/0x10 [ 1088.189864][T16982] ? __pfx_lock_release+0x10/0x10 [ 1088.194914][T16982] should_fail_ex+0x3b0/0x4e0 [ 1088.199621][T16982] _copy_from_user+0x2d/0xb0 [ 1088.204239][T16982] copy_msghdr_from_user+0xae/0x680 [ 1088.209470][T16982] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1088.215301][T16982] ? __fget_files+0x2a/0x410 [ 1088.219910][T16982] ? __fget_files+0x2a/0x410 [ 1088.224525][T16982] __sys_sendmsg+0x209/0x350 [ 1088.229136][T16982] ? __pfx_lock_release+0x10/0x10 [ 1088.234528][T16982] ? __pfx___sys_sendmsg+0x10/0x10 [ 1088.240019][T16982] ? __pfx_vfs_write+0x10/0x10 [ 1088.244902][T16982] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1088.251258][T16982] ? do_syscall_64+0x100/0x230 [ 1088.256020][T16982] ? do_syscall_64+0xb6/0x230 [ 1088.260692][T16982] do_syscall_64+0xf3/0x230 [ 1088.265206][T16982] ? clear_bhb_loop+0x35/0x90 [ 1088.269889][T16982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.275786][T16982] RIP: 0033:0x7f2b64185d29 [ 1088.280199][T16982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1088.299820][T16982] RSP: 002b:00007f2b64fa1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1088.308246][T16982] RAX: ffffffffffffffda RBX: 00007f2b64375fa0 RCX: 00007f2b64185d29 [ 1088.316218][T16982] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1088.324187][T16982] RBP: 00007f2b64fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.332153][T16982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.340125][T16982] R13: 0000000000000000 R14: 00007f2b64375fa0 R15: 00007ffc1dfb20a8 [ 1088.348289][T16982] [ 1088.416245][T16987] syz1: rxe_newlink: already configured on syz_tun [ 1088.531576][T16984] .: renamed from bond0 (while UP) [ 1088.728344][T16140] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1089.044762][T16140] usb 2-1: config 128 has an invalid interface number: 147 but max is 0 [ 1089.064176][T16984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1089.094213][T16140] usb 2-1: config 128 has no interface number 0 [ 1089.101657][T16140] usb 2-1: config 128 interface 147 has no altsetting 0 [ 1089.131802][T16140] usb 2-1: New USB device found, idVendor=adf0, idProduct=d02b, bcdDevice=13.dc [ 1089.145450][T16140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.164322][T16140] usb 2-1: Product: syz [ 1089.178810][T16140] usb 2-1: Manufacturer: syz [ 1089.190233][T16140] usb 2-1: SerialNumber: syz [ 1089.236268][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1089.263039][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1089.282971][ T29] audit: type=1804 audit(1737486688.122:2528): pid=16995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.3312" name="/newroot/37/bus/bus" dev="overlay" ino=215 res=1 errno=0 [ 1089.290819][T16995] Invalid ELF header len 8 [ 1089.331389][ T9] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1089.360250][ T9] usb 3-1: USB disconnect, device number 81 [ 1091.085912][T16140] usb 2-1: USB disconnect, device number 19 [ 1091.293446][T17012] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3316'. [ 1091.339657][T17014] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3318'. [ 1091.554561][ T5890] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1091.864865][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1092.016772][ T5890] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1092.108021][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.164255][ T5890] usb 1-1: config 0 descriptor?? [ 1092.253213][T16140] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1092.322975][T17023] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3319'. [ 1092.345671][T17023] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 1092.415721][T16140] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.648520][T16140] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1092.657793][T16140] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.515085][T16140] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1094.518394][ T5890] usbhid 1-1:0.0: can't add hid device: -71 [ 1094.528538][ T5890] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1094.553950][ T5890] usb 1-1: USB disconnect, device number 60 [ 1094.680764][T17039] FAULT_INJECTION: forcing a failure. [ 1094.680764][T17039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1094.721795][T17039] CPU: 0 UID: 0 PID: 17039 Comm: syz.4.3323 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 1094.736943][T17039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1094.750400][T17039] Call Trace: [ 1094.755292][T17039] [ 1094.759989][T17039] dump_stack_lvl+0x241/0x360 [ 1094.766649][T17039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1094.773189][T17039] ? __pfx__printk+0x10/0x10 [ 1094.779205][T17039] ? __pfx_lock_release+0x10/0x10 [ 1094.788411][T17039] should_fail_ex+0x3b0/0x4e0 [ 1094.795491][T17039] _copy_from_user+0x2d/0xb0 [ 1094.801620][T17039] copy_msghdr_from_user+0xae/0x680 [ 1094.808285][T17039] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1094.815278][T17039] ? __fget_files+0x2a/0x410 [ 1094.822991][T17039] ? __fget_files+0x2a/0x410 [ 1094.830318][T17039] __sys_sendmsg+0x209/0x350 [ 1094.838783][T17039] ? __pfx_lock_release+0x10/0x10 [ 1094.847873][T17039] ? __pfx___sys_sendmsg+0x10/0x10 [ 1094.856536][T17039] ? __pfx_vfs_write+0x10/0x10 [ 1094.862726][T17039] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1094.871029][T17039] ? do_syscall_64+0x100/0x230 [ 1094.878742][T17039] ? do_syscall_64+0xb6/0x230 [ 1094.885454][T17039] do_syscall_64+0xf3/0x230 [ 1094.894106][T17039] ? clear_bhb_loop+0x35/0x90 [ 1094.902942][T17039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.914665][T17039] RIP: 0033:0x7fc203785d29 [ 1094.919829][T17039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1094.942854][T17039] RSP: 002b:00007fc204622038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1094.953225][T17039] RAX: ffffffffffffffda RBX: 00007fc203975fa0 RCX: 00007fc203785d29 [ 1094.964233][T17039] RDX: 0000000000040002 RSI: 0000000020000480 RDI: 0000000000000004 [ 1094.978623][T17039] RBP: 00007fc204622090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.989510][T17039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.998209][T17039] R13: 0000000000000000 R14: 00007fc203975fa0 R15: 00007ffc48c2e928 [ 1095.012817][T17039] [ 1095.163060][ T46] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1095.903083][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 1096.289139][T16140] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 1096.440065][ T46] usb 2-1: New USB device found, idVendor=0b54, idProduct=62a0, bcdDevice=a0.56 [ 1096.484863][T16140] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 1096.499135][T16140] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1096.514907][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.528136][T16140] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 1096.664599][ T46] usb 2-1: Product: syz [ 1096.717299][T16140] usb 7-1: USB disconnect, device number 7 [ 1096.749738][ T46] usb 2-1: Manufacturer: syz [ 1096.849820][ T46] usb 2-1: SerialNumber: syz [ 1096.967615][ T46] usb 2-1: config 0 descriptor?? [ 1097.093676][T17060] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3330'. [ 1098.553634][ T5890] usb 2-1: USB disconnect, device number 20 [ 1098.648023][T17067] FAULT_INJECTION: forcing a failure. [ 1098.648023][T17067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1098.677247][T17067] CPU: 1 UID: 0 PID: 17067 Comm: syz.6.3335 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 1098.692703][T17067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1098.703957][T17067] Call Trace: [ 1098.709213][T17067] [ 1098.714055][T17067] dump_stack_lvl+0x241/0x360 [ 1098.719898][T17067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1098.728562][T17067] ? __pfx__printk+0x10/0x10 [ 1098.735157][T17067] ? __pfx_lock_release+0x10/0x10 [ 1098.740542][T17067] should_fail_ex+0x3b0/0x4e0 [ 1098.748867][T17067] _copy_from_user+0x2d/0xb0 [ 1098.757942][T17067] copy_msghdr_from_user+0xae/0x680 [ 1098.764883][T17067] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1098.773411][T17067] ? __fget_files+0x2a/0x410 [ 1098.778405][T17067] ? __fget_files+0x2a/0x410 [ 1098.784231][T17067] __sys_sendmmsg+0x32b/0x720 [ 1098.789560][T17067] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1098.795432][T17067] ? __pfx_lock_release+0x10/0x10 [ 1098.800948][T17067] ? kstrtouint_from_user+0x128/0x190 [ 1098.812124][T17067] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1098.819290][T17067] ? ksys_write+0x22a/0x2b0 [ 1098.825131][T17067] ? __pfx_lock_release+0x10/0x10 [ 1098.832255][T17067] ? vfs_write+0x730/0xd30 [ 1098.837609][T17067] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1098.845559][T17067] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1098.852532][T17067] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1098.860211][T17067] ? do_syscall_64+0x100/0x230 [ 1098.866533][T17067] __x64_sys_sendmmsg+0xa0/0xb0 [ 1098.873366][T17067] do_syscall_64+0xf3/0x230 [ 1098.878656][T17067] ? clear_bhb_loop+0x35/0x90 [ 1098.886060][T17067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.894166][T17067] RIP: 0033:0x7f2b64185d29 [ 1098.898981][T17067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1098.925309][T17067] RSP: 002b:00007f2b64fa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1098.936044][T17067] RAX: ffffffffffffffda RBX: 00007f2b64375fa0 RCX: 00007f2b64185d29 [ 1098.946608][T17067] RDX: 0000000000000002 RSI: 0000000020000b00 RDI: 0000000000000005 [ 1098.956757][T17067] RBP: 00007f2b64fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.966389][T17067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.975176][T17067] R13: 0000000000000000 R14: 00007f2b64375fa0 R15: 00007ffc1dfb20a8 [ 1098.984154][T17067] [ 1098.987542][ C1] vkms_vblank_simulate: vblank timer overrun [ 1100.023898][ T8460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.091939][T17085] FAULT_INJECTION: forcing a failure. [ 1101.091939][T17085] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.182669][ T8460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.183029][T17085] CPU: 1 UID: 0 PID: 17085 Comm: syz.6.3342 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 1101.215213][T17085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1101.234266][T17085] Call Trace: [ 1101.241185][T17085] [ 1101.245541][T17085] dump_stack_lvl+0x241/0x360 [ 1101.254344][T17085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1101.263322][T17085] ? __pfx__printk+0x10/0x10 [ 1101.277318][T17085] ? fs_reclaim_acquire+0x93/0x130 [ 1101.284816][T17085] ? __pfx___might_resched+0x10/0x10 [ 1101.292338][T17085] should_fail_ex+0x3b0/0x4e0 [ 1101.297914][T17085] should_failslab+0xac/0x100 [ 1101.304265][T17085] __kmalloc_noprof+0xdd/0x4c0 [ 1101.310436][T17085] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1101.317674][T17085] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1101.324043][T17085] tomoyo_path_perm+0x2b7/0x740 [ 1101.328927][T17085] ? tomoyo_path_perm+0x287/0x740 [ 1101.336100][T17085] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1101.342840][T17085] ? __pfx_lock_release+0x10/0x10 [ 1101.347989][T17085] ? __fget_files+0x2a/0x410 [ 1101.354064][T17085] security_inode_getattr+0x130/0x330 [ 1101.360497][T17085] vfs_getattr+0x2a/0x3a0 [ 1101.365115][T17085] __x64_sys_newfstat+0x102/0x1c0 [ 1101.372527][T17085] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1101.380262][T17085] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 1101.390712][T17085] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1101.401367][T17085] ? do_syscall_64+0x100/0x230 [ 1101.407297][T17085] ? do_syscall_64+0xb6/0x230 [ 1101.412236][T17085] do_syscall_64+0xf3/0x230 [ 1101.417105][T17085] ? clear_bhb_loop+0x35/0x90 [ 1101.423240][T17085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.429673][T17085] RIP: 0033:0x7f2b64185d29 [ 1101.434644][T17085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1101.455997][T17085] RSP: 002b:00007f2b64fa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 1101.469880][T17085] RAX: ffffffffffffffda RBX: 00007f2b64375fa0 RCX: 00007f2b64185d29 [ 1101.480177][T17085] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 1101.496578][T17085] RBP: 00007f2b64fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.507647][T17085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.518649][T17085] R13: 0000000000000000 R14: 00007f2b64375fa0 R15: 00007ffc1dfb20a8 [ 1101.528023][T17085] [ 1101.532022][ C1] vkms_vblank_simulate: vblank timer overrun [ 1101.702928][ T5890] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1101.759904][T17085] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1102.100233][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 1102.167069][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1102.202967][ T5890] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1102.255618][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.288251][ T5890] usb 2-1: config 0 descriptor?? [ 1102.409501][ T8460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.537536][ T5890] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1102.583883][T12596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1102.665759][T12596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1102.687010][T12596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1102.714391][T12596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1102.727261][T12596] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1102.741873][T12596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1102.798826][T17087] FAULT_INJECTION: forcing a failure. [ 1102.798826][T17087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1103.105646][T17087] CPU: 0 UID: 0 PID: 17087 Comm: syz.1.3340 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 1103.118773][T17087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1103.134785][T17087] Call Trace: [ 1103.139061][T17087] [ 1103.142635][T17087] dump_stack_lvl+0x241/0x360 [ 1103.149446][T17087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1103.156131][T17087] ? __pfx__printk+0x10/0x10 [ 1103.161705][T17087] ? snprintf+0xda/0x120 [ 1103.166699][T17087] should_fail_ex+0x3b0/0x4e0 [ 1103.171522][T17087] _copy_to_user+0x31/0xb0 [ 1103.178022][T17087] simple_read_from_buffer+0xca/0x150 [ 1103.184092][T17087] proc_fail_nth_read+0x1e9/0x250 [ 1103.189696][T17087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1103.195472][T17087] ? rw_verify_area+0x55e/0x6f0 [ 1103.201147][T17087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1103.209472][T17087] vfs_read+0x1fc/0xb70 [ 1103.213841][T12596] Bluetooth: hci3: command 0x0406 tx timeout [ 1103.215106][T17087] ? __pfx___mutex_lock+0x10/0x10 [ 1103.232908][T17087] ? __pfx_vfs_read+0x10/0x10 [ 1103.238243][T17087] ? __fget_files+0x2a/0x410 [ 1103.246381][T17087] ? __fget_files+0x395/0x410 [ 1103.251969][T17087] ? __fget_files+0x2a/0x410 [ 1103.258493][T17087] ksys_read+0x18f/0x2b0 [ 1103.263923][T17087] ? __pfx_ksys_read+0x10/0x10 [ 1103.272562][T17087] ? do_syscall_64+0x100/0x230 [ 1103.280605][T17087] ? do_syscall_64+0xb6/0x230 [ 1103.285582][T17087] do_syscall_64+0xf3/0x230 [ 1103.290706][T17087] ? clear_bhb_loop+0x35/0x90 [ 1103.296085][T17087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.302733][T17087] RIP: 0033:0x7f92f898473c [ 1103.308052][T17087] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1103.331588][T17087] RSP: 002b:00007f92f97c4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1103.342008][T17087] RAX: ffffffffffffffda RBX: 00007f92f8b75fa0 RCX: 00007f92f898473c [ 1103.351148][T17087] RDX: 000000000000000f RSI: 00007f92f97c40a0 RDI: 0000000000000004 [ 1103.360722][T17087] RBP: 00007f92f97c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1103.370763][T17087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1103.382254][T17087] R13: 0000000000000000 R14: 00007f92f8b75fa0 R15: 00007ffddb388f98 [ 1103.393301][T17087] [ 1103.431644][T17099] FAULT_INJECTION: forcing a failure. [ 1103.431644][T17099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1103.490995][ T8460] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.513076][T17099] CPU: 1 UID: 0 PID: 17099 Comm: syz.6.3345 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 1103.526857][T17099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1103.539932][T17099] Call Trace: [ 1103.544674][T17099] [ 1103.548920][T17099] dump_stack_lvl+0x241/0x360 [ 1103.556942][T17099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1103.565689][T17099] ? __pfx__printk+0x10/0x10 [ 1103.574163][T17099] ? __pfx_lock_release+0x10/0x10 [ 1103.581232][T17099] should_fail_ex+0x3b0/0x4e0 [ 1103.589194][T17099] _copy_from_user+0x2d/0xb0 [ 1103.593991][T17099] move_addr_to_kernel+0x82/0x150 [ 1103.599303][T17099] __sys_sendto+0x268/0x4c0 [ 1103.607254][T17099] ? __pfx___sys_sendto+0x10/0x10 [ 1103.613981][T17099] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1103.621831][T17099] ? __fget_files+0x2a/0x410 [ 1103.631276][T17099] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1103.638158][T17099] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1103.647508][T17099] __x64_sys_sendto+0xde/0x100 [ 1103.654335][T17099] do_syscall_64+0xf3/0x230 [ 1103.659052][T17099] ? clear_bhb_loop+0x35/0x90 [ 1103.666026][T17099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.672545][T17099] RIP: 0033:0x7f2b64185d29 [ 1103.677615][T17099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1103.702489][T17099] RSP: 002b:00007f2b64fa1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1103.711870][T17099] RAX: ffffffffffffffda RBX: 00007f2b64375fa0 RCX: 00007f2b64185d29 [ 1103.725633][T17099] RDX: 000000000001000a RSI: 0000000020000180 RDI: 0000000000000003 [ 1103.738770][T17099] RBP: 00007f2b64fa1090 R08: 0000000020000140 R09: 0000000000000014 [ 1103.752096][T17099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1103.760877][T17099] R13: 0000000000000000 R14: 00007f2b64375fa0 R15: 00007ffc1dfb20a8 [ 1103.770383][T17099] [ 1103.773963][ C1] vkms_vblank_simulate: vblank timer overrun [ 1103.799273][ T9] usb 2-1: USB disconnect, device number 21 [ 1104.190837][ T8460] bridge_slave_1: left allmulticast mode [ 1105.105551][T17111] overlayfs: overlapping lowerdir path [ 1105.113038][ T5848] Bluetooth: hci0: command tx timeout [ 1105.132937][ T8460] bridge_slave_1: left promiscuous mode [ 1105.161030][ T8460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.220037][ T8460] bridge_slave_0: left allmulticast mode [ 1105.238963][ T8460] bridge_slave_0: left promiscuous mode [ 1105.251522][ T8460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.313271][T17115] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1105.322783][T17117] overlayfs: missing 'lowerdir' [ 1105.363002][ T46] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 1105.701472][ T46] usb 3-1: config 128 has an invalid interface number: 147 but max is 0 [ 1106.366894][ T46] usb 3-1: config 128 has no interface number 0 [ 1106.374657][ T46] usb 3-1: config 128 interface 147 has no altsetting 0 [ 1106.385421][ T46] usb 3-1: New USB device found, idVendor=adf0, idProduct=d02b, bcdDevice=13.dc [ 1106.402491][T17125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1106.883406][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.912920][ T46] usb 3-1: Product: syz [ 1106.920348][ T46] usb 3-1: Manufacturer: syz [ 1106.938738][ T46] usb 3-1: SerialNumber: syz [ 1107.141100][ T46] usb 3-1: USB disconnect, device number 82 [ 1107.173325][ T5848] Bluetooth: hci0: command tx timeout [ 1108.535218][T17140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3356'. [ 1108.741574][ T8460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1108.788195][ T8460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1108.806678][ T8460] bond0 (unregistering): Released all slaves [ 1109.244458][T17158] FAULT_INJECTION: forcing a failure. [ 1109.244458][T17158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.283100][ T5848] Bluetooth: hci0: command tx timeout [ 1109.423302][T17158] CPU: 0 UID: 0 PID: 17158 Comm: syz.2.3361 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 1109.436993][T17158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1109.450121][T17158] Call Trace: [ 1109.454289][T17158] [ 1109.459534][T17158] dump_stack_lvl+0x241/0x360 [ 1109.466656][T17158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1109.472499][T17158] ? __pfx__printk+0x10/0x10 [ 1109.478639][T17158] ? __pfx_lock_release+0x10/0x10 [ 1109.484135][T17158] should_fail_ex+0x3b0/0x4e0 [ 1109.490615][T17158] _copy_from_user+0x2d/0xb0 [ 1109.496570][T17158] move_addr_to_kernel+0x82/0x150 [ 1109.503800][T17158] __sys_sendto+0x268/0x4c0 [ 1109.509554][T17158] ? __pfx___sys_sendto+0x10/0x10 [ 1109.515673][T17158] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1109.522924][T17158] ? __fget_files+0x2a/0x410 [ 1109.529135][T17158] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1109.536554][T17158] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1109.545122][T17158] __x64_sys_sendto+0xde/0x100 [ 1109.551694][T17158] do_syscall_64+0xf3/0x230 [ 1109.557285][T17158] ? clear_bhb_loop+0x35/0x90 [ 1109.562958][T17158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.569499][T17158] RIP: 0033:0x7f8cb2b85d29 [ 1109.574069][T17158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1109.599258][T17158] RSP: 002b:00007f8cb3a97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1109.609557][T17158] RAX: ffffffffffffffda RBX: 00007f8cb2d75fa0 RCX: 00007f8cb2b85d29 [ 1109.619138][T17158] RDX: 000000000000e90c RSI: 00000000200000c0 RDI: 0000000000000003 [ 1109.628106][T17158] RBP: 00007f8cb3a97090 R08: 0000000020000540 R09: 0000000000000014 [ 1109.636740][T17158] R10: 0000000028000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.646835][T17158] R13: 0000000000000000 R14: 00007f8cb2d75fa0 R15: 00007ffc3694fa38 [ 1109.656863][T17158] [ 1109.760836][T17094] chnl_net:caif_netlink_parms(): no params data found [ 1111.173532][T17167] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1111.334061][ T5848] Bluetooth: hci0: command tx timeout [ 1111.463615][ T5934] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1111.690056][ T5934] usb 7-1: config 128 has an invalid interface number: 147 but max is 0 [ 1111.740039][ T5889] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 1111.747085][ T5934] usb 7-1: config 128 has no interface number 0 [ 1111.762095][ T5934] usb 7-1: config 128 interface 147 has no altsetting 0 [ 1111.788067][ T5934] usb 7-1: New USB device found, idVendor=adf0, idProduct=d02b, bcdDevice=13.dc [ 1111.801373][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.875509][ T5934] usb 7-1: Product: syz [ 1111.884116][ T5934] usb 7-1: Manufacturer: syz [ 1111.892287][ T5934] usb 7-1: SerialNumber: syz [ 1112.001418][ T5889] usb 3-1: config 2 has an invalid interface number: 186 but max is 0 [ 1112.074965][T17180] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 1112.123541][ T5889] usb 3-1: config 2 has no interface number 0 [ 1112.131555][ T5889] usb 3-1: config 2 interface 186 has no altsetting 0 [ 1112.229518][ T29] audit: type=1326 audit(1737486711.072:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17172 comm="syz.4.3365" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc203785d29 code=0x0 [ 1112.351384][ T5889] usb 3-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 1112.386813][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.424107][T17094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.441806][ T5889] usb 3-1: Product: syz [ 1112.461870][ T5889] usb 3-1: Manufacturer: syz [ 1112.466177][T17094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.477801][ T5889] usb 3-1: SerialNumber: syz [ 1112.532401][T17094] bridge_slave_0: entered allmulticast mode [ 1112.565747][T17094] bridge_slave_0: entered promiscuous mode [ 1112.579020][T17183] FAULT_INJECTION: forcing a failure. [ 1112.579020][T17183] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.599528][T17094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.608851][T17183] CPU: 1 UID: 0 PID: 17183 Comm: syz.1.3368 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 1112.621317][T17183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1112.637397][T17183] Call Trace: [ 1112.641863][T17183] [ 1112.646189][T17183] dump_stack_lvl+0x241/0x360 [ 1112.651839][T17183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1112.660228][T17183] ? __pfx__printk+0x10/0x10 [ 1112.668160][T17183] ? kmem_cache_alloc_noprof+0x48/0x380 [ 1112.675161][T17183] ? __pfx___might_resched+0x10/0x10 [ 1112.681412][T17183] should_fail_ex+0x3b0/0x4e0 [ 1112.687484][T17183] should_failslab+0xac/0x100 [ 1112.694396][T17183] ? getname_flags+0xb7/0x540 [ 1112.701403][T17183] kmem_cache_alloc_noprof+0x70/0x380 [ 1112.708030][T17183] getname_flags+0xb7/0x540 [ 1112.713546][T17183] __x64_sys_rename+0x5d/0x90 [ 1112.719187][T17183] do_syscall_64+0xf3/0x230 [ 1112.724899][T17183] ? clear_bhb_loop+0x35/0x90 [ 1112.731070][T17183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.737397][T17183] RIP: 0033:0x7f92f8985d29 [ 1112.742416][T17183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1112.766829][T17183] RSP: 002b:00007f92f97c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 1112.779771][T17183] RAX: ffffffffffffffda RBX: 00007f92f8b75fa0 RCX: 00007f92f8985d29 [ 1112.789356][T17183] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000020000180 [ 1112.799139][T17183] RBP: 00007f92f97c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1112.810365][T17183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1112.821156][T17183] R13: 0000000000000000 R14: 00007f92f8b75fa0 R15: 00007ffddb388f98 [ 1112.831263][T17183] [ 1112.841519][T17094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.850124][T17094] bridge_slave_1: entered allmulticast mode [ 1112.859692][T17094] bridge_slave_1: entered promiscuous mode [ 1112.971325][T17186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3369'. [ 1113.000165][ T8460] hsr_slave_0: left promiscuous mode [ 1113.011168][ T8460] hsr_slave_1: left promiscuous mode [ 1113.028393][ T8460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1113.063582][ T8460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.083379][ T8460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1113.101439][ T8460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.152756][ T8460] veth1_macvtap: left promiscuous mode [ 1113.193949][T17187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3369'. [ 1113.233668][ T5934] usb 7-1: USB disconnect, device number 8 [ 1113.260446][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 1113.299975][ T8460] veth0_macvtap: left promiscuous mode [ 1113.308537][ T8460] veth1_vlan: left promiscuous mode [ 1113.316432][ T8460] veth0_vlan: left promiscuous mode [ 1114.293879][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1114.948751][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1114.959856][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1114.988327][ T5890] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1114.999445][ T9] usb 2-1: config 8 has an invalid interface number: 254 but max is 0 [ 1115.014951][ T9] usb 2-1: config 8 has no interface number 0 [ 1115.022371][ T9] usb 2-1: config 8 interface 254 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1115.025148][ T8460] team0 (unregistering): Port device team_slave_1 removed [ 1115.036023][ T9] usb 2-1: config 8 interface 254 has no altsetting 0 [ 1115.057206][ T9] usb 2-1: New USB device found, idVendor=10cf, idProduct=5500, bcdDevice=c9.c6 [ 1115.068127][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.077175][ T9] usb 2-1: Product: syz [ 1115.082585][ T9] usb 2-1: Manufacturer: syz [ 1115.088331][ T9] usb 2-1: SerialNumber: syz [ 1115.188505][ T8460] team0 (unregistering): Port device team_slave_0 removed [ 1115.207268][ T5890] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1115.224974][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.240349][ T5890] usb 7-1: config 0 descriptor?? [ 1115.393135][ T9] vmk80xx 2-1:8.254: driver 'vmk80xx' failed to auto-configure device. [ 1115.424144][ T9] vmk80xx 2-1:8.254: probe with driver vmk80xx failed with error -22 [ 1115.438892][ T9] usb 2-1: USB disconnect, device number 22 [ 1115.463388][ T5890] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1115.476711][ T5890] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1115.477251][ T5890] [drm:udl_init] *ERROR* Selecting channel failed [ 1115.484658][ T5890] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1115.484687][ T5890] [drm] Initialized udl on minor 2 [ 1115.494346][ T5890] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1115.494776][ T5890] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1115.495555][ T972] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1115.495680][ T972] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1115.497223][ T5890] usb 7-1: USB disconnect, device number 9 [ 1116.007122][T17202] FAULT_INJECTION: forcing a failure. [ 1116.007122][T17202] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.028476][T17202] CPU: 0 UID: 0 PID: 17202 Comm: syz.1.3374 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 1116.040945][T17202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1116.053726][T17202] Call Trace: [ 1116.057914][T17202] [ 1116.061031][T17202] dump_stack_lvl+0x241/0x360 [ 1116.066522][T17202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1116.072873][T17202] ? __pfx__printk+0x10/0x10 [ 1116.078352][T17202] ? fs_reclaim_acquire+0x93/0x130 [ 1116.084814][T17202] ? __pfx___might_resched+0x10/0x10 [ 1116.091231][T17202] should_fail_ex+0x3b0/0x4e0 [ 1116.097142][T17202] should_failslab+0xac/0x100 [ 1116.104108][T17202] __kmalloc_noprof+0xdd/0x4c0 [ 1116.111561][T17202] ? kstrtouint_from_user+0x128/0x190 [ 1116.117118][T17202] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1116.123056][T17202] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1116.131350][T17202] tomoyo_path_number_perm+0x236/0x860 [ 1116.136927][T17202] ? __lock_acquire+0x1397/0x2100 [ 1116.142867][T17202] ? tomoyo_path_number_perm+0x206/0x860 [ 1116.150458][T17202] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1116.158703][T17202] ? __fget_files+0x2a/0x410 [ 1116.163532][T17202] ? __fget_files+0x2a/0x410 [ 1116.168845][T17202] security_file_ioctl+0xc6/0x2a0 [ 1116.174233][T17202] __se_sys_ioctl+0x46/0x170 [ 1116.179293][T17202] do_syscall_64+0xf3/0x230 [ 1116.185918][T17202] ? clear_bhb_loop+0x35/0x90 [ 1116.191181][T17202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.198542][T17202] RIP: 0033:0x7f92f8985d29 [ 1116.203090][T17202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1116.224202][T17202] RSP: 002b:00007f92f97c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1116.232686][T17202] RAX: ffffffffffffffda RBX: 00007f92f8b75fa0 RCX: 00007f92f8985d29 [ 1116.240879][T17202] RDX: 0000000020000500 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 1116.249857][T17202] RBP: 00007f92f97c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.258828][T17202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.267666][T17202] R13: 0000000000000000 R14: 00007f92f8b75fa0 R15: 00007ffddb388f98 [ 1116.277696][T17202] [ 1116.284814][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.289842][T17202] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1116.296713][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.010754][T17212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3377'. [ 1117.026090][T17212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3377'. [ 1117.323203][T17185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3369'. [ 1117.450056][T17186] smc: net device bond0 applied user defined pnetid SYZ [ 1117.494391][T17186] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ [ 1117.534135][T17094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.613496][T17094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.644789][ T5889] catc 3-1:2.186: Can't set altsetting 1. [ 1117.666602][ T5889] catc 3-1:2.186: probe with driver catc failed with error -5 [ 1117.680184][ T5889] usb 3-1: USB disconnect, device number 83 [ 1118.102444][T17094] team0: Port device team_slave_0 added [ 1118.162571][T17094] team0: Port device team_slave_1 added [ 1122.577820][T17094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.592990][ T5888] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1122.653879][T17094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1122.850767][T17094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.888356][ T5888] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1122.915508][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.939726][T17094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.794202][ T5888] usb 3-1: config 0 descriptor?? [ 1123.827884][T17094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.269981][ T5888] usb 3-1: can't set config #0, error -71 [ 1124.564138][ T5888] usb 3-1: USB disconnect, device number 84 [ 1125.029341][T17094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.948493][T17279] FAULT_INJECTION: forcing a failure. [ 1125.948493][T17279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1126.096011][T17267] syzkaller1: entered promiscuous mode [ 1126.123319][T17267] syzkaller1: entered allmulticast mode [ 1126.183641][T17279] CPU: 1 UID: 0 PID: 17279 Comm: syz.2.3393 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 1126.201131][T17279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1126.214129][T17279] Call Trace: [ 1126.218583][T17279] [ 1126.221782][T17279] dump_stack_lvl+0x241/0x360 [ 1126.232499][T17279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1126.239367][T17279] ? __pfx__printk+0x10/0x10 [ 1126.247690][T17279] ? __pfx_lock_release+0x10/0x10 [ 1126.253526][T17279] should_fail_ex+0x3b0/0x4e0 [ 1126.259121][T17279] _copy_from_user+0x2d/0xb0 [ 1126.265554][T17279] copy_msghdr_from_user+0xae/0x680 [ 1126.273671][T17279] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1126.280974][T17279] ? __fget_files+0x2a/0x410 [ 1126.287520][T17279] ? __fget_files+0x2a/0x410 [ 1126.292323][T17279] __sys_sendmsg+0x209/0x350 [ 1126.298040][T17279] ? __pfx_lock_release+0x10/0x10 [ 1126.304643][T17279] ? __pfx___sys_sendmsg+0x10/0x10 [ 1126.312414][T17279] ? __pfx_vfs_write+0x10/0x10 [ 1126.318001][T17279] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1126.325331][T17279] ? do_syscall_64+0x100/0x230 [ 1126.330664][T17279] ? do_syscall_64+0xb6/0x230 [ 1126.335663][T17279] do_syscall_64+0xf3/0x230 [ 1126.340740][T17279] ? clear_bhb_loop+0x35/0x90 [ 1126.345991][T17279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.353063][T17279] RIP: 0033:0x7f8cb2b85d29 [ 1126.359087][T17279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1126.382676][T17279] RSP: 002b:00007f8cb3a97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1126.391828][T17279] RAX: ffffffffffffffda RBX: 00007f8cb2d75fa0 RCX: 00007f8cb2b85d29 [ 1126.400711][T17279] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1126.411008][T17279] RBP: 00007f8cb3a97090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.423641][T17279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.435366][T17279] R13: 0000000000000000 R14: 00007f8cb2d75fa0 R15: 00007ffc3694fa38 [ 1126.448671][T17279] [ 1131.872824][ C1] sched: DL replenish lagged too much [ 1179.027060][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1179.047080][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1226.550410][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 1239.637634][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.005455][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1279.523937][ T30] INFO: task kworker/u8:14:8460 blocked for more than 143 seconds. [ 1279.547044][ T30] Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 1287.742909][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1287.972951][ T30] task:kworker/u8:14 state:D stack:20664 pid:8460 tgid:8460 ppid:2 flags:0x00004000 [ 1288.272945][ T30] Workqueue: netns cleanup_net [ 1288.278039][ T30] Call Trace: [ 1288.281361][ T30] [ 1288.532992][ T30] __schedule+0x17fb/0x4be0 [ 1288.632854][ T30] ? __pfx___schedule+0x10/0x10 [ 1288.638744][ T30] ? __pfx_lock_release+0x10/0x10 [ 1288.752833][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1288.760575][ T30] ? kthread_data+0x52/0xd0 [ 1288.882894][ T30] ? schedule+0x90/0x320 [ 1288.887667][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1289.002892][ T30] ? schedule+0x90/0x320 [ 1289.009304][ T30] schedule+0x14b/0x320 [ 1289.132983][ T30] schedule_preempt_disabled+0x13/0x30 [ 1289.138796][ T30] __mutex_lock+0x7e7/0xee0 [ 1289.232934][ T30] ? __mutex_lock+0x5ef/0xee0 [ 1289.238403][ T30] ? mpls_net_exit+0x7d/0x2a0 [ 1289.312853][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1289.319628][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 1289.445646][ T30] ? mpls_net_exit+0x78/0x2a0 [ 1289.450758][ T30] ? mpls_net_exit+0x78/0x2a0 [ 1289.512992][ T30] mpls_net_exit+0x7d/0x2a0 [ 1289.518194][ T30] cleanup_net+0x802/0xd50