last executing test programs: 11m55.499131551s ago: executing program 0 (id=456): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x5c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000b40)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 11m55.039069558s ago: executing program 0 (id=459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x109) ftruncate(r1, 0x9) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r3], 0x28}}, 0x0) bind$can_j1939(r4, &(0x7f0000000c00)={0x1d, 0x0, 0x3, {0x2, 0x0, 0x2}, 0x103}, 0x18) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000700)={0x0, 0x9}, &(0x7f0000000740)=0x8) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x7, 0x64, 0x66, 0x0, 0xa, 0x5e, 0x0, @private=0xa010100, @local}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x70, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xf8, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0xd4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x274}, 0x1, 0x0, 0x0, 0x804}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={r6, @in={{0x2, 0x4e23, @empty}}, 0x1, 0x101, 0x206, 0x5dbf, 0x50, 0x1, 0x6}, &(0x7f00000004c0)=0x9c) epoll_wait(r2, &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}], 0x6, 0x10000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) listen(0xffffffffffffffff, 0xf5e1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d0802010000e868000008000000000000000000000e1208000f0100810401a858a74aa8fd2d68e6f31000160020002867583ab129cf6e1f06000000000000ef075c11503c6bba4f8017cb00000000000000083a5ee4001b146218a07445d6d930dfe1d9683f5aeb4cdbb57a5025cc324f00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00000000", 0xbd}], 0x1, 0x0, 0x0, 0x7400}, 0x20000014) 11m54.218938803s ago: executing program 0 (id=461): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_int(r2, 0x101, 0x2, 0x0, 0xfed8) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc2b02) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000200)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001400)={0x0, 0xc182, 0x5}) 11m53.273610008s ago: executing program 0 (id=467): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)={0x0, 0xa, 0x2, "5be8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file2', [{0x20, ','}, {0x20, 'ext4\x00\xae\xecm}\xab\xa4VI\xae4Ra\x17J\xb8!!h\xed\xe1\xeb\x19\xa3\xd5\xdc\x8d\xa5[9\xdf\x8e\x8d\x854W\x8f2ZS\xbe,\x02~M!e\xb6t\xac\xafn_\xb6\x9f%\xff\xd0\x91\xb20`\xac&\x98}\x96y\x97\xb8\xe8N\xcf~\xf3\x1bo\xe2\'\x8e\x9fy&\xd5:~\xc7\x8e\xdc\xac\xac\xb5z\xc3@\xd7\x02Y\x86\xf4S\x82\x9e\x9d\x17\xf7\xf5g\xad\xd7\xdf!\xbc\x02\x1bT\xe0a\x7f\x94\xb8W\xbd\xf4\xe8\xb7\x82\xa4~1\x91r\xcc\xe6\xb3\x92}{]\xf7w\x9cm\x82\xec\x15\xc0\xdcy\x9d>\x18\x8e\':\xb7\xe8\x00\xd8\xfe\x7f\n\xaa\xd0\xbe\xb0\f\x89v\xf0\xcc2\xf4\x95\xd3~\xd7\xa1\xa5j\x9e\x11)\xa4\x95U\xb0U\xf5b&\r\r\xa5F\xa5W\xaa\xb2\x9fE\x8eq\xed\xb9\x01_'}, {0x20, '\x00\x14\xc5\x9bm\xb8\xb2?\x0e\xe9!\xe5\x94\xd0\xce\xb6\xad\x9d\xce\xcbj\xa8\xd0&\xee\x90\xc2\xde\x83\xe4\b\x00\x00\xaa;=E\x98\xf6\f\xb65\a`\x8b\x85\xb5\xd5\xaf\a\xac\xd4a~\xa1\x12\xeb\r\\K\xadv\xb9\tT\\\x89$v{0\xc5ek\xfa\x9c\x9f\xdb\xf0\x83\b\x00\x00\x00\xa1\xe4\xc8H\xd56\x7fr\x81\x8d\x17?\xd0txA{\xfb\xfd\x9f\x9eU\x0fG\x1c\xe3\x94\xa5\xf2\xb7F\xc9\x15fv\xd8\'\xdd:d\x04\xcd+Q\x82\xc5\xac\xbahw\xeegpV\x03\xc61\r@.f\f\x1ba[_\xe5\x03\x85\xe5'}, {0x20, '(%'}, {0x20, ':@'}]}, 0x182) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f00000005c0)="253754687c06d8f58187445ffe9858217350ae0bd72487386e5fed40000000f6b4ecc8a6356cee94d42a3c4dd5ca349e026febcc2c1ebe4115e66c050c2f7247149eba608ddbf64ffbc8b282129359e61be1972f2f6072457d4c7cb98443def118ac59a62d52b69007d04c019998cecc81724339b7286731d7a687f3bdeec32c7b78b1f007452ea6dad4bf1cd89f789de8994f49ccf46083685a63c5ae47b20f3b4aa06b601fc5aac8a0f41dca53cda9a75b2c75f1a0cf0a7ad2570506ac4277ce17d77c47b66dddb4efea72d981aa581effe5ef5fffea09a8117e4c", 0xdc) write(r1, &(0x7f0000000340)="bd0b95647295ec2c4661c327ea4775546f7983c7c0f9a96280802799b80211d0c0efd2d71269679564ed6b1b818949232ed85579e0156c851c9b57b59c8de47b86880e10ec8469984818b6fb911287443661fce15c634256083f1206fd4cf7800dcee45fdf4b7d7bf70ec6038ba0c26f83f0a3676c168818aed84963da6a3c6b", 0x80) write$qrtrtun(r1, &(0x7f0000000c00)="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", 0x180) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 11m50.791281617s ago: executing program 0 (id=476): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/ipc\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000340)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x32, 0x9, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x28}}, 0x0) r6 = syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/time_for_children\x00') setns(r6, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x8}, 0x20) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000280)=0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="400d06000000b571e0c1ceff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x0) read(r8, &(0x7f0000000600)=""/124, 0x7c) 11m46.582946117s ago: executing program 0 (id=490): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_int(r2, 0x101, 0x2, 0x0, 0xfed8) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc2b02) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000200)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001400)={0x0, 0xc182, 0x5}) 11m46.455471122s ago: executing program 1 (id=493): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) (fail_nth: 1) kexec_load(0x0, 0x0, 0x0, 0x0) 11m45.704300303s ago: executing program 1 (id=496): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x50}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e00)={r2, &(0x7f0000000d00), 0x0}, 0x20) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_usb_connect$uac1(0x2, 0xd3, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x3, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x400, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x300, 0x1, 0x3, 0xc}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x306, 0x2, 0x4, 0x7}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0x0, "877b1a30"}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x5, 0x4, "c82f92"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xc8, 0x3, 0x6}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x3, 0x7, 0x5, 'G'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x8, 0x8, {0x7, 0x25, 0x1, 0x0, 0x0, 0x6e1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7, 0x2, 0x8, 0x7, "a7c89fbccb90530b"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7fff, 0x8, 0xf, "ce841d"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x1, 0x4, 0x2, "9cb59bf7190d47eeca"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x40, 0x0, 0xb, {0x7, 0x25, 0x1, 0x3, 0xc4, 0x9}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x6, 0xf9, 0x7, 0x20, 0xee}, 0x36, &(0x7f0000000300)={0x5, 0xf, 0x36, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xd, 0x1, 0x4}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0xc8cc, 0xff00, 0x7, [0x3f6f, 0xc0, 0xffff3f, 0x3f00, 0xc0c0, 0xffc00f]}]}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c01}}, {0xe1, &(0x7f0000000380)=@string={0xe1, 0x3, "d35f438e43680335620bde61a1619707492ce49fd46a44d4d28009c70dbe08221d9780f1a95284f8919c61db2c53f134f23e199c551df7f9c832f800687e0cc131bac20d44ce08bf24f6d1b68bb1cf3e49152ecf8e3ec4ab99562531e68f7c3b856dd586ae62cbb4c8285b8a98ea4469612edb07b2f449e64d78f8a9cc1d38925fb568e100eef43987b45218593e16412a9959ac54ffd7e4e92be4b184876db6554a8e9f8b6ebd21f898b815588166264a8ab2f6cd0640fdd11d28bcbd65d4c1c7396c90137fbf59a0f7bfd06dc91f9dd61a361e92461fa3cc7a245c2c5af5"}}]}) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x30, 0x88, 0x4000069}, 0x2c) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000004280)=[{{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000840)=""/95, 0x5f}, {&(0x7f00000008c0)=""/165, 0xa5}, {&(0x7f0000000980)=""/167, 0xa7}, {&(0x7f00000000c0)=""/44, 0xfffffffffffffec3}, {&(0x7f0000000ac0)=""/136, 0x88}, {&(0x7f0000000b80)=""/155, 0x9b}], 0x6}, 0x4}], 0x2, 0x2, 0x0) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000080)={0x60, 0x3, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7, &(0x7f0000000040)=[{0x3ff, 0x6, 0x2}], 0x1, 0x1, 0x6a, 0x24, 0x6f, 0x21}) 11m43.916028479s ago: executing program 1 (id=510): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000404355220500000000000109022400010000600009044200010300000009210000040122070009058103"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57"], 0x0) syz_usb_connect(0x4, 0x2a3, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x5f, 0x93, 0xab, 0x10, 0x5c6, 0x9046, 0x2f6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x291, 0x3, 0xf8, 0x3, 0x60, 0x7f, [{{0x9, 0x4, 0x3, 0x75, 0x2, 0x57, 0x73, 0x22, 0xb8, [@generic={0xd, 0x24, "85c9da30034b7b1a2268fc"}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "513163022d19"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0xd4, 0x1, 0x3}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @acm={0x4, 0x24, 0x2, 0xe}, @call_mgmt={0x5, 0x24, 0x1, 0x6, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x1c}]}], [{{0x9, 0x5, 0xa, 0x10, 0x8, 0x7, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xb}, @generic={0x42, 0xc, "7cdd1060a6372cc0cfcec932f4467c550661bc9860e01c6636e784d3acd162059485a3f222cf1745b1bfa617f63e56ef73d1d64d51f4c5d372160bbe55a64577"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x5, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x2}]}}]}}, {{0x9, 0x4, 0xb3, 0x1, 0x0, 0xb2, 0xf4, 0xac, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x4}}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "a0"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xa, 0xff, 0xa4}}]}}, {{0x9, 0x4, 0xf8, 0x5, 0x3, 0x2e, 0xb, 0xcd, 0x7, [@generic={0x5b, 0x5, "be5fefa4ba87a1bf27ed709d55e1d325f9835d4bd2d4a51c452a429023dcd6881f189e60d46b612a3045eb2ef2025e59c7cbd255e3377ff0a764f32423ffb13d264283bcd1c6581c8867873574b133940147a583652dac71e8"}, @hid_hid={0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x72c}}], [{{0x9, 0x5, 0xb, 0x0, 0x3ff, 0xf, 0x8, 0xff}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x5, 0x8, 0x8, [@generic={0xf3, 0x2f, "23e8c0fae8a33e035d6ef7d9bf51d1943a967a4c2f5ead40b7339a36e602b6b8096db1dc0ab46a7a6dd895d956c62e658ac4f630f54cb615169dbb1d48519188b4ec86d9ad405bae58799559fcb7285b14c29040fe78cf367c3f233f3eb619bf64848451c624599e735e01d56b2e86e2d8e6e66bbe3f82783893f48fe0b4eae62271001ed667e6bead700b04664ca613fc8aa9428b866a146c9de444e95fe670bf0e2d9d2397a7938b1412bee4a5982c63ead26b8b1f83e1f8f9496c2d919face45a3b632b38fba8ccbab61fe5a59acceecac9e5c261e7ad818b636e0c707353bc151750966be8f14370d39dd73f05c894"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0x9, 0x7, 0x8, [@generic={0x35, 0x2, "60446b6170ff25705c4c2193524ab4620427fb899734df54c29b2d712ecf033701183024f779be2178b589fff15bc19717f3e5"}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0xfc, 0x80, 0x6, 0x40, 0x5}, 0xf, &(0x7f0000000240)=ANY=[], 0x3, [{0x1d, &(0x7f0000000100)=@string={0x1d, 0x3, "0ecef33fa36cd7d083c6a1e25396a6f4f36660b92e030fe8284f3f"}}, {0x102, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]}, {0x46, &(0x7f0000000140)=@string={0x46, 0x3, "e1e186aaf4c7863b33e510b238ed33730b795a68a70f12b31f2c5b0534bb74ffd3c700234d2e1e5f7d2f5b73e31abdd112c76b367980c074197ba3a7030b00f372f01886"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) 11m41.643969861s ago: executing program 1 (id=515): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000240)={&(0x7f0000000540)=[0xffff8001, 0x8, 0x5, 0x60c, 0x29d, 0x8, 0x5, 0x1, 0x0, 0x9, 0xfffff650, 0x101, 0xfa3e, 0x7, 0x81, 0x1, 0xffffffff, 0xff, 0x5c3, 0xc, 0x6, 0x0, 0xffff, 0xd, 0x5, 0x1, 0x101, 0x2, 0x2, 0x10000, 0x8000, 0x0, 0x6, 0x7, 0x2e6, 0x7, 0x0, 0x5, 0x10000, 0x5, 0xa, 0x6, 0xc6, 0x9, 0x5, 0x6, 0x5, 0x4, 0x5e, 0x81, 0xffff, 0x1ba36483, 0x3, 0x7, 0xfffffffa, 0x101, 0x0, 0x8000, 0x7, 0xdf6b, 0x9, 0x81, 0x5, 0x5, 0x7ff, 0x2, 0x8, 0x1ff, 0x1, 0x5, 0x7, 0x8, 0x8, 0xfb5, 0x4, 0x0, 0x9, 0x9a, 0x9, 0xffffffff, 0x401, 0xc485, 0x0, 0x0, 0x9, 0xfffffffc, 0x1ff, 0xdd, 0x6, 0xd, 0x8000, 0x200, 0x813, 0x0, 0xfffff45f, 0x7fffffff, 0x4, 0x6a732dd2, 0x8, 0xbb6, 0x9, 0xfffffff8, 0xf7cb, 0xc4, 0x8, 0x6, 0x5, 0x7, 0x18, 0x2, 0x3, 0x3, 0x5, 0x8, 0x0, 0x1000, 0x8000, 0xffff, 0x10, 0x9, 0x8, 0x6, 0x6, 0x0, 0x9af, 0x9f1, 0x60, 0x5, 0x79a, 0x1, 0x0, 0x4000000, 0x6, 0x4, 0x3, 0x9, 0x81, 0x10001, 0x7, 0x200, 0x9, 0x0, 0x99, 0xffffff14, 0x2, 0x23a, 0xfffffffd, 0x93, 0xfff, 0x10001, 0x5, 0xe14, 0x3, 0x9, 0x7ff, 0x7715, 0x8000, 0x7, 0x1, 0x5, 0x1ff, 0x40, 0x0, 0x3ff, 0x0, 0x3, 0x8, 0x9, 0x8, 0x0, 0x8, 0x1, 0x7, 0x0, 0x4, 0x0, 0x10000, 0x8, 0x8000, 0x1, 0x4, 0xd4cd, 0x4, 0xffffffc0, 0x10001, 0x5000, 0x10001, 0x0, 0x8, 0x8, 0x71, 0x910, 0xfffffffb, 0x0, 0x7ff, 0x1, 0xed, 0x8, 0xa, 0xe6f, 0x8, 0x8, 0xfffffffc, 0x0, 0x40, 0x1116a68d, 0x9, 0x811, 0x2ed73ff, 0x4, 0x0, 0x8001, 0x0, 0x992, 0xf, 0x5, 0x9, 0x7, 0x518, 0x0, 0x1, 0xfffffff7, 0x5, 0x4, 0x3, 0x1, 0xd, 0x8, 0x10001, 0x4, 0x7f, 0x9, 0x8, 0x4, 0x58, 0x800, 0x400800, 0x7fffffff, 0x6, 0x28bbf450, 0x2, 0x4, 0x1b67, 0x601, 0x777, 0x6, 0x401, 0x9, 0x9, 0x100, 0xfffffffb, 0x9, 0x2, 0x800, 0x3, 0xfffffffa, 0x4, 0x0, 0x6, 0x4, 0x1, 0x3, 0x400, 0x9, 0x0, 0x5, 0x2, 0x5, 0xcc, 0xb, 0x6, 0x92b, 0x9, 0x5, 0x4, 0x3, 0x7, 0x8, 0xffffffff, 0x1, 0x10000, 0x7fff, 0x20000b, 0x42200, 0x6, 0x1, 0xfff, 0x7, 0x10, 0x5, 0x5, 0x5, 0x5, 0x6, 0xb, 0xffff, 0x5c0, 0x7, 0x2, 0x4, 0x6, 0x101, 0x5, 0x101, 0x7aa, 0x1, 0x2, 0x1, 0x4, 0x1ee3, 0x80000001, 0xfffffffa, 0xb1c8, 0x3, 0x7fffffff, 0x9, 0x9, 0x3, 0x8, 0x6, 0x7, 0x3, 0x7fffffff, 0x9, 0xb4, 0x4, 0x2, 0x7, 0x10001, 0x1, 0x2, 0xffffdffa, 0x1, 0x160d6, 0x3, 0x2383, 0x2, 0x1, 0x5, 0x54fb6b32, 0x4, 0x5, 0x7f, 0x4, 0x9, 0xeb6, 0x200, 0x6, 0x2, 0x2, 0xa19, 0x9, 0xfffff9fd, 0x5, 0x8001, 0x10001, 0xbb, 0x8, 0x4, 0x1, 0x7fffffff, 0x64b, 0x52, 0x6, 0xbab, 0x5, 0x8001, 0x40, 0x4, 0x0, 0x9, 0x401, 0x0, 0x4, 0x7, 0x6762, 0x0, 0x8, 0x7, 0x800, 0x2, 0x0, 0x7fff, 0xe, 0x6, 0x5, 0x7fff, 0x5, 0x8, 0x6, 0x5, 0x200, 0x8, 0x3de, 0x2, 0x2, 0x4, 0x0, 0xffff7fff, 0x3, 0x8, 0xdfb, 0x7, 0x6c63, 0x0, 0x1, 0xfff, 0x0, 0x3, 0x5, 0x7, 0x158f3952, 0x7, 0x3, 0x2, 0x93c, 0xfffffff8, 0x80000005, 0x2, 0x3ff, 0x0, 0x40, 0x4cc, 0x81, 0x7, 0x9, 0x2, 0xf, 0x4, 0xa, 0x2, 0x80000001, 0xa457, 0x0, 0xffffffff, 0x800, 0x9, 0x2, 0x1, 0x2, 0x8000, 0x6, 0xfffffff7, 0x6f8e, 0x1, 0x5, 0x0, 0x10, 0x5, 0x2, 0x6, 0x0, 0xcb9, 0x4c8725b2, 0x1ff, 0x4, 0xd08, 0x1, 0xffffffee, 0x5, 0x7, 0x5, 0x80, 0x10, 0x425, 0xffffffa5, 0x101, 0x6, 0x4, 0x9, 0x2, 0x9, 0x4, 0x60000, 0x4, 0x7, 0x8, 0x8, 0x4, 0xffa6, 0x6c, 0x10, 0x9, 0x9f76, 0xf, 0x0, 0x6, 0x3, 0xef, 0xb9, 0x5, 0x764a4011, 0x19b4, 0x7, 0x0, 0x9, 0xfffffff8, 0x7ff, 0x87da, 0x1, 0x2, 0x401, 0x7fffffff, 0x4, 0x5, 0x2, 0x5, 0x4, 0x5, 0x5, 0x0, 0x8, 0xe, 0x4, 0x9, 0x3e8, 0x10001, 0x401, 0x1d95, 0x9, 0x0, 0x3ff, 0x0, 0x0, 0x4, 0x6, 0x8655, 0x1, 0x80000000, 0x3, 0x60, 0x56, 0xfffffffa, 0x401, 0x80, 0xffffffff, 0x7a85, 0xcd, 0x2, 0x28, 0x7, 0x0, 0x10001, 0x1, 0x0, 0x2, 0x7f, 0xc4, 0x17, 0x1ff, 0x8, 0x80, 0x7fff, 0x7, 0x6, 0x9, 0x4, 0x0, 0x200020, 0x1, 0x5, 0x6, 0x3dd, 0x7f, 0x599, 0x4e, 0x81, 0x4, 0x344a, 0x6, 0x2, 0xc, 0x292, 0x1, 0x3, 0x682, 0x4, 0x9, 0xfff, 0x5a4f, 0x40, 0x80000000, 0x287, 0x0, 0x2, 0x150, 0xfffffffc, 0x2, 0x101, 0x1, 0x3, 0x3, 0x1ff, 0x1000, 0x3ff, 0x2, 0x1ff, 0x93, 0x1, 0x7, 0x4, 0x7, 0x1, 0x0, 0xffffffff, 0x9, 0x9, 0x3, 0x492, 0x5a4, 0x5ff0, 0x1000, 0xfffffffd, 0x7f, 0x2, 0x7, 0x400, 0xd, 0x0, 0x1, 0x7, 0x0, 0x1, 0x10000, 0x5, 0x8, 0x3, 0xd, 0xc09, 0x8, 0x4, 0x200, 0x0, 0xb04, 0xb, 0x9, 0x7b, 0xcf5, 0x7, 0x2, 0x602, 0x9, 0x3, 0xa, 0x9, 0x3, 0x2, 0x10000, 0x8c, 0x80000000, 0x9, 0x4, 0x1, 0x401, 0x7, 0x3, 0x2, 0x0, 0xffff, 0xed, 0x1fd0e722, 0x3, 0x3, 0x3, 0x4, 0x1, 0x7, 0x4, 0x495, 0x8, 0xffff, 0x10, 0x5, 0x1, 0x9, 0x6, 0x2, 0x1, 0x1ff, 0x8, 0x86, 0x15de, 0x8, 0x1, 0x1, 0x9, 0xffff7fff, 0x2, 0x880, 0x1e3179d9, 0x38, 0xfffffffe, 0x0, 0x9, 0x8, 0x6, 0x23d, 0x9, 0x400, 0x4, 0x8, 0x8, 0x163, 0xa, 0x0, 0xc60000, 0x18, 0xffffffff, 0x6, 0x0, 0x0, 0x49, 0x0, 0x2, 0x7, 0x3, 0x0, 0x79b2, 0x6, 0x3, 0x64f77cfe, 0x7, 0x1ff, 0x0, 0x8, 0x672e, 0x2, 0x10, 0x3, 0xffff6071, 0x0, 0x2, 0x7552, 0x4, 0x56e2, 0x9, 0x5, 0x4, 0xca, 0x0, 0xb, 0xff, 0x2, 0x9ce, 0x7, 0xfffffffd, 0x2, 0x6, 0x0, 0x2, 0x289d, 0x1, 0x4, 0xffff, 0x4, 0x1, 0x7fff, 0x9, 0x200, 0x0, 0x4, 0x8, 0x2, 0xb7c0, 0xdcd, 0x1, 0x9, 0x1, 0x4, 0xb0, 0x1, 0x6, 0x1, 0x1000, 0xdbd5, 0x9, 0x8, 0xffffffff, 0x400, 0x9, 0x6d5, 0x7, 0x48, 0x8, 0x4, 0x9ee, 0x9, 0x7f, 0x5, 0x5, 0x9, 0x4, 0x2, 0x2, 0x284, 0x9, 0x4, 0x1, 0xfffffff8, 0x5, 0x7, 0x6, 0x7, 0x8000, 0x1, 0x6, 0x7ff, 0x5, 0xfffffff9, 0xffffffd6, 0xffffffff, 0x6, 0x9, 0x400080, 0x9, 0x0, 0xfffffff9, 0x1000, 0x8, 0x0, 0x95, 0xfffffffe, 0x48, 0x2, 0x0, 0x0, 0x5, 0xffffffff, 0x4, 0xd, 0x0, 0x2, 0x28c, 0x8, 0xd, 0xe, 0x3, 0x1ff, 0x9, 0x3, 0x9, 0x1, 0xfff, 0x5, 0x5, 0x1, 0x1000, 0x5, 0x0, 0x8, 0x0, 0xff, 0xcfe4, 0x4c114f8c, 0x9, 0x3, 0x10, 0x5, 0x7fff, 0x100, 0x4, 0x401, 0x8, 0x0, 0x5fab, 0x1ff, 0x8, 0x401, 0x3, 0x7, 0x7, 0x5, 0x2, 0xffff, 0xfaa, 0x5, 0xfffffff9, 0x81, 0xe1b8, 0x4, 0x8d4, 0x8001, 0x40, 0xea, 0xffff, 0x7, 0xffff7df2, 0xffffffff, 0x6, 0x1, 0x7, 0x10001, 0x3, 0x6, 0xfffffe55, 0x3, 0x3800000, 0x4, 0x400, 0x9, 0x94, 0x7ff, 0x9aa, 0xff, 0x4, 0xffff8000, 0x9, 0x3, 0x0, 0x6, 0x400, 0x9, 0x5, 0x6, 0x9, 0xc, 0x1cf, 0x5, 0x2, 0x7, 0x8, 0x9, 0x0, 0xe91, 0x7, 0x8, 0x1, 0x0, 0x6, 0x4, 0x7, 0x10000, 0x7fffffff, 0x1000, 0x8e, 0x4, 0x0, 0x6, 0x5, 0x200, 0x9, 0xfffff79e, 0x4, 0x0, 0x1000, 0x1, 0xfff0, 0x4, 0x8, 0x1, 0x2, 0x8, 0x1, 0x6, 0xffff, 0xa, 0x7, 0x3, 0x7ffffffe, 0x2, 0xffff, 0xadae, 0x7, 0x7, 0xc6df, 0x4, 0x8, 0xde29, 0x2, 0x9, 0x9, 0xffffffd6, 0x6, 0x3, 0x5, 0x4, 0x2, 0x2, 0x0, 0x6c, 0x2, 0xe, 0x5, 0x18, 0x20000000, 0x4, 0x0, 0x8, 0x0, 0xff, 0x6fcc, 0x800, 0x3, 0x8, 0xb3, 0x40, 0x8, 0x3, 0x1ff, 0x4, 0x400, 0xf7, 0x0, 0x5, 0x308d52ba, 0x7, 0x5, 0x0, 0x3a, 0xfff7fff7, 0xfffffffb, 0x9, 0x9, 0x8, 0x804fae, 0x2, 0x3, 0x9, 0x3, 0xbb0, 0xfffffff8, 0x2, 0x5, 0x80], 0x1, 0x400, 0x1}) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x4000) ioctl$UI_GET_SYSNAME(r0, 0x4004556a, &(0x7f0000002a80)) 11m41.504131876s ago: executing program 1 (id=518): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 11m41.248242618s ago: executing program 1 (id=520): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0xa) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x5) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) 11m31.159376902s ago: executing program 32 (id=490): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_int(r2, 0x101, 0x2, 0x0, 0xfed8) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc2b02) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000200)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001400)={0x0, 0xc182, 0x5}) 11m25.799303056s ago: executing program 33 (id=520): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0xa) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x5) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) 7m40.380749899s ago: executing program 4 (id=1188): r0 = socket$l2tp6(0xa, 0x2, 0x73) clock_gettime(0x0, &(0x7f0000000400)) pselect6(0x40, &(0x7f0000000300)={0x0, 0xe870, 0x8, 0x5, 0xffffffffffffffb1, 0x709c, 0x7, 0x6e6}, 0x0, &(0x7f00000003c0)={0xf, 0x3, 0x2, 0xe3, 0x2, 0xffff, 0x9, 0x7fff}, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00'], 0x28}, 0x24004800) 7m39.424158589s ago: executing program 4 (id=1197): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x2e, 0x61, 0x2e]}}, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 7m39.214032976s ago: executing program 4 (id=1199): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) 7m38.676355226s ago: executing program 4 (id=1202): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 7m38.588009547s ago: executing program 4 (id=1204): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 7m37.146023333s ago: executing program 4 (id=1216): r0 = syz_io_uring_setup(0x50f, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)=0x0) syz_io_uring_setup(0xeff, &(0x7f0000000040)={0x0, 0x8000004, 0x1, 0x7, 0x0, 0x0, r0}, &(0x7f0000000300)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000140), 0x0, 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0) 7m36.797619322s ago: executing program 34 (id=1216): r0 = syz_io_uring_setup(0x50f, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)=0x0) syz_io_uring_setup(0xeff, &(0x7f0000000040)={0x0, 0x8000004, 0x1, 0x7, 0x0, 0x0, r0}, &(0x7f0000000300)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000140), 0x0, 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0) 12.492632203s ago: executing program 6 (id=3220): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x453, 0x800, 0x70bd25, 0x25dfdbff, 'P'}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 9.929378865s ago: executing program 3 (id=3226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8010) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000580)=0xa) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x3) ioctl$TIOCSTI(r4, 0x5412, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1d8000000104010300000008000000000a02000505000100020000002a9a8c3eedd5fe0bd43caa68c5aa26f7f736de5e4cc75fc81a950bcfdf5e935b97fe16e8c9613564b0d3193f7804ffa7b34fe292502dc94e70702be9625a098dad3a12d9afc5"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22842, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xbfd1, 0x0) 8.522753947s ago: executing program 3 (id=3232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x453, 0x800, 0x70bd25, 0x25dfdbff, 'P'}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r6 = socket(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mq_open(&(0x7f0000000100)='\x00'/10, 0x40, 0xa0, &(0x7f00000001c0)={0x0, 0x7, 0xbab, 0x1}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7.579759541s ago: executing program 3 (id=3233): r0 = syz_usb_connect$hid(0x5, 0xfffffffffffffdf4, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xf6, 0x5, 0x6}}]}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x96, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x1, 0x1, 0x8, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x9, 0x24, 0x6, 0x0, 0x0, "9d823c8c"}, {0x5, 0x24, 0x0, 0x1831}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x8, 0x778c, 0xbb}, [@mdlm={0x15, 0x24, 0x12, 0x8}, @acm={0x4, 0x24, 0x2, 0xb}, @country_functional={0xe, 0x24, 0x7, 0xd9, 0x6a2b, [0x7ff, 0x6, 0xf, 0xea]}, @mdlm={0x15, 0x24, 0x12, 0x214c}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xa, 0x2, 0x17}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0x6, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x8, 0xc}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x6, 0x8, 0x3, 0x40, 0x6}, 0x24c, &(0x7f00000003c0)={0x5, 0xf, 0x24c, 0x6, [@generic={0x97, 0x10, 0x3, "e05ea7f1738b4011bf7f9d2318b43432a3b16dcae4c1dbff60b3e148e95fd85cf6476957138e5d31717567d331f5493b43ecfd8e8c7bafa1311e2f4ea45c8d4a20a64a7c1db69a4043038705bcdbbc81a98a0f6a3cff6205774c8d57e4fba26d2899e09c7127242ea3d94427465ac67287131549d66e7ba5b360a2fadde7ffe537648f994ab7a1c81189bdf7da728df39693f07c"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x1, 0x5}, @generic={0xf0, 0x10, 0x3, "2fdf361c75fdade9a54229c4a5a803d5380f7ade5a60d2fa0c0321e6a6ad1d6972c6d21387db0af6d70e77040e947031d3b71224b160e4359aa15da3885760816ddee8c044b376619e8b25cbaf3dd0759d808670edc3ca2a009a734a0df509d6abbe640a5c1b082bf0a3499385084af6b6e7a2908532e768ca024d313c25649a186518176b5019262e8f3f4a653d59edbb69613daa0700b0fa32faec3a992f72d32c715f31fe5c3e82a0acc5cd6e9e54cbd95fc75e6e3b77c663d2d2ff65261ddff696ade6942b980bd3b3214bb7a5c0e6c3404b67392eec8b5855abde0b72c77006e43aecb6afcb731e004097"}, @generic={0xaf, 0x10, 0xa, "d11f8d5a0289256bd7d0024fe5dbc7c97a65006a09f1fb66c4f18fba4c0a11dc69ab41b3973770ed11c652ff5c2693529a10d6d8c734fd671802fb6a385809667bfb9445963386c966177b667d24189973f460f7944f09ff4aa2666581da52a7ed08ffb1f3383c0d0fda1843c04dfc0337754b64de78343f3796de7621b77ce3b3ac682558da5bd3abfe3d635b8ff44fb276c4c2636844563fa2fb07cf22faaebc79bd24e3cdbd2bc3e44b60"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x3, 0x4}]}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x93, &(0x7f0000000640)=@string={0x93, 0x3, "fe41f20122de9d5e808f6bc133a96615d754681adc047069e9b1384406b06ec16e6931a5244c91aaf67ef71547d3b5c8fbad7fec19d9bd60807a291d5fde5109d633ca538bd972edd2226526a21c25242b068102435a91fc40a8e1076dbce30c6b524f4d8d02a55cfde9bf94c78ba3ec0d22f47a7adca366c6ed7d063bb4d39e7cae0a56d2469c9e505055d6ad41dab8de"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2c09}}]}) syz_usb_connect$cdc_ecm(0x3, 0x79, &(0x7f0000000700)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0xc, 0x20, 0xf3, [{{0x9, 0x4, 0x0, 0x1a, 0x3, 0x2, 0x6, 0x0, 0xfb, {{0x8, 0x24, 0x6, 0x0, 0x0, "d04971"}, {0x5, 0x24, 0x0, 0x457}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7ff, 0x2, 0xfc}, [@mdlm={0x15, 0x24, 0x12, 0x562}, @country_functional={0x6, 0x24, 0x7, 0x4, 0xa}, @obex={0x5, 0x24, 0x15, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xa, 0xf3, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xe, 0x80, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xe, 0xa2, 0xe8}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x110, 0x8, 0x6, 0x0, 0x8, 0x10}, 0x13, &(0x7f00000007c0)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x5, 0x0, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x21, 0x1, 0x4}]}, 0x8, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x180a}}, {0x43, &(0x7f0000000840)=@string={0x43, 0x3, "8cd5137d4219e3baceab12b884377138abb97838d46f3883193930362823cc49a910436fe96cff396e3be5ff037a3a4529d5768e4a3ebb20ce01b550d6d639dc8a"}}, {0x48, &(0x7f00000008c0)=@string={0x48, 0x3, "b3d8322db5e56aced1e43b787e328211e78f80c8b39fa91f66efa4b3fcedcb353d93dd3ac9169959b39db3c4894527b6a7494cd81ffe909590b3488efb69d6ad9a4ec1cd85fa"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2009}}, {0x98, &(0x7f0000000980)=@string={0x98, 0x3, "7d213b5f5de84d2b8dd5d6ff7649bfc0ff70e45020a5921176d7d10cd087c138e55a5eb35cc14e7c03ce942b73840c23d0e0e09fb3af69a55127f2eebd756c8ffad249da69ed54eed57b84725aaf9efb3b5c4e1c0d9306b7461bca819de6b5df7c97bb844ab34431d811921063c23006938d2a6365aac3606acd70e83b3ce0c04091ff2d613e485653954cc31d800aae9071c3bda7d3"}}, {0x6a, &(0x7f0000000a40)=@string={0x6a, 0x3, "e137e568ad546e564c4b1f0b6ad6fbeae5517edaa46945ec18fe9a855334d8c3a1b327bbcce99f86d375226442f37dfd2b37ee227674589299fc101e1d79f5af41d8f8b5f201b419dada0d8843e6183a3fa50799c82f4078cb287a425bcb4f274b87a8b1b523dedd"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x180a}}]}) (async) syz_usb_connect$cdc_ecm(0x3, 0x79, &(0x7f0000000700)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0xc, 0x20, 0xf3, [{{0x9, 0x4, 0x0, 0x1a, 0x3, 0x2, 0x6, 0x0, 0xfb, {{0x8, 0x24, 0x6, 0x0, 0x0, "d04971"}, {0x5, 0x24, 0x0, 0x457}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7ff, 0x2, 0xfc}, [@mdlm={0x15, 0x24, 0x12, 0x562}, @country_functional={0x6, 0x24, 0x7, 0x4, 0xa}, @obex={0x5, 0x24, 0x15, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xa, 0xf3, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xe, 0x80, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xe, 0xa2, 0xe8}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x110, 0x8, 0x6, 0x0, 0x8, 0x10}, 0x13, &(0x7f00000007c0)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x5, 0x0, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x21, 0x1, 0x4}]}, 0x8, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x180a}}, {0x43, &(0x7f0000000840)=@string={0x43, 0x3, "8cd5137d4219e3baceab12b884377138abb97838d46f3883193930362823cc49a910436fe96cff396e3be5ff037a3a4529d5768e4a3ebb20ce01b550d6d639dc8a"}}, {0x48, &(0x7f00000008c0)=@string={0x48, 0x3, "b3d8322db5e56aced1e43b787e328211e78f80c8b39fa91f66efa4b3fcedcb353d93dd3ac9169959b39db3c4894527b6a7494cd81ffe909590b3488efb69d6ad9a4ec1cd85fa"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2009}}, {0x98, &(0x7f0000000980)=@string={0x98, 0x3, "7d213b5f5de84d2b8dd5d6ff7649bfc0ff70e45020a5921176d7d10cd087c138e55a5eb35cc14e7c03ce942b73840c23d0e0e09fb3af69a55127f2eebd756c8ffad249da69ed54eed57b84725aaf9efb3b5c4e1c0d9306b7461bca819de6b5df7c97bb844ab34431d811921063c23006938d2a6365aac3606acd70e83b3ce0c04091ff2d613e485653954cc31d800aae9071c3bda7d3"}}, {0x6a, &(0x7f0000000a40)=@string={0x6a, 0x3, "e137e568ad546e564c4b1f0b6ad6fbeae5517edaa46945ec18fe9a855334d8c3a1b327bbcce99f86d375226442f37dfd2b37ee227674589299fc101e1d79f5af41d8f8b5f201b419dada0d8843e6183a3fa50799c82f4078cb287a425bcb4f274b87a8b1b523dedd"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x180a}}]}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="060000000c00370400"/20, @ANYRES32=0x0, @ANYBLOB="83040500010000002c0012800e00010069703665727370616e0000001800028014000700"/52], 0x4c}}, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000040)=0x1) (async) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000040)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x6, 'i'}]}}, 0x0}, 0x0) 7.324349518s ago: executing program 6 (id=3237): openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001cc0)=[{{&(0x7f0000000180)=@llc={0x1a, 0x309, 0xf, 0x10, 0x5, 0x4, @multicast}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)="adc59be8d88ddf9462d289aba847822d5cdae356fd4fe0c009b150379cd4b75c65fc4f32340a99b62d07af9cb182527f0a7b0ec74fac886c3911f7a8ca38a5201cb56e1d9fbfd81c7cfe1a52b1e2a613a1ea1f401a8bdf9288174cfed6da97349e12dce9360f00ef7d076a8b757025f544f52da74d00a70bdd8f3f61e45dd20ebfc3ee108539732476e877991d694c5fa58fa6e40bc650a2a2fadffae08819f19f70e85c87fb0c134746a6b4c7fae734e9bfd71df3dc98819c3e1c0da1890009ded39baebad976a1d0cfb38a1b3e6785ef6320085db7628a95a93abd646f1708bce4810e5b808a8fe2699b1f0d44ffdc22c84cc6", 0xf4}, {&(0x7f0000000340)="64aab6b03b31037071f03f51620c9b2cf91baa9457246492a470c4da545495c021224c42813f9377d36bc47e5575d1152224a491ce35251c7e3c91e87ab2de9f272fe0413f6d08b99c9a5dc6b1800647be685b981432265124a3ea4907000f7c9a06fa8490834bad9120b143247450b5fbe968bdafaf0eabccd0607bce23fa3dbb430ae5fc3c3a4ea2b3205d70ca1dfacbb196113047831b2be5bef1a7c0872c76338b6d490076d75dfb313d34ec05c608ff947e9f362b9b5e240aa7a581b3af49214fd51317065439e620157e91172dcad72b52c4fff9f7d7ab265390dff97b2404135faa2694e0acae11b0254bdab31d3b85c18b2161d010", 0xf9}, {&(0x7f0000000440)="bc21746f51f80e882faaac519b21d214445bb8fc5db1d81ac436d76b767f5cf9986a6eccd61bd2a7ac4fe9a6a94b56198b2af96d104ab0367fe9685bb5d8c8c429b2c91eddcc3fceea0c644885036b1d9d98300bb8fd3d2c737e30f7d8e9599ee39d5fb2c024cd8cc861751affea3f", 0x6f}, {&(0x7f00000004c0)="dfa4de6c8fa62cd80578096c030740745411bead3a9f5a84666b10c81f93b0d9bcb16ac3f3a6977e8fb9591ec2e7ac1d528933dca83fdb68eca438e153dc906799a4a9744dde1e2ca68978471a7257bfcb984f204c925479ce5f397001f3deb581a22c508cda4b833dfb982e13c8637f38230a59168d3722d207b79a9a37d8ca521df20c7cad7d1473f3863c55f5bbeb9b7c55181a", 0x95}, {&(0x7f0000000580)="3b53708027a2f7b82e87b7979ec24f2991e03b5a", 0x14}], 0x5, &(0x7f00000005c0)=[@timestamping={{0x14, 0x1, 0x25, 0x81}}], 0x18}}, {{&(0x7f0000000700)=@in={0x2, 0x4e21, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000780)="5dc2ebb76e960c6c5f76438d8303b9846e9aee0070179959d720a93c580046675edb2f0c406a4e503172989295b66eae795e76eea1e7173bbcab7fc958cd6ab824b02cf4198bc3c49427b75501c62baf10e6bf4fd9e3ceeb587d11897735623f08d57fa0e4a8a2b199468f78e4e04b0433149f382c54b6e57468b36411f28f75bd7202ba1147222a5adda0e333aaa4f9de6169d937aa2a8b3ee6a774c781b7ddfc4163259a309aeccf16d8f23de63636891785d1dfafb88c8392817904d5a16b47d4bb3efdec768b42f860f6c951", 0xce}, {0x0}, {&(0x7f0000000980)="bd45c2a03a4b26b667e2e3a4ad32cbb23bb93275bb563880a8cf3563502e9ca8d38a5d00daddcd08a63f2afe71a038a1e40bade17ee046afc05f76df40521caa9104a03d9f5b99f2537c6418092ad148ad5900c4c97ceb33842ce90a786e0582a54c94c836e1b935175115fada24d3f6ba435818285126b4b8bcfba827a876753ccbe011915e828ef74a52a0729d787d46cd4cc3d8091c23cb4e2f90d70000cd271cd125efd11ec09b68bb035b2c6bb682642d8b137445c0e7162baf3b4fc547062ae84542fed5512c0769aad24153924ca3281fcfe6fb1dfabe339e0b83b3be489f31adabd30c59227a3274384531e8c50d519f9098d7eea0e67f2851690047db203390eee5cc6a1301a87dc01b1c0345be0ced504b31e50641c5b18f06b0dd3cb2ee95b4c42cb7208d77d714ea752c21b86aa8050df16d40d293e1e3e608eb06f5fd3d573b534869d2a798099a30bd8dc5af44377ebd03cb8b278fa3481078bd75dbb7a2c5bd4f581f5d83f64885de75e233caffbff93f07f600ce865db75470bf18f9836f26e1f2b6a971336aa0d66c051c5e8c570c7579c7390a19fc7f3a2fea49365992c0e9d365c6abb8a524aa359fc5d893a1ab743e662f1773d2ae8b044176f27aa65afa04f4a39c4ce73972360b3f994abc822c1d8f25106763eba489f762b29bdf76f7dc0b6e91a7217c47d8d6f0407c42dd94d9cadc6fd7cdd35c7db453e02902480dd00507c339268f1a937b93d4a2535a663db1668a5910da3d29aa09844e7e457f010bf27144a312f70da3f663c6deda657e47768a96631decc7529a89207dbf350550e84136acf7d0502b2bbe59945a3a6523ce2e8e568aed025066e98f5d3425e5af30d4c16ffb4c32efea970eda45661e8e82aeb293f15968d2e20da8cdc79f7f31f4726ebeff9c5f1da196daca1ee6416995e9c4501432da0c43bcba254960f2dedf4334ea452c932faf13b245c64516bc6f3f19be28c9f7c968fbba4dd6c2c55360093c47c968ce5d599e43a05a12b7009dcb44c35c763d171dd0f8cc4a7977703097ade0e13271d5ba3bbcb70242460c9c4691a8efa363a9fce0119a0378fd95cd389c428355c1ab4067546fc32f24fbb44212fe6e96447cc1d6d277a4866ea75c38cbada327e152cad96a4a9b403e34aafef5f7625a963e50a136d237fce0b0bbaed0c84ce2f919f22a21f86b5f1b84793aaa37f4d3f084bb19a325ff6e3c0da08f4aab5acfab0f3db635c1423b66ab61bfdb714c37fe20859e5b3a9166f49666969927bf1211d37be71b993b07721313d85877aa05925d5bf8d12d1288b9e8029f84f40da2f88a517a3a782815ec196d838b456302a16ee751d870951f64744066889f9c9dab2a9468bbb38ddeb9c622e667f39b3927e757dd0d69824dc86172d035e499c87c5a76a9270442c441b07a49942d1a101cbb0b14cd7ca1d6a80db754ebb553244329829082bd0f41de2cad410b4acd8896379dba0daf69c724c898002a4c71a4a183160c9255a4c21693b8c39cb7512c1e430465b8e142784badc55120713f3a31877fcce4146711c7bc20937ca325c9974df91c2d6a053b642248b3613a51874e84585e6cfe8b3d20a397fa9f25e8837ab5938c357a414447591da662ed695adaf4834b7d35a010ad6a20fdfab6138665ac5c9c65dace40585b5449845048fb30bd1cb48d2c6878ab871790f60fe110f35e73e1d76f9d0ec51cee2ff2869195f28c06f52c1ed6b3aee622f2f979f905708e383c3582520c0fae3990a4668ffb57c87d31a72c50c3b65e4a36204a1774d5c01730ce716434a221f4af34d959ae40cccebe5994c1b792174dd112137e4aeeac243cdd5980d4953e36e988d4b39ce5f0d6e15b68c221c8c193dcc486c2aebcbe530ed9dccf1b32462a66a37ee9c202d97ec01dbb248884e7f357f90f15a2e42d679067e78c64a695f5bcd600f8e775d7b54e8bf099293718655ab2cfd09604105a2bd61184f9e47cdc63a7434cc9d5458efed7d1bb8078f158129dc447ff992b96ba1eb43280c16919f0c546990d9f57d77e94d13ae9c5d296fe817823397fecd6c0da8c9ba4864c16613c50df8d1f3015a9a21aaa04b926dbc9a13ebe90b6772a6230be85ca4a147dbc1ab88c0bd9eb7653d5718ac51f238691084e6c2159b2c14f5fbab409abb8fdcf2a2eed0ffe263a51a8f786504e10a47ff498dcfb1c271ea72eefb4252cd27dd570afb02a758214e0ef6a37399bb7249edd240ddb833dcee34addb58b823a92c9c15d4f3f0932687b131ba010ccad90bf93be8e067e0eed4c3cbf91cc963b3cdf0c4c3459cb66bde94e77296a9153d60007a4888f1f1391c2fef5b8bef1d0198fa7237471191a1cec807ad49a8c9c40781af8706b0ddaab46df1949062d3e427883dcff788618f87ace85c5f93de1fd9593eb10305b997304e89a0c9f0c0d85f838d20072bdd74a43be66c9bb471e46b68724d45a42b2bd4a24e35ef25ed6cc3eb60a9999843ac3a798d0ce32356a1178732d3ef1b73687db2ea3b2e321736d0be250499cdf75674e7cc8336090c349f3df0c3ee06e720712c146054b6c3c409606862ecf87231d4ac505a3620c4fc5764e6ab521b8adbe4a62427747e8d448c9046c1f65a4016f76109ba16ce9cd71b313d8d224ff206237ed77504331c05cc498ed6cced24ccc47e0fe7623e4e30c4ff28b972205f0a29b43ce4bbea8c73d5ed4ba406e7ff5f4ec2bc016818085acdd156ad230306d28f5c94f9506e1b703e4f603bb73448b9ac90103a2cdee21953c87987fe3a6eea960625bea6c8e329ed3968cd2860810e7fff582c344b7716837c708690482180220554260ae372381edf9d3eeaaa0d0b0941bdf63d7e3b6e86a03fe0a32c41af4e25cca508f9c4e5bd7bf0c3bde498eb41cac688d77b5b772ee830589c988b53541da176cb9ada7258544be995e11831caa2c6c4abf724805e2d5c516e446b2854d084ad0ed768a0bdf2fdb758e0c2e0193bbed07976a6f655018718e78186550ce30c5a44d24e79d9ce101e8d14a3a720b2e74c89e54d640515c75e889f5f0f3fb369524a3f662b87dffa3b50da419d091067a08e675cd651a83e296c4ab4ed93fcae04c99bb124e6e3b65a9db6398e93b116a6062b3717696a28509398131d7d78892d038082b00a189bbf24b4964d8f8d78cc57bbf6433a5781f1bf19a99d3e5f4ad41b514d1010f5b3c7a821e9e05839a29dded4b779c9be56a3efb844b1790ae64e59115262e6c470276914bbd95c36822c38e7199e3efc2cf3d9677bd939db6b9079a843aafaac1837747a0d3f9f3a7a4d2b4d8f35dacaa1818dc10cecd408d8b5ea8953e86bbec6e5e9b1e0a5a1d1ed77d055787027e0d6dcd2dc4940a2f376dd0290ad77a47a1610d6ded7fb3cc96642535106edb7ca820e15644524c335134c035db946c46d88b4470ac133bb900d9f730f2bcd907e7b4c46ebb626433d37ec1f0babd966a87a2483ac51ac4e9da6b4d36662dc562470e89a9fcc6cfd6b362ae922210350f830e54dc864e78b8d6ffb6b41b157af22d21ddf73ceb001bc6224a6e42fcc30760b88d9be78e86fea60b2ec13ac1af17792d6daaf04694ced2302fbea44e5c939ea0dd83871f1519945032d4b2aa62b605c6e51d7ff51df81e528e52c00f6d797b955646a65fbc88207afebf0bec7277b32a87f95fa3f34e3607520ad859e1577f99c3b8acc163e91ff162415e7ea989b9f7a123b613ecb6e76f661a53b35fc18b494c16bc79b0b698c5e485e17cc6fd4d2b2a962323c08de4031ed2dc35f31f3a427ef2d960fc799f9cf4327de077410bef6f8b2332604304d0c66dbafd9b08e35d42d19dbcf61f20db152c5f200eaedb161a609f16e9f5ae7eb8721d04c9a7632fdfd4e36fd1fe4a7b010268626292856c984acd7a49af4dfaa2ad17d4937a96e32e82110d7d0695cf09c03ba81646eaf67d39e9c0cd50dff2a4ead38930ea7c2308d043da82a6393393e32f1be5fe19a8da5eb45ef79dac65893bffb24cec72f7122f8157edf484e4cd4db6f3b5e5999787f0df7a45b136622f13900cfbcdb42dada59864268e7713f49e8275f4c6c1be954804c452124e048278678deaf08c3088ece04bd754d8abfdd8b437a22191c9dfc4d44f1667709f5f69c091278781c572cb691c166832b6b8f6c63ae19e38531e8fc1a7a08a04fe458971049c63b06a8a8d957d4f7e1b81d61ef5bd7ca976b08a0765a7eb2e8df0041f04da68af10e98408df53e38059d4b4c8e0f88072c7458623262fa223330ab1dc97d5a93a1dc9dd445d08334a88442b9569f0dc7b2e5b", 0xbfe}, {&(0x7f0000001980)="6770c0733882693da8641192580c3211f1dcbc82d40183b16177912a30ca5675a829f428daacd3db35b1571e803543bee11443a57bb47130e873bad2408f26c539536fff8f1ba52b7f66d340a47b1a18807fe443381bc5a859dd24c694a4d2359a511ff1c5fb03e1986ebfba30280d0dff4d23027c772d8b859b0c", 0x7b}], 0x4, &(0x7f0000001a40)=[@timestamping={{0x14, 0x1, 0x25, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x90}}, {{&(0x7f0000001b00)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b80)}], 0x1, &(0x7f0000001c80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xf}}], 0x30}}], 0x3, 0x4000854) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x2c, r4, 0x301, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 6.150369953s ago: executing program 6 (id=3240): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000100)={0x10001, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x2, 0xffffffff}, 0x4}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) dup(r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, 0x0, 0x4000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 4.690281093s ago: executing program 7 (id=3243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x453, 0x800, 0x70bd25, 0x25dfdbff, 'P'}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r6 = socket(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mq_open(&(0x7f0000000100)='\x00'/10, 0x40, 0xa0, &(0x7f00000001c0)={0x0, 0x7, 0xbab, 0x1}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.402433278s ago: executing program 3 (id=3245): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x648, 0x0, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1a0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) 4.330366542s ago: executing program 6 (id=3247): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x453, 0x800, 0x70bd25, 0x25dfdbff, 'P'}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 4.329775914s ago: executing program 3 (id=3248): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003000)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000640)=':', 0x1}], 0x1}}, {{&(0x7f0000000d40)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000f40)=[{&(0x7f00000077c0)="d7", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x9e, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdf2, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x32600) socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d264f24003046af0003001020301090212ef010002000009047c"], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x20000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r5, 0x1, 0x0, 0xfffffffd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x24}}, 0x4000) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x12540) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x3}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x565ba}]}, 0x28}}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000100000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="000000c809ec89aeb0d4d2a925177a0684b5e70000", @ANYRES32=r2, @ANYRES32=r9], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) 3.497689962s ago: executing program 7 (id=3249): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/48, 0x1a, 0x30, 0x0, 0x40, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100000000"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/slabinfo\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x1, 0x7f, 0x200, 0x1ff, 0x19, "d3174b8648c5889730455dda965df32c680ffd"}) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000002040)={0x6, 0x1, 0x200}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001020000402505a1a440000102180109025c0002010030000904000001020d0000052406000105240000000d240f01fdfffffffdff08000006241a0000960905810397030000000904010000020d00000904010102020d0000090582021000004000090503"], 0x0) 3.307779328s ago: executing program 5 (id=3250): ioperm(0xe, 0x5, 0x6) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x20, 0x23, 0x1, {0x2, 0x11}}, 0x0, 0x0, 0x0, 0x0}, 0x0) getresuid(&(0x7f0000000440), 0x0, 0x0) 2.279656142s ago: executing program 6 (id=3251): r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x204100, 0x0) r2 = dup3(r0, r1, 0x80000) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000540)={0x1, 0x0, 0x9, 0xe, 0x1f7, &(0x7f0000000140)}) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x217, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0x90, 0x7, [{{0x9, 0x4, 0x0, 0x59, 0x2, 0x3, 0x1, 0x1, 0x2b, {0x9, 0x21, 0x9d98, 0x3, 0x1, {0x22, 0xe4f}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x33, 0x9, 0x81}}}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x4, 0x4, 0xee, 0x10, 0x80}, 0x176, &(0x7f0000000600)={0x5, 0xf, 0x176, 0x5, [@generic={0x83, 0x10, 0x1, "5ea516e23c64466e7d6840ee5b979a8715a1d0879c36bed0672c8096d93a3d0402893ebe3b0ede7bc706f58bad4354f927d5eaaf85a8722ad80e7aac8dfc024d59d3ded7e839c587bed441f2b47e7fdcbe13f9923ccc36635c57cb773978df45ccaf10fca22cb65930bb1024914969d7132df654b426de6a27cd85943c0beeb6"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x92, 0xa, 0x4, 0x1, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "24a3b7e8ad477fe1a509df4f3e7a228b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xfb, 0x3, 0x3}, @generic={0xc5, 0x10, 0x3, "5b2e7139df6ed58ccd4188481b4299789eab63aa16521905ba765e2602e359cc23d9b170522abc6c54840eb7f1047885ffd59202e219edbfcf1b4fdba64225a4969a88ab122e0efc60ba482786578f7805d379ec2158a1a061ed41cb928cfb51489c832ee1ca166a36919e8e79930120ed08b625f738d4aa160c54936933ede47407a3f3c69382435f55b4f5ee9dbfca0fee8ef771da1af899b7bec32cd8e352676f6bbd5ddf9406ed871af51bfa667aad97f508495d2bf853d38e39edeeaa30394c"}]}, 0x6, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x646d}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x3801}}, {0xcc, &(0x7f0000000800)=@string={0xcc, 0x3, "82cd88126c44a9ac6052119bba4bcc15795dc1204f64adef2da94d39086b1aff8444e60249b2774bb0d8ae34bb2e835e0a132ad2faf2d6c16949d44277ca1fd7b67fb6d6784d0e0955f76d018d8c2f5b7a77f0ffa10bda88911369a2b8df11b672762b3cc9e518cd53bc8af2c20ec90807a2572582ff250810d757f9420381542f16c2b31d991c25357cd94eb8bbf6c245ee112f686ee56a9834c78b563b2af7c01b62f50c55deeb8c52709a01e79c2dd2cf9e3d7bdc3552cafb8c72c656c94060e829cbfc746358b7d4"}}, {0x6e, &(0x7f0000000900)=@string={0x6e, 0x3, "d9dd15b3c0b784b47eb572308c20f409e1263b94f755a2300ad03c0c53c1acc3eb22eeca84638513c91659f62f1720adc69bffc87a88908c07f10a10cc116edbf32a1317f2ea7f729f001578ef06e11852a9b669afd67eb0f0e69b92477edbf7156b7c511c10e46ccf914d32"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x441}}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000a80)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000c80)={{r5, 0x9, 0x3, 0x0, 0x18, 0x8, 0x617388a1, 0x3e91, 0x800, 0x37, 0x2, 0x16c, 0x3, 0x200, 0x1}, 0x18, [0x0, 0x0, 0x0]}) mkdirat$cgroup(r2, &(0x7f0000000d40)='syz0\x00', 0x1ff) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000d80)={0x6, 0xffff, 0x4, 0x2, 0x2, 0x3}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000dc0)={{0x95, @multicast2, 0x4e22, 0x0, 'wrr\x00', 0x3, 0x9, 0x11}, {@multicast1, 0x4e23, 0x0, 0x1, 0x8, 0x1ef0}}, 0x44) prlimit64(r3, 0x9, 0x0, &(0x7f0000000e40)) r6 = syz_open_dev$usbfs(&(0x7f0000000e80), 0x401, 0x410400) ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f0000000f40)={{{0x1, 0x1}}, 0x6a, 0x80000001, &(0x7f0000000ec0)="19f63c1edb963c5ab4339fb56a39271441f5ce0a953068616d03908df6007035ad6d4d574aa597a18433a0f890e72928c7686991cef025a62f93d51f81fdb09192e96d640c65164baaffe5d68df3e441c349411f4858131ffd8a158791ab0470388720d6df58e54a19d5"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000f80)={'vxcan0\x00'}) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000fc0)={0x3, @output={0x0, 0x1, {0x3, 0x2}, 0x10, 0x5}}) clock_gettime(0x0, &(0x7f0000004500)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f00000010c0)=""/43, 0x2b}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/128, 0x80}], 0x3, &(0x7f00000021c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f00000031c0)=@l2tp, 0x80, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/49, 0x31}, {&(0x7f0000003280)=""/21, 0x15}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/220, 0xdc}], 0x4, &(0x7f0000004400)=""/84, 0x54}, 0x827b}], 0x2, 0x101, &(0x7f0000004540)={r7, r8+10000000}) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000004580)={0x100, 0x6}) mount$9p_unix(&(0x7f00000045c0)='./file0\x00', &(0x7f0000004600)='./file0\x00', &(0x7f0000004640), 0x0, &(0x7f0000004680)={'trans=unix,', {[{@cache_fscache}, {@noxattr}, {@loose}, {@msize={'msize', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, 'u{$:'}}, {@msize={'msize', 0x3d, 0xec58}}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@permit_directio}, {@permit_directio}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@fsname}]}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000047c0)={{r1}, &(0x7f0000004740), &(0x7f0000004780)=r2}, 0x20) syz_open_pts(r2, 0x141200) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000004900)={&(0x7f0000004800)=""/234, 0xea, 0x7}) socket(0xa, 0x800, 0x5) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000004940)=0x2, 0x8) r9 = socket(0x2b, 0x800, 0x9) syz_open_dev$dri(&(0x7f0000004980), 0x7fffffff, 0x184280) fremovexattr(r9, &(0x7f00000049c0)=@random={'btrfs.', 'msize'}) 2.090510606s ago: executing program 5 (id=3253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket(0x40000000015, 0x5, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000002380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x180c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x17c4, 0x3, 0x0, 0x1, [{0x4}, {0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x99ff}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x21}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_TYPE={0x8}]}}}]}, {0x1c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xa0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7d, 0x1, "2128cc46b0667be8bb05092fdd30a357cf8d7c8f4bec3e43a40d3414d57c2eb272733a44033befe246e0d8ea6cfa278c671400878de9f7b94e4583b67959b7a5cb35e65c7ff4b955a5476a87fdc42fdf4516b7d45420ab988c269a01bc3039e9a5cb54d33d2b0d30e310b34b31627a92f0b9a9f5b017dc1f8a"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0xdf, 0x6, 0x1, 0x0, "4e63c36333524709b3f123d105ec63f59470979ff41a15eb420da96adeade4a070ffb33c8329dc56bb43b3e31e121c752f4111069e8ddf77dfe70fa2442861e9b0c580ac3165daeb02a14a41ba97b309414182f5e9daef726f5d12ea94f4ab7e8e6a7a759766ada926b806ef2bee5fda4ffffabf9bcd426cc923d7dbf8920bef752096f22e70f057c5d5dfa5ab8497e921a5894c1daff66c4f46dd1cce6b082ea0d03893780a6424069762f56404db7d5e9c14a1d325474efb39111b98ec6369b050523cd796da50104a221ba98b2e4e283a7a49a5a153a6a5514e"}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}]}, {0x1348, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x324, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "f8f556f8caad904015b8e2e0989ab5d8eb1ddaa41dbc0cae7cc2e879637ac7356c367102524977066485dc1ec2b56d149f326f22c842dc41a580f6f82030e808c7d35264dbc0c0d1767255e761e071a697663cb0bf998803957179f7a9f6e5c0e9379e0dc83b24ffab48accce4820f81d40df0174bbc0f09927be269dc283f6c72acafadef4e223cd218fe66cad83e9ba00be2abd8eaa90d9fc0b33c0446a77279e39d549f86685b513aa13009004341f9c890ba383ecde287"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xec, 0x1, "e9835685f02d94016b3b5ab7fd0935a8940f4e1600b87e5dec910c5640370e8897408b1f4fe87f46acf1cbda2e3150be868ca51093ed8aa9ea4402edf42ac9e7d4725fb4ec8b5e97f40b4a50537c07adb073d60b2c71c7343a5dda04d305acce4eda42c38c8abf8bb3f32553a935f6a1dccb68406f6c66e50a276afa0425b6f1ee72430c17c18b6ec3dcc3d28f4c897115526040744d69daf40b36d361d9beed549946042894a66a54e1db3bd404b805dace30fb52781b9bf3d4c429bb880fdc854ae7936d434de17ccba1f8a3f676643557cccd8c96d1abe46711e49fee6a5886daa66f03a37639"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3ea795bf67a1e9af}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}]}]}, @NFTA_SET_ELEM_KEY={0x1008, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "b9ba66420386a14e4fde656b8d3fd3d6f28cd98bc73d4209deef36f8a9a4d4803a0276f43f62aa9786fbb2a7087e59b58bdb6a5fa604736d180af7f636ca8ad45880f5d603cc272fcc93655ac8d7d2e8887cebe8d9f32cca0bfaf348a9dab659f6b12fae33551debbfaae8ad492bdc7f015826fd5749f90843cce04ffa5e6fe844d376e95454330c16ebeba3a301d0d8318c61e13fa4d5b535b8d3220b4d72d7bcbb58d37e48cca040a3e52f8ec8af56730dfb37f7d7d7de4b89caa0fc4b104fcb19e0235c963e5e0411632f46dd049ef89885d6d74079adbce2aa826679217f70abde9f25b8cf35606b3b257c0c61147e12b80ce53f66f8cf2b2a482fdd1beb1f2e2e445c8c5b23716eb49e7b36da6df57c8df68e8df7b7a1af1ed9b9f719c7e128603b64862a97a325f35f8d500e2861153e4bf9f7678466b6f7051f23194d894f0525e7b5e0f9b7ff9d653a84ab079ffa7999cc79315c869960f1f19983b74f9a618bd6434bb3a5b26af6ec2013758ef128019d929d4bbbdfef92e8099739b370d86f9004c68d41ec2218a4e231c6a52c8e7fac65e971ef3f061d28876dcd2806795b2343aa33ca213a6e5241644422ddf91613ed2409768d7db5f9fc7531bf0c06efd641bbf2289a43fb09752a745ac914c46e7f29d3c4b787d0feb3d43648dccef303f765e36add35799751a4d08103f319e32db8e6fb4111848f268ea33587d73e253efe4ab2dc3aebaf946531de4e60fb9be61d0dd2b429340b252328a178d7c6c38bd50355f7a4d0c6fe0aeaa1ad476b3b4a0c530f3c174035eedbfb8cc4c5861014fb296e3f796d3a001bdd80c986db901cb40ba13eba48d1e49c64c2063c7d1f6ec8803aec05ee30c46f7543292528c8194d2aa2dbab139bc0a04e7805e66863482a23476e86f81041be22151ecf7e740471de9838e259e22eb689479b02914bd495b6045599cef5fb70f64a13ef524e500db62ebe6ae448099b5af6528b2c6b30d9e3b45f3bc7e1d67b768ae60a5e39cf4afebf08ea3e5a785e6e47d0b36919a18b40bfaf5b2ad2ce8b06c3aabe0d98d9ac9b9c3eff40c60929608bd9d77161b0cef889e171a04c3e7d02b030bece15fc1d4ad37c7c3636bfe4314bbf72bd92da45211e35e470120fc31bc1274eaf063d3992e5007a0b49e77d7b967f4d6c230a806dbe4b62934c9603590d44d0aac6760dca559888a94b56ec3b0caf0ee367eb40257a56dd357fab5191e14ffdcb0a17266a2f59c5bee54a8b519da4648aaff3b0f050963b3864a9e80163b650e05fcbcd91da3f73a61c2a8e48721a44b73454fd28de359d1cdd8e355684c134cf0b7c301c4f64468a6878b2c090ac9fc6969a03b36898b456045c7e2a4c1f5329be097c94c2a4f123d178102fe662569b62ff5d8bebe1218e208b3e039ad64f60ce02127b7fc6cd84b23f9cb30d3c05e250420d77bcd6ad52822b4e4b3e84efea5f86ba448607976a9dc1703c0fb7209510d1ef45e5177886ab61343efa5f83e13dbcae09d8a506e223e6460cf88f1a52a66c20a36f1a79115cedb8ff7f8998309adcf17bafcfd0f1badb3938e1e583f5e8c5c1c0a78f84373eb088ca896caaaac985f812daa38ae95ba2d4f309b915c056e01a7c61d42a8bbdf0352dffe40fa0d5bc46c02c67d670273fa575c6293d60f55bf53bd054acada738080f11f8f6d4d3e85f9f67987e6f007af2f75dc03e543ed3fd6b085453774fd8edf6eab6d467dfe4c4a68e14ac4f16a4aaf72f3287b771e92dc302499c0265909b254db6e1caa0d3ddf5c4cd3b04bcd715869f9d689b3464b817d01995c27f2335e6c7fc8f54335ef83c3527baf65c1d85449dcab15b1b38696ea4c1cf78411838fa231a1659655ad0af4ecf56d2fe09cf7c0faec89c83c9fc6db934d0d8b0afec09b6b79db32c5307bce26f5b401a864e43d856fbfae168d57b5c20701d2f37ddea699fb498f2060f943d24c5bbf622e1d38afc2a3c840ea61748be139cf91ebe951a58681cfd8f72ff7cdbe073733b6bccad4c5133aa552a040b8ffb23062a99b3b997d303d702264ad458fdf804937314be20dc5dbf140ed9f545cefd1a510cd4465a8b486c643d2cc5ce1338c2db2a8a9a4e40845b90d4153dc94d10f9ffa60ead8012e7833f7a070275f0b92df3d80e3f926d151e9dfcbb2b61e91892f22e9947d46c73176580077c17a4fd3b31e3c69266c226ef361161d4ea7dbf52db47d163f1f3706497cc2c1395e5a1f151481e5d79b57859c2e5bb906f5e765d3d0d6a535e0e979f96447c3486b883184c63f946bc9aedf53acbc4938fc2dd6b69d18dc8c7415a809bad5b83f48b0dde9f74eca28a35c469e24bf4acb5aa711c2b61dc320dde67f832187fbd4ea03783402bb72535ab0f881e33e11af5ed3c612b3aea56457deb0f9cd1d9d4db80b5fe40637a983c8dbcc898c2cdda59903ca88c5efd8169caa5e2b826e87d802f29a0ee44168e5c1ae22887e09f01ef5ad029f708296fa9ef1540a151017c143a744f9e746d37eae00742797a4b5caf2397f13503ea06356641fe7d3d6454a9d0ea9385e98c5a8529aa4714d1895bcf8ef3d52827cd7c67cea20ab4dda076803a9463fdd27704eba96559915acf75b0974a328c7796d43e43564c36b8a988cb741b4e73c3ad08bbf943fb57ad1596c94937a64d332af6d611cd4cee7601eb4d851efbf0ae6f5779235c92ea0a511d526ccc26169a9707b8e49a1f3a9199c40287a87aeca7708afbaa6130f5a0d1b38d2751e66f4ae16ec2e8d76390db1551753607c2b06f124151405e54e4172ef945f8b0eddb2bcc1a4dd57fc3d72dfff19f14875f8a5fe8faaba54fb489d06fa6911d28485e845f6ef67818719a875c7be163cd0b94c4b576c0dd9a6a6aa65d907837409fe9512e040beeb80a68c44fa35aa8282a644ac10be39326550c5733aa22a7eb3b9f5930e6e6ce950f844196576f0750ceffb3c11cbcec2932dfc91a6ac39033930a0c7ff717d22da4d3995d456569c53e0b9bb628415462f349f2e40b72e4060d7d0d0b81742f11a87c5e292d3ac685688913c691b8fc00045e4f4aeb690cd8fa43c212604be988f35f161de703f45d1e6e35f711bd313d5d04f522092279e5e68857facf999249f77572d4586c103f9e4969909e08b0dd122e556ea41452a171943d37da83acc1fa02409a228453d75061c8cd564f123f620eccd9b59c1030b2c06692f5d8139e82cd088dbd47c8a0687315aa9419060136a57ca152681ec5f9467f1afbf4acec363b437b39112d35810263ea6a91c8b650cd369ea8339650b48862cc2ad58876df7bf4d4b3d94b47da80b5e88d01c8f61cf0244386b13f3048d629236b0bd12ccb83e0452ea437e0d20877446ad81f14a61f1ef60d69fd5bfa41f5a1ec8e8352e031ae478edc5c778bf7096791aa1f76267906baf8bb2e9cad90578f2e605a07b4e1fec5ca25fe70d6ccbac6fd0ab1421a4e2f8ccd7f4e26ea95050a3655137e7415ae7eee7d3dc758a9355fb6c9dc8ea1a58a089da2a3b78dd2745f67afd6fccb882f40bb2a324e921f0395b0fddf3eab04535ded8e5179eeeaf9cf863be93179f4a890db3c448b1d5a31f18da03a4394239ebc1ae598af10b255846c7df16a9211bace168870e1766958c16b3b5301d14d693cc031c11b11accf7d3840118b8e7dcd273dbdbbf6da14705c78d0253dffafea9b65d00194a65edf23df061a3991a34c9f25ea7f4bc50c8ca0e348a53c9671e171bd66e5d6c924367c4f5890297d6a6fc251b59127c04503008580b5d85f3764586935c79817e528f04d5f402ffa68105e29000cfc9c6152734c1a8a8de67dfc69895b59927be24cb2ded0375516b3ac75f237448c31854c2d4b8bb707c867f9b9f0d3844b4566b5b7d4e5da850bffceb74364270c40a199061763afda5b1bd31baac8032d91543164e09a85d39ec1223a60e1ec6fe824e20a8db87846366e16b1b355222a147455018a20ea31b807f7f7292b2437f87943f38d1d5a0398e77f5fe26929e176b4a0334417fd4d0311e88bc11409117dda7a25cc4a7f739a5a5782c44eee6db741a666348b6fa70a083ca8e32e716a07bc08743de50750de0e459f0843af7991452687949035dc78daed1a82eb9b66d92c0fa10d180ee1f7b30818f6e70646b022122ed60df69454540c1831b57da118ccceb5f215565d1f1fab970f693154d3c684bd7f1d475510c6c32b0dc03c2b9af326b68bfde4de7535aabadeef923fce272739bccedd973876ae87954c4b10424fcd4662f35b01ff11bac7737101d59c9831c767726a63bc59e19e40a839d9f94b1b2f6f92dd9f22cd4defb9ae07d704ed2e1860a037ec5ce4ec042ff01d7bd44ad30bca67af8bd7430f959acce2b2096dd9aaa2631a268bc8283b8a14b7bb017a4951302456a852566fd51a128df8fc76aa0160b57cf96742eb32bf08d90bc7e83234076ece03caa9c5578d7cdd811d5c4075f12e4f9a6299dc5b27782525e2ea0692c3e791062ae216ae4b4407ad13a8aa47e11ea39d5fc4db46d5b1dee15a217e8afefb4af6433eef72e833492400f8f0adbb0c4fe7016cbed0818fb5f66160666806255adec7f2388191f297054fd16f760e1b276249e5f8fb6f70175284d228acb971a73dcf9cce17bd5de562f66b3f1ba5a22256690f6fe4c77f6e9d36ef0c7de2f1ff51e1b8c26af9993ab4bc45fef9ffa7e8f353ce423f27fe3b385c501b7aa317a7ff53569eddd7b33c62e18901a7f1a5ecba8ba6fa53fac1d92353a274f10e523d75425ee4d2038d42481032de2aebb6f8f46a7491d0b60681761cde8137b9d9fcb2677ef49e88e233ed7f1ce9bd55f2a0860ac2a1ee83b2b3d6fa6150ce924c31e881e1f9bec5515a9bd9831d4baac0349418126ed8c2555584878dce769260923ef8b6479f94c41f95220188b3156ea355ff7fe7d2a0599d50e0096c2d92c35c2ef5460bc6143009463b88e7faf83b02d2b8b50cba6d2d5970325e727d8e1dfd1e1652fdefe376b6c8749600febab005fb91dcb400cd3bfffe2ec4203131fb00427515a67f4ef8d44263bbac8c9a2a471017a4e3d02b35c5d5a7e3fc89f6e4855d29fe88212fb93d0a5f848ad74981afdf7501de342a23c47fb1aed0639b4ca6ebcb466d6ec4fb9676bc846adb6379b6f9ce23fd247b3c673b942b614ebcc9561ac2b7644b7fbede86634bf7e1d7f0c558965482248fa55d08375328b424047d77c91a583bbb6564bc43d40bf231ac73bdb1a91d83d37c0d5b1523d54d6f016886eb87e888ea504e52fb318e2f2c0e5afa81e3e907a86ecfe67d54358f21e3726dfec4d7754e7ddabbad217e5e5ce25dbfc8d2a2323f3a56ec31421babe18a412cb4cf6358fe74da6c19dda6539c32bb5ce3f198d3a0c15810e9f321fffa05a7493a804e9d331660fff61e71dc3e80e301ae34e6280e03ef35a2c923b2b1f5080f024f2575c2c33b14a617590ba51e46cf4322f9f891460cc2dc87314349f0be7f7c44199b910f85baeaf1ca7506bea310fb3a2a35ed3399cd65c8014ccd62ca97b2918ef7beb6f12381922460f5a4bcaae805f78b49baf73bd67fc59af97ff019ae34315ad8cc073e9139fb195911be091ec46d52fc9489b75eb7c51a456f21b51c957b211015c51d8df44dc10467f6d2fa7c579f8f6bc66b317c69480829c0c178758271e9db5c4f0367118b81c26a7c309fb35a270153d51cfdef10aa8dcbdea0c190678499d5306f4e8dc56b151e5a3f22a726ad54f862fae75338"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x690e}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1400000000}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x1ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x1d0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x75, 0x1, "26264586c556bf61570e1ca85f651b8c685c7e9c4bb9ed619c966600fd894f8b33324e930a453bc9932894fb69f0d919baf65e77505a48ef430a8a5a81b88a5fc7d65d6df22ab6285e4039ce815716fb9a111646e394a32b1c368fff3a349788da6ec08cbe97a928f021bd1d4b7d88be44"}, @NFTA_DATA_VALUE={0x57, 0x1, "459cfdc7d49c09e127aa9176fca7f393881680470e28f297fb32399c67a6d4cf4701c81ae00b596ba096a26cd28c156287c2a8e7fd5a78abeaec3a35af047b6dd935a5a52fe07b8f286609077d884d4b1a6c30"}, @NFTA_DATA_VALUE={0xbe, 0x1, "14b29ec759f8747adc81f19c9825d0aacf77fd379004d3efe7617c5407af4e0bcac87c1df718c6abc406917f247532610b247c689832af5f89c1398b4b4508a269b86d5149a1def1a5a0ffda28dbaa3528fa6b035636aab7d7a2550910f8c47ac02066e760700e3d16608b5e921b82671079ac4f9ad2ed6d5038ae47046abd82ea119154a8c8a97cc357c029e8308c485572dd1e8575cd9e4476474d0858f905dbd70349441d4f6e423591dfd3671203df5578aaaf82e0a106a0"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x100, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x36, 0x6, "72f5416b691bb14a1e4c4261472498c64865789a671ff487fc2b2e5068490624e1c648b5a28ac7b2ba583fe8833df4ae41b0"}, @NFTA_TABLE_USERDATA={0x90, 0x6, "75e86c861a7fd9017bd2a27e65dd99f0ea2a830dee1cff8b79b7d541cdb348a95623369b7ef4eee3dbe4e98263d98d75fe41ceb1e4203dfc38e8a14f098895b4b12daddbe3a82f9856ab682a008bdf001f8f03bdf4a4d30f29d772d76a35aa7644d758e42c38296a0e8f7fe6e297d631facfac80cdfa3dccc904f87223ac90fbe67531f64e0f25a7ef661e00"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_NEWTABLE={0x354, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0xfd, 0x6, "2e877d2f0d7d19841419c911b36ae3cb2a29a5ae01dec60599d57ada2129c8db8557a4d93b54833bd3e641b68fd8306de29ad4cf10ea46fc2bc9fd2226b6746397629636279bcc1ea05a73471d5be6cf368810fb2ddc651a371c7d8bc4292f2f9db10571416647700bdbf4ab95466a6b0c99747330bd089da6956a9801d9cac121fff6364f459c1581e1f88a5acfa18aba28fb3939e5ef10d7655f822aae0d8bb4873d9cd3a44d9e11cb7e9ebdfc432335c31651149146a78d679bf165c25c5ad8005133b3e05fa17950b8109ac326fe33d45bec2ff17409a2e66f5bf91ace5fb08a1db3f99faa90048f80a6c0133905355de8426898d317e1"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xc4, 0x6, "05f285ed6e5187659ecdfb9c6ac5417d8d2dba96fe8e6152dd158dc55746b45a0bb12e79eb326cba71055ffea4fc0a4c31c279d7d2ee2f74e1160f483e13e2c5dd63cea5051b78ea5720c6a3ae7fafb6e5aab8b02c5bcc016dbb488a2937539196365df925c34c82f8b0246b494e7da1b5dc498b2e370a6c7c50cf1e9d91548477ef37699274e5ac082755e57a898f3aa050def7b6e1d8bdd81bc793307af5b400029689b8227692c83534ce42e07509ebfbee58100c05ae2c175c10f7f825b9"}, @NFTA_TABLE_USERDATA={0xb2, 0x6, "d818e0d3c583327a5946c52fc544a487e302df32c9159e930f668858e96aff0409690f62d6a0e1e5aabcfa81510244994ee5a2b4332ab56896de33aee755f503e6c4e875fef9280a27995d0ae86e340b7b29725ab6e8cd1c924e90a110207fbec50b5bb4c4c81f3de81471aa94ee4300d701bace240faaf07d587ce214065a6c5f815e2f945d57dcf37948479ad02ec127eb35e6cc3c83f98ad70f72943683ffa53cc23e845e0f7909206e66cbdb"}, @NFTA_TABLE_USERDATA={0xc0, 0x6, "96134ba0c86c50ac2291cd4093181dedbff8059ca2d2d5079f1a85e1dae58d6f1c96061affc97f0d9568e649ff3f62389e0b6ea14a476d02965296eac2853ed275d84a0d0ac4c6b07a10023cfd72b37292d9f0af13b1b3b05d5018fc11fed0e39de991fc84f5d3ba7acce124b6a62cd0dae11d32cc63cb7b1f2e16561dfa550a63077dd7107f56dc290395cd02c60255ad7b6e7931a25aac1b2a50ef15b55c7ea0e0986620b42c6998f952be75c81debba774dc25361c9a6457e6800"}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x158, 0x18, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x11c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x48}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'macsec0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x174, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_EXPRESSIONS={0x60, 0x12, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TUNNEL_MODE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x41}, @NFTA_SET_EXPRESSIONS={0xdc, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x50, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x300000}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7dc7}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1fbc}, 0x1, 0x0, 0x0, 0x8800}, 0x4000801) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1000}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x80000000}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x60}}, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000042000/0x4000)=nil, &(0x7f000020d000/0x2000)=nil, &(0x7f0000552000/0x1000)=nil, &(0x7f000031f000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00005ab000/0x3000)=nil, &(0x7f0000391000/0x2000)=nil, &(0x7f0000348000/0x4000)=nil, &(0x7f00003b3000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000780)="efc9fd82e485181c28f1002df79cd84ecf594ed12abc9c17a5fe9eb19f74fa2e1cd8667ace975164f259d735dcbc62007753c62e0bf501b0c4c05aa6aa5f4679bf047dd180c6403ee976c4e67c77b195f7cb8114fe5848633cf24c0ece2a66683922f1fcb8d13c75e9918963c834ca471a4a34d924fe60e6d2e9c97a7075d3d734a7fb0a04a6b3d4dceeb9535ab8ff1c6aade22c9d33c40cb5210cd24732271c16beef9cd3270007a98149e9743eba9910feb4da949954797588f3740bb4672f988096fa9b1f56ea1bfbb94952d7aeebe50ee9583634b6373a9cb7c32fc4b101152bd16350da06b6abb13e8fd12149d944f311490575b9f94676eaa69adab26fc931c49842c9abc28418b9751fe2718c80eae6d385acb0a96f9ae6947755afe875dfd21888c7aa038140538cd6e7727b36894386ae7bbc76857eb9c3413a5ef75b5c1af9f99f4e54291218708fc3119390ca6906247acb6ba3af928c99fd7bf5e5f36275428a01e4c643ee44f70814e5135a9eee0b06b520cc24c7c04234595dfdef3bfa2a2a892e209919055a3ef4930b1911812308d3d8af2623f46f0abccb8990a6801feb04572d9ca4d2585d522b416994acfc3927c4e0d344de1dd264758a2655060dd039ff1dfa1e4e97590f82957d6642c3105329a501b5644357be6a6f2c0db7db0bd3b7143722d9fba697cb2930bb0884398aa903eba770bf20382cfca6b4c465f3bf7fe866e7df69ebe3956bb67ad5bd0cdd328c9ff7928f5093b4e4c7502386e4da20d335aa7cd84a0a591701aba7b3d156cd24c1053e9ba2f0bdc0928b1854859d020ac1b77d04d91ac2868717eefa0c9b2ed7b0a80dfc4558015d8e4d4d8c3d97f35ca4dd8a28714c4b4e33c58c32dea2a7e264f48eb9f13631be79d56d865d6ba779a35aa37ca435d0b0c31e46f02cda4def7a40c465a0b7b39789eb91486347bc4f740da06c209fb4970aa4a5d9684e404a79ab73fdbfc68c4d33654d7e39ae105669370d13e71a7ec0bf007a046eb70be9e7758ec36a31432990886be976e42f175e550f1c437428185159aaea9f1888d9210a6a0c23c2ae8a18cd8e2f8440342b4dd51cae7ab9482ab180495dba6c3407dcdbf393d01b7c1601b015f413f7f92e46e949693d3c79c3cd2086573c1c15bc8af8d941894c2085e864fc82ba87017f6250d75fe47c35b0d1db908e0e7fe479f4675157b648e4f34b1f59b7a6cf1f469126c7f06dd2d9ec4462d3f93ce6068d433954e0d859c22a214b4e54dce223e735f1ca762b6c6dba010083e842d4f02533679bdeda9c902dcbbd17e63f80045f08eacf887734487e0090100c13cfea6ce200a69ee81685a7f980e62fda4d148439bea27b12a5d9e7ec21715333597b351d2979426c44176dfbb92aa48e9dd7a502edcfccb7fd3d5d3b12ab73bc4f94553b53c41ad80efdb9bed27995eff745247ef463c85f4e04181fc5c9c8574820086f2bf2ef13f0446f80b78e1a97ba892f252a724da353b0fa7c447325483c9cfae3aa2da027a7aca6d084fb922af3304ddf64f480d855755040f1e9350d638bed27d310f7971079db659641834d8d674a60d4d13d3b4bb49a6d20dc6695d85cbe3d23b5188322b6a13d67e8b7d35cb93b37c0119feb3270c3d6c9ff1faba906e5ec748c6d67e92dff461a55098645deb1ddb06b74f89c231744b9b823816d58b50816e715e17891d6cb4e1c4da3062c8f496c2817ea3365b96c86b2c5d281307978c87894b2436453bc59a8cfbedad31e90c0a61e773df4db8c42aa567fdb8d51e5c7526f836b95c649cd5a0fba799e0862dbbfe4ba8da5085d64ace1e42f41bfd0f1f1238feb9c377e6c430276689f8a3f7d3ed90991b0036ffabcfdd1a3a370a4b3eddd7ee77c4182e72dea0a7754fa4ff3c6701550c0feff7a6f9baab2cd52574970174387e08e1dce216d75418fd8c343828ab0e03b2a5caff3fcf0829543255468a159b861b54b8315f05d8f07a2a8868cf255fce584c1c3be24d3e818433311019aeb0bb75928d24bb9a6ad296936c3d371e99c9affdbd6a964886abed3192f0821bddc906e379e715ef3a1b3e9dbd00654e7ba65d5389e475934a99470c89e4d0171ac5e8605bbda8ea7f568656b433ea4011ffd66533f42eaa3af0006852b9f80ba086abf98a328e9d7843b953cb54fc9a4cce996565ad96edfa5e681080979a7fb40359f884494862ff8b37b7d736d03c969d28859efc0775cf29ebcb4b9bfab1e20ffabbd9a9f4a9aa848a65d7380a4dbbb45b8542e5bea3a9fcd8f4e130d9f7e13097fd078105e92f0d74b46ba12cf66479f0053e79678b69649ff04b632957af54fbce1ebc98ab779b1ba6d98a10cf40ab3defabfa95e2cf989eb4cd527b39a01a2b608bd56e9180435f8a72892daf0605cf74a1108581c329b503c46bb6b81627700951d5af7f2f0b51fa7ea6c446d7177fe8f130507374f60f10c90e88a769e5ca23c20561bb5ede4cc30d93d3833e16f344f04da8638addb55daf7b0a58d2e1f4380a949c8308260deb7f1a0971ddd20af7950c7aa56303943ac23ca304236a2b5e473a77c750c3430ed312164db60f9a2253b0a66075f722c43f50720462dbc8ee201bf7f5230102e7c5ad736e912fb8ced67f11f2627fa2e6db0e3040f70818f85ae3e1564d9a8306b0df8c82d241b67e37d5af48ed4afa73d37dda1ba027f1d6c97ea0de15520887c42903b272bf8bfb79de89b2d5aea556e5b751ff4714b36c627a9b4d581f4d9de13453c035bffa2307858009be5568d42183fd661d1ef7ac66c7f7e99ac0a5e94bfd16c4bbd8dd4af89194a798733da740f8bc5fccf27c282a50362963ef1087799833d865c221e65fb452904ce3118de31742844ea3b98079abd813361171119ad689a42272dfa1a290dd233ee55790dbf125e74ae4c574eeaaeba4b0a191414b277b2eba70cda542cccdc26097cfdce3b33921039e6ff5d00c9b15b70c5dd6f829a083f449310ce25ec632e5337965a1cdb913e54d2942f1650c9a361bd36e3bd7987d0f906d8e95e1d1dbb4a5ab139e5b5f30862c4a4ab770389ed41502c1bab3ba60a8d8bd80d2d0e47ff7f12d5423beeae5c27d6b55a57e88244760148c8eeff50db3929a0642112e453a31042edecb3c44f0ddad01a40d7ebf173319c4754e7a61e00d142615ce43614e2ab0f15c6544b619b7a6fbf7914d0c42a41a173151b80cfb0ad21812b03305c202a3ddd9f4c1e3f29122bdbbce45d2d3ac7d940710c6589a0e285aa0ff3dab3cfb25457d419eafdba27c2177521ffc2e90efc6479037fd0ebacdb6b53f2e609abfb26a4fd3cee50474949fbaa4882c90bd6acd60c746674806d35033787025f37c69fd4202727365e8814b918ee1ce58f31ee87fbb3f96f5e044be4f7c0a7f9dda56959aeeebcbd72aeeb4b91db9229f07a48e25a4990540204e9dfb6dd0be85f6e932222cb82d3c71c6ed9ccad607710ad8f2f1a71d7c157b3c41c4b770eaa3ea56ef8abf20fc05dc8af4ea23776bdfbd37c50e6b4e0e86b74bd4d743565c0a01b6fd424f6a2a89d1e3eda4c6ac58c356b2751a5027c76595b320ca715412bae80affce8350ff21be674492bdfd9b251f9085023db50793fcb43a333bc804383c709f180476d36791ba8f1298d8d86be2e4713284064a88b8ed74c31c09a86f6c4820cf03f004ef7ad2e816eb68824fab373bf283ac34b7265af4441d44c51fb24b5de4b35b851af1974d0c1b8ba647748df4d3dbb6a4f6459a33ec6ea210b3b093eae9a5928a7bbb6523693b10cb213f1b91cd160d963c94d0318186d029ca5ed498315ed5ac93a0161eaa968397cad3cde15bc2a0ac667d7eb93c530dbb3aea607ab0bacb02b93ece2da6d141a6f6775892c7232c209c735b10e6cc0f2c117ac0d6106dabd42ad0f203451fd22a710cd361a0fcb012f34752b6be89369449e0aae6240535fa34d0eb589f52a59b82cf7489efc3811491bbb4b955b0f337cc394e7f503e72b5d530fe6847a1faef375200f5dd826656e07bb7c05d660a16f31cd430e6874a10022fa4e51600185c5c798379828700fb1fc192f5a859f13a84e3891120c467aed5d9d416b299f028718d46426eab1bf593435c383c39b6c8a17cba0b46628b924772770195fc6ac0a19386db8b2192913549621a62879bbb7ad3996b658c0b021ad1249ae609a360d7352c456f77c61da366f059971acc870424c11fe3de461694f7b910381e2166be59c2e025e041b0f30dfd1da9b150ef715d1ce371a2ef035b8b38143e9feeae23c5f8f68aa962ebf4696efd6125ce58115a3f058e5919ec84ca24ff818490a7af12e3ac8d41714b756112b010003d4975e9beff3900cf96e12cb0aeecdd2cc2f503fe5cdaae4d097d2105d5ab9e0df4e0fe4f433547bcf038c4596c96f9cedd7db591fe810e4ebfb5b5407f566a22d344577941fcd38622b9770625a3a5f5264a25789b4ee5cbfb9b9a0417528a9e2864e21c5e56e58e73874dd27ed1151222bb85edfc8f5cbd044b34f73a1d9f94ca2cf9b445df8b26821c18318905db19eb66b20f9bef11c0b23875d578a82acec323128310f8bb0ce11f3ab40c6512c103fb8229a4fbaa734c6c3f2b958eda3ed5174244bc85b87abd6c58215648ca8c721e9cfeda097f391ba82bbcb9ab0ec9a90d085e3a555046068c0a880993e4bd893bef3b9ad83f05806a037361528f4fdb920f9d945758443a8a339ec99161b723c0ce7c761265315c1a4c4d976aebf93e3dc5da0eba867267da6f245ae58db87f01c45fe03fe55ab0378b7b17e5cd9e18ce28abb5f3b7088380a10defc1fbf5a592b8d169158de817ee7e205be6a6edb15f98a4c8d9b19ba12c99f24bc94d79d57a65d7f9e0bd4c6eff4f1e2fe4db2c154f8fb6c473d97cbf33e01a0d3a35fbe143a06336cce0864643af1dd9e2f705aedeffd3205046c0968c1c8c9802984340406964f1cc14a0a0346b72f0462beb6270b59d7007773ccabed330b191e9aae0689e2dcfde2859a006de6293ede4760745a7f86466048153fcdcc692b35e7f90de294dbda22b7df97d8c541f24506bb1be0d0f2f691e55aa882313ab8f73f60e2564ffb384a90937387741488ae2413880edb1ee18f1788cd752607c37599a2cf436cc54a82d6266d1396c8570a3e5d9d940c9ee3959d1ef7a6c8b0cac86753d3ba1c538f775027df4a3511defff457b8f41a81a69e524d9349f1d1d391369d2b54de57f6716bb18c2326fade9c7425ac3b9b91d31adbd752348aba529a3b8a9cad18e47d2c2992264845f60775d193038ccf2501a43133fbd49d4b18fd81d5fc4578b12062c325c309033df1290c0b8225cc7bbd74a8827ee06ea4405584e96f86ea22cccb48b77ffb60d5e5126b3d7da2ce40d5b04aa65c83857686ef7dfecb95543d77626b6b9c9c2457ecd821192b3614a4678bf1c8d342188c931e5646743e7a20ac9ec5ab1d9a3b8a285be490d507a11857bff66659f69dd9a0307545fc57fc7bb6d521d20b8941c0b7af1029725526121b4ee23fe715942f07a3e3d11c904db922d3eea3be2fddddd9bfc62074cc9362c814baf9ca1937ce27fa723164a0bc7ca8fab313f15723687f93241a7a89f4c9005e97e9587e68d453b9246542f23a9f9028c5de500ae608172b7bc76c27687720edb4629c36264216c7d02abe91a2617de026af1adeda5cb586d997ce8792064d3a1cd5ee632dbfd2c8c764b1e0a56b87923a977670c26cf2f316d8e26bf2315f64973bf6809b", 0x1000, r1}, 0x68) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x4004af07, &(0x7f0000000280)) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0xb78}, 0x1, 0x0, 0x0, 0x804c8c0}, 0x0) close(r3) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x41, 0x0) 2.090104855s ago: executing program 7 (id=3254): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r4, &(0x7f0000000180)='\x00', 0x1001}]) (fail_nth: 2) dup3(r0, r1, 0x0) 2.089943923s ago: executing program 2 (id=3255): timer_gettime(0x0, 0x0) 1.985007195s ago: executing program 2 (id=3256): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x400400c0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) chmod(&(0x7f0000000000)='./file0\x00', 0x85) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) truncate(&(0x7f0000000080)='./file0\x00', 0x101000) 1.983889306s ago: executing program 5 (id=3257): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1400000000008e"], 0x20) 1.815873848s ago: executing program 2 (id=3258): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x648, 0x0, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1a0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) 1.815631302s ago: executing program 7 (id=3259): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x183802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(r2, &(0x7f0000000340), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003700010324bd70028ae79ca907"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@x={0x94, 0x3, "4af036e5c6a5"}) 1.814593395s ago: executing program 5 (id=3260): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000940), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x4, 0x3a, '\\.', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x43, 0x50]}, 0x2c) 1.727106808s ago: executing program 5 (id=3261): r0 = syz_clone(0x502d4900, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x201, 0x7a, 0x99, 0xa9, 0x10, 0x83a, 0x4506, 0x9aef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x4, 0x0, 0x4, [{{0x9, 0x4, 0x15, 0x0, 0x0, 0x66, 0x6a, 0xb5}}]}}]}}, 0x0) ptrace(0x10, r0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000640)={0x2e}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0xd}]}, 0x38}}, 0xc000) write$qrtrtun(r3, &(0x7f0000000c40)="9d", 0x1) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r5, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = semget$private(0x0, 0x2, 0x120) semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000280)=[0x3, 0xffff, 0x2]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) shmdt(0x0) ptrace$setregs(0x3, r0, 0x80000000a8, 0x0) 1.72245768s ago: executing program 2 (id=3262): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000280)=ANY=[]}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900"], 0xec}}, 0x0) setreuid(0x0, 0xee01) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x80010, 0xffffffffffffffff, 0x3056f000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1_virt_wifi\x00', 0x4000}) socket$kcm(0x2, 0xa, 0x2) 660.303524ms ago: executing program 6 (id=3263): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x453, 0x800, 0x70bd25, 0x25dfdbff, 'P'}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 659.767477ms ago: executing program 7 (id=3264): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/48, 0x1a, 0x30, 0x0, 0x40, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100000000"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/slabinfo\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x1, 0x7f, 0x200, 0x1ff, 0x19, "d3174b8648c5889730455dda965df32c680ffd"}) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000002040)={0x6, 0x1, 0x200}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001020000402505a1a440000102180109025c0002010030000904000001020d0000052406000105240000000d240f01fdfffffffdff08000006241a0000960905810397030000000904010000020d00000904010102020d0000090582021000004000090503"], 0x0) 645.047982ms ago: executing program 3 (id=3265): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x5, &(0x7f0000000080)=[{0x91fc, 0x8, 0x40, 0x800}, {0x0, 0x10, 0x3, 0x73}, {0xb84, 0xd5, 0x6, 0x856c}, {0x3, 0x7, 0x4c, 0xfffffffd}, {0x43, 0xc, 0x83, 0xc5bd}]}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x2, &(0x7f0000000140), 0x4) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x8c540) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000640)={0x10, 0x5, 0x1, 'queue0\x00', 0x4}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="68000000000701040000000000000000000000001c0007800800014000000004080002400001000008000140000000090c00064000000000000000070900010073797ada530a6baadbf0c440000000000000000408000540000000020c0003400000000000000009df05677eadf191c04d1c7365f5a788450a8bdd6b0f3d2504dda747896738e93a8cdbc3aeb89f0b93f62e3ce924b736b8aad5de6ba829cc56bce1bbc2d37c1e1db16823d677c103b6ff9ef47aded7b0220f9e50ce52a63beaacfa38708983ea9407"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000480)={0x0, 0x7}, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1000f) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRES8=r5, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRESOCT=r0], 0x20}}, 0x4008004) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4000000000073f0100000000000000000000000708000540000000200c0003400000000000cc00040c0002400000000000008eaf0c0003400000000000000004", @ANYRES16=r2, @ANYRESDEC=r5, @ANYBLOB="d339cd5da49dfa3b87bdf4c84539d176096d69bb74b573e000d3d72aac3fea7dcb9720c530eb0766c3e92f27d45178fca1bd112540a1420efb2a9a196adf57d7da3844c3910a11e61955a0cfa7d6df75021c01814062b74950edca847a3c80b986c12921faa8e7e6dd539c71a3dbca24f2b32b7d4fafbbf7ed8c0fac87013f0970f1a29bb6c60078606869fdcdecbd2c04f29202c8b37b25a3c2c3f0799c32cd20d4", @ANYRES32=r4, @ANYRESHEX=r0], 0x40}, 0x1, 0x0, 0x0, 0x20000044}, 0x24000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getresgid(0x0, &(0x7f0000000700), &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b000500"/20, @ANYRES32, @ANYBLOB="00000000f6800000000000000000000000000000a549b4ac507a38ffffffff510600ecdcd0ef53d4db6d14181fed81873b938b187a8e648c2d72ad5465f5615aac32331d4968e856193eb3824aba618dd975", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffff00"/28], 0x50) r6 = dup(0xffffffffffffffff) ioctl$KVM_GET_MSR_INDEX_LIST(r6, 0xc004ae0a, &(0x7f0000000280)=ANY=[]) pipe(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000001020500000000000000000002000001300001802c00018014000300fc0000000000ea00000000000000000014000400ff0100f0a441349865d39e3f31c04a96617900000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x20009804}, 0x200000c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 252.621014ms ago: executing program 2 (id=3266): timer_gettime(0x0, 0x0) 152.626837ms ago: executing program 5 (id=3267): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) 281.916µs ago: executing program 2 (id=3268): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=ANY=[], 0x1224}, 0x1, 0x0, 0x0, 0x40}, 0x8080) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ac0)=""/138, 0x1f}, {&(0x7f00000000c0)=""/231, 0xe7}], 0x2}, 0x0) 0s ago: executing program 7 (id=3269): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket$caif_seqpacket(0x25, 0x5, 0x2) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r3 = getpid() (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (rerun: 32) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000003f80)=r3) (async, rerun: 32) setgroups(0x0, 0x0) (async, rerun: 32) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) kernel console output (not intermixed with test programs): ][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.200722][ T25] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 620.221218][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.243549][ T25] usb 3-1: config 0 descriptor?? [ 620.294888][ T1165] usb 8-1: Using ep0 maxpacket: 32 [ 620.301793][ T1165] usb 8-1: config 1 has an invalid interface number: 236 but max is 0 [ 620.320551][ T1165] usb 8-1: config 1 has no interface number 0 [ 620.334821][ T1165] usb 8-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024 [ 620.353800][ T1165] usb 8-1: config 1 interface 236 has no altsetting 0 [ 620.367001][ T1165] usb 8-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 620.387129][ T1165] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.414812][ T1165] usb 8-1: Product: syz [ 620.424787][ T1165] usb 8-1: Manufacturer: syz [ 620.439943][ T1165] usb 8-1: SerialNumber: syz [ 620.461368][T11918] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 620.496685][ T1165] ti_usb_3410_5052 8-1:1.236: TI USB 5052 2 port adapter converter detected [ 620.548977][T11927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1821'. [ 620.663741][ T25] hid-picolcd 0003:04D8:F002.000C: item fetching failed at offset 2/5 [ 620.677733][ T25] hid-picolcd 0003:04D8:F002.000C: device report parse failed [ 620.693127][ T25] hid-picolcd 0003:04D8:F002.000C: probe with driver hid-picolcd failed with error -22 [ 620.744908][ T1165] usb 8-1: USB disconnect, device number 24 [ 620.877686][ T5875] usb 3-1: USB disconnect, device number 48 [ 621.725930][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 621.872337][ T9255] usb 7-1: USB disconnect, device number 47 [ 622.021251][T11950] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 623.119187][T11960] overlayfs: failed to clone lowerpath [ 623.454944][T11968] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1833'. [ 623.466359][T11968] tipc: Started in network mode [ 623.471431][T11968] tipc: Node identity 7, cluster identity 5 [ 623.499249][T11968] tipc: Node number set to 7 [ 624.663930][T11994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1840'. [ 624.679354][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1840'. [ 624.689086][T11994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1840'. [ 624.704645][ T25] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 624.713050][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.875627][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 624.903340][ T25] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 624.920345][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 625.119989][ T25] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 625.182890][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.220848][ T25] usb 8-1: Product: syz [ 625.228714][ T25] usb 8-1: Manufacturer: syz [ 625.233527][ T25] usb 8-1: SerialNumber: syz [ 625.290127][ T25] usb 8-1: config 0 descriptor?? [ 625.350166][ T25] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 625.364805][ T25] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 625.475787][T12006] overlayfs: failed to clone lowerpath [ 625.905382][T12011] overlayfs: failed to clone lowerpath [ 626.036055][ T25] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 626.043365][ T25] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 626.587326][ T25] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 626.660739][ T25] em28xx 8-1:0.0: No AC97 audio processor [ 627.541332][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'. [ 627.561514][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1854'. [ 627.585508][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'. [ 627.757880][T12039] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1853'. [ 628.391620][ T25] usb 8-1: USB disconnect, device number 25 [ 628.506275][ T25] em28xx 8-1:0.0: Disconnecting em28xx [ 628.514670][ T25] em28xx 8-1:0.0: Freeing device [ 628.556470][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1855'. [ 629.406145][T12060] overlayfs: failed to clone lowerpath [ 629.920495][T12068] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1858'. [ 630.357582][T12072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 631.074841][ T25] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 631.269925][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 631.352573][ T25] usb 8-1: config 1 has an invalid interface number: 236 but max is 0 [ 631.381993][ T25] usb 8-1: config 1 has no interface number 0 [ 631.400686][ T25] usb 8-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024 [ 631.408885][T12084] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 631.434357][ T25] usb 8-1: config 1 interface 236 has no altsetting 0 [ 631.462709][ T25] usb 8-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 631.482296][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.501170][ T25] usb 8-1: Product: syz [ 631.521422][ T25] usb 8-1: Manufacturer: syz [ 631.532462][ T25] usb 8-1: SerialNumber: syz [ 631.544558][T12075] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 631.545164][ T1165] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 631.567238][ T25] ti_usb_3410_5052 8-1:1.236: TI USB 5052 2 port adapter converter detected [ 631.645034][ T5875] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 631.715582][ T1165] usb 3-1: Using ep0 maxpacket: 16 [ 631.731825][ T1165] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 631.744338][ T1165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 631.766849][ T1165] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 631.776628][ T1165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.787683][ T1165] usb 3-1: Product: syz [ 631.792163][ T1165] usb 3-1: Manufacturer: syz [ 631.798432][ T5875] usb 7-1: Using ep0 maxpacket: 8 [ 631.804529][ T1165] usb 3-1: SerialNumber: syz [ 631.811094][ T5875] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 631.819926][ T5875] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 631.828344][ T5875] usb 7-1: config 0 has no interface number 0 [ 631.835637][T12094] overlayfs: failed to clone lowerpath [ 631.835845][ T5875] usb 7-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 631.847004][ T25] usb 8-1: USB disconnect, device number 26 [ 631.854450][ T1165] usb 3-1: config 0 descriptor?? [ 631.864179][ T5875] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 631.879643][ T1165] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 631.889542][ T1165] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 631.897093][ T5875] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 631.911119][ T5875] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 631.920752][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 631.945126][ T5875] usb 7-1: Product: syz [ 631.951867][ T5875] usb 7-1: config 0 descriptor?? [ 631.962971][T12083] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 631.978646][T12096] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1873'. [ 632.190528][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1876'. [ 632.206487][T12102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1876'. [ 632.219942][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1876'. [ 632.473745][ T1165] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 632.484031][ T1165] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 632.605420][ T5875] usb 7-1: USB disconnect, device number 48 [ 632.898960][ T1165] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 632.906888][ T1165] em28xx 3-1:0.0: No AC97 audio processor [ 633.404924][ T5874] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 633.565200][ T5874] usb 7-1: Using ep0 maxpacket: 8 [ 633.641606][ T5874] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 633.650726][T12127] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1885'. [ 633.657404][ T5874] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 633.677181][ T5874] usb 7-1: Product: syz [ 633.687352][T12125] overlayfs: failed to clone lowerpath [ 633.693836][ T5874] usb 7-1: Manufacturer: syz [ 633.700820][ T5874] usb 7-1: SerialNumber: syz [ 633.790684][ T5874] usb 7-1: config 0 descriptor?? [ 633.880312][ T5874] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 634.324361][ T1165] usb 3-1: USB disconnect, device number 49 [ 634.337889][ T1165] em28xx 3-1:0.0: Disconnecting em28xx [ 634.368808][ T1165] em28xx 3-1:0.0: Freeing device [ 634.523723][ T5874] input: gspca_zc3xx as /devices/platform/dummy_hcd.6/usb7/7-1/input/input67 [ 634.730540][T12113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.741821][T12113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.082822][ T5874] usb 7-1: USB disconnect, device number 49 [ 635.765511][T12163] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1896'. [ 635.799571][T12161] overlayfs: failed to clone lowerpath [ 636.132844][ T12] infiniband syz!: set active [ 636.404898][ T1165] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 636.799659][ T1165] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 636.831328][ T1165] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 637.094796][ T1165] usb 3-1: config 1 interface 1 has no altsetting 0 [ 637.125155][ T1165] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 637.144562][ T1165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.168454][ T1165] usb 3-1: Product: syz [ 637.195084][ T1165] usb 3-1: Manufacturer: 忓蹃桃㔃ୢ懞憡ޗⱉ鿤櫔푄胒윉븍∈霝助鲑匬㓱㻲鰙ᵕ立㋈ø繨섌먱ෂ칄뼈뛑놋㻏ᕉ켮㺎ꯄ嚙ㄥ迦㭼涅蛕抮듋⣈詛楄⹡ߛ硍꧸᷌鈸땟㧴뒇ᡒ㹙䄖餪걙t⯩뇤螄뙭䩕龎溋↽飸ᖸ腘♦詊ۍ﵀᷑밨施쇔㧇遬缓妿킿쥭鴟᫖Ḷ䚒ꌟ竌尤娬 [ 639.356690][ T1165] usb 3-1: SerialNumber: syz [ 639.654681][ T1165] usb 3-1: can't set config #1, error -71 [ 639.684133][ T1165] usb 3-1: USB disconnect, device number 50 [ 639.773717][T12202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1910'. [ 640.074941][ T5874] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 640.240975][ T5874] usb 8-1: Using ep0 maxpacket: 16 [ 640.254675][ T5874] usb 8-1: device descriptor read/all, error -71 [ 641.400098][T12227] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1917'. [ 642.280394][T12232] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 642.705272][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 643.782245][T12247] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1924'. [ 643.795055][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 643.803725][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 643.812887][ T9] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 643.820974][ T9] usb 3-1: Product: syz [ 643.832909][ T9] usb 3-1: Manufacturer: syz [ 644.753592][ T9] usb 3-1: SerialNumber: syz [ 644.760325][ T9] usb 3-1: config 0 descriptor?? [ 644.777142][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 645.385264][ T25] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 645.392953][ T9] gspca_zc3xx: reg_w_i err -110 [ 645.393019][ T9] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 645.735351][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 645.742250][ T25] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 645.765017][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 645.794028][ T25] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 645.803572][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.811666][ T25] usb 7-1: Product: syz [ 645.830961][ T25] usb 7-1: Manufacturer: syz [ 645.835828][ T25] usb 7-1: SerialNumber: syz [ 645.847997][ T25] usb 7-1: config 0 descriptor?? [ 645.858902][ T25] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 645.876747][ T25] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 646.535603][ T25] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 646.567417][ T25] em28xx 7-1:0.0: Config register raw data: 0x56 [ 646.661619][T12289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.681007][T12289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.768817][ T25] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 646.801342][ T25] em28xx 7-1:0.0: No AC97 audio processor [ 647.590949][T12301] overlayfs: failed to clone lowerpath [ 648.095291][ T25] usb 7-1: USB disconnect, device number 50 [ 648.102053][ T25] em28xx 7-1:0.0: Disconnecting em28xx [ 648.175641][ T25] em28xx 7-1:0.0: Freeing device [ 648.217752][ T5874] usb 3-1: USB disconnect, device number 51 [ 648.555118][ T51] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 648.769525][ T51] usb 8-1: Using ep0 maxpacket: 32 [ 648.805320][ T51] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 648.832194][ T51] usb 8-1: config 0 has no interface number 0 [ 648.863498][ T51] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 648.896385][ T51] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.931636][ T51] usb 8-1: Product: syz [ 648.954099][ T51] usb 8-1: Manufacturer: syz [ 648.978452][ T51] usb 8-1: SerialNumber: syz [ 649.023643][ T51] usb 8-1: config 0 descriptor?? [ 649.044204][ T51] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 649.363233][T12332] overlayfs: failed to clone lowerpath [ 649.460433][ T51] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 649.664350][T12310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.713577][ T51] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 649.734887][ T9] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 649.753881][T12310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.884874][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 649.892821][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.903188][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 649.922088][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 649.931399][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.285366][ T9] usb 7-1: Product: syz [ 650.289710][ T9] usb 7-1: Manufacturer: syz [ 650.294364][ T9] usb 7-1: SerialNumber: syz [ 650.419957][T12341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1955'. [ 650.513919][ T9] usb 7-1: 0:2 : does not exist [ 650.529489][ T9] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 650.562463][ T9] usb 7-1: USB disconnect, device number 51 [ 651.164406][T12362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1963'. [ 651.208845][T12364] overlayfs: failed to clone lowerpath [ 652.179103][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 652.237173][ T25] usb 8-1: USB disconnect, device number 29 [ 652.397735][ T25] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 652.625304][ T25] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 652.651098][ T25] quatech2 8-1:0.51: device disconnected [ 653.116320][ T25] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 653.490313][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 653.549769][ T25] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 653.614239][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 653.688019][ T25] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 653.728513][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.803776][ T25] usb 8-1: Product: syz [ 653.826610][ T25] usb 8-1: Manufacturer: syz [ 653.842615][ T25] usb 8-1: SerialNumber: syz [ 653.864388][ T25] usb 8-1: config 0 descriptor?? [ 653.909048][ T25] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 653.928899][ T25] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 655.224933][ T51] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 655.261969][ T25] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 655.315628][ T25] em28xx 8-1:0.0: Config register raw data: 0x56 [ 655.425456][ T51] usb 7-1: Using ep0 maxpacket: 16 [ 655.463097][ T51] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.515629][ T51] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 655.525436][ T25] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 655.535120][ T25] em28xx 8-1:0.0: No AC97 audio processor [ 655.644824][ T51] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 655.686225][ T51] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.694672][ T51] usb 7-1: Product: syz [ 655.700460][ T51] usb 7-1: Manufacturer: syz [ 655.729321][ T51] usb 7-1: SerialNumber: syz [ 656.007363][ T51] usb 7-1: 0:2 : does not exist [ 656.038083][ T51] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 656.087791][ T51] usb 7-1: USB disconnect, device number 52 [ 656.202871][T12422] overlayfs: failed to clone lowerpath [ 656.653373][ T1165] usb 8-1: USB disconnect, device number 30 [ 656.683406][ T1165] em28xx 8-1:0.0: Disconnecting em28xx [ 656.712181][ T1165] em28xx 8-1:0.0: Freeing device [ 658.549100][T12452] overlayfs: failed to clone lowerpath [ 658.994143][ T25] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 659.461328][ T5874] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 660.264875][ T5874] usb 7-1: Using ep0 maxpacket: 16 [ 660.270191][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 660.300464][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 660.335619][ T5874] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.365993][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 660.405158][ T5874] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 660.427371][ T5874] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 660.437420][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 660.446623][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.455047][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.463099][ T25] usb 3-1: Product: syz [ 660.469965][ T5874] usb 7-1: Product: syz [ 660.474235][ T5874] usb 7-1: Manufacturer: syz [ 660.479097][ T25] usb 3-1: Manufacturer: syz [ 660.483860][ T5874] usb 7-1: SerialNumber: syz [ 660.488763][ T25] usb 3-1: SerialNumber: syz [ 660.497988][ T25] usb 3-1: config 0 descriptor?? [ 660.510256][ T25] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 660.519788][ T25] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 660.767285][ T5874] usb 7-1: 0:2 : does not exist [ 660.834334][ T5874] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 661.171163][ T5874] usb 7-1: USB disconnect, device number 53 [ 661.252436][ T25] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 661.281813][ T25] em28xx 3-1:0.0: Config register raw data: 0x56 [ 661.488366][ T25] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 661.507876][ T25] em28xx 3-1:0.0: No AC97 audio processor [ 662.627443][ T9] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 662.659610][ T5875] usb 3-1: USB disconnect, device number 52 [ 662.666495][ T5875] em28xx 3-1:0.0: Disconnecting em28xx [ 662.677336][ T5875] em28xx 3-1:0.0: Freeing device [ 662.796097][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 663.179155][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 663.347857][ T9] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 663.374798][ T9] usb 7-1: Product: syz [ 663.381480][ T9] usb 7-1: Manufacturer: syz [ 663.525089][ T9] usb 7-1: SerialNumber: syz [ 663.536257][ T9] usb 7-1: config 0 descriptor?? [ 663.551432][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2021'. [ 663.557253][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 663.570474][T12519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2021'. [ 663.591357][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2021'. [ 664.498132][ T9] input: gspca_zc3xx as /devices/platform/dummy_hcd.6/usb7/7-1/input/input69 [ 664.817909][T12504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.888907][T12504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.837168][ T5875] usb 7-1: USB disconnect, device number 54 [ 667.367379][T12565] overlayfs: failed to clone lowerpath [ 667.578417][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2036'. [ 667.603723][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2036'. [ 667.646406][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2036'. [ 668.910407][ T9] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 669.336895][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 669.913267][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 919, setting to 64 [ 669.928663][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 669.980503][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 670.061518][T12594] fuse: Bad value for 'group_id' [ 670.072198][T12594] fuse: Bad value for 'group_id' [ 670.134157][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 670.143152][ T9] usb 3-1: Product: syz [ 670.147935][ T9] usb 3-1: Manufacturer: syz [ 670.154966][ T9] usb 3-1: SerialNumber: syz [ 670.162709][T12574] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 670.278518][T12600] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2045'. [ 670.391233][ T9] cdc_ncm 3-1:1.0: bind() failure [ 670.404305][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 670.427257][ T9] cdc_ncm 3-1:1.1: bind() failure [ 670.452167][ T9] usb 3-1: USB disconnect, device number 53 [ 670.505244][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2047'. [ 670.811749][T12622] fuse: Bad value for 'group_id' [ 670.823055][T12622] fuse: Bad value for 'group_id' [ 671.121263][T12630] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2057'. [ 671.937675][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'. [ 671.953214][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2066'. [ 671.971668][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'. [ 672.121932][T12659] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2069'. [ 672.186595][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 672.361484][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 672.382012][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 672.398115][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 672.409292][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 672.417552][ T9] usb 3-1: SerialNumber: syz [ 672.719377][ T9] usb 3-1: cannot find UAC_HEADER [ 672.734463][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 672.745096][ T9] usb 3-1: USB disconnect, device number 54 [ 674.024314][T12684] overlayfs: failed to clone lowerpath [ 674.553805][T12693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2080'. [ 674.718565][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2082'. [ 674.737149][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2082'. [ 675.224903][ T1165] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 675.385057][ T1165] usb 3-1: Using ep0 maxpacket: 32 [ 675.395381][ T1165] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=27.51 [ 675.409876][ T1165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.425655][ T1165] usb 3-1: Product: syz [ 675.435258][ T1165] usb 3-1: Manufacturer: syz [ 675.443165][ T1165] usb 3-1: SerialNumber: syz [ 675.453018][ T1165] usb 3-1: config 0 descriptor?? [ 675.466979][ T1165] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 675.673882][ T1165] usb 3-1: USB disconnect, device number 55 [ 676.871765][T12752] overlayfs: failed to clone lowerpath [ 677.496728][T12762] overlayfs: failed to clone lowerpath [ 678.892978][T12787] FAULT_INJECTION: forcing a failure. [ 678.892978][T12787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.925419][T12787] CPU: 1 UID: 0 PID: 12787 Comm: syz.2.2114 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 678.936255][T12787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 678.946354][T12787] Call Trace: [ 678.949667][T12787] [ 678.952617][T12787] dump_stack_lvl+0x241/0x360 [ 678.957341][T12787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 678.962567][T12787] ? __pfx__printk+0x10/0x10 [ 678.967186][T12787] ? __pfx_lock_release+0x10/0x10 [ 678.972252][T12787] should_fail_ex+0x3b0/0x4e0 [ 678.977006][T12787] _copy_from_user+0x2f/0xc0 [ 678.981628][T12787] copy_msghdr_from_user+0xae/0x680 [ 678.986873][T12787] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 678.992717][T12787] ? __fget_files+0x2a/0x410 [ 678.997343][T12787] ? __fget_files+0x2a/0x410 [ 679.001972][T12787] __sys_sendmsg+0x209/0x350 [ 679.006596][T12787] ? __pfx_lock_release+0x10/0x10 [ 679.011656][T12787] ? __pfx___sys_sendmsg+0x10/0x10 [ 679.016829][T12787] ? __pfx_vfs_write+0x10/0x10 [ 679.021665][T12787] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 679.028046][T12787] ? do_syscall_64+0x100/0x230 [ 679.032860][T12787] ? do_syscall_64+0xb6/0x230 [ 679.037578][T12787] do_syscall_64+0xf3/0x230 [ 679.042102][T12787] ? clear_bhb_loop+0x35/0x90 [ 679.046786][T12787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.052694][T12787] RIP: 0033:0x7fe494185d29 [ 679.057115][T12787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.076760][T12787] RSP: 002b:00007fe494ff2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.085198][T12787] RAX: ffffffffffffffda RBX: 00007fe494375fa0 RCX: 00007fe494185d29 [ 679.093177][T12787] RDX: 0000000000008010 RSI: 0000000020000680 RDI: 0000000000000004 [ 679.101155][T12787] RBP: 00007fe494ff2090 R08: 0000000000000000 R09: 0000000000000000 [ 679.109221][T12787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.117220][T12787] R13: 0000000000000000 R14: 00007fe494375fa0 R15: 00007ffda6a18b78 [ 679.125232][T12787] [ 680.064627][T12791] overlayfs: failed to clone lowerpath [ 680.437266][T12808] overlayfs: failed to clone lowerpath [ 680.505290][ T1165] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 680.794918][ T1165] usb 3-1: Using ep0 maxpacket: 16 [ 680.801698][ T1165] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 680.820026][ T1165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 680.833178][ T1165] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 680.842977][ T1165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.851707][ T1165] usb 3-1: Product: syz [ 680.856138][ T1165] usb 3-1: Manufacturer: syz [ 680.860765][ T1165] usb 3-1: SerialNumber: syz [ 680.867586][ T1165] usb 3-1: config 0 descriptor?? [ 680.885347][ T1165] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 680.900199][ T1165] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 680.918125][T12822] __nla_validate_parse: 1 callbacks suppressed [ 680.918148][T12822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2128'. [ 682.903290][ T1165] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 682.912077][ T1165] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 682.920042][ T1165] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 682.927549][ T1165] em28xx 3-1:0.0: No AC97 audio processor [ 682.936211][ T1165] usb 3-1: USB disconnect, device number 56 [ 682.942941][ T1165] em28xx 3-1:0.0: Disconnecting em28xx [ 682.950975][ T1165] em28xx 3-1:0.0: Freeing device [ 683.058117][T12842] overlayfs: failed to clone lowerpath [ 683.115327][T12840] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2134'. [ 683.142330][T12840] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2134'. [ 683.769974][T12860] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2143'. [ 684.166841][T12850] delete_channel: no stack [ 684.172672][T12850] delete_channel: no stack [ 685.425549][T12876] overlayfs: failed to clone lowerpath [ 686.147135][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.170804][T12911] FAULT_INJECTION: forcing a failure. [ 687.170804][T12911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.297170][ T25] IPVS: starting estimator thread 0... [ 687.305930][T12909] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 687.337872][T12911] CPU: 1 UID: 0 PID: 12911 Comm: syz.2.2162 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 687.348708][T12911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 687.358793][T12911] Call Trace: [ 687.362097][T12911] [ 687.365057][T12911] dump_stack_lvl+0x241/0x360 [ 687.369777][T12911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 687.375019][T12911] ? __pfx__printk+0x10/0x10 [ 687.379648][T12911] ? __pfx_lock_release+0x10/0x10 [ 687.384710][T12911] should_fail_ex+0x3b0/0x4e0 [ 687.389439][T12911] _copy_from_user+0x2f/0xc0 [ 687.394067][T12911] copy_msghdr_from_user+0xae/0x680 [ 687.399329][T12911] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 687.405181][T12911] ? __fget_files+0x2a/0x410 [ 687.409828][T12911] ? __fget_files+0x2a/0x410 [ 687.414466][T12911] __sys_sendmsg+0x209/0x350 [ 687.419130][T12911] ? __pfx_lock_release+0x10/0x10 [ 687.424193][T12911] ? __pfx___sys_sendmsg+0x10/0x10 [ 687.429350][T12911] ? __pfx_vfs_write+0x10/0x10 [ 687.434172][T12911] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 687.440532][T12911] ? do_syscall_64+0x100/0x230 [ 687.445341][T12911] ? do_syscall_64+0xb6/0x230 [ 687.450057][T12911] do_syscall_64+0xf3/0x230 [ 687.454604][T12911] ? clear_bhb_loop+0x35/0x90 [ 687.459315][T12911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.465286][T12911] RIP: 0033:0x7fe494185d29 [ 687.469724][T12911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.489351][T12911] RSP: 002b:00007fe494ff2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.497791][T12911] RAX: ffffffffffffffda RBX: 00007fe494375fa0 RCX: 00007fe494185d29 [ 687.505790][T12911] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 687.513783][T12911] RBP: 00007fe494ff2090 R08: 0000000000000000 R09: 0000000000000000 [ 687.521780][T12911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.529875][T12911] R13: 0000000000000000 R14: 00007fe494375fa0 R15: 00007ffda6a18b78 [ 687.537890][T12911] [ 687.723301][T12915] IPVS: using max 20 ests per chain, 48000 per kthread [ 688.700497][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 690.005086][ T5875] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 690.176323][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 690.183738][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 690.212063][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 690.231427][ T5875] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 690.264973][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.273653][ T5875] usb 3-1: Product: syz [ 690.294345][ T5875] usb 3-1: Manufacturer: syz [ 690.299223][ T5875] usb 3-1: SerialNumber: syz [ 690.307538][ T5875] usb 3-1: config 0 descriptor?? [ 690.318417][ T5875] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 690.338833][ T5875] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 691.586289][ T5875] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 691.608476][ T5875] em28xx 3-1:0.0: Config register raw data: 0x00 [ 692.343559][T12983] overlayfs: failed to clone lowerpath [ 692.697172][T12998] overlayfs: failed to clone lowerpath [ 692.857343][ T9] usb 3-1: USB disconnect, device number 57 [ 692.865410][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 692.890240][ T9] em28xx 3-1:0.0: Freeing device [ 693.153616][T13008] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2203'. [ 693.335065][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 693.448566][T13014] overlayfs: failed to clone lowerpath [ 693.544956][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 693.555318][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 693.575774][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 693.600015][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 693.617114][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 693.629598][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 693.641306][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 693.670327][ T9] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 693.697008][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.714447][ T9] usb 3-1: Product: syz [ 693.729360][ T9] usb 3-1: Manufacturer: syz [ 693.746835][ T9] usb 3-1: SerialNumber: syz [ 693.775946][ T9] usb 3-1: config 0 descriptor?? [ 694.865861][T13043] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2215'. [ 695.251548][T13050] overlayfs: failed to clone lowerpath [ 696.577977][ T9] usb 3-1: USB disconnect, device number 58 [ 696.836709][T13084] overlayfs: failed to clone lowerpath [ 697.015068][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 697.175036][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 697.183635][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 697.193090][ T9] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 697.213396][ T9] usb 3-1: Product: syz [ 697.222162][ T9] usb 3-1: Manufacturer: syz [ 697.229831][ T9] usb 3-1: SerialNumber: syz [ 697.245745][ T9] usb 3-1: config 0 descriptor?? [ 697.253778][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 697.771604][T13107] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2240'. [ 697.887992][ T9] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input70 [ 698.136325][T13080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.156483][T13080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.339183][ T5875] usb 3-1: USB disconnect, device number 59 [ 698.628605][T13134] overlayfs: failed to clone lowerpath [ 700.532703][T13166] overlayfs: failed to clone lowerpath [ 702.325038][ T51] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 702.577376][ T51] usb 3-1: config 0 has no interfaces? [ 702.607236][ T51] usb 3-1: New USB device found, idVendor=046d, idProduct=005c, bcdDevice= 0.00 [ 702.686602][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.704087][T13210] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2276'. [ 702.735999][ T51] usb 3-1: config 0 descriptor?? [ 702.777540][T13212] netlink: 'syz.3.2279': attribute type 8 has an invalid length. [ 702.972682][ T51] usb 3-1: USB disconnect, device number 60 [ 703.773779][T13222] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2282'. [ 704.946935][T13235] overlayfs: failed to clone lowerpath [ 705.205019][ T5874] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 705.375028][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 705.383785][ T5874] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 705.398440][ T5874] usb 3-1: config 0 has no interface number 0 [ 705.410124][ T5874] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 705.429303][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.437686][ T5874] usb 3-1: Product: syz [ 705.441964][ T5874] usb 3-1: Manufacturer: syz [ 705.446776][ T5874] usb 3-1: SerialNumber: syz [ 705.453002][ T5874] usb 3-1: config 0 descriptor?? [ 705.459908][ T5874] smsc95xx v2.0.0 [ 706.339614][ T5874] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 706.351591][ T5874] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 706.410356][T13261] fuse: Unknown parameter 'grou00000000000000000000' [ 706.428599][T13260] fuse: Unknown parameter 'group_i00000000000000000000' [ 706.492031][T13266] netlink: 'syz.5.2296': attribute type 8 has an invalid length. [ 706.882072][ T5874] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 706.895972][ T5874] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 706.950245][T13271] overlayfs: failed to clone lowerpath [ 708.014918][ T1165] usb 3-1: USB disconnect, device number 61 [ 708.305927][T13299] fuse: Unknown parameter 'group_i00000000000000000000' [ 708.366576][T13303] overlayfs: failed to clone lowerpath [ 708.538165][ T1165] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 708.547564][ T29] audit: type=1326 audit(1737338896.431:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.5.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 708.574282][ T29] audit: type=1326 audit(1737338896.451:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.5.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 708.596854][ T29] audit: type=1326 audit(1737338896.451:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.5.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 708.668582][ T29] audit: type=1326 audit(1737338896.501:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.5.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 708.753707][ T1165] usb 3-1: device descriptor read/64, error -71 [ 709.103401][ T29] audit: type=1326 audit(1737338896.501:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.5.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 709.127022][ T1165] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 709.368461][ T29] audit: type=1326 audit(1737338896.501:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.5.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 709.390038][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.396315][ T29] audit: type=1326 audit(1737338896.501:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.5.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 709.424982][ T29] audit: type=1326 audit(1737338896.501:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.5.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 709.425120][ T1165] usb 3-1: device descriptor read/64, error -71 [ 709.446628][ T29] audit: type=1326 audit(1737338896.501:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.5.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 709.474231][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.480700][ T29] audit: type=1326 audit(1737338896.501:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.5.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 709.580601][T13322] dccp_invalid_packet: P.Data Offset(224) too large [ 709.636544][ T1165] usb usb3-port1: attempt power cycle [ 710.094993][ T1165] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 710.135573][ T1165] usb 3-1: device descriptor read/8, error -71 [ 710.320787][T13334] overlayfs: failed to clone lowerpath [ 710.375169][ T1165] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 710.426089][ T1165] usb 3-1: device descriptor read/8, error -71 [ 710.441294][T13336] fuse: Unknown parameter 'group_i00000000000000000000' [ 710.535350][ T1165] usb usb3-port1: unable to enumerate USB device [ 711.807529][T13347] overlayfs: failed to clone lowerpath [ 713.153356][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2336'. [ 713.172968][T13371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2336'. [ 713.182467][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2336'. [ 715.723387][T13413] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2352'. [ 715.741799][T13413] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2352'. [ 715.761515][T13413] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2352'. [ 718.000099][T13453] gfs2: not a GFS2 filesystem [ 718.032278][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2367'. [ 718.074897][T13455] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2367'. [ 718.117057][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2367'. [ 718.127890][T13459] netlink: 243 bytes leftover after parsing attributes in process `syz.7.2368'. [ 718.155803][T13459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 720.619995][T13485] overlayfs: failed to clone upperpath [ 724.107785][T13511] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2384'. [ 724.166645][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2386'. [ 724.176233][T13515] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2386'. [ 724.186956][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2386'. [ 724.203447][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2385'. [ 725.465385][T13530] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2390'. [ 727.099578][T13555] overlayfs: failed to clone lowerpath [ 727.348182][T13561] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2397'. [ 727.868931][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2401'. [ 727.921333][T13564] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2401'. [ 727.975759][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2401'. [ 728.150612][T13571] nfs: Unknown parameter 'smpckfstransmute' [ 728.384596][T13573] overlayfs: failed to clone upperpath [ 728.406372][T13573] Invalid ELF header magic: != ELF [ 728.643823][T13583] FAULT_INJECTION: forcing a failure. [ 728.643823][T13583] name failslab, interval 1, probability 0, space 0, times 0 [ 728.657409][T13583] CPU: 1 UID: 0 PID: 13583 Comm: syz.2.2409 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 728.668231][T13583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 728.678318][T13583] Call Trace: [ 728.681654][T13583] [ 728.684708][T13583] dump_stack_lvl+0x241/0x360 [ 728.689445][T13583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 728.694701][T13583] ? __pfx__printk+0x10/0x10 [ 728.699344][T13583] ? fs_reclaim_acquire+0x93/0x130 [ 728.704518][T13583] ? __pfx___might_resched+0x10/0x10 [ 728.709864][T13583] should_fail_ex+0x3b0/0x4e0 [ 728.714643][T13583] should_failslab+0xac/0x100 [ 728.719397][T13583] __kmalloc_noprof+0xdd/0x4c0 [ 728.724212][T13583] ? kstrtouint_from_user+0x128/0x190 [ 728.729640][T13583] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 728.735436][T13583] tomoyo_realpath_from_path+0xcf/0x5e0 [ 728.741069][T13583] tomoyo_path_number_perm+0x236/0x860 [ 728.746572][T13583] ? __lock_acquire+0x1397/0x2100 [ 728.751641][T13583] ? tomoyo_path_number_perm+0x206/0x860 [ 728.757288][T13583] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 728.763315][T13583] ? __fget_files+0x2a/0x410 [ 728.767923][T13583] ? __fget_files+0x2a/0x410 [ 728.772540][T13583] security_file_ioctl+0xc6/0x2a0 [ 728.777597][T13583] __se_sys_ioctl+0x46/0x170 [ 728.782210][T13583] do_syscall_64+0xf3/0x230 [ 728.786731][T13583] ? clear_bhb_loop+0x35/0x90 [ 728.791420][T13583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.797329][T13583] RIP: 0033:0x7fe494185d29 [ 728.801758][T13583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.821380][T13583] RSP: 002b:00007fe494ff2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 728.829805][T13583] RAX: ffffffffffffffda RBX: 00007fe494375fa0 RCX: 00007fe494185d29 [ 728.837790][T13583] RDX: 0000000020000100 RSI: 00000000c0205648 RDI: 0000000000000003 [ 728.845877][T13583] RBP: 00007fe494ff2090 R08: 0000000000000000 R09: 0000000000000000 [ 728.853855][T13583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.861831][T13583] R13: 0000000000000000 R14: 00007fe494375fa0 R15: 00007ffda6a18b78 [ 728.869823][T13583] [ 728.884428][T13583] ERROR: Out of memory at tomoyo_realpath_from_path. [ 729.002981][T13589] FAULT_INJECTION: forcing a failure. [ 729.002981][T13589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.021982][T13589] CPU: 0 UID: 0 PID: 13589 Comm: syz.2.2412 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 729.032820][T13589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 729.042918][T13589] Call Trace: [ 729.046253][T13589] [ 729.049224][T13589] dump_stack_lvl+0x241/0x360 [ 729.053960][T13589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 729.059256][T13589] ? __pfx__printk+0x10/0x10 [ 729.063888][T13589] ? __pfx_lock_release+0x10/0x10 [ 729.068930][T13589] should_fail_ex+0x3b0/0x4e0 [ 729.073692][T13589] _copy_from_user+0x2f/0xc0 [ 729.078344][T13589] copy_msghdr_from_user+0xae/0x680 [ 729.083577][T13589] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 729.089423][T13589] ? __fget_files+0x2a/0x410 [ 729.094077][T13589] ? __fget_files+0x2a/0x410 [ 729.098720][T13589] __sys_sendmsg+0x209/0x350 [ 729.103355][T13589] ? __pfx_lock_release+0x10/0x10 [ 729.108436][T13589] ? __pfx___sys_sendmsg+0x10/0x10 [ 729.113606][T13589] ? __pfx_vfs_write+0x10/0x10 [ 729.118454][T13589] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 729.124843][T13589] ? do_syscall_64+0x100/0x230 [ 729.129669][T13589] ? do_syscall_64+0xb6/0x230 [ 729.134403][T13589] do_syscall_64+0xf3/0x230 [ 729.138959][T13589] ? clear_bhb_loop+0x35/0x90 [ 729.143689][T13589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.149673][T13589] RIP: 0033:0x7fe494185d29 [ 729.154143][T13589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.173799][T13589] RSP: 002b:00007fe494ff2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.182275][T13589] RAX: ffffffffffffffda RBX: 00007fe494375fa0 RCX: 00007fe494185d29 [ 729.190299][T13589] RDX: 0000000000000080 RSI: 0000000020000100 RDI: 0000000000000003 [ 729.198339][T13589] RBP: 00007fe494ff2090 R08: 0000000000000000 R09: 0000000000000000 [ 729.206410][T13589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.214430][T13589] R13: 0000000000000000 R14: 00007fe494375fa0 R15: 00007ffda6a18b78 [ 729.222470][T13589] [ 729.871496][T13607] __nla_validate_parse: 1 callbacks suppressed [ 729.871537][T13607] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2413'. [ 730.787453][T13627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2426'. [ 734.060626][T13658] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 734.784600][T13669] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2441'. [ 737.131008][T13682] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 737.242241][T13685] 9pnet_fd: Insufficient options for proto=fd [ 737.958222][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2450'. [ 739.974600][T13734] FAULT_INJECTION: forcing a failure. [ 739.974600][T13734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.051074][T13734] CPU: 1 UID: 0 PID: 13734 Comm: syz.2.2460 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 740.062010][T13734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 740.072105][T13734] Call Trace: [ 740.075412][T13734] [ 740.078371][T13734] dump_stack_lvl+0x241/0x360 [ 740.083101][T13734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.088346][T13734] ? __pfx__printk+0x10/0x10 [ 740.092991][T13734] ? __pfx_lock_release+0x10/0x10 [ 740.098055][T13734] should_fail_ex+0x3b0/0x4e0 [ 740.102788][T13734] _copy_from_user+0x2f/0xc0 [ 740.107426][T13734] core_sys_select+0x508/0x910 [ 740.112232][T13734] ? __pfx_core_sys_select+0x10/0x10 [ 740.117552][T13734] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 740.123495][T13734] ? __pfx_vfs_write+0x10/0x10 [ 740.128287][T13734] ? __pfx_set_user_sigmask+0x10/0x10 [ 740.133709][T13734] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 740.139738][T13734] ? __fget_files+0x2a/0x410 [ 740.144362][T13734] __se_sys_pselect6+0x323/0x3f0 [ 740.149342][T13734] ? __pfx___se_sys_pselect6+0x10/0x10 [ 740.154833][T13734] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 740.161187][T13734] ? do_syscall_64+0x100/0x230 [ 740.165977][T13734] ? __x64_sys_pselect6+0x21/0xf0 [ 740.171029][T13734] do_syscall_64+0xf3/0x230 [ 740.175559][T13734] ? clear_bhb_loop+0x35/0x90 [ 740.180251][T13734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.186171][T13734] RIP: 0033:0x7fe494185d29 [ 740.191090][T13734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.210718][T13734] RSP: 002b:00007fe494fd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 740.219149][T13734] RAX: ffffffffffffffda RBX: 00007fe494376080 RCX: 00007fe494185d29 [ 740.227132][T13734] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 740.235113][T13734] RBP: 00007fe494fd1090 R08: 0000000000000000 R09: 0000000000000000 [ 740.243130][T13734] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 740.251228][T13734] R13: 0000000000000000 R14: 00007fe494376080 R15: 00007ffda6a18b78 [ 740.259235][T13734] [ 740.817933][T13751] fuse: Bad value for 'fd' [ 741.000495][T13754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2467'. [ 744.361774][T13786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.765661][T13792] fuse: Bad value for 'fd' [ 747.156043][T13800] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2480'. [ 747.223467][T13804] dlm: non-version read from control device 156 [ 747.578954][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.247528][T13833] fuse: Bad value for 'fd' [ 749.445251][T13838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2490'. [ 753.521255][T13880] fuse: Invalid rootmode [ 754.112433][T13896] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2509'. [ 757.003797][T13928] fuse: Invalid rootmode [ 757.169616][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2527'. [ 757.179264][T13940] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2527'. [ 757.188675][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2527'. [ 757.700534][T13950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2528'. [ 759.750883][T13968] fuse: Invalid rootmode [ 760.868682][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2544'. [ 760.899031][T13989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2544'. [ 760.949196][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2544'. [ 761.316272][T14008] fuse: Bad value for 'rootmode' [ 763.288365][T14033] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2559'. [ 763.580118][T14041] fuse: Bad value for 'rootmode' [ 763.595536][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2561'. [ 763.604615][T14039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2561'. [ 763.705306][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2561'. [ 765.254391][T14050] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2564'. [ 766.361608][T14070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2571'. [ 766.386403][T14070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2571'. [ 767.664635][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2578'. [ 767.745570][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2578'. [ 767.754862][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2578'. [ 767.756498][T14091] fuse: Bad value for 'rootmode' [ 769.249831][T14126] 9pnet_fd: Insufficient options for proto=fd [ 770.165380][ T1310] tipc: Subscription rejected, illegal request [ 771.291901][T14140] fuse: Unknown parameter 'use00000000000000000000' [ 771.309358][T14147] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 772.838691][T14190] overlayfs: failed to clone upperpath [ 775.413140][T14241] fuse: Unknown parameter 'use00000000000000000000' [ 778.362359][T14257] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2615'. [ 779.982363][T14274] overlayfs: failed to clone upperpath [ 780.122790][T14285] overlayfs: failed to clone lowerpath [ 781.362787][T14296] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2631'. [ 781.645495][T14304] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2632'. [ 783.845946][T14312] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2633'. [ 784.175622][T14324] overlayfs: failed to clone lowerpath [ 791.838809][T14420] bridge0: port 3(veth0_to_bridge) entered blocking state [ 791.874919][T14420] bridge0: port 3(veth0_to_bridge) entered disabled state [ 791.889889][T14420] veth0_to_bridge: entered allmulticast mode [ 791.898241][T14425] netlink: 'syz.5.2671': attribute type 10 has an invalid length. [ 791.908661][T14420] veth0_to_bridge: entered promiscuous mode [ 791.917410][T14420] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 791.932435][T14420] bridge0: port 3(veth0_to_bridge) entered blocking state [ 791.939787][T14420] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 791.965649][T14425] macvlan0: entered allmulticast mode [ 791.974278][T14425] veth1_vlan: entered allmulticast mode [ 791.983002][T14425] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 792.234819][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 792.234842][ T29] audit: type=1326 audit(1737338980.101:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.5.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 792.310414][ T29] audit: type=1326 audit(1737338980.101:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.5.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 792.404861][ T29] audit: type=1326 audit(1737338980.101:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.5.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 792.453325][T14440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2677'. [ 792.463432][ T29] audit: type=1326 audit(1737338980.101:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.5.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 792.491194][T14440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2677'. [ 792.514789][ T29] audit: type=1326 audit(1737338980.101:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.5.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 792.588549][ T29] audit: type=1326 audit(1737338980.101:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.5.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 792.633515][ T29] audit: type=1326 audit(1737338980.101:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.5.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 792.734748][ T29] audit: type=1326 audit(1737338980.101:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.5.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 792.785294][ T29] audit: type=1326 audit(1737338980.101:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.5.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 792.842940][ T29] audit: type=1326 audit(1737338980.101:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14424 comm="syz.5.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 793.829897][T14478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2694'. [ 795.127759][T14507] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.2701'. [ 795.129450][T14506] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2702'. [ 795.152409][T14506] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2702'. [ 795.281984][T14498] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2698'. [ 799.257840][T14547] pim6reg: entered allmulticast mode [ 799.275845][T14547] pim6reg: left allmulticast mode [ 799.294890][T14550] overlayfs: failed to clone upperpath [ 799.804291][T14565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2721'. [ 800.706873][T14573] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 801.035639][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 801.035662][ T29] audit: type=1326 audit(1737338988.811:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb85d29 code=0x7ffc0000 [ 801.135821][ T29] audit: type=1326 audit(1737338988.811:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb85d29 code=0x7ffc0000 [ 801.158090][ T29] audit: type=1326 audit(1737338988.811:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fb2adb85d29 code=0x7ffc0000 [ 801.182657][ T29] audit: type=1326 audit(1737338988.811:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb85d29 code=0x7ffc0000 [ 801.249349][ T29] audit: type=1326 audit(1737338988.811:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb2adb85d29 code=0x7ffc0000 [ 801.844989][ T29] audit: type=1326 audit(1737338988.911:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb85d29 code=0x7ffc0000 [ 801.997337][ T29] audit: type=1326 audit(1737338988.911:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb85d29 code=0x7ffc0000 [ 802.035273][ T29] audit: type=1326 audit(1737338988.961:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2adb85d29 code=0x7ffc0000 [ 802.111784][ T29] audit: type=1326 audit(1737338988.961:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb85d29 code=0x7ffc0000 [ 802.306101][ T29] audit: type=1326 audit(1737338988.961:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb2adb85d29 code=0x7ffc0000 [ 803.350593][T14614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2736'. [ 803.983747][T14615] xt_CT: No such helper "syz0" [ 804.034367][T14609] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2733'. [ 804.165427][T14631] overlayfs: failed to clone upperpath [ 806.345492][T14663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2748'. [ 806.938578][T14681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2754'. [ 808.200258][T14710] pim6reg: entered allmulticast mode [ 808.210721][T14710] pim6reg: left allmulticast mode [ 808.573218][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 808.593214][ T29] audit: type=1107 audit(1737338996.271:161): pid=14707 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 809.034423][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.377250][T14717] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2768'. [ 809.817055][T14735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2775'. [ 810.994141][T14745] overlayfs: failed to clone upperpath [ 811.239959][T14753] pim6reg: entered allmulticast mode [ 811.248071][T14753] pim6reg: left allmulticast mode [ 811.311645][T14755] overlayfs: failed to clone upperpath [ 811.682150][T14765] overlayfs: failed to clone upperpath [ 814.668374][T14784] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2793'. [ 814.682886][T14782] overlayfs: failed to clone upperpath [ 814.729413][T14789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2794'. [ 814.731297][T14785] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2793'. [ 815.126955][ T29] audit: type=1107 audit(1737339003.011:162): pid=14806 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 817.217300][T14821] pim6reg: entered allmulticast mode [ 817.244389][T14821] pim6reg: left allmulticast mode [ 817.424239][T14833] overlayfs: failed to clone upperpath [ 817.671684][T14844] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 817.731186][ T29] audit: type=1326 audit(1737339005.611:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14842 comm="syz.2.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe494185d29 code=0x7ffc0000 [ 817.753056][ T29] audit: type=1326 audit(1737339005.611:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14842 comm="syz.2.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe494185d29 code=0x7ffc0000 [ 817.775298][ T29] audit: type=1326 audit(1737339005.611:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14842 comm="syz.2.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fe494185d29 code=0x7ffc0000 [ 817.797359][ T29] audit: type=1326 audit(1737339005.611:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14842 comm="syz.2.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe494185d29 code=0x7ffc0000 [ 817.819212][ T29] audit: type=1326 audit(1737339005.611:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14842 comm="syz.2.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe494185d29 code=0x7ffc0000 [ 817.840922][ T29] audit: type=1326 audit(1737339005.611:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14842 comm="syz.2.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe494185d29 code=0x7ffc0000 [ 817.863182][ T29] audit: type=1326 audit(1737339005.611:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14842 comm="syz.2.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe494185d29 code=0x7ffc0000 [ 817.884887][ T29] audit: type=1326 audit(1737339005.611:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14842 comm="syz.2.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe494185d29 code=0x7ffc0000 [ 817.914794][ T29] audit: type=1326 audit(1737339005.631:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14842 comm="syz.2.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe494185d29 code=0x7ffc0000 [ 818.388986][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 818.399792][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 818.409153][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 818.837506][T14857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 818.850714][T14857] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 818.864510][T14857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 819.627211][ T5823] syz-executor (5823) used greatest stack depth: 18064 bytes left [ 819.656638][T14853] lo speed is unknown, defaulting to 1000 [ 819.703094][T14871] pim6reg: entered allmulticast mode [ 819.742144][T14876] overlayfs: failed to clone upperpath [ 819.749597][T14871] pim6reg: left allmulticast mode [ 819.759153][T14873] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2825'. [ 820.100269][T14853] chnl_net:caif_netlink_parms(): no params data found [ 820.377842][T14853] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.396971][T14853] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.404304][T14853] bridge_slave_0: entered allmulticast mode [ 820.412239][T14853] bridge_slave_0: entered promiscuous mode [ 820.420793][T14853] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.428412][T14853] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.435769][T14853] bridge_slave_1: entered allmulticast mode [ 820.443190][T14853] bridge_slave_1: entered promiscuous mode [ 820.542053][T14853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.585180][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 820.585201][ T29] audit: type=1326 audit(1737339008.461:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.5.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 820.620693][T14853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.638158][ T29] audit: type=1326 audit(1737339008.461:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.5.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 820.660853][ T29] audit: type=1326 audit(1737339008.461:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.5.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 820.682905][ T29] audit: type=1326 audit(1737339008.461:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.5.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 820.704697][ T29] audit: type=1326 audit(1737339008.461:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.5.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 820.705706][T14900] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 820.957520][T14857] Bluetooth: hci1: command tx timeout [ 821.123523][ T29] audit: type=1326 audit(1737339008.471:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.5.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 821.293312][ T29] audit: type=1326 audit(1737339008.471:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.5.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 821.418352][ T29] audit: type=1326 audit(1737339008.471:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.5.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 821.441214][ T29] audit: type=1326 audit(1737339008.491:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.5.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 821.457882][T14853] team0: Port device team_slave_0 added [ 821.537626][ T29] audit: type=1326 audit(1737339008.491:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.5.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5959585d29 code=0x7ffc0000 [ 821.706907][T14853] team0: Port device team_slave_1 added [ 822.559960][T14853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.581474][T14853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.608350][T14853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.622605][T14853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.634291][T14853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.711865][T14853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.815140][T14918] overlayfs: failed to clone upperpath [ 822.904505][T14853] hsr_slave_0: entered promiscuous mode [ 822.931004][T14853] hsr_slave_1: entered promiscuous mode [ 822.941407][T14853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 822.952909][T14853] Cannot create hsr debugfs directory [ 823.014775][T14857] Bluetooth: hci1: command tx timeout [ 824.182568][T14853] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.579540][T14853] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.096441][T14857] Bluetooth: hci1: command tx timeout [ 825.220790][T14955] overlayfs: failed to clone upperpath [ 825.366929][T14853] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.647511][T14853] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.926062][T14853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 825.963815][T14853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 826.186580][T14853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 826.678321][T14853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 826.937484][T14980] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 827.030069][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 827.030089][ T29] audit: type=1326 audit(1737339014.911:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14977 comm="syz.2.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe494185d29 code=0x7ffc0000 [ 827.086872][T14979] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 827.175681][T14857] Bluetooth: hci1: command tx timeout [ 827.204305][ T29] audit: type=1326 audit(1737339014.951:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14978 comm="syz.7.2858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91a985d29 code=0x7ffc0000 [ 827.248374][ T29] audit: type=1326 audit(1737339014.951:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14978 comm="syz.7.2858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91a985d29 code=0x7ffc0000 [ 827.284712][ T29] audit: type=1326 audit(1737339014.961:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14978 comm="syz.7.2858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fd91a985d29 code=0x7ffc0000 [ 827.308497][ T29] audit: type=1326 audit(1737339014.961:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14978 comm="syz.7.2858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91a985d29 code=0x7ffc0000 [ 827.330329][ T29] audit: type=1326 audit(1737339014.961:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14978 comm="syz.7.2858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd91a985d29 code=0x7ffc0000 [ 827.352094][ T29] audit: type=1326 audit(1737339014.961:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14978 comm="syz.7.2858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91a985d29 code=0x7ffc0000 [ 827.394371][ T29] audit: type=1326 audit(1737339014.961:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14978 comm="syz.7.2858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd91a985d29 code=0x7ffc0000 [ 827.414438][T14853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.452190][ T29] audit: type=1326 audit(1737339014.961:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14978 comm="syz.7.2858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91a985d29 code=0x7ffc0000 [ 827.492859][ T29] audit: type=1326 audit(1737339014.961:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14978 comm="syz.7.2858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd91a985d29 code=0x7ffc0000 [ 827.498499][T14853] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.601133][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.608391][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.663103][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.670348][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.614351][T14853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.648915][T15017] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2867'. [ 830.662783][T15028] bridge0: port 3(erspan0) entered blocking state [ 830.670070][T15028] bridge0: port 3(erspan0) entered disabled state [ 830.676874][T15028] erspan0: entered allmulticast mode [ 830.683341][T15028] erspan0: entered promiscuous mode [ 830.706868][T15030] macvlan0: entered allmulticast mode [ 830.713462][T15032] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 830.721199][T15032] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 830.860229][T14853] veth0_vlan: entered promiscuous mode [ 830.947623][T14853] veth1_vlan: entered promiscuous mode [ 831.003390][T14853] veth0_macvtap: entered promiscuous mode [ 831.036323][T14853] veth1_macvtap: entered promiscuous mode [ 831.049283][T15037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2873'. [ 831.083393][T14853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.101936][T14853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.123939][T14853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.150417][T14853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.173072][T14853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.191491][T14853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.202454][T14853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.220391][T14853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.270243][T14853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.306086][T14853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.340657][T14853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.371293][T14853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.396248][T14853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.439212][T14853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.465866][T14853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.485193][T14853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.521546][T14853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.562912][T14853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.658210][T15053] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 831.686581][T14853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.773116][T14853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.783860][T14853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.802078][T14853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.292057][T14200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.329487][T14200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.575720][T14194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.603135][T14194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.692150][T15093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2890'. [ 836.833799][T15096] : renamed from ipvlan1 [ 837.131988][T15099] pim6reg: entered allmulticast mode [ 837.187074][T15102] pim6reg: left allmulticast mode [ 838.925474][T15116] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 840.308861][T15139] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2906'. [ 840.699408][T15134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2902'. [ 840.763816][T15134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2902'. [ 840.808728][T15134] netlink: 4368 bytes leftover after parsing attributes in process `syz.2.2902'. [ 848.375827][T15215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2928'. [ 848.834946][ T2149] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 850.525650][ T2149] usb 4-1: Using ep0 maxpacket: 16 [ 850.536342][ T2149] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 850.564727][ T2149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 850.596601][ T2149] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 850.625007][ T2149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.633100][ T2149] usb 4-1: Product: syz [ 850.684813][ T2149] usb 4-1: Manufacturer: syz [ 850.689494][ T2149] usb 4-1: SerialNumber: syz [ 850.725873][ T2149] usb 4-1: config 0 descriptor?? [ 850.741694][ T2149] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 850.815037][ T2149] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 851.079472][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 851.079496][ T29] audit: type=1800 audit(1737339038.961:199): pid=15249 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.2931" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 851.195063][T15246] fuse: Unknown parameter 'fy' [ 852.017564][ T2149] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 852.024234][ T2149] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 853.622066][ T2149] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 854.864786][ T2149] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 854.871988][ T2149] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 854.878884][ T2149] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 854.885821][ T2149] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 854.892642][ T2149] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 855.355353][T15284] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2948'. [ 855.581526][T15285] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2946'. [ 855.820142][ T25] usb 4-1: USB disconnect, device number 54 [ 860.028203][T15312] 9pnet_fd: Insufficient options for proto=fd [ 860.170123][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.182948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.195918][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.208440][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.220914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.233468][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.245935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.258431][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.270921][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.283454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.669036][T15325] FAULT_INJECTION: forcing a failure. [ 860.669036][T15325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.255553][T15325] CPU: 0 UID: 0 PID: 15325 Comm: syz.3.2961 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 861.266419][T15325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 861.276525][T15325] Call Trace: [ 861.279846][T15325] [ 861.282831][T15325] dump_stack_lvl+0x241/0x360 [ 861.287581][T15325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 861.292842][T15325] ? __pfx__printk+0x10/0x10 [ 861.297500][T15325] ? __pfx_lock_release+0x10/0x10 [ 861.302587][T15325] should_fail_ex+0x3b0/0x4e0 [ 861.307333][T15325] strncpy_from_user+0x36/0x270 [ 861.312251][T15325] getname_flags+0xf1/0x540 [ 861.316811][T15325] __x64_sys_execve+0x78/0xb0 [ 861.321559][T15325] do_syscall_64+0xf3/0x230 [ 861.326123][T15325] ? clear_bhb_loop+0x35/0x90 [ 861.330911][T15325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.336863][T15325] RIP: 0033:0x7f15c6985d29 [ 861.341321][T15325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.360978][T15325] RSP: 002b:00007f15c783f038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 861.369456][T15325] RAX: ffffffffffffffda RBX: 00007f15c6b75fa0 RCX: 00007f15c6985d29 [ 861.377501][T15325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 861.385532][T15325] RBP: 00007f15c783f090 R08: 0000000000000000 R09: 0000000000000000 [ 861.393559][T15325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.401590][T15325] R13: 0000000000000000 R14: 00007f15c6b75fa0 R15: 00007ffd5caee288 [ 861.409634][T15325] [ 862.221519][ C1] bridge0: topology change detected, propagating [ 862.229358][ C1] bridge0: port 3(veth0_to_bridge) entered blocking state [ 863.435190][T15334] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2962'. [ 863.897009][T15336] pim6reg: entered allmulticast mode [ 864.527108][T15346] lo speed is unknown, defaulting to 1000 [ 865.195272][ T51] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 865.374969][ T51] usb 4-1: Using ep0 maxpacket: 32 [ 865.386752][ T51] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 865.404413][ T51] usb 4-1: config 0 has no interface number 0 [ 865.422258][ T51] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 865.438356][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.677091][ T51] usb 4-1: Product: syz [ 865.682675][ T51] usb 4-1: Manufacturer: syz [ 865.687719][ T51] usb 4-1: SerialNumber: syz [ 865.709469][ T51] usb 4-1: config 0 descriptor?? [ 866.555454][T15375] process 'syz.5.2970' launched '/dev/fd/9' with NULL argv: empty string added [ 866.684709][ T51] smsc95xx v2.0.0 [ 868.234761][ T51] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 868.251886][ T51] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 868.264275][ T51] usb 4-1: USB disconnect, device number 55 [ 869.305410][T15393] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2976'. [ 870.515891][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.521074][T15446] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2989'. [ 875.693833][T15449] smc: net device bond_slave_1 applied user defined pnetid SYZ1 [ 875.923999][T15452] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 875.942386][T15452] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 875.989287][T15452] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 876.010539][T15452] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 879.066346][ T29] audit: type=1107 audit(1737339066.721:200): pid=15465 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 881.882445][T15507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 886.438858][T15530] FAULT_INJECTION: forcing a failure. [ 886.438858][T15530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 887.495329][T15530] CPU: 1 UID: 0 PID: 15530 Comm: syz.3.3013 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 887.506182][T15530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 887.516331][T15530] Call Trace: [ 887.519651][T15530] [ 887.522622][T15530] dump_stack_lvl+0x241/0x360 [ 887.527359][T15530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 887.532627][T15530] ? __pfx__printk+0x10/0x10 [ 887.537378][T15530] ? snprintf+0xda/0x120 [ 887.541674][T15530] should_fail_ex+0x3b0/0x4e0 [ 887.546434][T15530] _copy_to_user+0x31/0xb0 [ 887.550938][T15530] simple_read_from_buffer+0xca/0x150 [ 887.556380][T15530] proc_fail_nth_read+0x1e9/0x250 [ 887.561467][T15530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 887.567078][T15530] ? rw_verify_area+0x55e/0x6f0 [ 887.572030][T15530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 887.577670][T15530] vfs_read+0x1fc/0xb70 [ 887.581893][T15530] ? __pfx___mutex_lock+0x10/0x10 [ 887.586997][T15530] ? __pfx_vfs_read+0x10/0x10 [ 887.591758][T15530] ? __fget_files+0x2a/0x410 [ 887.596424][T15530] ? __fget_files+0x395/0x410 [ 887.601151][T15530] ? __fget_files+0x2a/0x410 [ 887.605792][T15530] ksys_read+0x18f/0x2b0 [ 887.610123][T15530] ? __pfx_ksys_read+0x10/0x10 [ 887.614983][T15530] ? do_syscall_64+0x100/0x230 [ 887.619815][T15530] ? do_syscall_64+0xb6/0x230 [ 887.624550][T15530] do_syscall_64+0xf3/0x230 [ 887.629111][T15530] ? clear_bhb_loop+0x35/0x90 [ 887.633833][T15530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.639789][T15530] RIP: 0033:0x7f15c698473c [ 887.644240][T15530] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 887.663885][T15530] RSP: 002b:00007f15c783f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 887.672357][T15530] RAX: ffffffffffffffda RBX: 00007f15c6b75fa0 RCX: 00007f15c698473c [ 887.680369][T15530] RDX: 000000000000000f RSI: 00007f15c783f0a0 RDI: 0000000000000003 [ 887.688376][T15530] RBP: 00007f15c783f090 R08: 0000000000000000 R09: 0000000000000000 [ 887.696393][T15530] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000001 [ 887.704402][T15530] R13: 0000000000000000 R14: 00007f15c6b75fa0 R15: 00007ffd5caee288 [ 887.712449][T15530] [ 887.715651][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.094345][T15543] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3017'. [ 889.281807][T15545] random: crng reseeded on system resumption [ 889.623966][T15555] xt_nat: multiple ranges no longer supported [ 889.653302][T15555] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3020'. [ 890.508970][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3022'. [ 890.536810][T15557] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3022'. [ 890.565078][T15557] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3022'. [ 890.825509][T15561] IPv6: NLM_F_CREATE should be specified when creating new route [ 893.674856][ T29] audit: type=1107 audit(1737339081.541:201): pid=15576 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 894.893476][ T29] audit: type=1107 audit(1737339082.741:202): pid=15598 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 898.409723][T15645] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3042'. [ 899.346679][T15657] x_tables: duplicate underflow at hook 1 [ 899.488955][ T29] audit: type=1107 audit(1737339087.351:203): pid=15656 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 900.435643][T15668] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3054'. [ 903.189168][T15696] FAULT_INJECTION: forcing a failure. [ 903.189168][T15696] name failslab, interval 1, probability 0, space 0, times 0 [ 903.206435][T14857] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 903.227464][T15696] CPU: 0 UID: 0 PID: 15696 Comm: syz.3.3063 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 903.238317][T15696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 903.248431][T15696] Call Trace: [ 903.251753][T15696] [ 903.254721][T15696] dump_stack_lvl+0x241/0x360 [ 903.259552][T15696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 903.264817][T15696] ? __pfx__printk+0x10/0x10 [ 903.269461][T15696] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 903.275499][T15696] ? __pfx___might_resched+0x10/0x10 [ 903.280874][T15696] should_fail_ex+0x3b0/0x4e0 [ 903.285633][T15696] should_failslab+0xac/0x100 [ 903.290382][T15696] kmem_cache_alloc_node_noprof+0x77/0x380 [ 903.296255][T15696] ? __alloc_skb+0x1c3/0x440 [ 903.300917][T15696] __alloc_skb+0x1c3/0x440 [ 903.305403][T15696] ? __pfx___alloc_skb+0x10/0x10 [ 903.310401][T15696] ? netlink_autobind+0xd6/0x2f0 [ 903.315411][T15696] ? netlink_autobind+0x2b0/0x2f0 [ 903.320494][T15696] netlink_sendmsg+0x638/0xcb0 [ 903.325330][T15696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 903.330722][T15696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 903.336177][T15696] __sock_sendmsg+0x221/0x270 [ 903.340936][T15696] ____sys_sendmsg+0x52a/0x7e0 [ 903.345781][T15696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 903.351127][T15696] ? __fget_files+0x2a/0x410 [ 903.355787][T15696] ? __fget_files+0x2a/0x410 [ 903.360446][T15696] __sys_sendmsg+0x269/0x350 [ 903.365112][T15696] ? __pfx_lock_release+0x10/0x10 [ 903.370234][T15696] ? __pfx___sys_sendmsg+0x10/0x10 [ 903.375435][T15696] ? __pfx_vfs_write+0x10/0x10 [ 903.380308][T15696] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 903.386790][T15696] ? do_syscall_64+0x100/0x230 [ 903.391680][T15696] ? do_syscall_64+0xb6/0x230 [ 903.396450][T15696] do_syscall_64+0xf3/0x230 [ 903.401019][T15696] ? clear_bhb_loop+0x35/0x90 [ 903.405757][T15696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.411742][T15696] RIP: 0033:0x7f15c6985d29 [ 903.416219][T15696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 903.436015][T15696] RSP: 002b:00007f15c783f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 903.444495][T15696] RAX: ffffffffffffffda RBX: 00007f15c6b75fa0 RCX: 00007f15c6985d29 [ 903.452515][T15696] RDX: 0000000004000002 RSI: 0000000020000400 RDI: 0000000000000003 [ 903.460696][T15696] RBP: 00007f15c783f090 R08: 0000000000000000 R09: 0000000000000000 [ 903.468742][T15696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.476870][T15696] R13: 0000000000000000 R14: 00007f15c6b75fa0 R15: 00007ffd5caee288 [ 903.484913][T15696] [ 903.699323][ T29] audit: type=1107 audit(1737339091.481:204): pid=15699 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 904.441997][ T5828] IPVS: starting estimator thread 0... [ 904.554935][T15719] IPVS: using max 21 ests per chain, 50400 per kthread [ 906.155331][T15756] FAULT_INJECTION: forcing a failure. [ 906.155331][T15756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.189031][T15756] CPU: 0 UID: 0 PID: 15756 Comm: syz.3.3084 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 906.199895][T15756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 906.210002][T15756] Call Trace: [ 906.213318][T15756] [ 906.216289][T15756] dump_stack_lvl+0x241/0x360 [ 906.221023][T15756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 906.226287][T15756] ? __pfx__printk+0x10/0x10 [ 906.230954][T15756] ? __pfx_lock_release+0x10/0x10 [ 906.236053][T15756] should_fail_ex+0x3b0/0x4e0 [ 906.240807][T15756] _copy_from_user+0x2f/0xc0 [ 906.245471][T15756] copy_msghdr_from_user+0xae/0x680 [ 906.250746][T15756] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 906.256616][T15756] ? __fget_files+0x2a/0x410 [ 906.261343][T15756] ? __fget_files+0x2a/0x410 [ 906.266001][T15756] __sys_sendmmsg+0x32b/0x720 [ 906.270754][T15756] ? __pfx___sys_sendmmsg+0x10/0x10 [ 906.276029][T15756] ? __pfx_lock_release+0x10/0x10 [ 906.281113][T15756] ? kstrtouint_from_user+0x128/0x190 [ 906.286590][T15756] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 906.292559][T15756] ? ksys_write+0x22a/0x2b0 [ 906.297131][T15756] ? __pfx_lock_release+0x10/0x10 [ 906.302205][T15756] ? vfs_write+0x730/0xd30 [ 906.306654][T15756] ? __mutex_unlock_slowpath+0x21e/0x790 [ 906.312333][T15756] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 906.318345][T15756] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 906.324694][T15756] ? do_syscall_64+0x100/0x230 [ 906.329482][T15756] __x64_sys_sendmmsg+0xa0/0xb0 [ 906.334354][T15756] do_syscall_64+0xf3/0x230 [ 906.338897][T15756] ? clear_bhb_loop+0x35/0x90 [ 906.343592][T15756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.349518][T15756] RIP: 0033:0x7f15c6985d29 [ 906.353949][T15756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.373570][T15756] RSP: 002b:00007f15c783f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 906.382007][T15756] RAX: ffffffffffffffda RBX: 00007f15c6b75fa0 RCX: 00007f15c6985d29 [ 906.389992][T15756] RDX: 0000000000000002 RSI: 00000000200026c0 RDI: 0000000000000003 [ 906.397979][T15756] RBP: 00007f15c783f090 R08: 0000000000000000 R09: 0000000000000000 [ 906.406069][T15756] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 906.414070][T15756] R13: 0000000000000000 R14: 00007f15c6b75fa0 R15: 00007ffd5caee288 [ 906.422070][T15756] [ 906.578246][ T29] audit: type=1107 audit(1737339094.461:205): pid=15759 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 909.005624][T15791] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3096'. [ 910.203908][T15790] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3097'. [ 914.967869][ T29] audit: type=1107 audit(1737339102.721:206): pid=15824 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 915.894974][ T51] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 916.791721][ T29] audit: type=1107 audit(1737339104.001:207): pid=15850 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 917.124764][ T51] usb 4-1: Using ep0 maxpacket: 8 [ 917.183024][ T51] usb 4-1: no configurations [ 917.234985][ T51] usb 4-1: can't read configurations, error -22 [ 918.524018][ T51] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 919.135190][ T51] usb 4-1: Using ep0 maxpacket: 8 [ 919.721698][ T51] usb 4-1: device descriptor read/all, error -71 [ 919.729135][ T51] usb usb4-port1: attempt power cycle [ 919.799129][ T5132] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 919.811239][ T5132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 919.823862][ T5132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 919.840655][ T5132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 919.851271][ T5132] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 919.861067][ T5132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 919.967449][T15874] lo speed is unknown, defaulting to 1000 [ 920.001442][ T29] audit: type=1107 audit(1737339107.881:208): pid=15882 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 920.605778][T15874] chnl_net:caif_netlink_parms(): no params data found [ 921.006779][T15874] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.056672][T15874] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.074254][T15874] bridge_slave_0: entered allmulticast mode [ 921.105998][T15874] bridge_slave_0: entered promiscuous mode [ 921.135292][T15874] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.142593][T15874] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.170926][T15874] bridge_slave_1: entered allmulticast mode [ 921.200995][T15874] bridge_slave_1: entered promiscuous mode [ 921.309808][T15874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.374436][T15874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.409525][T15919] lo speed is unknown, defaulting to 1000 [ 921.502180][T15874] team0: Port device team_slave_0 added [ 921.527531][T15874] team0: Port device team_slave_1 added [ 921.580007][T15874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.588859][T15874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.615271][T15874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.628592][T15874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.635839][T15874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.678633][T15874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.799953][T15874] hsr_slave_0: entered promiscuous mode [ 921.805895][ T51] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 921.845079][T15874] hsr_slave_1: entered promiscuous mode [ 921.864764][T15874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 921.872412][T15874] Cannot create hsr debugfs directory [ 921.895210][ T5132] Bluetooth: hci0: command tx timeout [ 921.945196][ T51] usb 4-1: device descriptor read/64, error -71 [ 922.008167][T15931] netlink: 'syz.5.3135': attribute type 5 has an invalid length. [ 922.016213][T15931] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3135'. [ 922.185158][ T51] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 922.355182][ T51] usb 4-1: device descriptor read/64, error -71 [ 922.486663][ T51] usb usb4-port1: attempt power cycle [ 922.547841][ T29] audit: type=1107 audit(1737339110.431:209): pid=15939 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 922.844870][ T51] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 922.900828][ T51] usb 4-1: device descriptor read/8, error -71 [ 923.172959][T15874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 923.185673][ T51] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 923.198009][T15874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 923.216628][ T51] usb 4-1: device descriptor read/8, error -71 [ 923.229101][T15874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 923.238302][T15956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3143'. [ 923.248066][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3143'. [ 923.262221][T15956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3143'. [ 923.271795][T15874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 923.434502][ T29] audit: type=1107 audit(1737339111.281:210): pid=15957 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 924.055369][ T5132] Bluetooth: hci0: command tx timeout [ 924.114728][ T51] usb usb4-port1: unable to enumerate USB device [ 924.253743][T15874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.281995][T15874] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.299452][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.306667][ T6634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.348743][T15966] net_ratelimit: 4279 callbacks suppressed [ 924.348766][T15966] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 924.403644][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.410839][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.721901][T15981] (syz.3.3152,15981,0):dlmfs_mkdir:420 ERROR: invalid domain name for directory. [ 924.766220][T15874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.841639][T15874] veth0_vlan: entered promiscuous mode [ 924.871931][T15874] veth1_vlan: entered promiscuous mode [ 924.939090][T15874] veth0_macvtap: entered promiscuous mode [ 924.984871][ T29] audit: type=1107 audit(1737339112.851:211): pid=15991 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 925.021157][T15874] veth1_macvtap: entered promiscuous mode [ 925.081772][T15874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.102730][T15874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.114378][T15874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.125246][T15874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.137843][T15874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.156813][T15874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.176811][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3155'. [ 925.188943][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3155'. [ 925.190869][T15874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.207656][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3155'. [ 925.217046][T15874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.227956][T15874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.238704][T15874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.251573][T15874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.297870][T15874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 925.325046][T15874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.343500][T15874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 925.361926][T15874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.372218][T15874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 925.385786][T15874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.395893][T15874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 925.406558][T15874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.418551][T15874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 925.429244][T15874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.440831][T15874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.461493][T15874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.481681][T15874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.491338][T15874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.506608][T15874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.515640][ T51] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 925.624559][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.644128][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.667505][ T51] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 925.685092][ T51] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 919, setting to 64 [ 925.703124][ T6634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.724767][ T51] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 925.725021][ T6634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.755073][ T51] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 925.782861][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 925.808457][ T51] usb 4-1: Product: syz [ 925.812699][ T51] usb 4-1: Manufacturer: syz [ 925.820164][ T51] usb 4-1: SerialNumber: syz [ 925.839092][T16005] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 926.135072][ T5132] Bluetooth: hci0: command tx timeout [ 926.160302][ T51] cdc_ncm 4-1:1.0: bind() failure [ 926.169991][ T51] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 926.183587][ T51] cdc_ncm 4-1:1.1: bind() failure [ 926.192481][ T51] usb 4-1: USB disconnect, device number 63 [ 927.245090][ T29] audit: type=1107 audit(1737339115.121:212): pid=16026 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 927.377881][T16029] sp0: Synchronizing with TNC [ 927.445435][T16035] sp0: Found TNC [ 927.684965][T16042] Cache volume key already in use (9p,(null),) [ 928.214944][ T5132] Bluetooth: hci0: command tx timeout [ 928.526405][ T1165] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 928.717782][ T1165] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 928.744240][ T1165] usb 3-1: config 0 has no interface number 0 [ 928.764272][ T1165] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 928.814731][ T1165] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 928.854910][ T1165] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 928.890403][ T1165] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 928.914434][ T1165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.963499][ T1165] usb 3-1: Product: syz [ 928.973625][ T1165] usb 3-1: Manufacturer: syz [ 928.993920][ T1165] usb 3-1: SerialNumber: syz [ 929.016459][ T1165] usb 3-1: config 0 descriptor?? [ 929.032296][T16037] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 929.053589][T16037] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 929.086193][ T1165] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 929.131426][ T1165] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 929.285546][ T5828] usb 3-1: USB disconnect, device number 66 [ 929.342351][ T5828] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 929.511322][T16071] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3175'. [ 930.208113][ T5828] cyberjack 3-1:0.69: device disconnected [ 930.495804][ T29] audit: type=1107 audit(1737339118.331:213): pid=16075 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 930.620011][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3180'. [ 930.763359][T16081] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3180'. [ 931.524774][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3180'. [ 932.279469][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.220505][T16112] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3189'. [ 934.879161][T16113] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3188'. [ 935.915704][ T29] audit: type=1107 audit(1737339123.801:214): pid=16118 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 935.994814][ T5875] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 936.254711][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 936.270049][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.314835][ T5875] usb 4-1: config 0 has no interfaces? [ 936.337039][ T5875] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 936.364980][ T5875] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 936.373073][ T5875] usb 4-1: Product: syz [ 936.407618][ T5875] usb 4-1: Manufacturer: syz [ 936.412289][ T5875] usb 4-1: SerialNumber: syz [ 936.445731][ T5875] usb 4-1: config 0 descriptor?? [ 936.504862][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3198'. [ 936.532761][T16133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3198'. [ 936.543176][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3198'. [ 937.290528][T16148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3202'. [ 937.816324][T16154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.879473][T16154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.165784][ T29] audit: type=1107 audit(1737339126.021:215): pid=16160 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 938.984547][ T6220] usb 4-1: USB disconnect, device number 64 [ 939.155841][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3208'. [ 939.165264][T16169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3207'. [ 940.445809][T16185] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3214'. [ 940.462677][T16185] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3214'. [ 940.472004][T16185] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3214'. [ 940.639297][T16189] FAULT_INJECTION: forcing a failure. [ 940.639297][T16189] name failslab, interval 1, probability 0, space 0, times 0 [ 940.652298][T16189] CPU: 1 UID: 0 PID: 16189 Comm: syz.3.3215 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 940.663116][T16189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 940.673449][T16189] Call Trace: [ 940.676748][T16189] [ 940.679708][T16189] dump_stack_lvl+0x241/0x360 [ 940.684423][T16189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 940.689642][T16189] ? __pfx__printk+0x10/0x10 [ 940.694259][T16189] should_fail_ex+0x3b0/0x4e0 [ 940.699112][T16189] should_failslab+0xac/0x100 [ 940.703846][T16189] ? dst_alloc+0x12b/0x190 [ 940.708311][T16189] kmem_cache_alloc_noprof+0x70/0x380 [ 940.713705][T16189] dst_alloc+0x12b/0x190 [ 940.717984][T16189] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 940.724126][T16189] ip_route_output_key_hash+0x193/0x2b0 [ 940.729715][T16189] ? ip_route_output_key_hash+0xdf/0x2b0 [ 940.735396][T16189] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 940.741501][T16189] ? __pfx_lock_release+0x10/0x10 [ 940.746549][T16189] ? ima_get_action+0x75/0xb0 [ 940.751254][T16189] ip_route_output_flow+0x29/0x140 [ 940.756397][T16189] raw_sendmsg+0x15d0/0x2430 [ 940.761007][T16189] ? mark_lock+0x9a/0x360 [ 940.765374][T16189] ? __pfx_raw_sendmsg+0x10/0x10 [ 940.770337][T16189] ? smack_socket_sendmsg+0x178/0x540 [ 940.775785][T16189] ? inet_sendmsg+0x330/0x390 [ 940.780478][T16189] __sock_sendmsg+0x1a6/0x270 [ 940.785180][T16189] ____sys_sendmsg+0x52a/0x7e0 [ 940.789966][T16189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 940.795267][T16189] ? __fget_files+0x2a/0x410 [ 940.799882][T16189] ? __fget_files+0x2a/0x410 [ 940.804491][T16189] __sys_sendmmsg+0x36a/0x720 [ 940.809198][T16189] ? __pfx___sys_sendmmsg+0x10/0x10 [ 940.814477][T16189] ? __pfx_lock_release+0x10/0x10 [ 940.819558][T16189] ? kstrtouint_from_user+0x128/0x190 [ 940.824981][T16189] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 940.830895][T16189] ? ksys_write+0x22a/0x2b0 [ 940.835414][T16189] ? __pfx_lock_release+0x10/0x10 [ 940.840463][T16189] ? vfs_write+0x730/0xd30 [ 940.844933][T16189] ? __mutex_unlock_slowpath+0x21e/0x790 [ 940.850645][T16189] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 940.856643][T16189] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 940.862983][T16189] ? do_syscall_64+0x100/0x230 [ 940.867776][T16189] __x64_sys_sendmmsg+0xa0/0xb0 [ 940.872652][T16189] do_syscall_64+0xf3/0x230 [ 940.877204][T16189] ? clear_bhb_loop+0x35/0x90 [ 940.881919][T16189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.887857][T16189] RIP: 0033:0x7f15c6985d29 [ 940.892292][T16189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.911998][T16189] RSP: 002b:00007f15c783f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 940.920422][T16189] RAX: ffffffffffffffda RBX: 00007f15c6b75fa0 RCX: 00007f15c6985d29 [ 940.928404][T16189] RDX: 0000000000000001 RSI: 0000000020000f40 RDI: 0000000000000003 [ 940.936389][T16189] RBP: 00007f15c783f090 R08: 0000000000000000 R09: 0000000000000000 [ 940.944380][T16189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.952370][T16189] R13: 0000000000000000 R14: 00007f15c6b75fa0 R15: 00007ffd5caee288 [ 940.960372][T16189] [ 942.298487][ T29] audit: type=1107 audit(1737339129.731:216): pid=16197 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 942.335020][ T1165] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 942.415761][ T29] audit: type=1107 audit(1737339130.301:217): pid=16201 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 942.535157][ T1165] usb 3-1: Using ep0 maxpacket: 8 [ 942.572975][ T1165] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.647817][ T1165] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 942.718264][ T1165] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 942.739119][ T1165] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 942.772028][ T1165] usb 3-1: Product: syz [ 942.789554][ T1165] usb 3-1: Manufacturer: syz [ 942.799762][ T1165] usb 3-1: SerialNumber: syz [ 942.812276][ T1165] usb 3-1: config 0 descriptor?? [ 943.189213][ T29] audit: type=1107 audit(1737339130.981:218): pid=16212 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 944.332208][ T5132] Bluetooth: hci1: command 0x0406 tx timeout [ 944.762964][T16228] netlink: 'syz.5.3227': attribute type 40 has an invalid length. [ 944.839872][ T9255] usb 3-1: USB disconnect, device number 67 [ 945.499723][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3229'. [ 945.561154][T16234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3229'. [ 945.601596][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3229'. [ 945.692058][T16237] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3230'. [ 945.835241][ T29] audit: type=1107 audit(1737339133.701:219): pid=16239 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 946.055803][ T9255] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 946.511505][ T9255] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 946.544205][ T9255] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 919, setting to 64 [ 946.574691][ T9255] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 946.627538][ T9255] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 946.654820][ T9255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 946.673256][ T9255] usb 3-1: Product: syz [ 946.689125][ T9255] usb 3-1: Manufacturer: syz [ 946.714441][ T9255] usb 3-1: SerialNumber: syz [ 946.746416][T16240] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 946.788493][T16251] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3235'. [ 946.830530][T16251] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3235'. [ 946.846298][T16251] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3235'. [ 946.865699][T16251] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3235'. [ 946.905039][ T6220] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 947.017776][ T9255] cdc_ncm 3-1:1.0: bind() failure [ 947.053547][ T9255] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 947.067420][ T6220] usb 4-1: Using ep0 maxpacket: 32 [ 947.092216][ T6220] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 947.111733][T16258] veth3: entered allmulticast mode [ 947.117455][ T9255] cdc_ncm 3-1:1.1: bind() failure [ 947.126456][ T6220] usb 4-1: can't read configurations, error -22 [ 947.183203][ T9255] usb 3-1: USB disconnect, device number 68 [ 947.924972][ T6220] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 948.115189][ T6220] usb 4-1: Using ep0 maxpacket: 32 [ 948.135978][ T6220] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 948.169835][ T6220] usb 4-1: can't read configurations, error -22 [ 948.182643][ T6220] usb usb4-port1: attempt power cycle [ 949.514821][ T6220] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 949.736371][ T6220] usb 4-1: device descriptor read/8, error -71 [ 950.005857][ T29] audit: type=1107 audit(1737339137.791:220): pid=16278 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 950.690080][T16288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3244'. [ 951.054928][ T29] audit: type=1107 audit(1737339138.931:221): pid=16292 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 951.165625][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3249'. [ 951.217055][T16301] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3249'. [ 951.331105][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3249'. [ 951.764911][ T6220] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 951.817613][ T6220] usb 4-1: config index 0 descriptor too short (expected 61202, got 18) [ 951.834930][ T6220] usb 4-1: config 0 has an invalid interface number: 124 but max is 0 [ 951.843532][ T6220] usb 4-1: config 0 has no interface number 0 [ 951.854027][ T6220] usb 4-1: New USB device found, idVendor=0403, idProduct=f06a, bcdDevice=30.00 [ 951.875176][ T6220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.883258][ T6220] usb 4-1: Product: syz [ 951.895372][ T6220] usb 4-1: Manufacturer: syz [ 951.900496][ T6220] usb 4-1: SerialNumber: syz [ 951.927082][ T6220] usb 4-1: config 0 descriptor?? [ 952.197277][ T6220] ftdi_sio 4-1:0.124: FTDI USB Serial Device converter detected [ 952.214568][ T6220] usb 4-1: Detected FT2232HP [ 952.221050][ T6220] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 952.231451][T16320] 9pnet_fd: Insufficient options for proto=fd [ 952.238182][ T6220] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 952.255945][ T6220] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 952.280015][ T6220] usb 4-1: USB disconnect, device number 68 [ 952.305312][ T6220] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 952.323253][ T6220] ftdi_sio 4-1:0.124: device disconnected [ 953.260071][T16330] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3262'. [ 953.314969][T16334] netlink: 'syz.5.3261': attribute type 5 has an invalid length. [ 953.371374][T16334] : entered promiscuous mode [ 953.486095][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3264'. [ 953.496355][T16337] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3264'. [ 953.505540][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3264'. [ 953.649991][ T29] audit: type=1107 audit(1737339141.531:222): pid=16338 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 1059.144580][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1059.151622][ C0] rcu: 1-...!: (1 GPs behind) idle=57e4/1/0x4000000000000000 softirq=77963/77964 fqs=4 [ 1059.163034][ C0] rcu: (detected by 0, t=10502 jiffies, g=76237, q=306 ncpus=2) [ 1059.170817][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1059.170863][ C1] NMI backtrace for cpu 1 [ 1059.170878][ C1] CPU: 1 UID: 0 PID: 16342 Comm: syz.6.3263 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1059.170900][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1059.170913][ C1] RIP: 0010:_raw_spin_lock+0x2e/0x40 [ 1059.170944][ C1] Code: 53 48 89 fb bf 01 00 00 00 e8 be b6 a9 f5 48 8d 7b 18 31 f6 31 d2 31 c9 41 b8 01 00 00 00 45 31 c9 ff 74 24 08 e8 e2 d6 b6 f5 <48> 83 c4 08 48 89 df 5b e9 55 40 b8 f5 0f 1f 44 00 00 90 90 90 90 [ 1059.170961][ C1] RSP: 0018:ffffc90000a18c58 EFLAGS: 00000046 [ 1059.170979][ C1] RAX: 28e25b429112e500 RBX: ffff8880648db2e8 RCX: ffff88806d3e64d8 [ 1059.170993][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0aaae0 RDI: ffffffff8c5f01e0 [ 1059.171009][ C1] RBP: dffffc0000000000 R08: ffffffff94277a47 R09: 1ffffffff284ef48 [ 1059.171023][ C1] R10: dffffc0000000000 R11: fffffbfff284ef49 R12: 0000000000000000 [ 1059.171037][ C1] R13: ffffffff89c5f140 R14: ffff8880648db340 R15: ffff88806d3e64c8 [ 1059.171052][ C1] FS: 00007f48729d56c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1059.171068][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1059.171082][ C1] CR2: 0000001b2fd1cc00 CR3: 000000005c09e000 CR4: 00000000003526f0 [ 1059.171099][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1059.171111][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1059.171123][ C1] Call Trace: [ 1059.171132][ C1] [ 1059.171142][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1059.171167][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1059.171189][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1059.171211][ C1] ? nmi_handle+0x2a/0x5a0 [ 1059.171239][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1059.171266][ C1] ? nmi_handle+0x14f/0x5a0 [ 1059.171286][ C1] ? nmi_handle+0x2a/0x5a0 [ 1059.171306][ C1] ? _raw_spin_lock+0x2e/0x40 [ 1059.171328][ C1] ? default_do_nmi+0x63/0x160 [ 1059.171349][ C1] ? exc_nmi+0x123/0x1f0 [ 1059.171369][ C1] ? end_repeat_nmi+0xf/0x53 [ 1059.171387][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1059.171414][ C1] ? _raw_spin_lock+0x2e/0x40 [ 1059.171436][ C1] ? _raw_spin_lock+0x2e/0x40 [ 1059.171459][ C1] ? _raw_spin_lock+0x2e/0x40 [ 1059.171481][ C1] [ 1059.171488][ C1] [ 1059.171494][ C1] ? advance_sched+0xab/0xca0 [ 1059.171514][ C1] advance_sched+0xab/0xca0 [ 1059.171536][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1059.171560][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1059.171588][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1059.171610][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 1059.171644][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1059.171672][ C1] ? sched_clock+0x4a/0x70 [ 1059.171698][ C1] ? read_tsc+0x9/0x20 [ 1059.171721][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1059.171745][ C1] hrtimer_interrupt+0x403/0xa40 [ 1059.171782][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1059.171805][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1059.171831][ C1] [ 1059.171837][ C1] [ 1059.171844][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1059.171862][ C1] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 1059.171886][ C1] Code: c9 50 e8 19 ff 0b 00 48 83 c4 08 4c 89 f7 e8 ed 39 00 00 0f 1f 44 00 00 4c 89 f7 e8 00 2b 55 0a e8 3b 81 38 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 1059.171901][ C1] RSP: 0018:ffffc900000d7268 EFLAGS: 00000286 [ 1059.171919][ C1] RAX: 28e25b429112e500 RBX: ffff88806d3e5a00 RCX: ffffffff817b18da [ 1059.171933][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: ffffffff8c5f01e0 [ 1059.171947][ C1] RBP: ffffc900000d72b0 R08: ffffffff9427793f R09: 1ffffffff284ef27 [ 1059.171962][ C1] R10: dffffc0000000000 R11: fffffbfff284ef28 R12: 1ffff110170e7eac [ 1059.171976][ C1] R13: dffffc0000000000 R14: ffff8880b873e740 R15: ffff8880b873f560 [ 1059.171995][ C1] ? mark_lock+0x9a/0x360 [ 1059.172018][ C1] ? finish_task_switch+0x1e5/0x870 [ 1059.172044][ C1] __schedule+0x1803/0x4be0 [ 1059.172081][ C1] ? __pfx___schedule+0x10/0x10 [ 1059.172106][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1059.172140][ C1] ? preempt_schedule+0xe1/0xf0 [ 1059.172163][ C1] preempt_schedule_common+0x84/0xd0 [ 1059.172188][ C1] preempt_schedule+0xe1/0xf0 [ 1059.172211][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 1059.172236][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1059.172257][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1059.172278][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1059.172301][ C1] _raw_spin_unlock_irqrestore+0x130/0x140 [ 1059.172325][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1059.172352][ C1] ? autoremove_wake_function+0x37/0x110 [ 1059.172372][ C1] __wake_up_common_lock+0x18c/0x1e0 [ 1059.172396][ C1] __unix_dgram_recvmsg+0x5f4/0x12f0 [ 1059.172423][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1059.172447][ C1] ? iovec_from_user+0x61/0x240 [ 1059.172475][ C1] ? __import_iovec+0x3a8/0x870 [ 1059.172499][ C1] ? unix_dgram_recvmsg+0xb6/0xe0 [ 1059.172520][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1059.172542][ C1] sock_recvmsg_nosec+0x18e/0x1d0 [ 1059.172571][ C1] ____sys_recvmsg+0x3cd/0x480 [ 1059.172598][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1059.172626][ C1] ? do_recvmmsg+0x44e/0xab0 [ 1059.172647][ C1] ? __might_fault+0xaa/0x120 [ 1059.172678][ C1] do_recvmmsg+0x426/0xab0 [ 1059.172706][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1059.172727][ C1] ? mark_lock+0x9a/0x360 [ 1059.172760][ C1] ? reacquire_held_locks+0x3eb/0x690 [ 1059.172783][ C1] ? vma_end_read+0x18/0x170 [ 1059.172816][ C1] ? __pfx_reacquire_held_locks+0x10/0x10 [ 1059.172855][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 1059.172879][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1059.172902][ C1] ? exc_page_fault+0x590/0x8b0 [ 1059.172928][ C1] ? do_syscall_64+0xb6/0x230 [ 1059.172957][ C1] do_syscall_64+0xf3/0x230 [ 1059.172983][ C1] ? clear_bhb_loop+0x35/0x90 [ 1059.173003][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.173030][ C1] RIP: 0033:0x7f4874b85d29 [ 1059.173048][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1059.173062][ C1] RSP: 002b:00007f48729d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1059.173081][ C1] RAX: ffffffffffffffda RBX: 00007f4874d76080 RCX: 00007f4874b85d29 [ 1059.173095][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1059.173107][ C1] RBP: 00007f4874c01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1059.173120][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1059.173132][ C1] R13: 0000000000000001 R14: 00007f4874d76080 R15: 00007ffd18d6d588 [ 1059.173154][ C1] [ 1059.173853][ C0] rcu: rcu_preempt kthread starved for 10494 jiffies! g76237 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1059.841689][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1059.851699][ C0] rcu: RCU grace-period kthread stack dump: [ 1059.857630][ C0] task:rcu_preempt state:R running task stack:26264 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1059.869432][ C0] Call Trace: [ 1059.872737][ C0] [ 1059.875733][ C0] __schedule+0x17fb/0x4be0 [ 1059.880307][ C0] ? __pfx___schedule+0x10/0x10 [ 1059.885199][ C0] ? __pfx_lock_release+0x10/0x10 [ 1059.890265][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1059.896631][ C0] ? schedule+0x90/0x320 [ 1059.900911][ C0] schedule+0x14b/0x320 [ 1059.905136][ C0] schedule_timeout+0x15a/0x290 [ 1059.910021][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1059.915435][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1059.920763][ C0] ? prepare_to_swait_event+0x330/0x350 [ 1059.926340][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 1059.931218][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1059.936461][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1059.942648][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1059.947957][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1059.953889][ C0] ? finish_swait+0xd4/0x1e0 [ 1059.958507][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 1059.963132][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1059.968358][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1059.974288][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1059.979377][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1059.984623][ C0] kthread+0x2f0/0x390 [ 1059.988735][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1059.993965][ C0] ? __pfx_kthread+0x10/0x10 [ 1059.998582][ C0] ret_from_fork+0x4b/0x80 [ 1060.003065][ C0] ? __pfx_kthread+0x10/0x10 [ 1060.007691][ C0] ret_from_fork_asm+0x1a/0x30 [ 1060.012505][ C0] [ 1060.015541][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1060.021890][ C0] CPU: 0 UID: 0 PID: 14202 Comm: kworker/u8:16 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1060.032931][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1060.043012][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1060.049561][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 1060.055745][ C0] Code: 80 d4 03 00 65 8b 15 00 6d 64 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 <83> fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc [ 1060.075389][ C0] RSP: 0018:ffffc900034776d8 EFLAGS: 00000246 [ 1060.081486][ C0] RAX: ffffffff8193851b RBX: 1ffff110170e88b9 RCX: ffff88805f169e00 [ 1060.089482][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1060.097476][ C0] RBP: ffffc900034778e0 R08: ffffffff819384ea R09: 1ffffffff284ef10 [ 1060.105491][ C0] R10: dffffc0000000000 R11: fffffbfff284ef11 R12: dffffc0000000000 [ 1060.113496][ C0] R13: ffff8880b87445c8 R14: ffff8880b863f940 R15: 0000000000000001 [ 1060.121492][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1060.130445][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1060.137053][ C0] CR2: 000055556dcce808 CR3: 000000000e736000 CR4: 00000000003526f0 [ 1060.145059][ C0] DR0: fffffffffffffffc DR1: 0000000080000000 DR2: 0008000000000001 [ 1060.153072][ C0] DR3: fffffffffffffffc DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1060.161104][ C0] Call Trace: [ 1060.164406][ C0] [ 1060.167279][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1060.173677][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 1060.179372][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1060.185232][ C0] ? seqcount_lockdep_reader_access+0x1c6/0x220 [ 1060.191518][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1060.198160][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1060.204439][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 1060.209849][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1060.215518][ C0] ? acct_account_cputime+0x207/0x210 [ 1060.220951][ C0] ? update_process_times+0x242/0x2f0 [ 1060.226351][ C0] ? tick_nohz_handler+0x37c/0x500 [ 1060.231502][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1060.236992][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 1060.242410][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1060.248158][ C0] ? handle_softirqs+0x7e0/0x9b0 [ 1060.253143][ C0] ? read_tsc+0x9/0x20 [ 1060.257256][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1060.263356][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 1060.268525][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 1060.274719][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1060.280573][ C0] [ 1060.283524][ C0] [ 1060.286480][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1060.292668][ C0] ? smp_call_function_many_cond+0x19da/0x2c60 [ 1060.298859][ C0] ? smp_call_function_many_cond+0x1a0b/0x2c60 [ 1060.305050][ C0] ? __sanitizer_cov_trace_pc+0x37/0x70 [ 1060.310638][ C0] smp_call_function_many_cond+0x1a0b/0x2c60 [ 1060.316659][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1060.321728][ C0] ? __pfx___text_poke+0x10/0x10 [ 1060.326695][ C0] ? process_scheduled_works+0x976/0x1840 [ 1060.332451][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1060.338811][ C0] ? __pfx___might_resched+0x10/0x10 [ 1060.344135][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1060.350084][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1060.355147][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1060.360307][ C0] text_poke_bp_batch+0x352/0xb30 [ 1060.365376][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1060.371396][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 1060.377597][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1060.383182][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 1060.389464][ C0] ? process_scheduled_works+0x976/0x1840 [ 1060.395225][ C0] text_poke_finish+0x30/0x50 [ 1060.399936][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1060.405972][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 1060.411935][ C0] static_key_enable+0x1a/0x20 [ 1060.416747][ C0] toggle_allocation_gate+0xbc/0x260 [ 1060.422070][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1060.428042][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1060.434442][ C0] process_scheduled_works+0xa66/0x1840 [ 1060.440086][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1060.446115][ C0] ? assign_work+0x364/0x3d0 [ 1060.450750][ C0] worker_thread+0x870/0xd30 [ 1060.455384][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1060.460459][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1060.465600][ C0] kthread+0x2f0/0x390 [ 1060.469693][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1060.474828][ C0] ? __pfx_kthread+0x10/0x10 [ 1060.479450][ C0] ret_from_fork+0x4b/0x80 [ 1060.483884][ C0] ? __pfx_kthread+0x10/0x10 [ 1060.488499][ C0] ret_from_fork_asm+0x1a/0x30 [ 1060.493319][ C0]