last executing test programs: 2m52.807195467s ago: executing program 1 (id=449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 2m51.098718321s ago: executing program 1 (id=453): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x48084) 2m49.712385659s ago: executing program 1 (id=456): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000000)=0x6, 0x4) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x3, 0x3}, {0x8, 0x2}, {0x5, 0x3}, {0x10, 0x2}, {0x7, 0x1}, {0xf, 0x5}, {0x5, 0x3}, {0x7fffffff, 0x1}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x2}, @var={0x10, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000100)=""/83, 0x83, 0x53, 0x1, 0x4, 0x10000, @value=r0}, 0x28) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000200)={0x0, 0xb}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x6, 0x8004, 0x0, 0x7d, 0x0}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000002c0)={0xfffa, 0x4, 0x4, 0xd, 0x1, 0x9, 0x9, 0x6, r2}, 0x20) recvmmsg(r1, &(0x7f0000004580)=[{{&(0x7f0000000300)=@l2, 0x80, &(0x7f0000001440)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/189, 0xbd}], 0x2, &(0x7f0000001480)}}, {{&(0x7f00000014c0)=@isdn, 0x80, &(0x7f0000001640)=[{&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000001580)=""/129, 0x81}], 0x2, &(0x7f0000001680)=""/20, 0x14}, 0x4}, {{&(0x7f00000016c0)=@hci, 0x80, &(0x7f0000001940)=[{&(0x7f0000001740)=""/248, 0xf8}, {&(0x7f0000001840)=""/244, 0xf4}], 0x2}}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/87, 0x57}, {&(0x7f0000002a00)=""/217, 0xd9}, {&(0x7f0000002b00)=""/74, 0x4a}, {&(0x7f0000002b80)=""/104, 0x68}], 0x5, &(0x7f0000002c80)=""/136, 0x88}, 0x6}, {{&(0x7f0000002d40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002dc0)=""/39, 0x27}, {&(0x7f0000002e00)=""/143, 0x8f}, {&(0x7f0000002ec0)=""/159, 0x9f}], 0x3, &(0x7f0000002fc0)=""/55, 0x37}, 0x5}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003000)=""/230, 0xe6}, {&(0x7f0000003100)=""/174, 0xae}, {&(0x7f00000031c0)=""/8, 0x8}, {&(0x7f0000003200)=""/12, 0xc}, {&(0x7f0000003240)=""/4096, 0x1000}], 0x5}, 0x5}, {{&(0x7f00000042c0)=@qipcrtr, 0x80, &(0x7f0000004540)=[{&(0x7f0000004340)=""/42, 0x2a}, {&(0x7f0000004380)=""/156, 0x9c}, {&(0x7f0000004440)=""/231, 0xe7}], 0x3}, 0x8}], 0x7, 0x0, &(0x7f0000004740)={0x77359400}) r4 = accept4$vsock_stream(r3, &(0x7f0000004780)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x0) r5 = accept4$vsock_stream(r4, &(0x7f00000047c0)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000004840), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000004900)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000048c0)={&(0x7f0000004880)={0x14, r7, 0x100, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004891}, 0x4000) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000004980)={0x2, "384ff930765695a734cbd963e14e1087749476898d7acf72d1323be9ab406ecb", 0x1, 0x6, 0x8855200, 0x10, 0x4}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r9, 0x2000) r10 = memfd_secret(0x0) open$dir(&(0x7f0000004a00)='./file0\x00', 0x210000, 0xc0) r11 = syz_open_dev$MSR(&(0x7f0000004a40), 0x92bd, 0x0) copy_file_range(r0, &(0x7f0000004a80)=0xfffffffffffffffd, r3, &(0x7f0000004ac0)=0x9f7, 0x8, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f0000004d80)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004d40)={&(0x7f0000004b40)={0x1e4, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17ee0fb7}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4572387}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dd706f2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ab31df8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x7c, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x743afb57}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76a6aa81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56e063b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69ffca22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3400b2dd}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13d1ea20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x758e69e9}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xe8, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaec6}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6206f3d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50829353}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41926b89}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65f92e86}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a0736e3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb059}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21cfa11c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6095}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdbb3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d47}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1862263a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa23d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6de2b583}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d35c617}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x665771d0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a0fb48d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3daf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7905804c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbebe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf313}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf365}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x256c}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8000}, 0x20044004) ioctl$TUNDETACHFILTER(r10, 0x401054d6, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r11, 0xd000941e, &(0x7f0000004dc0)={0x0, "90da319079410940c8bdf98527a05713"}) ioctl$BTRFS_IOC_DEV_REPLACE(r10, 0xca289435, &(0x7f0000005dc0)={0x1, 0xfffffffffffffffc, @start={r12, 0x1, "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", "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"}, [0x8, 0x7fff, 0x8, 0x1, 0x8, 0x1, 0x80000000, 0x6, 0x0, 0x6, 0x9, 0x100000001, 0xff, 0x5, 0x3, 0x6, 0x4, 0x6, 0x4, 0x8, 0x1, 0x7, 0x10, 0x6, 0x2, 0x9, 0x4, 0x3, 0x6, 0x5, 0x5, 0x8, 0xdc, 0xe, 0x0, 0xe5, 0x429, 0x5, 0x3ea, 0x8, 0x6, 0x4, 0xce1, 0x81, 0xd, 0xffffffff, 0x10, 0x8, 0x6, 0xad, 0x8000, 0x0, 0x0, 0x3, 0x9, 0x9, 0x10000, 0x94a6, 0x5, 0x4, 0x5, 0x10, 0x0, 0xd]}) setsockopt$sock_int(r5, 0x1, 0xa, &(0x7f0000006800)=0x1, 0x4) landlock_create_ruleset(&(0x7f0000006840)={0x1800, 0x1, 0x3}, 0x18, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000006880)={r2, 0x200, 0x400, 0xfffffff9, 0x10001, 0x3}, &(0x7f00000068c0)=0x14) ioctl$sock_netdev_private(r3, 0x89f5, &(0x7f0000006900)="f0fb05cef02e9e16ff400d8bf4e59a329514fe23ea45126ea6c965ffdd8ac6c62f7d5a120604a25c1664bc9d3051c1cf48003cfead9261bee16cb0138902d05c5b5f1c56d3730fb10b0ad998a955c5affaf66e626e80f7f15d7a2139d4ee51077e621ffe3862b1d095c43a25d1dc86c3862580454528d56195b6ec50b51f46c6b0d25000386635fae28fc8749fffb73c12374cc01105559c53f74e716cd6e1b4b83b6ae6a04eb6dc0e724ed4256402b723ccf8d18434ba8ab302b690") bpf$BPF_PROG_QUERY(0x10, &(0x7f0000006ac0)={@map=r10, 0x14, 0x1, 0x2, &(0x7f00000069c0)=[0x0], 0x1, 0x0, &(0x7f0000006a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000006a40), &(0x7f0000006a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 2m47.139287325s ago: executing program 1 (id=460): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0xffffffffffffff3f) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000024c0)=[{{&(0x7f0000000240)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/103, 0x67}, {&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000000)=""/10, 0xa}, {&(0x7f0000000700)=""/160, 0xa0}, {&(0x7f0000000380)=""/47, 0x2f}], 0x6, &(0x7f00000009c0)=""/11, 0xb}, 0xfffffffc}, {{&(0x7f0000000a00)=@ethernet={0x0, @local}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000a80)=""/177, 0xb1}, {&(0x7f0000002640)=""/4112, 0x1010}, {&(0x7f0000001b40)=""/128, 0x80}, {&(0x7f0000001bc0)=""/117, 0x75}], 0x4}, 0x7}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000500)=""/210, 0xd2}, {&(0x7f0000001d80)=""/106, 0x6a}, {&(0x7f0000001e00)=""/52, 0x34}, {&(0x7f0000001e40)=""/17, 0x11}, {&(0x7f0000001e80)=""/56, 0x38}, {&(0x7f0000001ec0)=""/238, 0xee}], 0x6, &(0x7f0000002040)=""/66, 0x42}, 0x175e}, {{&(0x7f00000020c0)=@hci, 0x80, &(0x7f00000021c0), 0x0, &(0x7f0000002600)=""/21, 0x15}, 0x6}, {{&(0x7f0000002240)=@nfc, 0x80, &(0x7f0000000840)=[{&(0x7f00000022c0)=""/157, 0x9d}, {&(0x7f00000008c0)=""/67, 0x43}], 0x2, &(0x7f00000023c0)=""/229, 0xe5}}], 0x5, 0x10022, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x48100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000880)={0x0, 0x1d, 0x2, "afb6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r4, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000880)={0x0, 0x1d, 0x2, "afb6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x891c, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x891c, 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_procfs(r0, &(0x7f0000000040)='net/snmp\x00') pread64(r6, &(0x7f0000000300)=""/86, 0x56, 0x4000000000000f3) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x3fff, 0x9, @loopback, 0xd}, 0x1c) (async) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x3fff, 0x9, @loopback, 0xd}, 0x1c) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES8=r2], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) (async) syz_usb_control_io$hid(r8, 0x0, 0x0) 2m46.076881762s ago: executing program 1 (id=463): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$packet(0x11, 0x0, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) r2 = socket(0x1e, 0x1, 0x0) dup(r2) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, r6}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001580)={0x1, 0x58, &(0x7f0000001500)}, 0x10) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000014c0)=[{0x0}], 0x1, &(0x7f0000001840)}}], 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000500000000060015000200000014001680100008800c"], 0x38}}, 0x0) 2m44.630988472s ago: executing program 1 (id=464): r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() sync() sync() sync() sync() ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xb}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x10, "e9b8575487bc15ec6b8ff30d1ebacc996533decbd418e5a79d7d0f5945db8333", 0x2, 0x100, 0x9, 0x10001, 0x2, 0x0, 0x3, 0x2}) 2m28.360069949s ago: executing program 32 (id=464): r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() sync() sync() sync() sync() ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xb}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x10, "e9b8575487bc15ec6b8ff30d1ebacc996533decbd418e5a79d7d0f5945db8333", 0x2, 0x100, 0x9, 0x10001, 0x2, 0x0, 0x3, 0x2}) 17.081492374s ago: executing program 5 (id=783): bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xac57a000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) write$vga_arbiter(r1, &(0x7f0000000240)=@target={'target ', {'PCI:', 'c', ':', '1b', ':', '12', '.', '1a'}}, 0x16) 14.260223671s ago: executing program 3 (id=785): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x660202, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x10001, 0x2, 0x5000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r1 = socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x1b5) socket$inet6(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0xfe18}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 12.839123734s ago: executing program 3 (id=787): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f00000000c0)=[0x2, 0x8001]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-avx2\x00'}}) 11.679542321s ago: executing program 5 (id=789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010016000000ed262a58cd34fa0fa52758add59942b730e549a8c16f8387107569f5cffebdcf4f6da0c0c24a5b536dc64c7a5310e7920aa03993a294c611fc9b1bd087fa177c01f6c2cfa38d5621bf7eecb09436f16c9adce2b9ca49a5f9f5c641e8dfdaa3246292bed06baee97c5840142c88ddc613627e"], 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x24, r3, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x6e}}}}, [@NL80211_PMSR_ATTR_PEERS={0x4, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004090}, 0x884) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000014000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r6, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48000}, 0x40001) 9.334422747s ago: executing program 0 (id=794): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f0000000000)={0x1}) r3 = dup(r1) syz_open_dev$radio(&(0x7f0000000140), 0x1, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffff00000000000086dd60ed00000030cb6208fa1eba1947b6c094103afffec00000003200000040003f00000200bbff02000000000000000000007c051000000001860090"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) epoll_wait(r3, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x3) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x181480, 0x0) readahead(r5, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x58, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048848}, 0x20004000) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0xc92) 8.231976262s ago: executing program 0 (id=796): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002abd7000fedbdf25040000000c000400060000000600000005000600a30000000800020005000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x183) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x8a3, 0x2, 0x3}, 0x30, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x1, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00') setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000500)=[{0x3, 0x1, {0x2, 0x1, 0x3}, {0x1, 0x0, 0x4}, 0xfd, 0xfd}, {0x2, 0x3, {0x2, 0xff, 0x2}, {0x1, 0x0, 0x8}, 0xfe, 0x2}, {0x3, 0x0, {0x1, 0xe}, {0x0, 0xf, 0x4}, 0xfe, 0x1}], 0x60) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r6, &(0x7f0000000a40)=[{&(0x7f0000000200)="bbd4ddcc3cb0edc7dc70ef4734a011400b1ce4", 0x13}], 0x1) 8.117735603s ago: executing program 2 (id=798): r0 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000190c0)=ANY=[@ANYBLOB="f61f105c92c0c6b065f5a071f3a4c0ca1000000004000008000000050000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000019080)=ANY=[@ANYBLOB="180000000000efffffff00000000000018110000", @ANYRES64=r2, @ANYRESHEX=r0], &(0x7f0000019240)='GPL\x00', 0x0, 0x2a, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x2c, &(0x7f0000019380)=ANY=[@ANYRES32=r3, @ANYRESOCT, @ANYBLOB="00000000c0ffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000181b0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYRESHEX=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa2000000000039148704b09479dfd4b01ed70007020000f8ffffffb703000008000000b704004002000000850000008200000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000580)='GPL\x00', 0x7, 0x44, &(0x7f0000019180)=""/68, 0x41000, 0xb, '\x00', 0x0, 0x1a, r5, 0x8, &(0x7f0000000600)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000019200)={0x2, 0xb, 0x10001, 0x1}, 0x10, 0x1ce6e, r1, 0x3, &(0x7f0000000740)=[r0, r1], &(0x7f0000000780)=[{0x2, 0x2, 0x3, 0x7}, {0x2, 0x3, 0xc, 0x8}, {0x0, 0x1, 0x6, 0x2}], 0x10, 0x8, @void, @value}, 0x94) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r7, 0x1, 0x42, 0x0, &(0x7f0000000300)=0x2d) socket$nl_netfilter(0x10, 0x3, 0xc) fspick(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000240)={0x1e}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmsg$IPSET_CMD_HEADER(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40060404}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000c69825b5e4829040101000000000700000002090000"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4) ioctl$int_in(r8, 0x5452, &(0x7f0000001840)=0x5d4) write$P9_RLOPEN(r8, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x1, 0x4, 0x7}, 0x3}}, 0x18) fcntl$getownex(r8, 0x10, &(0x7f0000000280)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x3, r10, 0x2, &(0x7f0000000340)) 7.892702142s ago: executing program 0 (id=799): bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xac57a000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) write$vga_arbiter(r1, &(0x7f0000000240)=@target={'target ', {'PCI:', 'c', ':', '1b', ':', '12', '.', '1a'}}, 0x16) 6.598575338s ago: executing program 0 (id=800): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x0, 0x0}}, 0xfc36) syz_usb_connect$uac1(0x3, 0xa7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x100000001, 0x4, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0) 6.503123677s ago: executing program 4 (id=801): r0 = socket(0x2, 0x3, 0x6) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) unshare(0x400) connect$netlink(r0, &(0x7f0000000040)=@unspec, 0xc) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @random="ffffffff00", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0100", 0x8, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], {0x4e24, 0x0, 0x8}}}}}}, 0x0) socket(0x2, 0x3, 0x6) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) (async) unshare(0x400) (async) connect$netlink(r0, &(0x7f0000000040)=@unspec, 0xc) (async) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @random="ffffffff00", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0100", 0x8, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], {0x4e24, 0x0, 0x8}}}}}}, 0x0) (async) 6.37568882s ago: executing program 2 (id=802): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'batadv_slave_1\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000012c0)=@generic={&(0x7f0000001280)='./file0\x00'}, 0x18) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001300), 0x5285f98f3900b2f2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001340)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x6}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x10000, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x37, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000013c0)=[0x1, r3, r4, r5, 0xffffffffffffffff, r6], &(0x7f0000001400)=[{0x5, 0x4, 0x0, 0x4}, {0x3, 0x4, 0xc, 0x2}, {0x4, 0x1, 0x6, 0x4}, {0x5, 0x3, 0xd, 0x5}, {0x1, 0x1, 0xd, 0xb}, {0x5, 0x3, 0x4, 0x2}, {0x4, 0x3, 0xb}, {0x0, 0x1, 0x3, 0x6}, {0x0, 0x5, 0x4, 0x1}], 0x10, 0x939, @void, @value}, 0x94) mount(&(0x7f0000001580)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)='virtiofs\x00', 0x2000000, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000001640)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0xc0, 0xaf, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x8, 0x9}}}}}]}}]}}, &(0x7f0000001a00)={0xa, &(0x7f0000001680)={0xa, 0x6, 0x310, 0x9, 0x99, 0x3, 0x4430a62e33d69694, 0xfc}, 0x17, &(0x7f00000016c0)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0xb, 0x8, 0x1000}, @wireless={0xb, 0x10, 0x1, 0x0, 0x38, 0x4, 0x73, 0x2, 0x7b}]}, 0x6, [{0xa4, &(0x7f0000001700)=@string={0xa4, 0x3, "0455fb02468b5ef79dd2d0818fe758873ad67b545be0e371db79e1e53cad62895630f4e66cf11cd0288df5728311902bb08ba4ccde30b2c3462ba0ba056d74acceec30134a0dcc4b27d6b298cf94e8c576023aad580049c692c6e9d3be032e79d709e7abd2e588652c6c42867c3e99b0b8df47a062ae248d466a86461a2e5059d1a78a5b2e6db912cac35c02154149993adbc53ba854d4b843ee66e48a7a59996d89"}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x43f}}, {0xcb, &(0x7f0000001800)=@string={0xcb, 0x3, "b0253aa511b52e2ccbe6429a3a1267a20bda84a669333115431c7eec485d4b708102c8e3dad52bdd62296f94966964d5d07dc22d09930181a4ee5b3b53cf2e5dfa66d1b85e73ac9ab6d8f34069da9cbb684ccd1ef2e36aa65a56c291ecc412344d7ffb6d0b714c990f434a46d6597bdf20cc50132f4f59de36e856f8bdda162fc2b299a833ceaa8d13f1a262fed36bed341cabbdf20509809a9d5300cc9c4bdea4b30f10b6d400619c147f91949ecddc2f7af65bbe971e9deeaedc639bd2ae2247a421bc40dde491a5"}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x100a}}, {0x1a, &(0x7f0000001940)=@string={0x1a, 0x3, "19dddbd7486fe8565745b8ff93f1a6e274307d43e1a1d1e7"}}, {0x52, &(0x7f0000001980)=@string={0x52, 0x3, "b62db5a39e6611dbc9a137e2cf99bfac7a0c3e81ddb6fe0fc5dd1eb1738348c4931ab835680f080b27e5df2c8e06dd0e78c3ea974d221ec1993073b60bb8178ff9a9379541864d2445f25de0c991269d"}}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x4, '\x00', r2, r5, 0x1, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) write$dsp(r5, &(0x7f0000001b00)="4bcf3adc676e12ac425b0b1dacb2dbf49650b6a01b08d5c74c678824fab4260fe225b8640bb81b8bbf93b15162152eb434b6b4ccd612f3ff805f8a5645810e5c84d0fa51b0264ad5ad76c18b684657d6322a775fa4e5bb0b890cb514f7124a267440c09213887b8a0f2dc8a799c9a2515bbf2c30f051f6665aa15c6720b68d9ded265216262cb09c8675f14a6138f0c1e1744bf900", 0x95) syz_usb_connect(0x6, 0xac, &(0x7f0000001bc0)={{0x12, 0x1, 0x110, 0xea, 0x1f, 0xaa, 0x8, 0x93c, 0x701, 0xd1fa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x2, 0x2, 0x0, 0xa0, 0xaa, [{{0x9, 0x4, 0x34, 0x4d, 0x3, 0xc, 0xf9, 0x7e, 0x8d, [], [{{0x9, 0x5, 0x6, 0x10, 0x8, 0x1, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x7ff}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x16, 0x3d, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x8f98}, @generic={0x44, 0xe, "cb511aeac80feee4153705f839cfd8d4410fe292f30abd553685e8c61e27d9ef88b57365d6dbad142c16f0c6941e723c26d54bbe9bf2365d31a8bb95c78c2b1ab08e"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x6, 0x55, 0xe}}]}}, {{0x9, 0x4, 0xf7, 0x2, 0x1, 0x2d, 0xc3, 0xd, 0x8, [@hid_hid={0x9, 0x21, 0x1ff, 0x1, 0x1, {0x22, 0x7}}], [{{0x9, 0x5, 0xb, 0x0, 0x3bda5a23afeab137, 0x8, 0x5, 0x9}}]}}]}}]}}, &(0x7f0000002040)={0xa, &(0x7f0000001c80)={0xa, 0x6, 0x110, 0x7, 0x80, 0x1, 0x8, 0x3}, 0x19, &(0x7f0000001cc0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "a73c89f898b251f1fc9f49fae09c3107"}]}, 0x6, [{0x19, &(0x7f0000001d00)=@string={0x19, 0x3, "3bc7cadcaa7e03723975b2bd31010736d752d21491e75c"}}, {0x9d, &(0x7f0000001d40)=@string={0x9d, 0x3, "50e02172731bd989801ef1fcbb0e6f44a08e4a79472b5da53b6093b93de06bccf811500d75fe0c190014174b92e73620e22ae8d8df44e67ce6675f46167c468afa4f545f6ade86d9dcbecf2919c93c65012a35203dfb7227d9a29b748146895c32d33c5d15b90a1429b44b41555e5b6d0b8b4dc9e4459cb2cf6c81d98105ea1cb2eda8102b069b69076160f6f96d990e09952d394344a3c4a73c77"}}, {0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x81a}}, {0xd8, &(0x7f0000001e80)=@string={0xd8, 0x3, "d882a537534803e92b394ad526a4aafcfa87d55af4661a7078b2511fba03eab4f9be84ed7092ea1d056f5ad1ff3451a3ba8a7ee9077a6bee1927e14bf4a6fa8d2b534864cfdf7e082e4c540289216994c1b6a6eb141f4ce1afa654bdb482af6eb285d88c0067c19c5e54653a21ede6f6479ce8bea62a17397b1e6980ed6d9aa8bba5b870244101f2ea026a79c5b1e890132d64db2ac8ce1d6acd5dcf732f2e1bd4495795bb043caad8f4c686de17fedf736afa6304f9123c810a6c95a632d77c0e44f9f263370442bf888f8a27ee698b715dd1206c3c"}}, {0x8d, &(0x7f0000001f80)=@string={0x8d, 0x3, "07730fdf3692d747b5353c45b72948df84c3d9bd135c2373468cbe44cb2e3aee0d20f378cc61f0fbd3e05df2b445fd4bb72bd1cf0c15c0d8e148c09288ea381e504a39edf9f5d2dfdf662fa7ed4cdcd861b131356a69623273259420ca66895a15e22a8eb4a02edff374f19a16fa12a61645787552855817565c7bea6a99b07e70f7bcb74f6ac7875b2c52"}}]}) r7 = add_key$keyring(&(0x7f00000021c0), &(0x7f0000002200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key$fscrypt_v1(&(0x7f00000020c0), &(0x7f0000002100)={'fscrypt:', @desc2}, &(0x7f0000002140)={0x0, "7aee3f828985bfb8311e949522803f349a109727b78276ff05b2f563537b282a2babeb0bde9c6806ddb33b63a6c115349ab27d9be2ae52298d5312d8da6bb56b", 0x1f}, 0x48, r7) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000002280), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x3c, r9, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) lstat(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$get_persistent(0x16, r10, 0xfffffffffffffffb) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f00000025c0)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x48, r11, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x364ad0d6, 0x13}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x800) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002600), 0x4000, 0x0) connect$unix(r1, &(0x7f0000002640)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x6, &(0x7f00000026c0)=0x40) keyctl$search(0xa, r8, &(0x7f0000002700)='keyring\x00', &(0x7f0000002740)={'syz', 0x3}, 0xffffffffffffffff) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000002780), 0x2, 0x0) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002800), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x220002c0}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x34, r13, 0xc0c, 0x7, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x95}, 0x24000040) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x64, r9, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9e6a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffaa0d}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20000081) 5.744854894s ago: executing program 4 (id=803): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$caif_seqpacket(0x25, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) read$usbfs(r6, 0x0, 0x0) write$tun(r6, &(0x7f0000000400)=ANY=[], 0xa2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1001}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c5e9abdb17bd8f26356887bcd2f78aeec77d079ed499cf32e3ac447e64f4dd0cbc510a7bc28fdd1a11905e4318e1db9ed93fbdf59ce2710d9ae7be87f82c647d98c6501b596665000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='sched_switch\x00', r7, 0x0, 0xed}, 0x18) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)) sendmsg$inet(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001540)=[{}, {&(0x7f0000000300)="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", 0xca5}, {&(0x7f0000001300)="bcd1c0823335e95477b992142fcbd665274a5107ad3de2378186a6e38e9b632341ce2c140ca8df219133767670a0015a9b75771ca3bd01b88a4ff30e11c66611d7a2dfc2ab2b3cbd0a2ed97997292d276fa735b36bb96779b8a39c06d940ecbd0e5921f57dfff52fda5a47ce6c8223b9bcb4426b3c2d8c39cb23001f7de518ba466028c7f9696e75b2e3ec6170660f867058fe620c91b1b0ab8655fb94", 0x9d}, {&(0x7f00000013c0)}, {&(0x7f0000001480)="f10c315d3914e8422bc9b81e2ce663e825ddf9b8509c660aa68a7267a67c123096f1f80fbb003db28abe73598033d6bcdbd8ecb6e1863a5adab497ecf6a763dc81f5e496859b9f25435dd454a13ab6b51edbc0db", 0x54}, {0x0}], 0x6}, 0x4000000) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f0000000280000012949a798ef6d06619fd04e5c365e322fe67116028fa3e280f5c19", 0x47}, {0x0}], 0x2}, 0x400c040) 5.744009047s ago: executing program 5 (id=804): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)=0x1) pselect6(0x0, 0x0, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000190001000000000000000000802000000004000500000000080001007f0000"], 0x2c}}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = syz_io_uring_setup(0xee9, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0x7}, &(0x7f00000011c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23456}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 4.722718104s ago: executing program 4 (id=805): lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x0, 0x1, 0xd, 0x2, 0xf4, "7c324df1821ec7824121dfa1bba2c41c76c14f9654b4aeb035d939913928d430ed8db31de0a1dde78fa981c0e9ac0aa6882949c16d650fd67b1235e90d21b9e7f4c23b0e097c19af9dc67337f47c45a2c44a6203187aac81c40ca3540cb3a4a81e27f15112c3772b818e8ae3be33a226be5ff2c18ff2f03ae90afc92288712509c9e6f9f3d23cbb17087236d9aa60f03623ca73e0a71637d621dca8305fbc63ac965caf6cfae261f138165e629a3f8038b2014a4359a50273e2b32e63d2d7d82df0b1bee37882fd4b4af8010b5de8751732e628cc03928f385c7eb616bc5b59194697f68b29da839239256023bfd902f433b1ebd"}, 0xfd, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in6=@private2}}, &(0x7f00000002c0)=0xe8) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, r0, &(0x7f0000000300)='./file0/file0\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r1, 0x3, &(0x7f0000002380)=0x5) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000023c0)={0x7, 'wlan1\x00', {0x9}, 0x2}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000002400)=0xffffffffffffffff, 0x4) mknod$loop(&(0x7f0000002440)='./file0/file0\x00', 0x8, 0x1) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000002480), 0x80000) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000002500)={0x7, 0x20, '\x00', 0x0, &(0x7f00000024c0)=[0x0, 0x0, 0x0, 0x0]}) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000026c0)={&(0x7f00000025c0)={0xe0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x43, 0xa8, @random="5087672bdba1323a07a17241389c8225361eb85cbbf6403815e50c683564803d93be4fcb2654a32f9c97e641c6599aeeea8f64fe4bf356d62577db5aaa7502"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002740)='./file0\x00', 0x40040, 0x38) timer_create(0x7, &(0x7f0000002840)={0x0, 0x24, 0x2, @thr={0x0, &(0x7f0000002800)="aeeffc5986"}}, &(0x7f0000002880)) sendmmsg$sock(r2, &(0x7f0000003cc0)=[{{&(0x7f00000028c0)=@caif=@util={0x25, "9f855eef43c336fab09ed0b5a77bbff1"}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002a80)="e53b6f159fc39887f55ed1ded12cee7d30544e093ce6d0301642cdbe4b9e02dea504595d8d183bcdc0e28a5330cf18ab930fa2080ff8b3", 0x37}, {&(0x7f0000002b00)}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000031c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e23, 0x2}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003240)="ccc4ff980f90eec0526887c5ae6d62aef0f6ca250f5d2e14d10c01d964f7296c5f4823f0fd718a2d5a9c5232ade5c6ad9a0b7b7a6fdfe9102aebf214fe6d2aec550cdf0fdd65268af69a9f4e884ea9c70a66f8e4dc68ea02fcb4d227093ba33d08ac4e9bb7d2f9f6b59197aacc61d6f9857f4db084", 0x75}, {&(0x7f00000032c0)="6c573525fa6220ac0a9458fdb1d83e0a44b191750ae135b1fd269289f585547410b971bafdbed4242fc8b8090cf73a04df4cac78eb79c03421470d1db2a49a53b7059fc438bacaaf987d86a7ee4a3154f041e74b387948f094d934cb6325f6ea16143adb753ded23fceaaabd04fd631e3fb2fc93a567b985ad33e26fce8102dcb4", 0x81}, {&(0x7f0000003380)="fdb39f6573426a79ea46456f3be2f630184e60896b34ecb03a258f57cc9471e873bcebb9265a6bd7418781c5a1578305962847a22a3886aed310bb8d1b286eeb7f9b3352a3bce396a2f62491693e551861f31e4e33fa1dd8ececa9088a0cdeab687de3554ed34f9d3ee8eb8c32fc0960ae80f405dd0df297ff357e127b4f76b550cc4626d28618bab89e0c8895c8db63e071d0b4eb7163a099c2cf79c4543961b7362991fc61093033fd98dab54b365632b61ae412d85a229bd4e93a521f6cb7e5b27c387ffb2467890dafd8e3df8592", 0xd0}, {&(0x7f0000003580)="18bcab01b8cdaba88f318e1c2f18057ff5b88dc48e233347e3939520e01560ac6f34dc9a8e0d540c08cb314811589fdeda62aa96574cca5629", 0x39}, {&(0x7f00000035c0)="322a35a7a6797e2d0eff4059f8bcaeb15f27f2dc13d4be5027097f041d0d59a08c379aa67642788c7dc2f032fdbf880acdeb957697df243c9eb59706606143ceaaed77d4b0c27d9750d400b9a39be9c0d649e9d324793a5317cb04c82d11f07916a8cabfa606f9d41f00e3cd52f8327a90e2fa46490484532db7f139e67c329e141c386c969f7a188cd3afd201c4177e001db901bfce691d9e15e5a47ebd331974c9a03ecdef5a9121dea36d2dafc9d7d2f20f0b4093b64c07469285ce84aa32", 0xc0}], 0x5, &(0x7f0000003700)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffb}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x70a4}}, @txtime={{0x18, 0x1, 0x3d, 0x93}}], 0xf0}}, {{&(0x7f0000003800)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, &(0x7f0000003a00)=[{0x0}, {0x0}, {&(0x7f0000003980)="146f663a31804114cd89582106f7d12dabc2e44ef14fec2d43b733c98d567921bd19dc2678e0cdbdcd427ed7a60a36346f06873fa88a17d91de3c463fcf5b1636aa9d8fad705256accd4dbf6fbf6c5c4a99665af424a", 0x56}], 0x3, &(0x7f0000003a40)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x564b1d37}}], 0x30}}, {{&(0x7f0000003a80)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b00)="03c83d0f175e0279ecc00dc1a89dea986efa5121e0c24f5698e158b6c9a02c4bc6aa32bced257de877632b1b07bf2a274ae822d66cf4517ecec906d4cb6bc45643c5377b50a2441f10f9171705e1170d41aa3099e4c8ccd90880a9b20c10f3bb95ae4329c21536078e7fd9c74ca80bfa6fa9825e047a553b1de5ebc92d5bc094ba56398b0a2468545f9ed49cdf74c766fc830076c4152a4c73ce7126099a9ddf29b32dd7de3a1046f64b00b13e4ce10d0be6246178572e4c13cd251cb92f2dd40460c74c5b50", 0xc6}], 0x1, &(0x7f0000003c40)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xdc}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x60}}], 0x5, 0x20048091) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004040)={&(0x7f0000003ec0)={0x164, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfffb}, @NL80211_ATTR_FILS_ERP_REALM={0xfb, 0xfa, "3004ea4755eea5b55e89cb5ad23151e5eaedc5d44597017f47ea97c6e1391c9ce070ddf2ccdf83c7d4c022016148c6ad64465b25655294cf20c5611791aee818bba6c217f36c3d239218f193f6fc89203192d4a9edb9179b93a330d29822f79ead3076d31554b722fb500f0b44f55e9ccd513693753e1a64e2c56cb3746ea662dc067f8239156725963ca9148e7c9f9b4f55ed5015d8b4250d7918f7b40aadeea87fe73dd52b5dd313498bf1c8b26b0ac568e7a6ccc0af8f3afd76a002af6015f4d76d0fd3e6e7d046f4f4f272c8abddecb22d5cdd84338aaa2bcfbcb973a76800268a7b3a98c6be11509092edd1d4be27becd578cae06"}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9000}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "1a33a9"}], @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x164}, 0x1, 0x0, 0x0, 0x14}, 0x4090) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000004180)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004140)={&(0x7f0000004100)={0x10, 0x3f8, 0x400, 0x70bd27, 0xfffffc00, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x40000) prlimit64(r1, 0x4, &(0x7f00000041c0)={0xf, 0x40}, &(0x7f0000004200)) pwritev2(0xffffffffffffffff, &(0x7f0000004340)=[{&(0x7f0000004240)="d5556e856e46dfa6a4388c1f0a5db47eff9413db093d1e2a45463663043fd402d8bfd9795833640c2c9f1524830ce5b0756b06af8de952c28ce20bf689b656429e26d8522f83af5547bdc964e1885c46d587f7fd72a5321bad451c2a09d00eae0a413779c02da53678256a87b9233e8b13772fe29b8056cea13ea2907080c9f8fbf343d61c6ab6ff2499f00bf1a21b4dcb762f3200e01020d6feae633d01caba68dd5f43fda36eb30cbd951ead696338183c3aacdaa99301cecbe982c597442ebf3a41ee94335ee3c2588ea6bc98629edb3a2a5dc4800987a5f2a10a91ec754fdba987750e06", 0xe6}], 0x1, 0xa495, 0xfb, 0x1) statx(r3, &(0x7f00000043c0)='./file0/file0\x00', 0x1000, 0x200, &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000004380)=@nbd={'/dev/nbd', 0x0}, r6, &(0x7f0000004500)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000004580)={0x5, &(0x7f0000004540)=[{0x9, 0x6, 0x80, 0x5}, {0x7fff, 0xfe, 0x9, 0x3}, {0x4, 0xa, 0x3, 0x7}, {0x9, 0x20, 0x1, 0xc}, {0x2, 0x7}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000045c0)) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000004600)={0xa, {{0x2, 0x4e21, @remote}}, 0x1, 0x2, [{{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}}, {{0x2, 0x4e23, @private=0xa010100}}]}, 0x190) getxattr(&(0x7f0000004800)='./file0\x00', &(0x7f0000004840)=@random={'user.', '{{\x00'}, &(0x7f0000004880)=""/123, 0x7b) 4.213999135s ago: executing program 3 (id=806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfb, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0xc001}}, @NHA_OIF={0x8}]}, 0x34}}, 0x0) 4.140705682s ago: executing program 5 (id=807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000140)="1072e7f0ec0db23953f695a6b6a6f11dd1", &(0x7f0000000340)=@udp=r1, 0x1}, 0x20) r2 = io_uring_setup(0x2e34, &(0x7f0000000180)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r5 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xb0) write$FUSE_GETXATTR(r8, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x7ff}}, 0x18) write$FUSE_INIT(r8, &(0x7f0000000180)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}]}}) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) openat2(r9, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x8}, 0x18) close_range(r2, 0xffffffffffffffff, 0x0) 4.139546148s ago: executing program 4 (id=808): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f00000002c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x144, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x114, 0x2, [@TCA_BASIC_EMATCHES={0x110, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x104, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_IPT={0xf0, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x1}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0xc7, 0x5, "0c59adf97c00d469f2d12ac9db9d2c651ced45e75449bfad8a895a751c3e6b107ecbd684baa360e33d1c3e2bd1d03866a8a3a293a5fa494b6bf9df6392137654ca866d0b2a680f605a115f089a19717b4cedb2a4cbe8b6a7c31df622fb2ca3c8a07c68b009cfaa76ce62e36198efbdaa8e19362ff0971860f61f74e3cbe88d97d320cc079d77f7633b2cc16757852ee0d1804358d5f948d418e7b7f98ba8b0a169873b254dcda55eee0f06b19e4ea41c23135f97f23a4d3a26e8fd4f69c070655f8af1"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xcd}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x144}}, 0x0) 4.081502173s ago: executing program 3 (id=809): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r3, 0xc6f33000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) io_uring_enter(r0, 0x27e2, 0x700, 0x0, 0x0, 0x0) 3.716554127s ago: executing program 3 (id=810): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20375e491bfeda50cf165795aaaaa0086dd6001010000081100fc020000000000000004000000000000ff0200000000000000000000000000010000"], 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180)=0x30a, 0x4) sendmmsg$inet(r3, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a1ba32a8e685e6ba2eb3b2f23ed9f40e3fa0314d66c08124d87ab191f366ab6686fa6ae3831f6c72f830cfebee53d4e0cc4b8af9", 0x94}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000040)=[{&(0x7f00000003c0)="0f9028a90960f4e8126b57ac0731f77bd0aa50f94376107c38e41027dc3ebecdbdde455e7de630fa16424b62468213035aeda2ffd34e625507c732ef27867917a434c5414584", 0x46}, {&(0x7f0000000440)="813753a653b991d8b74039ea0e16dd5b58d84380155852a26ca2d440a4726a72230a5058b34d99e8facb3a05100708decf24d0c244cf5f0b2c00b63dd5fc1b93be4a6ab950ad906da272fc30f1eb3ac2d3d010bb971ff7867efa8ac30c9c874c999adbdd299072c93edcde017a06f34ba8942dc11138262be224e3a30e56300b6a9de35f1b548d1af414b0a69cd0c879dfb9a2540206ade66fcca1dab9896452098ba71701f2b2ec5e3ffbcff258982715ffb3b905c08df67f", 0xb9}, {&(0x7f0000000640)="6fce64114af95f81ee3755996bb4952e4df8b25db06312d5f4c72216e7a0b5a41edea24f2d7f553a2ac49227f0c65985458ff91f8aae4304d5bb95afec2d40a706ede90e8aee6ff3a2288e16eb726b9ee1ea5fc194184eaec983cd1db6625a53a5b0d7e8ef75ab8632e9bc2875c21a7511f3e868f631054503634eddd75b704fc814ca5c3713585ac4a6a39c2e46f93d4dec9998f5fa26f47e41efca0546437f7b5664bbb2f4563db909338f271bf74b356eb30214", 0xb5}, {&(0x7f0000000500)="8c8d9e1c36150be6231e23d30c838d63d00cf61db8021d8e3836fabb1b5b2b4c4292dd0e6b03880214e32d1edf287e700464873454df4a99510f9b0c78634703f8aabfb1", 0x44}], 0x4, &(0x7f0000000700)=[@ip_retopts={{0x140, 0x0, 0x7, {[@cipso={0x86, 0x64, 0xffffffffffffffff, [{0x6, 0xf, "a64820677b5339c47647e14108"}, {0x2, 0x10, "b2d57c265c417e833da2ddbff162"}, {0x2, 0x5, "1556ce"}, {0x5, 0x9, "e9371f3e947ccb"}, {0x3, 0xf, "ffa79a6dd34000a60b0a2ab458"}, {0x2, 0x5, "d72ebf"}, {0x5, 0xb, "dfd3db4bd8626f8b7e"}, {0x1, 0x3, 'y'}, {0x0, 0xb, "519559b1bc94f5756c"}, {0x2, 0x4, "9bbe"}]}, @generic={0x86, 0x7, "257599e770"}, @lsrr={0x83, 0x2b, 0x66, [@dev={0xac, 0x14, 0x14, 0x26}, @remote, @broadcast, @initdev={0xac, 0x1e, 0x40, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @empty, @loopback, @remote, @private=0xa010101]}, @rr={0x7, 0x23, 0xf7, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback, @multicast2, @broadcast, @remote]}, @timestamp_prespec={0x44, 0x14, 0x7, 0x3, 0x7, [{@private=0xa010101, 0x5}, {@broadcast, 0x80}]}, @timestamp_prespec={0x44, 0x3c, 0xe4, 0x3, 0xa, [{@private=0xa010100, 0xd7d}, {@remote, 0x2}, {@private=0xa010102, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0x5}, {@loopback, 0x4}, {@empty, 0x4}]}, @lsrr={0x83, 0x27, 0xed, [@dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010100, @multicast1, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @loopback, @empty, @multicast1]}]}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x59, [@multicast2]}, @ssrr={0x89, 0xf, 0x75, [@private=0xa010101, @remote, @loopback]}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast2}}}], 0x190}}, {{&(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f00000008c0)="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", 0xfb}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f00000009c0)="0a027cbf76ef7810b7a409bcc5a8a422fbe08fb50ce41e65811b6d7f3d1f7f2793ac324b2d2ab76694ba00b06e1b3453bb89e320d90fe77843a755e5d4e230f48438421afc9c4d0446d4d73b8da5c2353521adc5b3dabbd47add5b3cdc73482ac4431790dfb73abd6108269b5ec7cf346f069bea4b2e6f6f0a42ee74142d82994b022d32927ca9c60ea31a60ed87a7c12529aff17044ccf9c006e4ebacdfba6025a362f680d6aff9d6a58629b6663857c0", 0xb1}], 0x4}}], 0x3, 0x0) 3.064520967s ago: executing program 4 (id=811): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x42a041, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x90, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xa}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x80}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3aa}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x44004) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a00", @ANYRES32], 0x58}}, 0x0) 2.532206222s ago: executing program 2 (id=812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff81ff0d", 0x13}], 0x1) sendto$inet(r1, &(0x7f0000000040)='\f\x00', 0xffeb, 0x1200, &(0x7f0000000340)={0x2, 0x12}, 0x10) 2.380938113s ago: executing program 2 (id=813): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x7e, 0xda, &(0x7f0000000500)="591f1b20d21d441781d4bdc55c343dd152ad8c8a2ab29e1c5bbb3da5517098ec2b0eff979300d9602451056c9e782c7ae9077358a9453b5ce5cbe0d915ed2baa1e6c53c0b4ded18e3fe2979718f5b6d01e7005b6878048a25c29b2ab0997d19f6f57bceb0a9975b0c4394ed3fd4317f836601dec3ea7ed4da0767bcac9dd", &(0x7f0000000580)=""/218, 0xfffffffd, 0x0, 0x0, 0x80, &(0x7f0000000680), &(0x7f0000000780)="83be7850b28d13b8aa5b5466696a2c95d779df28d93394c9c64b12f155b3f164d6bb08d59235cdb387d5ad672e1b6ddf558998400c2899d85f666612484248baf9885755c64de814f5b8af0f1e8db7407d3990ac1716e5fe2289fd6db34d736ae545d8b05ea134c1c0db2622790edd09ee43a53c1538303059b5a68e73e828b4", 0x1, 0x0, 0x8}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r6, 0x6}, 0x8) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000080)=0x91) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r8 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dc53) syz_io_uring_setup(0x702, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x802}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) faccessat2(r8, &(0x7f0000000040)='./file0\x00', 0x11b, 0x1200) r10 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r10, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x1, 0x0, 0x0) 2.361160962s ago: executing program 3 (id=814): openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000002100)=""/4099, 0x1003}], 0x1, 0x50, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$hiddev(r3, &(0x7f0000000100)=""/84, 0x54) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000fc0)={0x1030, r4, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x2f}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_DATA={0x7, 0xc5, "ea29cb"}]}, 0x1030}, 0x1, 0x0, 0x0, 0x40044}, 0x20000011) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x4a, 0x2, 0x3, "110101e0abd4034b7c15000000861f00", 0x3234564e}) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @random="4abd997699e2", @void, {@ipv6={0x86dd, @dccp_packet={0x1, 0x6, "4c37d6", 0x10, 0x21, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], {{0x4e23, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x5, 0x2, "843a46", 0x2, "63d4ce"}}}}}}}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES16=r1, @ANYRES16], 0x0) 2.303853352s ago: executing program 5 (id=815): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$caif_seqpacket(0x25, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) read$usbfs(r6, 0x0, 0x0) write$tun(r6, &(0x7f0000000400)=ANY=[], 0xa2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x1001}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c5e9abdb17bd8f26356887bcd2f78aeec77d079ed499cf32e3ac447e64f4dd0cbc510a7bc28fdd1a11905e4318e1db9ed93fbdf59ce2710d9ae7be87f82c647d98c6501b596665000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='sched_switch\x00', r7, 0x0, 0xed}, 0x18) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)) sendmsg$inet(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001540)=[{}, {&(0x7f0000000300)="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", 0xca5}, {&(0x7f0000001300)="bcd1c0823335e95477b992142fcbd665274a5107ad3de2378186a6e38e9b632341ce2c140ca8df219133767670a0015a9b75771ca3bd01b88a4ff30e11c66611d7a2dfc2ab2b3cbd0a2ed97997292d276fa735b36bb96779b8a39c06d940ecbd0e5921f57dfff52fda5a47ce6c8223b9bcb4426b3c2d8c39cb23001f7de518ba466028c7f9696e75b2e3ec6170660f867058fe620c91b1b0ab8655fb94", 0x9d}, {&(0x7f00000013c0)}, {&(0x7f0000001480)="f10c315d3914e8422bc9b81e2ce663e825ddf9b8509c660aa68a7267a67c123096f1f80fbb003db28abe73598033d6bcdbd8ecb6e1863a5adab497ecf6a763dc81f5e496859b9f25435dd454a13ab6b51edbc0db", 0x54}, {0x0}], 0x6}, 0x4000000) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f0000000280000012949a798ef6d06619fd04e5c365e322fe67116028fa3e280f5c19", 0x47}, {0x0}], 0x2}, 0x400c040) 1.974008424s ago: executing program 4 (id=816): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d05000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r7, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="650a00000000000061116400000000001800000000000000000000000000000095000000000000007c6fe1689aba46407fa1decfe8a922"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0xaf02, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[@ANYBLOB, @ANYBLOB="000000000000000024001280090001007866726d00000000140002"], 0x44}}, 0x80c0) 830.08214ms ago: executing program 5 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d05000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r7, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="650a00000000000061116400000000001800000000000000000000000000000095000000000000007c6fe1689aba46407fa1decfe8a922"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0xaf02, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[@ANYBLOB, @ANYBLOB="000000000000000024001280090001007866726d00000000140002"], 0x44}}, 0x80c0) 377.147351ms ago: executing program 2 (id=818): lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x0, 0x1, 0xd, 0x2, 0xf4, "7c324df1821ec7824121dfa1bba2c41c76c14f9654b4aeb035d939913928d430ed8db31de0a1dde78fa981c0e9ac0aa6882949c16d650fd67b1235e90d21b9e7f4c23b0e097c19af9dc67337f47c45a2c44a6203187aac81c40ca3540cb3a4a81e27f15112c3772b818e8ae3be33a226be5ff2c18ff2f03ae90afc92288712509c9e6f9f3d23cbb17087236d9aa60f03623ca73e0a71637d621dca8305fbc63ac965caf6cfae261f138165e629a3f8038b2014a4359a50273e2b32e63d2d7d82df0b1bee37882fd4b4af8010b5de8751732e628cc03928f385c7eb616bc5b59194697f68b29da839239256023bfd902f433b1ebd"}, 0xfd, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in6=@private2}}, &(0x7f00000002c0)=0xe8) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, r0, &(0x7f0000000300)='./file0/file0\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r1, 0x3, &(0x7f0000002380)=0x5) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000023c0)={0x7, 'wlan1\x00', {0x9}, 0x2}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000002400)=0xffffffffffffffff, 0x4) mknod$loop(&(0x7f0000002440)='./file0/file0\x00', 0x8, 0x1) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000002480), 0x80000) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000002500)={0x7, 0x20, '\x00', 0x0, &(0x7f00000024c0)=[0x0, 0x0, 0x0, 0x0]}) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000026c0)={&(0x7f00000025c0)={0xe0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x43, 0xa8, @random="5087672bdba1323a07a17241389c8225361eb85cbbf6403815e50c683564803d93be4fcb2654a32f9c97e641c6599aeeea8f64fe4bf356d62577db5aaa7502"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002740)='./file0\x00', 0x40040, 0x38) timer_create(0x7, &(0x7f0000002840)={0x0, 0x24, 0x2, @thr={0x0, &(0x7f0000002800)="aeeffc5986"}}, &(0x7f0000002880)) sendmmsg$sock(r2, &(0x7f0000003cc0)=[{{&(0x7f00000028c0)=@caif=@util={0x25, "9f855eef43c336fab09ed0b5a77bbff1"}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002a80)="e53b6f159fc39887f55ed1ded12cee7d30544e093ce6d0301642cdbe4b9e02dea504595d8d183bcdc0e28a5330cf18ab930fa2080ff8b3", 0x37}, {&(0x7f0000002b00)}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000031c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e23, 0x2}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003240)="ccc4ff980f90eec0526887c5ae6d62aef0f6ca250f5d2e14d10c01d964f7296c5f4823f0fd718a2d5a9c5232ade5c6ad9a0b7b7a6fdfe9102aebf214fe6d2aec550cdf0fdd65268af69a9f4e884ea9c70a66f8e4dc68ea02fcb4d227093ba33d08ac4e9bb7d2f9f6b59197aacc61d6f9857f4db084", 0x75}, {&(0x7f00000032c0)="6c573525fa6220ac0a9458fdb1d83e0a44b191750ae135b1fd269289f585547410b971bafdbed4242fc8b8090cf73a04df4cac78eb79c03421470d1db2a49a53b7059fc438bacaaf987d86a7ee4a3154f041e74b387948f094d934cb6325f6ea16143adb753ded23fceaaabd04fd631e3fb2fc93a567b985ad33e26fce8102dcb4", 0x81}, {&(0x7f0000003380)="fdb39f6573426a79ea46456f3be2f630184e60896b34ecb03a258f57cc9471e873bcebb9265a6bd7418781c5a1578305962847a22a3886aed310bb8d1b286eeb7f9b3352a3bce396a2f62491693e551861f31e4e33fa1dd8ececa9088a0cdeab687de3554ed34f9d3ee8eb8c32fc0960ae80f405dd0df297ff357e127b4f76b550cc4626d28618bab89e0c8895c8db63e071d0b4eb7163a099c2cf79c4543961b7362991fc61093033fd98dab54b365632b61ae412d85a229bd4e93a521f6cb7e5b27c387ffb2467890dafd8e3df8592", 0xd0}, {&(0x7f0000003580)="18bcab01b8cdaba88f318e1c2f18057ff5b88dc48e233347e3939520e01560ac6f34dc9a8e0d540c08cb314811589fdeda62aa96574cca5629", 0x39}, {&(0x7f00000035c0)="322a35a7a6797e2d0eff4059f8bcaeb15f27f2dc13d4be5027097f041d0d59a08c379aa67642788c7dc2f032fdbf880acdeb957697df243c9eb59706606143ceaaed77d4b0c27d9750d400b9a39be9c0d649e9d324793a5317cb04c82d11f07916a8cabfa606f9d41f00e3cd52f8327a90e2fa46490484532db7f139e67c329e141c386c969f7a188cd3afd201c4177e001db901bfce691d9e15e5a47ebd331974c9a03ecdef5a9121dea36d2dafc9d7d2f20f0b4093b64c07469285ce84aa32", 0xc0}], 0x5, &(0x7f0000003700)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffb}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x70a4}}, @txtime={{0x18, 0x1, 0x3d, 0x93}}], 0xf0}}, {{&(0x7f0000003800)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, &(0x7f0000003a00)=[{0x0}, {0x0}, {&(0x7f0000003980)="146f663a31804114cd89582106f7d12dabc2e44ef14fec2d43b733c98d567921bd19dc2678e0cdbdcd427ed7a60a36346f06873fa88a17d91de3c463fcf5b1636aa9d8fad705256accd4dbf6fbf6c5c4a99665af424a", 0x56}], 0x3, &(0x7f0000003a40)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x564b1d37}}], 0x30}}, {{&(0x7f0000003a80)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b00)="03c83d0f175e0279ecc00dc1a89dea986efa5121e0c24f5698e158b6c9a02c4bc6aa32bced257de877632b1b07bf2a274ae822d66cf4517ecec906d4cb6bc45643c5377b50a2441f10f9171705e1170d41aa3099e4c8ccd90880a9b20c10f3bb95ae4329c21536078e7fd9c74ca80bfa6fa9825e047a553b1de5ebc92d5bc094ba56398b0a2468545f9ed49cdf74c766fc830076c4152a4c73ce7126099a9ddf29b32dd7de3a1046f64b00b13e4ce10d0be6246178572e4c13cd251cb92f2dd40460c74c5b50", 0xc6}], 0x1, &(0x7f0000003c40)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xdc}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x60}}], 0x5, 0x20048091) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004040)={&(0x7f0000003ec0)={0x164, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfffb}, @NL80211_ATTR_FILS_ERP_REALM={0xfb, 0xfa, "3004ea4755eea5b55e89cb5ad23151e5eaedc5d44597017f47ea97c6e1391c9ce070ddf2ccdf83c7d4c022016148c6ad64465b25655294cf20c5611791aee818bba6c217f36c3d239218f193f6fc89203192d4a9edb9179b93a330d29822f79ead3076d31554b722fb500f0b44f55e9ccd513693753e1a64e2c56cb3746ea662dc067f8239156725963ca9148e7c9f9b4f55ed5015d8b4250d7918f7b40aadeea87fe73dd52b5dd313498bf1c8b26b0ac568e7a6ccc0af8f3afd76a002af6015f4d76d0fd3e6e7d046f4f4f272c8abddecb22d5cdd84338aaa2bcfbcb973a76800268a7b3a98c6be11509092edd1d4be27becd578cae06"}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9000}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "1a33a9"}], @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x164}, 0x1, 0x0, 0x0, 0x14}, 0x4090) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000004180)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004140)={&(0x7f0000004100)={0x10, 0x3f8, 0x400, 0x70bd27, 0xfffffc00, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x40000) prlimit64(r1, 0x4, &(0x7f00000041c0)={0xf, 0x40}, &(0x7f0000004200)) pwritev2(0xffffffffffffffff, &(0x7f0000004340)=[{&(0x7f0000004240)="d5556e856e46dfa6a4388c1f0a5db47eff9413db093d1e2a45463663043fd402d8bfd9795833640c2c9f1524830ce5b0756b06af8de952c28ce20bf689b656429e26d8522f83af5547bdc964e1885c46d587f7fd72a5321bad451c2a09d00eae0a413779c02da53678256a87b9233e8b13772fe29b8056cea13ea2907080c9f8fbf343d61c6ab6ff2499f00bf1a21b4dcb762f3200e01020d6feae633d01caba68dd5f43fda36eb30cbd951ead696338183c3aacdaa99301cecbe982c597442ebf3a41ee94335ee3c2588ea6bc98629edb3a2a5dc4800987a5f2a10a91ec754fdba987750e06", 0xe6}], 0x1, 0xa495, 0xfb, 0x1) statx(r3, &(0x7f00000043c0)='./file0/file0\x00', 0x1000, 0x200, &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000004380)=@nbd={'/dev/nbd', 0x0}, r6, &(0x7f0000004500)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000004580)={0x5, &(0x7f0000004540)=[{0x9, 0x6, 0x80, 0x5}, {0x7fff, 0xfe, 0x9, 0x3}, {0x4, 0xa, 0x3, 0x7}, {0x9, 0x20, 0x1, 0xc}, {0x2, 0x7}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000045c0)) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000004600)={0xa, {{0x2, 0x4e21, @remote}}, 0x1, 0x2, [{{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}}, {{0x2, 0x4e23, @private=0xa010100}}]}, 0x190) getxattr(&(0x7f0000004800)='./file0\x00', &(0x7f0000004840)=@random={'user.', '{{\x00'}, &(0x7f0000004880)=""/123, 0x7b) 252.267347ms ago: executing program 0 (id=819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfb, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0xc001}}, @NHA_OIF={0x8}]}, 0x34}}, 0x0) 128.264159ms ago: executing program 0 (id=820): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3e, 0x51, 0xdb, 0x8, 0x664, 0x306, 0xeb63, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x2, 0x0, 0xd, [{{0x9, 0x4, 0xcf, 0x0, 0x1, 0xe6, 0xb8, 0x38, 0x0, [], [{{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0xa}}]}}]}}]}}, 0x0) 0s ago: executing program 2 (id=821): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x220000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0], 0xfc}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea54", 0xe) recvmmsg$unix(r3, &(0x7f000001d880), 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[]) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x601, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000200), &(0x7f0000000300)=[r7], &(0x7f0000000580)}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000080)={0x0, r7, 0x0, 0xfbfbfbfb}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0, 0x12c}}, 0x20000094) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) kernel console output (not intermixed with test programs): [ 123.834820][ T6457] random: crng reseeded on system resumption [ 123.965703][ T6466] fuse: Bad value for 'fd' [ 123.972777][ T6467] fuse: Unknown parameter '0xffffffffffffffff' [ 124.748850][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 124.928408][ T6477] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 125.471158][ T6479] syz.2.138 uses obsolete (PF_INET,SOCK_PACKET) [ 125.610810][ T6473] team0 (unregistering): Port device team_slave_0 removed [ 125.710160][ T6473] team0 (unregistering): Port device team_slave_1 removed [ 125.769868][ T6473] team0 (unregistering): Port device vlan0 removed [ 126.551290][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'. [ 126.568502][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'. [ 126.578719][ T5873] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.588206][ T6491] netlink: 32 bytes leftover after parsing attributes in process `syz.4.142'. [ 126.694557][ T6491] nbd0: detected capacity change from 0 to 256 [ 126.714140][ T5839] block nbd0: Receive control failed (result -104) [ 126.763062][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 126.786186][ T5873] usb 4-1: config index 0 descriptor too short (expected 42, got 18) [ 126.819369][ T5873] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 126.852714][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 127.457052][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 127.881362][ T5873] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 127.910154][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 128.066652][ T5873] usb 4-1: Product: syz [ 128.141529][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.148'. [ 128.571823][ T5873] usb 4-1: SerialNumber: syz [ 128.626887][ T5873] r8152-cfgselector 4-1: Unknown version 0x0000 [ 128.653581][ T5873] r8152-cfgselector 4-1: config 0 descriptor?? [ 128.670460][ T5873] hub 4-1:0.0: bad descriptor, ignoring hub [ 128.694090][ T5873] hub 4-1:0.0: probe with driver hub failed with error -5 [ 128.846055][ T6522] netlink: 'syz.1.149': attribute type 12 has an invalid length. [ 128.854071][ T6522] netlink: 'syz.1.149': attribute type 29 has an invalid length. [ 128.862177][ T6522] netlink: 148 bytes leftover after parsing attributes in process `syz.1.149'. [ 128.872056][ T6522] netlink: 59 bytes leftover after parsing attributes in process `syz.1.149'. [ 129.278615][ T5873] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 129.501615][ T6526] random: crng reseeded on system resumption [ 129.939664][ T6534] fuse: Unknown parameter '0xffffffffffffffff' [ 130.476225][ T6547] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 130.526326][ T6549] FAULT_INJECTION: forcing a failure. [ 130.526326][ T6549] name failslab, interval 1, probability 0, space 0, times 1 [ 130.552684][ T6549] CPU: 1 UID: 0 PID: 6549 Comm: syz.3.157 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 130.552710][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 130.552720][ T6549] Call Trace: [ 130.552726][ T6549] [ 130.552733][ T6549] dump_stack_lvl+0x241/0x360 [ 130.552765][ T6549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.552788][ T6549] ? __pfx__printk+0x10/0x10 [ 130.552813][ T6549] ? kmem_cache_alloc_noprof+0x48/0x380 [ 130.552834][ T6549] ? __pfx___might_resched+0x10/0x10 [ 130.552855][ T6549] should_fail_ex+0x40a/0x550 [ 130.552878][ T6549] should_failslab+0xac/0x100 [ 130.552898][ T6549] ? security_file_alloc+0x32/0x310 [ 130.552918][ T6549] kmem_cache_alloc_noprof+0x70/0x380 [ 130.552943][ T6549] security_file_alloc+0x32/0x310 [ 130.552965][ T6549] init_file+0x96/0x2e0 [ 130.552989][ T6549] alloc_empty_file+0xb8/0x1d0 [ 130.553010][ T6549] path_openat+0x107/0x3590 [ 130.553041][ T6549] ? __pfx_stack_trace_save+0x10/0x10 [ 130.553062][ T6549] ? mark_lock+0x9a/0x360 [ 130.553093][ T6549] ? __pfx_path_openat+0x10/0x10 [ 130.553132][ T6549] do_filp_open+0x27f/0x4e0 [ 130.553156][ T6549] ? __pfx_do_filp_open+0x10/0x10 [ 130.553177][ T6549] ? do_raw_spin_lock+0x14f/0x370 [ 130.553226][ T6549] do_sys_openat2+0x13e/0x1d0 [ 130.553249][ T6549] ? __pfx_do_sys_openat2+0x10/0x10 [ 130.553267][ T6549] ? __fget_files+0x2a/0x410 [ 130.553289][ T6549] ? __fget_files+0x2a/0x410 [ 130.553313][ T6549] __x64_sys_openat+0x247/0x2a0 [ 130.553336][ T6549] ? __pfx___x64_sys_openat+0x10/0x10 [ 130.553359][ T6549] ? do_syscall_64+0x100/0x230 [ 130.553383][ T6549] ? do_syscall_64+0xb6/0x230 [ 130.553406][ T6549] do_syscall_64+0xf3/0x230 [ 130.553426][ T6549] ? clear_bhb_loop+0x35/0x90 [ 130.553449][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.553469][ T6549] RIP: 0033:0x7f3e6ad8cde9 [ 130.553484][ T6549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.553504][ T6549] RSP: 002b:00007f3e6bb2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.553535][ T6549] RAX: ffffffffffffffda RBX: 00007f3e6afa6080 RCX: 00007f3e6ad8cde9 [ 130.553547][ T6549] RDX: 00000000001817c1 RSI: 0000400000000080 RDI: ffffffffffffff9c [ 130.553558][ T6549] RBP: 00007f3e6bb2b090 R08: 0000000000000000 R09: 0000000000000000 [ 130.553568][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.553577][ T6549] R13: 0000000000000000 R14: 00007f3e6afa6080 R15: 00007ffe1052d318 [ 130.553602][ T6549] [ 131.266860][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 131.396074][ T5873] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 131.804073][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 131.845463][ T5873] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 131.881120][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.897118][ T5873] usb 4-1: Product: syz [ 131.902354][ T5873] usb 4-1: Manufacturer: syz [ 131.919179][ T5873] usb 4-1: SerialNumber: syz [ 131.936981][ T5873] usb 4-1: config 0 descriptor?? [ 132.511244][ T6554] team0 (unregistering): Port device team_slave_0 removed [ 132.548763][ T6554] team0 (unregistering): Port device team_slave_1 removed [ 132.603320][ T6554] team0 (unregistering): Port device vlan0 removed [ 132.677394][ T6551] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.694088][ T5904] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 132.874063][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 132.898626][ T5904] usb 5-1: config index 0 descriptor too short (expected 42, got 18) [ 132.912432][ T5904] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 132.928148][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 132.946383][ T5904] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 132.956257][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 132.964967][ T5904] usb 5-1: Product: syz [ 132.979817][ T5904] usb 5-1: SerialNumber: syz [ 132.986046][ T5873] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 133.030739][ T5904] r8152-cfgselector 5-1: Unknown version 0x0000 [ 133.054059][ T5904] r8152-cfgselector 5-1: config 0 descriptor?? [ 133.070787][ T5904] hub 5-1:0.0: bad descriptor, ignoring hub [ 133.077652][ T5904] hub 5-1:0.0: probe with driver hub failed with error -5 [ 133.156316][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.162835][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.177023][ T6564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.794765][ T1224] r8152-cfgselector 5-1: USB disconnect, device number 5 [ 133.897155][ T6551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 134.529023][ T6585] random: crng reseeded on system resumption [ 134.799672][ T6591] fuse: Unknown parameter '0xffffffffffffffff' [ 135.068542][ T6593] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 135.865750][ T1224] usb 4-1: USB disconnect, device number 3 [ 136.188170][ T6606] tmpfs: Unexpected value for 'usrquota' [ 136.534389][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 137.298819][ T6635] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 137.924338][ T5905] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 137.984164][ T1224] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.095489][ T5905] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 138.106328][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.120000][ T5905] usb 5-1: config 0 descriptor?? [ 138.178735][ T1224] usb 4-1: Using ep0 maxpacket: 16 [ 138.198125][ T1224] usb 4-1: config index 0 descriptor too short (expected 42, got 18) [ 138.208659][ T1224] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 138.247184][ T1224] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 138.307603][ T1224] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 138.325859][ T1224] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 138.349682][ T6648] netlink: 13 bytes leftover after parsing attributes in process `syz.1.187'. [ 138.380417][ T1224] usb 4-1: Product: syz [ 138.386694][ T1224] usb 4-1: SerialNumber: syz [ 138.407372][ T1224] r8152-cfgselector 4-1: Unknown version 0x0000 [ 138.417791][ T1224] r8152-cfgselector 4-1: config 0 descriptor?? [ 138.451363][ T1224] hub 4-1:0.0: bad descriptor, ignoring hub [ 138.481388][ T1224] hub 4-1:0.0: probe with driver hub failed with error -5 [ 138.699006][ T6651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.724538][ T6651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.754368][ T5905] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 138.827796][ T58] usb 5-1: USB disconnect, device number 6 [ 139.268982][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'. [ 139.286471][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 139.950608][ T6659] syz.0.190 (6659) used greatest stack depth: 18032 bytes left [ 140.124302][ T6661] netlink: 'syz.4.191': attribute type 29 has an invalid length. [ 140.171572][ T6658] netlink: 'syz.4.191': attribute type 29 has an invalid length. [ 140.747740][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 141.586464][ T6672] Invalid source name [ 141.600500][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.195'. [ 141.852906][ T6677] vlan0: entered promiscuous mode [ 141.891089][ T6677] team0: Port device vlan0 added [ 141.953602][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 142.552921][ T6686] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 143.443952][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 143.526897][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.198'. [ 145.042213][ T6677] team0 (unregistering): Port device team_slave_0 removed [ 145.073779][ T6677] team0 (unregistering): Port device team_slave_1 removed [ 145.115166][ T6677] team0 (unregistering): Port device vlan0 removed [ 145.406025][ T6705] netlink: 'syz.2.204': attribute type 10 has an invalid length. [ 145.426361][ T6705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.443991][ T6705] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 146.196161][ T1224] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.374129][ T1224] usb 5-1: Using ep0 maxpacket: 16 [ 146.382842][ T1224] usb 5-1: config index 0 descriptor too short (expected 42, got 18) [ 146.452204][ T1224] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 146.529045][ T6711] net_ratelimit: 74 callbacks suppressed [ 146.529091][ T6711] openvswitch: netlink: Flow key attr not present in new flow. [ 146.534676][ T1224] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 146.960116][ T1224] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 146.976331][ T1224] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 147.014076][ T5873] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 147.044333][ T6718] netlink: 288 bytes leftover after parsing attributes in process `syz.1.208'. [ 147.069530][ T6718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.193740][ T1224] usb 5-1: Product: syz [ 147.211613][ T1224] usb 5-1: SerialNumber: syz [ 147.233846][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 147.255420][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.271105][ T5873] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 147.485774][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.524835][ T6720] netlink: zone id is out of range [ 147.530627][ T6720] netlink: zone id is out of range [ 147.536364][ T6720] netlink: zone id is out of range [ 147.541891][ T6720] netlink: zone id is out of range [ 147.548556][ T6720] netlink: zone id is out of range [ 147.554785][ T6720] netlink: zone id is out of range [ 147.560479][ T6720] netlink: zone id is out of range [ 147.567329][ T6720] netlink: zone id is out of range [ 147.573054][ T6720] netlink: zone id is out of range [ 147.594401][ T5873] usb 4-1: Product: syz [ 147.599155][ T5873] usb 4-1: Manufacturer: syz [ 147.604840][ T5873] usb 4-1: SerialNumber: syz [ 147.605294][ T1224] r8152-cfgselector 5-1: Unknown version 0x0000 [ 147.683932][ T1224] r8152-cfgselector 5-1: config 0 descriptor?? [ 147.698358][ T5873] usb 4-1: config 0 descriptor?? [ 147.709893][ T5873] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 147.759035][ T1224] hub 5-1:0.0: bad descriptor, ignoring hub [ 147.771729][ T1224] hub 5-1:0.0: probe with driver hub failed with error -5 [ 148.187138][ T5905] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.245597][ T1224] r8152-cfgselector 5-1: USB disconnect, device number 7 [ 149.289139][ T5905] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 149.510920][ T5905] usb 1-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 149.566613][ T5905] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 149.750807][ T5905] usb 1-1: config 1 has no interface number 1 [ 149.758546][ T5905] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 149.774623][ T5905] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.975499][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 150.598181][ T5905] usb 1-1: string descriptor 0 read error: -71 [ 150.614056][ T5905] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.623142][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.700631][ T5873] usb 4-1: clie_3_5_startup: get interface number failed: -71 [ 150.716515][ T5873] visor 4-1:0.0: probe with driver visor failed with error -71 [ 150.734118][ T5905] usb 1-1: can't set config #1, error -71 [ 150.744492][ T5873] usb 4-1: USB disconnect, device number 5 [ 150.799555][ T5905] usb 1-1: USB disconnect, device number 3 [ 151.004260][ T6737] netlink: 13 bytes leftover after parsing attributes in process `syz.1.213'. [ 151.016410][ T6739] sp0: Synchronizing with TNC [ 151.565624][ T51] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 151.794116][ T51] usb 3-1: Using ep0 maxpacket: 8 [ 151.806277][ T51] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.920155][ T51] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.939180][ T51] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 151.964350][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.984506][ T51] usb 3-1: Product: syz [ 151.999849][ T51] usb 3-1: Manufacturer: syz [ 152.050635][ T51] usb 3-1: SerialNumber: syz [ 152.114716][ T51] usb 3-1: config 0 descriptor?? [ 152.373760][ T6747] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[6747] [ 152.931898][ T6768] netlink: 'syz.0.219': attribute type 4 has an invalid length. [ 152.952733][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 152.969910][ T51] usb 3-1: USB disconnect, device number 3 [ 153.694016][ T1224] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 153.814152][ T5873] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 153.878325][ T1224] usb 4-1: Using ep0 maxpacket: 16 [ 153.908420][ T1224] usb 4-1: config index 0 descriptor too short (expected 42, got 18) [ 153.938735][ T1224] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 153.994121][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 154.012044][ T1224] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 154.025929][ T5873] usb 3-1: config 0 has an invalid interface number: 108 but max is 0 [ 154.045572][ T5873] usb 3-1: config 0 has no interface number 0 [ 154.045586][ T1224] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 154.051710][ T5873] usb 3-1: config 0 interface 108 has no altsetting 0 [ 154.061488][ T1224] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 154.099755][ T5873] usb 3-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=10.c5 [ 154.109212][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.117869][ T5873] usb 3-1: Product: syz [ 154.124121][ T5873] usb 3-1: Manufacturer: syz [ 154.128992][ T5873] usb 3-1: SerialNumber: syz [ 154.152964][ T5873] usb 3-1: config 0 descriptor?? [ 154.158283][ T1224] usb 4-1: Product: syz [ 154.162637][ T1224] usb 4-1: SerialNumber: syz [ 154.194996][ T1224] r8152-cfgselector 4-1: Unknown version 0x0000 [ 154.247888][ T1224] r8152-cfgselector 4-1: config 0 descriptor?? [ 154.270496][ T1224] hub 4-1:0.0: bad descriptor, ignoring hub [ 154.290333][ T1224] hub 4-1:0.0: probe with driver hub failed with error -5 [ 154.534143][ T58] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 154.567832][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 154.567847][ T29] audit: type=1326 audit(1739520233.483:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6781 comm="syz.0.226" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f858e38cde9 code=0x0 [ 154.584269][ T1224] r8152-cfgselector 4-1: USB disconnect, device number 6 [ 154.600579][ T5873] usb 3-1: bad CDC descriptors [ 154.611620][ T5873] usb 3-1: USB disconnect, device number 4 [ 154.823799][ T58] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 154.849567][ T58] usb 5-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 154.886289][ T58] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 154.938478][ T58] usb 5-1: config 1 has no interface number 1 [ 155.076537][ T58] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 155.135133][ T58] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.204151][ T5905] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 155.310229][ T58] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.344237][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.360393][ T5873] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 155.377386][ T58] usb 5-1: Product: syz [ 156.260686][ T58] usb 5-1: Manufacturer: syz [ 156.275703][ T58] usb 5-1: SerialNumber: syz [ 156.304242][ T5905] usb 2-1: device descriptor read/64, error -71 [ 156.438104][ T5873] usb 1-1: device descriptor read/64, error -71 [ 156.780828][ T58] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 156.796459][ T58] usb 5-1: MIDIStreaming interface descriptor not found [ 156.834019][ T5905] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 156.927181][ T59] block nbd0: Possible stuck request ffff88802580e000: control (read@0,4096B). Runtime 30 seconds [ 156.992069][ T58] usb 5-1: USB disconnect, device number 8 [ 157.044046][ T5873] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 157.104630][ T5905] usb 2-1: device descriptor read/64, error -71 [ 157.174275][ T5873] usb 1-1: device descriptor read/64, error -71 [ 157.224582][ T5905] usb usb2-port1: attempt power cycle [ 157.270940][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.299447][ T5873] usb usb1-port1: attempt power cycle [ 157.699443][ T5873] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 157.787260][ T5905] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 157.813793][ T5873] usb 1-1: device descriptor read/8, error -71 [ 157.875788][ T5905] usb 2-1: device descriptor read/8, error -71 [ 158.365145][ T58] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 158.543996][ T58] usb 3-1: Using ep0 maxpacket: 16 [ 158.556295][ T58] usb 3-1: config index 0 descriptor too short (expected 42, got 18) [ 158.574009][ T58] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 158.593965][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 158.625792][ T58] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 158.643963][ T58] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 158.662192][ T58] usb 3-1: Product: syz [ 158.667430][ T58] usb 3-1: SerialNumber: syz [ 158.748331][ T5873] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 158.760189][ T58] r8152-cfgselector 3-1: Unknown version 0x0000 [ 158.767152][ T58] r8152-cfgselector 3-1: config 0 descriptor?? [ 158.786774][ T58] hub 3-1:0.0: bad descriptor, ignoring hub [ 158.792717][ T58] hub 3-1:0.0: probe with driver hub failed with error -5 [ 158.803555][ T5873] usb 1-1: config 0 has an invalid interface number: 116 but max is 0 [ 158.816569][ T5873] usb 1-1: config 0 has no interface number 0 [ 158.834414][ T5873] usb 1-1: too many endpoints for config 0 interface 116 altsetting 114: 105, using maximum allowed: 30 [ 158.848644][ T5873] usb 1-1: config 0 interface 116 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 158.870542][ T5873] usb 1-1: config 0 interface 116 has no altsetting 0 [ 158.879093][ T5873] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 158.898723][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.935539][ T5873] usb 1-1: config 0 descriptor?? [ 158.947069][ T5873] cp210x 1-1:0.116: cp210x converter detected [ 159.117479][ T6825] net_ratelimit: 75 callbacks suppressed [ 159.117622][ T6825] openvswitch: netlink: Flow actions attr not present in new flow. [ 159.474442][ T6799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.483012][ T6799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.614297][ T58] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 159.727995][ T6810] netlink: 40 bytes leftover after parsing attributes in process `syz.0.233'. [ 159.739440][ T5873] cp210x 1-1:0.116: failed to get vendor val 0x000e size 3: -71 [ 159.768064][ T5873] usb 1-1: cp210x converter now attached to ttyUSB0 [ 159.795974][ T5873] usb 1-1: USB disconnect, device number 7 [ 159.849619][ T5873] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 159.897119][ T5873] cp210x 1-1:0.116: device disconnected [ 159.916264][ T6827] netlink: 13 bytes leftover after parsing attributes in process `syz.1.237'. [ 161.631212][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 161.687860][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 162.184064][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 162.200203][ T9] usb 5-1: config index 0 descriptor too short (expected 42, got 18) [ 162.215543][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 162.270847][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 162.288449][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 162.299405][ T9] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 162.316532][ T9] usb 5-1: Product: syz [ 162.321417][ T9] usb 5-1: SerialNumber: syz [ 163.088133][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 163.105978][ T9] r8152-cfgselector 5-1: config 0 descriptor?? [ 163.135718][ T9] r8152-cfgselector 5-1: can't set config #0, error -71 [ 163.146382][ T9] r8152-cfgselector 5-1: USB disconnect, device number 9 [ 163.194006][ T51] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 163.439860][ T51] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 163.748210][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805e7f7c00: rx timeout, send abort [ 163.758529][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805e7f7c00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 163.995551][ T51] usb 3-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 164.052004][ T51] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 164.117373][ T51] usb 3-1: config 1 has no interface number 1 [ 164.123808][ T51] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 164.139835][ T6859] 9pnet_fd: Insufficient options for proto=fd [ 164.142884][ T51] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.194112][ T51] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.212544][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.256721][ T51] usb 3-1: Product: syz [ 164.261433][ T6867] netlink: 13 bytes leftover after parsing attributes in process `syz.3.249'. [ 164.383957][ T51] usb 3-1: Manufacturer: syz [ 164.447536][ T6871] netlink: 'syz.1.248': attribute type 10 has an invalid length. [ 164.468619][ T6871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.485028][ T6871] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 165.135064][ T51] usb 3-1: SerialNumber: syz [ 165.758051][ T51] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 165.802269][ T51] usb 3-1: MIDIStreaming interface descriptor not found [ 166.041499][ T51] usb 3-1: USB disconnect, device number 6 [ 166.425334][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 166.765771][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 166.827906][ T5905] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 166.854444][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.019337][ T9] usb 1-1: config index 0 descriptor too short (expected 42, got 18) [ 167.030248][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 167.067104][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 167.126889][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 167.157295][ T9] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 167.176255][ T9] usb 1-1: Product: syz [ 167.179830][ T5905] usb 4-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 167.187665][ T9] usb 1-1: SerialNumber: syz [ 167.448131][ T5905] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 167.516575][ T5905] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.691652][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.699990][ T5905] usb 4-1: Product: syz [ 167.704383][ T5905] usb 4-1: Manufacturer: syz [ 167.708995][ T5905] usb 4-1: SerialNumber: syz [ 167.718544][ T6882] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 167.734128][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 167.740558][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 167.746943][ T5873] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 167.818010][ T6892] netlink: 'syz.4.256': attribute type 12 has an invalid length. [ 167.826093][ T6892] netlink: 'syz.4.256': attribute type 29 has an invalid length. [ 167.834360][ T6892] netlink: 148 bytes leftover after parsing attributes in process `syz.4.256'. [ 167.843555][ T6892] netlink: 59 bytes leftover after parsing attributes in process `syz.4.256'. [ 167.964126][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 168.008220][ T9] r8152-cfgselector 1-1: can't set config #0, error -71 [ 168.381978][ T6882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.394839][ T9] r8152-cfgselector 1-1: USB disconnect, device number 8 [ 168.415309][ T5873] usb 3-1: config index 0 descriptor too short (expected 42, got 18) [ 168.423485][ T5873] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 168.434283][ T6882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.448988][ T5905] usb 4-1: selecting invalid altsetting 1 [ 168.468638][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 168.481532][ T5905] cdc_ncm 4-1:1.0: bind() failure [ 168.512443][ T5905] hub 4-1:1.1: bad descriptor, ignoring hub [ 168.517563][ T5873] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 168.519278][ T5905] hub 4-1:1.1: probe with driver hub failed with error -5 [ 168.535844][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 168.603072][ T5873] usb 3-1: Product: syz [ 168.884207][ T5905] usb 4-1: USB disconnect, device number 7 [ 169.082440][ T5873] usb 3-1: SerialNumber: syz [ 169.109255][ T5873] r8152-cfgselector 3-1: Unknown version 0x0000 [ 169.124257][ T5873] r8152-cfgselector 3-1: config 0 descriptor?? [ 169.157571][ T5873] hub 3-1:0.0: bad descriptor, ignoring hub [ 169.186831][ T5873] hub 3-1:0.0: probe with driver hub failed with error -5 [ 169.315915][ T6905] netlink: 'syz.1.260': attribute type 12 has an invalid length. [ 169.323804][ T6905] netlink: 'syz.1.260': attribute type 29 has an invalid length. [ 169.331702][ T6905] netlink: 148 bytes leftover after parsing attributes in process `syz.1.260'. [ 169.340961][ T6905] netlink: 59 bytes leftover after parsing attributes in process `syz.1.260'. [ 169.864805][ T9] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 170.416519][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 170.520256][ T6916] netlink: 13 bytes leftover after parsing attributes in process `syz.1.263'. [ 170.570675][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 170.629313][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 170.659778][ T9] usb 1-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 170.692133][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 170.720007][ T9] usb 1-1: config 1 has no interface number 1 [ 170.739852][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 170.755553][ T9] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.955295][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.966123][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.976116][ T9] usb 1-1: Product: syz [ 170.980306][ T9] usb 1-1: Manufacturer: syz [ 170.985525][ T9] usb 1-1: SerialNumber: syz [ 171.623823][ T9] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 171.650671][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 171.773402][ T9] usb 1-1: USB disconnect, device number 9 [ 172.065664][ T6925] 9pnet_fd: Insufficient options for proto=fd [ 172.148000][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 172.167490][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.267'. [ 172.854347][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.886985][ T5873] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 173.085356][ T5873] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 173.131341][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.159195][ T5873] usb 3-1: Product: syz [ 173.167628][ T5873] usb 3-1: Manufacturer: syz [ 173.187231][ T5873] usb 3-1: SerialNumber: syz [ 173.215767][ T5873] usb 3-1: config 0 descriptor?? [ 173.501913][ T5875] usb 3-1: USB disconnect, device number 8 [ 174.062159][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.274'. [ 174.962430][ T6963] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 176.080758][ T5875] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 176.114426][ T6953] team0 (unregistering): Port device team_slave_0 removed [ 176.136356][ T6953] team0 (unregistering): Port device team_slave_1 removed [ 176.254017][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 176.848087][ T51] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 176.878186][ T5875] usb 3-1: config index 0 descriptor too short (expected 42, got 18) [ 176.893994][ T5875] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 176.899808][ T6953] team0 (unregistering): Port device vlan0 removed [ 176.916279][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 176.932011][ T5875] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 176.941527][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 176.950284][ T5875] usb 3-1: Product: syz [ 176.954832][ T5875] usb 3-1: SerialNumber: syz [ 176.967885][ T5875] r8152-cfgselector 3-1: Unknown version 0x0000 [ 176.980259][ T5875] r8152-cfgselector 3-1: config 0 descriptor?? [ 177.011640][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 177.519317][ T5875] hub 3-1:0.0: bad descriptor, ignoring hub [ 177.525734][ T5875] hub 3-1:0.0: probe with driver hub failed with error -5 [ 177.548178][ T51] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.587537][ T51] usb 4-1: New USB device found, idVendor=18d1, idProduct=5057, bcdDevice= 0.00 [ 177.610635][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.637953][ T51] usb 4-1: config 0 descriptor?? [ 177.949494][ T1224] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 178.798366][ T6988] random: crng reseeded on system resumption [ 179.170105][ T51] usbhid 4-1:0.0: can't add hid device: -71 [ 179.357902][ T51] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 179.368711][ T51] usb 4-1: USB disconnect, device number 8 [ 180.837131][ T7008] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 181.674934][ T7012] vlan0: entered promiscuous mode [ 181.739253][ T7012] team0: Port device vlan0 added [ 182.666672][ T51] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 182.834058][ T51] usb 5-1: Using ep0 maxpacket: 16 [ 182.846546][ T51] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.864283][ T51] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.887352][ T51] usb 5-1: config 0 interface 0 has no altsetting 0 [ 182.897077][ T51] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 182.912444][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.932872][ T51] usb 5-1: config 0 descriptor?? [ 182.992536][ T7024] futex_wake_op: syz.2.295 tries to shift op by -1; fix this program [ 183.164691][ T51] usbhid 5-1:0.0: can't add hid device: -71 [ 183.194082][ T51] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 183.226523][ T51] usb 5-1: USB disconnect, device number 10 [ 183.700631][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 183.944054][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 184.029811][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 184.049240][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.078430][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 184.369871][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 184.634117][ T9] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.700019][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.709858][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.718332][ T9] usb 1-1: Product: syz [ 184.736138][ T9] usb 1-1: Manufacturer: syz [ 184.996351][ T9] usb 1-1: SerialNumber: syz [ 187.226542][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 187.589171][ T59] block nbd0: Possible stuck request ffff88802580e000: control (read@0,4096B). Runtime 60 seconds [ 188.318799][ T9] usb 1-1: cannot find UAC_HEADER [ 188.724447][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 188.802258][ T9] usb 1-1: USB disconnect, device number 10 [ 188.812201][ T7064] team0 (unregistering): Port device team_slave_0 removed [ 188.895195][ T7064] team0 (unregistering): Port device team_slave_1 removed [ 189.385720][ T6883] udevd[6883]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.422741][ T7064] team0 (unregistering): Port device vlan0 removed [ 191.555719][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 191.555771][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 191.561779][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 191.561823][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 191.561853][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 191.809414][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.317'. [ 191.971915][ T7116] netlink: 'syz.3.316': attribute type 10 has an invalid length. [ 192.984041][ T7125] netlink: zone id is out of range [ 192.989217][ T7125] netlink: zone id is out of range [ 192.994563][ T7125] netlink: zone id is out of range [ 192.999729][ T7125] netlink: zone id is out of range [ 193.005013][ T7125] netlink: zone id is out of range [ 193.010138][ T7125] netlink: zone id is out of range [ 193.015281][ T7125] netlink: zone id is out of range [ 193.020406][ T7125] netlink: zone id is out of range [ 193.025585][ T7125] netlink: zone id is out of range [ 193.030697][ T7125] netlink: zone id is out of range [ 193.126958][ T7127] netlink: 'syz.3.320': attribute type 12 has an invalid length. [ 193.134942][ T7127] netlink: 'syz.3.320': attribute type 29 has an invalid length. [ 193.142811][ T7127] netlink: 148 bytes leftover after parsing attributes in process `syz.3.320'. [ 193.152439][ T7127] netlink: 59 bytes leftover after parsing attributes in process `syz.3.320'. [ 194.616379][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.622784][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.953500][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 197.462056][ T7141] netlink: 'syz.1.325': attribute type 12 has an invalid length. [ 197.470141][ T7141] netlink: 'syz.1.325': attribute type 29 has an invalid length. [ 197.478309][ T7141] netlink: 148 bytes leftover after parsing attributes in process `syz.1.325'. [ 197.487848][ T7141] netlink: 59 bytes leftover after parsing attributes in process `syz.1.325'. [ 197.788204][ T29] audit: type=1326 audit(1739520276.683:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7152 comm="syz.4.327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7f198cde9 code=0x0 [ 199.523991][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 199.543337][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 199.674692][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 199.692277][ T9] usb 1-1: config index 0 descriptor too short (expected 42, got 18) [ 199.733996][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 199.755680][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 199.825570][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 199.860904][ T9] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 199.882924][ T9] usb 1-1: Product: syz [ 199.904865][ T9] usb 1-1: SerialNumber: syz [ 199.934808][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 199.952582][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 199.970778][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 199.988853][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 200.795210][ T7178] netlink: 'syz.3.334': attribute type 12 has an invalid length. [ 200.803207][ T7178] netlink: 'syz.3.334': attribute type 29 has an invalid length. [ 200.811470][ T7178] netlink: 148 bytes leftover after parsing attributes in process `syz.3.334'. [ 200.820990][ T7178] netlink: 59 bytes leftover after parsing attributes in process `syz.3.334'. [ 201.139897][ T9] r8152-cfgselector 1-1: USB disconnect, device number 11 [ 201.616345][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.335'. [ 201.634047][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.335'. [ 203.555685][ T7199] netlink: 'syz.3.337': attribute type 12 has an invalid length. [ 203.563440][ T7199] netlink: 'syz.3.337': attribute type 29 has an invalid length. [ 203.604079][ T7199] netlink: 148 bytes leftover after parsing attributes in process `syz.3.337'. [ 203.649789][ T7199] netlink: 59 bytes leftover after parsing attributes in process `syz.3.337'. [ 205.270173][ T7207] netlink: 'syz.4.340': attribute type 10 has an invalid length. [ 205.283399][ T7209] netlink: 'syz.1.339': attribute type 10 has an invalid length. [ 206.075639][ T7222] netlink: 'syz.4.342': attribute type 12 has an invalid length. [ 206.083489][ T7222] netlink: 'syz.4.342': attribute type 29 has an invalid length. [ 206.091702][ T7222] netlink: 148 bytes leftover after parsing attributes in process `syz.4.342'. [ 206.101044][ T7222] netlink: 59 bytes leftover after parsing attributes in process `syz.4.342'. [ 206.579130][ T29] audit: type=1326 audit(1739520285.493:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7227 comm="syz.0.345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f858e38cde9 code=0x0 [ 208.264705][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 208.336646][ T5875] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 208.526691][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 208.550238][ T5875] usb 5-1: config index 0 descriptor too short (expected 42, got 18) [ 208.569651][ T5875] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 208.609804][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 208.647797][ T5875] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 208.694105][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 208.705887][ T5875] usb 5-1: Product: syz [ 208.710187][ T5875] usb 5-1: SerialNumber: syz [ 208.740387][ T5875] r8152-cfgselector 5-1: Unknown version 0x0000 [ 208.791876][ T5875] r8152-cfgselector 5-1: config 0 descriptor?? [ 208.847230][ T5875] hub 5-1:0.0: bad descriptor, ignoring hub [ 208.882388][ T5875] hub 5-1:0.0: probe with driver hub failed with error -5 [ 208.943051][ T29] audit: type=1326 audit(1739520287.853:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.2.350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6af758cde9 code=0x0 [ 209.862685][ T1224] r8152-cfgselector 5-1: USB disconnect, device number 11 [ 210.638506][ T7260] net_ratelimit: 74 callbacks suppressed [ 210.638520][ T7260] netlink: zone id is out of range [ 210.800009][ T7263] netlink: 'syz.0.353': attribute type 10 has an invalid length. [ 210.844361][ T5873] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 211.625636][ T7260] netlink: zone id is out of range [ 211.634270][ T7260] netlink: zone id is out of range [ 211.704620][ T7260] netlink: zone id is out of range [ 211.743966][ T7260] netlink: zone id is out of range [ 211.749133][ T7260] netlink: zone id is out of range [ 212.205294][ T5873] usb 3-1: device descriptor read/64, error -71 [ 212.224630][ T7260] netlink: zone id is out of range [ 212.229768][ T7260] netlink: zone id is out of range [ 212.684129][ T7260] netlink: zone id is out of range [ 212.689298][ T7260] netlink: zone id is out of range [ 212.784040][ T5873] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 212.972244][ T29] audit: type=1800 audit(1739520291.883:56): pid=7276 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.357" name="file1" dev="overlay" ino=431 res=0 errno=0 [ 213.245931][ T5904] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 214.105825][ T5904] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 214.114304][ T5904] usb 4-1: config 0 has no interface number 0 [ 214.120420][ T5904] usb 4-1: too many endpoints for config 0 interface 116 altsetting 114: 105, using maximum allowed: 30 [ 214.181967][ T5904] usb 4-1: config 0 interface 116 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 214.260679][ T5904] usb 4-1: config 0 interface 116 has no altsetting 0 [ 214.279517][ T5904] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 214.316648][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.366698][ T5904] usb 4-1: config 0 descriptor?? [ 214.386148][ T5904] cp210x 4-1:0.116: cp210x converter detected [ 215.042726][ T7279] netlink: 40 bytes leftover after parsing attributes in process `syz.3.359'. [ 215.054047][ T5904] cp210x 4-1:0.116: failed to get vendor val 0x000e size 3: -71 [ 215.084282][ T5904] usb 4-1: cp210x converter now attached to ttyUSB0 [ 215.116019][ T5904] usb 4-1: USB disconnect, device number 9 [ 215.139904][ T5904] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 215.161987][ T5904] cp210x 4-1:0.116: device disconnected [ 215.232169][ T7295] random: crng reseeded on system resumption [ 215.404378][ T7299] fuse: Unknown parameter '0xffffffffffffffff' [ 216.124736][ T7307] netlink: 'syz.1.365': attribute type 12 has an invalid length. [ 216.132804][ T7307] netlink: 'syz.1.365': attribute type 29 has an invalid length. [ 216.141058][ T7307] netlink: 148 bytes leftover after parsing attributes in process `syz.1.365'. [ 216.150577][ T7307] netlink: 59 bytes leftover after parsing attributes in process `syz.1.365'. [ 217.523500][ T7314] netlink: 'syz.0.366': attribute type 12 has an invalid length. [ 217.531584][ T7314] netlink: 'syz.0.366': attribute type 29 has an invalid length. [ 217.539697][ T7314] netlink: 148 bytes leftover after parsing attributes in process `syz.0.366'. [ 217.549055][ T7314] netlink: 59 bytes leftover after parsing attributes in process `syz.0.366'. [ 217.625558][ T59] block nbd0: Possible stuck request ffff88802580e000: control (read@0,4096B). Runtime 90 seconds [ 218.364918][ T5904] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 218.815796][ T5875] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 219.238169][ T5875] usb 1-1: config 0 has an invalid interface number: 116 but max is 0 [ 219.270704][ T5875] usb 1-1: config 0 has no interface number 0 [ 219.300214][ T5875] usb 1-1: too many endpoints for config 0 interface 116 altsetting 114: 105, using maximum allowed: 30 [ 219.331582][ T5875] usb 1-1: config 0 interface 116 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 219.359828][ T5875] usb 1-1: config 0 interface 116 has no altsetting 0 [ 219.383068][ T5875] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 219.412739][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.455622][ T5875] usb 1-1: config 0 descriptor?? [ 219.481688][ T5875] cp210x 1-1:0.116: cp210x converter detected [ 221.188367][ T7316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.370'. [ 221.200265][ T5875] cp210x 1-1:0.116: failed to get vendor val 0x000e size 3: -71 [ 221.274021][ T7333] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 221.293112][ T5875] usb 1-1: cp210x converter now attached to ttyUSB0 [ 221.312648][ T5875] usb 1-1: USB disconnect, device number 12 [ 221.322675][ T5875] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 221.331022][ T5875] cp210x 1-1:0.116: device disconnected [ 223.001388][ T7347] net_ratelimit: 74 callbacks suppressed [ 223.001402][ T7347] netlink: zone id is out of range [ 223.146225][ T7347] netlink: zone id is out of range [ 223.224531][ T7347] netlink: zone id is out of range [ 223.235041][ T7347] netlink: zone id is out of range [ 223.913993][ T7347] netlink: zone id is out of range [ 223.919170][ T7347] netlink: zone id is out of range [ 223.988424][ T7347] netlink: zone id is out of range [ 223.993578][ T7347] netlink: zone id is out of range [ 224.026676][ T7347] netlink: zone id is out of range [ 224.031903][ T7347] netlink: zone id is out of range [ 224.240678][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 226.566338][ T7378] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 228.177403][ T7389] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 228.214195][ T5831] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 228.852058][ T5831] usb 4-1: Using ep0 maxpacket: 16 [ 229.001870][ T5831] usb 4-1: config index 0 descriptor too short (expected 42, got 18) [ 229.023951][ T5831] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 229.053077][ T5831] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 229.073321][ T5831] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 229.111339][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 229.129772][ T5831] usb 4-1: Product: syz [ 229.134115][ T5831] usb 4-1: SerialNumber: syz [ 229.147830][ T5831] r8152-cfgselector 4-1: Unknown version 0x0000 [ 229.158366][ T5831] r8152-cfgselector 4-1: config 0 descriptor?? [ 229.169828][ T5831] hub 4-1:0.0: bad descriptor, ignoring hub [ 229.393914][ T5831] hub 4-1:0.0: probe with driver hub failed with error -5 [ 229.444728][ T5831] r8152-cfgselector 4-1: USB disconnect, device number 10 [ 233.313299][ T7431] netlink: 'syz.4.399': attribute type 12 has an invalid length. [ 233.321579][ T7431] netlink: 'syz.4.399': attribute type 29 has an invalid length. [ 233.329750][ T7431] netlink: 148 bytes leftover after parsing attributes in process `syz.4.399'. [ 233.339363][ T7431] netlink: 59 bytes leftover after parsing attributes in process `syz.4.399'. [ 234.805295][ T7441] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 236.928697][ T7464] net_ratelimit: 74 callbacks suppressed [ 236.928740][ T7464] openvswitch: netlink: IP tunnel dst address not specified [ 237.290911][ T5904] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 237.314862][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.395'. [ 237.594069][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 237.606280][ T5904] usb 3-1: config index 0 descriptor too short (expected 42, got 18) [ 237.644446][ T5904] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 237.854157][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 237.877082][ T5904] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 237.886622][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 237.896624][ T5904] usb 3-1: Product: syz [ 238.612490][ T5904] usb 3-1: SerialNumber: syz [ 238.625731][ T5904] r8152-cfgselector 3-1: Unknown version 0x0000 [ 238.632046][ T5904] r8152-cfgselector 3-1: config 0 descriptor?? [ 238.657532][ T5904] hub 3-1:0.0: bad descriptor, ignoring hub [ 238.702558][ T5904] hub 3-1:0.0: probe with driver hub failed with error -5 [ 239.377901][ T7479] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.413299][ T5904] r8152-cfgselector 3-1: USB disconnect, device number 12 [ 239.544155][ T5875] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 239.735983][ T5875] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 239.984021][ T5875] usb 4-1: config 0 has no interface number 0 [ 239.990189][ T5875] usb 4-1: too many endpoints for config 0 interface 116 altsetting 114: 105, using maximum allowed: 30 [ 240.184279][ T5875] usb 4-1: config 0 interface 116 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 240.198104][ T5875] usb 4-1: config 0 interface 116 has no altsetting 0 [ 240.205146][ T5875] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 240.214610][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.251718][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 241.162111][ T5875] usb 4-1: config 0 descriptor?? [ 241.195080][ T5875] cp210x 4-1:0.116: cp210x converter detected [ 242.296831][ T7496] random: crng reseeded on system resumption [ 242.595211][ T7475] netlink: 40 bytes leftover after parsing attributes in process `syz.3.409'. [ 242.614075][ T5875] cp210x 4-1:0.116: failed to get vendor val 0x000e size 3: -71 [ 242.647814][ T5875] usb 4-1: cp210x converter now attached to ttyUSB0 [ 242.676046][ T5875] usb 4-1: USB disconnect, device number 11 [ 243.126354][ T5875] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 243.213667][ T5875] cp210x 4-1:0.116: device disconnected [ 243.251891][ T7502] openvswitch: netlink: IP tunnel dst address not specified [ 243.644191][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 244.249363][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 244.262086][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 245.104057][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 245.324514][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 245.368713][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.417166][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.591694][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.631252][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.657037][ T25] usb 4-1: Product: syz [ 245.661437][ T25] usb 4-1: Manufacturer: syz [ 245.702971][ T25] usb 4-1: SerialNumber: syz [ 247.384326][ T25] usb 4-1: 0:2 : does not exist [ 247.396588][ T25] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 247.515973][ T7532] netlink: 144 bytes leftover after parsing attributes in process `syz.1.424'. [ 247.731088][ T59] block nbd0: Possible stuck request ffff88802580e000: control (read@0,4096B). Runtime 120 seconds [ 247.735876][ T25] usb 4-1: USB disconnect, device number 12 [ 249.095535][ T6883] udevd[6883]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.864074][ T5875] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 250.157773][ T5875] usb 5-1: config 0 has an invalid interface number: 116 but max is 0 [ 250.174214][ T5875] usb 5-1: config 0 has no interface number 0 [ 250.198541][ T5875] usb 5-1: too many endpoints for config 0 interface 116 altsetting 114: 105, using maximum allowed: 30 [ 250.239857][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 250.253272][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.431'. [ 250.899262][ T5875] usb 5-1: config 0 interface 116 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 250.915029][ T5875] usb 5-1: config 0 interface 116 has no altsetting 0 [ 250.921854][ T5875] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 250.957993][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.201418][ T5875] usb 5-1: config 0 descriptor?? [ 251.244296][ T7558] random: crng reseeded on system resumption [ 251.463440][ T5875] cp210x 5-1:0.116: cp210x converter detected [ 252.151599][ T7563] netlink: 40 bytes leftover after parsing attributes in process `syz.4.429'. [ 252.628294][ T5875] cp210x 5-1:0.116: failed to get vendor val 0x000e size 3: -71 [ 252.654606][ T5875] usb 5-1: cp210x converter now attached to ttyUSB0 [ 252.693067][ T5875] usb 5-1: USB disconnect, device number 13 [ 253.224741][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 253.395629][ T5875] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 253.436671][ T5875] cp210x 5-1:0.116: device disconnected [ 254.115860][ T7580] openvswitch: netlink: IP tunnel dst address not specified [ 256.044773][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.184116][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.305983][ T7604] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.790150][ T7605] netlink: 'syz.3.442': attribute type 12 has an invalid length. [ 258.798289][ T7605] netlink: 'syz.3.442': attribute type 29 has an invalid length. [ 258.806531][ T7605] netlink: 148 bytes leftover after parsing attributes in process `syz.3.442'. [ 258.816038][ T7605] netlink: 59 bytes leftover after parsing attributes in process `syz.3.442'. [ 262.469659][ T7632] openvswitch: netlink: IPv4 tunnel dst address is zero [ 264.541422][ T7643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.639944][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 264.657610][ T7649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'. [ 265.632629][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 265.680183][ T7655] IPVS: Error joining to the multicast group [ 275.457531][ T29] audit: type=1326 audit(1739520354.363:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f198cde9 code=0x7ffc0000 [ 275.485130][ T29] audit: type=1326 audit(1739520354.363:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f198cde9 code=0x7ffc0000 [ 275.512633][ T29] audit: type=1326 audit(1739520354.373:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc7f198cde9 code=0x7ffc0000 [ 275.846453][ T29] audit: type=1326 audit(1739520354.373:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f198cde9 code=0x7ffc0000 [ 276.069698][ T29] audit: type=1326 audit(1739520354.373:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f198cde9 code=0x7ffc0000 [ 276.169532][ T29] audit: type=1326 audit(1739520354.373:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fc7f198cde9 code=0x7ffc0000 [ 276.264214][ T29] audit: type=1326 audit(1739520354.373:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f198cde9 code=0x7ffc0000 [ 276.291140][ T29] audit: type=1326 audit(1739520354.373:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f198cde9 code=0x7ffc0000 [ 276.328422][ T29] audit: type=1326 audit(1739520354.403:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc7f198cde9 code=0x7ffc0000 [ 276.354192][ T29] audit: type=1326 audit(1739520354.403:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f198cde9 code=0x7ffc0000 [ 278.501315][ T59] block nbd0: Possible stuck request ffff88802580e000: control (read@0,4096B). Runtime 150 seconds [ 278.793931][ T51] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 279.204291][ T51] usb 3-1: device descriptor read/64, error -71 [ 279.211534][ T7774] netlink: 'syz.0.486': attribute type 12 has an invalid length. [ 279.219756][ T7774] netlink: 'syz.0.486': attribute type 29 has an invalid length. [ 279.228077][ T7774] netlink: 148 bytes leftover after parsing attributes in process `syz.0.486'. [ 279.237873][ T7774] netlink: 59 bytes leftover after parsing attributes in process `syz.0.486'. [ 279.487386][ T51] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 279.630218][ T7777] openvswitch: netlink: IPv4 tunnel dst address is zero [ 281.542984][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 281.745311][ T7791] xt_TCPMSS: Only works on TCP SYN packets [ 281.830144][ T7794] random: crng reseeded on system resumption [ 282.216125][ T7802] netlink: 'syz.4.494': attribute type 12 has an invalid length. [ 282.224484][ T7802] netlink: 'syz.4.494': attribute type 29 has an invalid length. [ 282.232498][ T7802] netlink: 148 bytes leftover after parsing attributes in process `syz.4.494'. [ 282.242976][ T7802] netlink: 59 bytes leftover after parsing attributes in process `syz.4.494'. [ 283.501557][ T7810] netlink: 56 bytes leftover after parsing attributes in process `syz.3.497'. [ 284.024202][ T7819] netlink: 'syz.2.500': attribute type 1 has an invalid length. [ 284.051495][ T7819] bond1: entered promiscuous mode [ 284.056589][ T7819] bond1: entered allmulticast mode [ 284.061924][ T7819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 284.076447][ T7819] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 284.084773][ T7819] batadv1: entered promiscuous mode [ 284.090109][ T7819] batadv1: entered allmulticast mode [ 284.095948][ T7819] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 284.137875][ T6090] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 284.516149][ T9] IPVS: starting estimator thread 0... [ 284.661623][ T7828] Invalid ELF header len 8 [ 284.745016][ T7825] IPVS: using max 22 ests per chain, 52800 per kthread [ 285.117426][ T7827] netlink: 13 bytes leftover after parsing attributes in process `syz.3.501'. [ 285.176325][ T6056] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 286.837925][ T5904] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 287.093963][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 287.104852][ T5904] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 287.113003][ T5904] usb 4-1: config 0 has no interface number 0 [ 287.262054][ T7845] netlink: 'syz.2.508': attribute type 12 has an invalid length. [ 287.270221][ T7845] netlink: 'syz.2.508': attribute type 29 has an invalid length. [ 287.278403][ T7845] netlink: 148 bytes leftover after parsing attributes in process `syz.2.508'. [ 287.288329][ T7845] netlink: 59 bytes leftover after parsing attributes in process `syz.2.508'. [ 287.323185][ T5904] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 287.361155][ T5904] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 287.396743][ T5904] usb 4-1: config 0 interface 41 has no altsetting 0 [ 287.487504][ T5904] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 287.613466][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.614084][ T5136] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 287.663324][ T5904] usb 4-1: Product: syz [ 287.672532][ T5904] usb 4-1: Manufacturer: syz [ 287.755014][ T5904] usb 4-1: SerialNumber: syz [ 287.990042][ T5904] usb 4-1: config 0 descriptor?? [ 287.999562][ T7832] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 288.007048][ T7832] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 288.124740][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.139845][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.156158][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.219482][ T7855] netlink: zone id is out of range [ 288.224996][ T7855] netlink: zone id is out of range [ 288.230151][ T7855] netlink: zone id is out of range [ 288.235348][ T7855] netlink: zone id is out of range [ 288.240483][ T7855] netlink: zone id is out of range [ 288.245687][ T7855] netlink: zone id is out of range [ 288.250827][ T7855] netlink: zone id is out of range [ 288.256029][ T7855] netlink: zone id is out of range [ 288.261188][ T7855] netlink: zone id is out of range [ 288.323298][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.333234][ T5834] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 288.341524][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.455488][ T5904] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 288.532276][ T5904] usb 4-1: USB disconnect, device number 13 [ 288.723383][ T7860] netlink: 'syz.3.511': attribute type 1 has an invalid length. [ 289.484686][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'. [ 289.574708][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.513'. [ 290.434317][ T5834] Bluetooth: hci5: command tx timeout [ 290.900504][ T7866] netlink: 13 bytes leftover after parsing attributes in process `syz.3.514'. [ 291.099219][ T7851] chnl_net:caif_netlink_parms(): no params data found [ 291.344935][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 291.428488][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'. [ 292.525037][ T5834] Bluetooth: hci5: command tx timeout [ 294.309956][ T7851] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.453904][ T7851] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.461209][ T7851] bridge_slave_0: entered allmulticast mode [ 294.725331][ T5834] Bluetooth: hci5: command tx timeout [ 294.850145][ T7851] bridge_slave_0: entered promiscuous mode [ 294.952878][ T7851] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.960248][ T7851] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.967587][ T7851] bridge_slave_1: entered allmulticast mode [ 294.977580][ T7851] bridge_slave_1: entered promiscuous mode [ 295.012772][ T7851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.023574][ T7851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.045437][ T7914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.522'. [ 295.219097][ T7851] team0: Port device team_slave_0 added [ 295.270000][ T7851] team0: Port device team_slave_1 added [ 295.450429][ T7924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.895848][ T7851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.922836][ T7851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.143653][ T7851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.195778][ T7851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.281759][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 296.394338][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.526'. [ 296.978584][ T5834] Bluetooth: hci5: command tx timeout [ 296.980555][ T7936] net_ratelimit: 76 callbacks suppressed [ 296.980571][ T7936] netlink: zone id is out of range [ 296.980601][ T7936] netlink: zone id is out of range [ 296.980611][ T7936] netlink: zone id is out of range [ 296.980620][ T7936] netlink: zone id is out of range [ 296.980629][ T7936] netlink: zone id is out of range [ 296.980639][ T7936] netlink: zone id is out of range [ 296.980648][ T7936] netlink: zone id is out of range [ 296.980657][ T7936] netlink: zone id is out of range [ 296.980667][ T7936] netlink: zone id is out of range [ 296.980677][ T7936] netlink: zone id is out of range [ 297.246813][ T7851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.246845][ T7851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.555134][ T7851] hsr_slave_0: entered promiscuous mode [ 297.560574][ T7851] hsr_slave_1: entered promiscuous mode [ 297.561109][ T7851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.561168][ T7851] Cannot create hsr debugfs directory [ 297.605307][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.917242][ T7851] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 298.773233][ T7851] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 298.835155][ T7851] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 298.888951][ T7851] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 299.088481][ T5834] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 299.588262][ T7851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.123010][ T7851] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.141524][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.148706][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.178848][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.186080][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.108028][ T7851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.244618][ T7968] FAULT_INJECTION: forcing a failure. [ 301.244618][ T7968] name failslab, interval 1, probability 0, space 0, times 0 [ 301.288789][ T7968] CPU: 0 UID: 0 PID: 7968 Comm: syz.4.534 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 301.288812][ T7968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 301.288827][ T7968] Call Trace: [ 301.288834][ T7968] [ 301.288841][ T7968] dump_stack_lvl+0x241/0x360 [ 301.288874][ T7968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.288897][ T7968] ? __pfx__printk+0x10/0x10 [ 301.288921][ T7968] ? __kmalloc_cache_noprof+0x48/0x390 [ 301.288936][ T7968] ? __pfx___might_resched+0x10/0x10 [ 301.288948][ T7968] should_fail_ex+0x40a/0x550 [ 301.288962][ T7968] should_failslab+0xac/0x100 [ 301.288975][ T7968] __kmalloc_cache_noprof+0x70/0x390 [ 301.288986][ T7968] ? unix_prepare_fpl+0xf8/0x4d0 [ 301.289002][ T7968] unix_prepare_fpl+0xf8/0x4d0 [ 301.289017][ T7968] unix_scm_to_skb+0x2fe/0x4b0 [ 301.289030][ T7968] unix_dgram_sendmsg+0x61c/0x1df0 [ 301.289043][ T7968] ? smack_socket_sendmsg+0x178/0x540 [ 301.289059][ T7968] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 301.289074][ T7968] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 301.289088][ T7968] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 301.289106][ T7968] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 301.289116][ T7968] __sock_sendmsg+0x221/0x270 [ 301.289131][ T7968] ____sys_sendmsg+0x52a/0x7e0 [ 301.289145][ T7968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.289153][ T7968] ? __fget_files+0x2a/0x410 [ 301.289167][ T7968] ? __fget_files+0x2a/0x410 [ 301.289182][ T7968] __sys_sendmmsg+0x36a/0x720 [ 301.289196][ T7968] ? __pfx___sys_sendmmsg+0x10/0x10 [ 301.289211][ T7968] ? __pfx_lock_release+0x10/0x10 [ 301.289222][ T7968] ? kstrtouint_from_user+0x128/0x190 [ 301.289246][ T7968] ? ksys_write+0x22a/0x2b0 [ 301.289255][ T7968] ? __pfx_lock_release+0x10/0x10 [ 301.289269][ T7968] ? sb_end_write+0xe9/0x1c0 [ 301.289281][ T7968] ? vfs_write+0x7fa/0xd10 [ 301.289290][ T7968] ? __mutex_unlock_slowpath+0x227/0x800 [ 301.289316][ T7968] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 301.289328][ T7968] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 301.289340][ T7968] ? do_syscall_64+0x100/0x230 [ 301.289354][ T7968] __x64_sys_sendmmsg+0xa0/0xb0 [ 301.289364][ T7968] do_syscall_64+0xf3/0x230 [ 301.289376][ T7968] ? clear_bhb_loop+0x35/0x90 [ 301.289390][ T7968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.289406][ T7968] RIP: 0033:0x7fc7f198cde9 [ 301.289416][ T7968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.289424][ T7968] RSP: 002b:00007fc7f275f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 301.289441][ T7968] RAX: ffffffffffffffda RBX: 00007fc7f1ba5fa0 RCX: 00007fc7f198cde9 [ 301.289452][ T7968] RDX: 0000000000000001 RSI: 00004000000020c0 RDI: 000000000000000a [ 301.289461][ T7968] RBP: 00007fc7f275f090 R08: 0000000000000000 R09: 0000000000000000 [ 301.289471][ T7968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.289480][ T7968] R13: 0000000000000000 R14: 00007fc7f1ba5fa0 R15: 00007ffe6c1f6838 [ 301.289503][ T7968] [ 301.588585][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.888482][ T7984] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 303.136785][ T7851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.807037][ T8011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.377140][ T7851] veth0_vlan: entered promiscuous mode [ 307.418790][ T7851] veth1_vlan: entered promiscuous mode [ 307.911882][ T7851] veth0_macvtap: entered promiscuous mode [ 307.945615][ T7851] veth1_macvtap: entered promiscuous mode [ 307.981063][ T7851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.070237][ T7851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.182607][ T7851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.356980][ T8031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.545322][ T7851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.559627][ T7851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.577459][ T7851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.598819][ T7851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.609632][ T7851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.062353][ T7851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.074444][ T7851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.085588][ T7851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.099521][ T7851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.110085][ T7851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.120182][ T7851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.132107][ T7851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.142936][ T7851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.165694][ T59] block nbd0: Possible stuck request ffff88802580e000: control (read@0,4096B). Runtime 180 seconds [ 309.213930][ T7851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.224478][ T7851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.235703][ T7851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.245609][ T7851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.256289][ T7851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.269786][ T7851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.311332][ T7851] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.943348][ T7851] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.971769][ T7851] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.232742][ T8045] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 310.246439][ T7851] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.313000][ T8062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.764038][ T8069] net_ratelimit: 74 callbacks suppressed [ 313.764058][ T8069] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 313.794017][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.801913][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.847157][ T6091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.853861][ T8071] netlink: 'syz.4.555': attribute type 49 has an invalid length. [ 313.868793][ T6091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.895027][ T8069] netlink: 'syz.4.555': attribute type 49 has an invalid length. [ 313.914993][ T8076] FAULT_INJECTION: forcing a failure. [ 313.914993][ T8076] name failslab, interval 1, probability 0, space 0, times 0 [ 313.977329][ T8076] CPU: 0 UID: 0 PID: 8076 Comm: syz.2.556 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 313.977355][ T8076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 313.977365][ T8076] Call Trace: [ 313.977371][ T8076] [ 313.977378][ T8076] dump_stack_lvl+0x241/0x360 [ 313.977409][ T8076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.977433][ T8076] ? __pfx__printk+0x10/0x10 [ 313.977458][ T8076] ? __kmalloc_cache_noprof+0x48/0x390 [ 313.977480][ T8076] ? __pfx___might_resched+0x10/0x10 [ 313.977504][ T8076] should_fail_ex+0x40a/0x550 [ 313.977533][ T8076] should_failslab+0xac/0x100 [ 313.977555][ T8076] __kmalloc_cache_noprof+0x70/0x390 [ 313.977573][ T8076] ? __vb2_init_fileio+0x1e9/0xf90 [ 313.977598][ T8076] __vb2_init_fileio+0x1e9/0xf90 [ 313.977622][ T8076] ? trace_contention_end+0x3c/0x120 [ 313.977646][ T8076] ? __mutex_lock+0x397/0x1010 [ 313.977674][ T8076] __vb2_perform_fileio+0x31a/0x17b0 [ 313.977700][ T8076] ? __pfx___mutex_lock+0x10/0x10 [ 313.977726][ T8076] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 313.977759][ T8076] vb2_fop_write+0x21c/0x330 [ 313.977784][ T8076] v4l2_write+0x1a4/0x2c0 [ 313.977802][ T8076] ? __pfx_v4l2_write+0x10/0x10 [ 313.977820][ T8076] vfs_write+0x29f/0xd10 [ 313.977838][ T8076] ? __mutex_unlock_slowpath+0x227/0x800 [ 313.977862][ T8076] ? __pfx_vfs_write+0x10/0x10 [ 313.977883][ T8076] ? do_sys_openat2+0x17a/0x1d0 [ 313.977906][ T8076] ? __fget_files+0x2a/0x410 [ 313.977928][ T8076] ? __fget_files+0x395/0x410 [ 313.977946][ T8076] ? __fget_files+0x2a/0x410 [ 313.977974][ T8076] ksys_write+0x18f/0x2b0 [ 313.977992][ T8076] ? __pfx_ksys_write+0x10/0x10 [ 313.978009][ T8076] ? do_syscall_64+0x100/0x230 [ 313.978033][ T8076] ? do_syscall_64+0xb6/0x230 [ 313.978056][ T8076] do_syscall_64+0xf3/0x230 [ 313.978076][ T8076] ? clear_bhb_loop+0x35/0x90 [ 313.978099][ T8076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.978119][ T8076] RIP: 0033:0x7f6af758cde9 [ 313.978134][ T8076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.978148][ T8076] RSP: 002b:00007f6af53f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 313.978166][ T8076] RAX: ffffffffffffffda RBX: 00007f6af77a5fa0 RCX: 00007f6af758cde9 [ 313.978178][ T8076] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000005 [ 313.978187][ T8076] RBP: 00007f6af53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 313.978195][ T8076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.978204][ T8076] R13: 0000000000000000 R14: 00007f6af77a5fa0 R15: 00007ffd7ae90b78 [ 313.978231][ T8076] [ 314.239690][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.292644][ T8080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.102244][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 317.115834][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.562'. [ 317.543686][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.550505][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.984615][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.563'. [ 318.070841][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.5.563'. [ 318.900351][ T8122] random: crng reseeded on system resumption [ 320.676454][ T8179] netlink: 'syz.0.570': attribute type 10 has an invalid length. [ 321.685455][ T51] kernel write not supported for file /amidi2 (pid: 51 comm: kworker/1:1) [ 322.619626][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.576'. [ 322.633443][ T8195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 326.054847][ T8216] netlink: 'syz.0.577': attribute type 12 has an invalid length. [ 326.062788][ T8216] netlink: 'syz.0.577': attribute type 29 has an invalid length. [ 326.073071][ T8216] netlink: 148 bytes leftover after parsing attributes in process `syz.0.577'. [ 326.082425][ T8216] netlink: 59 bytes leftover after parsing attributes in process `syz.0.577'. [ 326.734158][ T58] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 327.820818][ T8231] netlink: 'syz.0.584': attribute type 12 has an invalid length. [ 327.829549][ T8231] netlink: 'syz.0.584': attribute type 29 has an invalid length. [ 327.838453][ T8231] netlink: 148 bytes leftover after parsing attributes in process `syz.0.584'. [ 327.848058][ T8231] netlink: 59 bytes leftover after parsing attributes in process `syz.0.584'. [ 329.294272][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.587'. [ 329.811512][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.590'. [ 330.364258][ T8253] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 330.390479][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.682875][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.589'. [ 331.180211][ T8253] CIFS mount error: No usable UNC path provided in device string! [ 331.180211][ T8253] [ 331.191542][ T8253] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 331.413169][ T8263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.423930][ T8271] mkiss: ax0: crc mode is auto. [ 332.461489][ T8272] capability: warning: `syz.5.594' uses 32-bit capabilities (legacy support in use) [ 332.638074][ T8271] mkiss: ax0: crc mode is auto. [ 333.681453][ T58] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 334.100858][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 334.185865][ T58] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 334.226205][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 334.720075][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 334.740924][ T58] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 334.918654][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 335.660870][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 335.682903][ T58] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 335.779738][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.823875][ T58] usb 3-1: Product: syz [ 335.824877][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 335.824892][ T29] audit: type=1326 audit(1739520414.733:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8278 comm="syz.0.596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f858e38cde9 code=0x0 [ 335.830828][ T58] usb 3-1: Manufacturer: syz [ 335.994924][ T58] usb 3-1: SerialNumber: syz [ 336.243606][ T58] usb 3-1: config 0 descriptor?? [ 336.347291][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'. [ 336.483244][ T58] usb 3-1: USB disconnect, device number 15 [ 338.819252][ T8322] FAULT_INJECTION: forcing a failure. [ 338.819252][ T8322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.832785][ T8322] CPU: 0 UID: 0 PID: 8322 Comm: syz.5.606 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 338.832799][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 338.832805][ T8322] Call Trace: [ 338.832809][ T8322] [ 338.832814][ T8322] dump_stack_lvl+0x241/0x360 [ 338.832834][ T8322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.832849][ T8322] ? __pfx__printk+0x10/0x10 [ 338.832870][ T8322] ? __pfx_lock_release+0x10/0x10 [ 338.832882][ T8322] ? __lock_acquire+0x1397/0x2100 [ 338.832897][ T8322] should_fail_ex+0x40a/0x550 [ 338.832910][ T8322] _copy_from_user+0x2d/0xb0 [ 338.832920][ T8322] kstrtouint_from_user+0xc6/0x190 [ 338.832934][ T8322] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 338.832949][ T8322] ? __pfx_lock_acquire+0x10/0x10 [ 338.832965][ T8322] proc_fail_nth_write+0xaa/0x2d0 [ 338.832977][ T8322] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 338.832992][ T8322] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 338.833006][ T8322] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 338.833017][ T8322] vfs_write+0x29f/0xd10 [ 338.833028][ T8322] ? fdget_pos+0x254/0x320 [ 338.833039][ T8322] ? __mutex_unlock_slowpath+0x227/0x800 [ 338.833054][ T8322] ? __pfx_vfs_write+0x10/0x10 [ 338.833067][ T8322] ? do_sys_openat2+0x17a/0x1d0 [ 338.833081][ T8322] ? __fget_files+0x2a/0x410 [ 338.833094][ T8322] ? __fget_files+0x395/0x410 [ 338.833104][ T8322] ? __fget_files+0x2a/0x410 [ 338.833120][ T8322] ksys_write+0x18f/0x2b0 [ 338.833130][ T8322] ? __pfx_ksys_write+0x10/0x10 [ 338.833140][ T8322] ? do_syscall_64+0x100/0x230 [ 338.833154][ T8322] ? do_syscall_64+0xb6/0x230 [ 338.833167][ T8322] do_syscall_64+0xf3/0x230 [ 338.833179][ T8322] ? clear_bhb_loop+0x35/0x90 [ 338.833194][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.833206][ T8322] RIP: 0033:0x7f10e498b89f [ 338.833216][ T8322] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 338.833225][ T8322] RSP: 002b:00007f10e589a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 338.833236][ T8322] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10e498b89f [ 338.833242][ T8322] RDX: 0000000000000001 RSI: 00007f10e589a0a0 RDI: 0000000000000007 [ 338.833249][ T8322] RBP: 00007f10e589a090 R08: 0000000000000000 R09: 0000000000000000 [ 338.833254][ T8322] R10: 000000000000000e R11: 0000000000000293 R12: 0000000000000001 [ 338.833260][ T8322] R13: 0000000000000000 R14: 00007f10e4ba5fa0 R15: 00007ffe13026878 [ 338.833274][ T8322] [ 339.104497][ T8326] FAULT_INJECTION: forcing a failure. [ 339.104497][ T8326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.181646][ T8329] Bluetooth: MGMT ver 1.23 [ 339.198326][ T8326] CPU: 0 UID: 0 PID: 8326 Comm: syz.0.608 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 339.198352][ T8326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 339.198362][ T8326] Call Trace: [ 339.198368][ T8326] [ 339.198376][ T8326] dump_stack_lvl+0x241/0x360 [ 339.198407][ T8326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.198423][ T8326] ? __pfx__printk+0x10/0x10 [ 339.198438][ T8326] ? __pfx_lock_release+0x10/0x10 [ 339.198454][ T8326] should_fail_ex+0x40a/0x550 [ 339.198468][ T8326] _copy_from_user+0x2d/0xb0 [ 339.198479][ T8326] memdup_user+0x64/0xc0 [ 339.198493][ T8326] strndup_user+0x68/0xc0 [ 339.198506][ T8326] __se_sys_mount+0x9f/0x3c0 [ 339.198519][ T8326] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 339.198531][ T8326] ? __pfx___se_sys_mount+0x10/0x10 [ 339.198543][ T8326] ? do_syscall_64+0x100/0x230 [ 339.198558][ T8326] ? __x64_sys_mount+0x20/0xc0 [ 339.198570][ T8326] do_syscall_64+0xf3/0x230 [ 339.198582][ T8326] ? clear_bhb_loop+0x35/0x90 [ 339.198597][ T8326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.198608][ T8326] RIP: 0033:0x7f858e38cde9 [ 339.198618][ T8326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.198627][ T8326] RSP: 002b:00007f858f258038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 339.198638][ T8326] RAX: ffffffffffffffda RBX: 00007f858e5a6080 RCX: 00007f858e38cde9 [ 339.198645][ T8326] RDX: 00004000000028c0 RSI: 0000400000002880 RDI: 0000000000000000 [ 339.198651][ T8326] RBP: 00007f858f258090 R08: 0000400000000080 R09: 0000000000000000 [ 339.198657][ T8326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.198662][ T8326] R13: 0000000000000001 R14: 00007f858e5a6080 R15: 00007ffcd1201e18 [ 339.198676][ T8326] [ 339.450810][ T59] block nbd0: Possible stuck request ffff88802580e000: control (read@0,4096B). Runtime 210 seconds [ 339.546471][ T8336] fuse: Bad value for 'fd' [ 340.833986][ T5904] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 341.073865][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 341.101760][ T5904] usb 3-1: config index 0 descriptor too short (expected 42, got 18) [ 341.129234][ T5904] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 341.184522][ T51] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 341.294161][ T5831] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 341.628320][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 341.677480][ T5904] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 341.689188][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 341.698413][ T5904] usb 3-1: Product: syz [ 341.703365][ T5904] usb 3-1: SerialNumber: syz [ 341.713899][ T5904] r8152-cfgselector 3-1: Unknown version 0x0000 [ 341.729803][ T5904] r8152-cfgselector 3-1: config 0 descriptor?? [ 341.738316][ T5904] hub 3-1:0.0: bad descriptor, ignoring hub [ 341.746915][ T5904] hub 3-1:0.0: probe with driver hub failed with error -5 [ 341.787632][ T51] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 341.803851][ T5831] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 341.834130][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.848865][ T5831] usb 1-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 341.880007][ T5831] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 341.890572][ T51] usb 4-1: config 0 descriptor?? [ 341.910641][ T51] cp210x 4-1:0.0: cp210x converter detected [ 341.919637][ T5831] usb 1-1: config 1 has no interface number 1 [ 341.931615][ T5831] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 341.946582][ T5831] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 341.965221][ T8341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.973959][ T8341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.984695][ T5831] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.001745][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.011276][ T5831] usb 1-1: Product: syz [ 342.016038][ T5831] usb 1-1: Manufacturer: syz [ 342.021081][ T5831] usb 1-1: SerialNumber: syz [ 342.175701][ T5933] r8152-cfgselector 3-1: USB disconnect, device number 16 [ 342.593428][ T51] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 343.115702][ T51] usb 4-1: cp210x converter now attached to ttyUSB0 [ 343.193172][ T5831] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 343.226587][ T5831] usb 1-1: MIDIStreaming interface descriptor not found [ 343.293237][ T8371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.752687][ T5831] usb 1-1: USB disconnect, device number 13 [ 344.843924][ T25] usb 4-1: USB disconnect, device number 14 [ 344.991892][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 345.056174][ T25] cp210x 4-1:0.0: device disconnected [ 345.129163][ T8394] netlink: 'syz.0.625': attribute type 1 has an invalid length. [ 345.182124][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.375879][ T8397] netlink: 'syz.2.624': attribute type 12 has an invalid length. [ 346.383945][ T8397] netlink: 'syz.2.624': attribute type 29 has an invalid length. [ 346.393384][ T8397] netlink: 148 bytes leftover after parsing attributes in process `syz.2.624'. [ 346.405154][ T8397] netlink: 59 bytes leftover after parsing attributes in process `syz.2.624'. [ 348.557658][ T8422] netlink: 'syz.5.631': attribute type 10 has an invalid length. [ 348.579673][ T8422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.596424][ T8422] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 349.361072][ T8426] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 349.559199][ T8434] netlink: 'syz.2.636': attribute type 10 has an invalid length. [ 350.469205][ T8440] program syz.5.638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 351.421943][ T8438] ALSA: mixer_oss: invalid OSS volume '' [ 351.466541][ T8446] overlay: ./bus is not a directory [ 351.670066][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 352.244066][ T5904] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 352.306158][ T8463] random: crng reseeded on system resumption [ 353.587701][ T5904] usb 5-1: not running at top speed; connect to a high speed hub [ 353.600861][ T5904] usb 5-1: config 1 interface 0 altsetting 145 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 353.613006][ T5904] usb 5-1: config 1 interface 0 altsetting 145 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 353.870669][ T5904] usb 5-1: config 1 interface 0 has no altsetting 0 [ 353.914176][ T5904] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 353.925227][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.933280][ T5904] usb 5-1: Product: syz [ 353.970318][ T5904] usb 5-1: Manufacturer: syz [ 353.976405][ T5904] usb 5-1: SerialNumber: syz [ 354.002624][ T8456] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 354.677411][ T8456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.757425][ T8456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.862423][ T8515] FAULT_INJECTION: forcing a failure. [ 354.862423][ T8515] name failslab, interval 1, probability 0, space 0, times 0 [ 354.951518][ T8515] CPU: 0 UID: 0 PID: 8515 Comm: syz.0.651 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 354.951552][ T8515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 354.951563][ T8515] Call Trace: [ 354.951568][ T8515] [ 354.951576][ T8515] dump_stack_lvl+0x241/0x360 [ 354.951608][ T8515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.951633][ T8515] ? __pfx__printk+0x10/0x10 [ 354.951657][ T8515] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 354.951679][ T8515] ? __pfx___might_resched+0x10/0x10 [ 354.951700][ T8515] should_fail_ex+0x40a/0x550 [ 354.951724][ T8515] should_failslab+0xac/0x100 [ 354.951745][ T8515] ? __d_alloc+0x31/0x670 [ 354.951765][ T8515] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 354.951792][ T8515] __d_alloc+0x31/0x670 [ 354.951815][ T8515] d_alloc_pseudo+0x1f/0xb0 [ 354.951838][ T8515] alloc_file_pseudo+0x141/0x320 [ 354.951863][ T8515] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 354.951880][ T8515] ? __local_bh_enable_ip+0x168/0x200 [ 354.951895][ T8515] ? bpf_link_prime+0x7a/0x240 [ 354.951910][ T8515] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 354.951926][ T8515] anon_inode_getfile+0xc8/0x180 [ 354.951940][ T8515] bpf_link_prime+0xff/0x240 [ 354.951954][ T8515] bpf_xdp_link_attach+0x220/0x6f0 [ 354.951973][ T8515] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 354.951989][ T8515] ? __pfx_lock_release+0x10/0x10 [ 354.952008][ T8515] ? __fget_files+0x395/0x410 [ 354.952019][ T8515] ? __fget_files+0x2a/0x410 [ 354.952032][ T8515] ? attach_type_to_prog_type+0x316/0x460 [ 354.952043][ T8515] ? bpf_prog_attach_check_attach_type+0x2cb/0x4f0 [ 354.952057][ T8515] link_create+0x440/0x870 [ 354.952071][ T8515] __sys_bpf+0x4bc/0x810 [ 354.952082][ T8515] ? __pfx___sys_bpf+0x10/0x10 [ 354.952098][ T8515] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 354.952111][ T8515] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.952123][ T8515] ? do_syscall_64+0x100/0x230 [ 354.952138][ T8515] __x64_sys_bpf+0x7c/0x90 [ 354.952148][ T8515] do_syscall_64+0xf3/0x230 [ 354.952160][ T8515] ? clear_bhb_loop+0x35/0x90 [ 354.952175][ T8515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.952188][ T8515] RIP: 0033:0x7f858e38cde9 [ 354.952198][ T8515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.952206][ T8515] RSP: 002b:00007f858f279038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 354.952217][ T8515] RAX: ffffffffffffffda RBX: 00007f858e5a5fa0 RCX: 00007f858e38cde9 [ 354.952224][ T8515] RDX: 0000000000000040 RSI: 0000400000000240 RDI: 000000000000001c [ 354.952230][ T8515] RBP: 00007f858f279090 R08: 0000000000000000 R09: 0000000000000000 [ 354.952236][ T8515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.952241][ T8515] R13: 0000000000000000 R14: 00007f858e5a5fa0 R15: 00007ffcd1201e18 [ 354.952256][ T8515] [ 355.231450][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.328955][ T5904] usb 5-1: USB disconnect, device number 15 [ 357.608612][ T8546] netlink: 'syz.4.655': attribute type 12 has an invalid length. [ 357.616893][ T8546] netlink: 'syz.4.655': attribute type 29 has an invalid length. [ 357.624955][ T8546] netlink: 148 bytes leftover after parsing attributes in process `syz.4.655'. [ 357.634501][ T8546] netlink: 59 bytes leftover after parsing attributes in process `syz.4.655'. [ 360.539977][ T8574] netlink: 36 bytes leftover after parsing attributes in process `syz.0.662'. [ 361.324041][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 363.123440][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 363.136366][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.669'. [ 367.764958][ T8629] kAFS: unable to lookup cell '/yz1' [ 367.859055][ T8629] netdevsim netdevsim4: Direct firmware load for . [ 367.859055][ T8629] failed with error -2 [ 367.870181][ T8629] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 367.870181][ T8629] [ 368.345038][ T8632] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 369.434293][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'. [ 369.946741][ T59] block nbd0: Possible stuck request ffff88802580e000: control (read@0,4096B). Runtime 240 seconds [ 370.286543][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.681'. [ 370.299696][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.681'. [ 371.943548][ T8657] netlink: 'syz.2.680': attribute type 12 has an invalid length. [ 371.951628][ T8657] netlink: 'syz.2.680': attribute type 29 has an invalid length. [ 371.959885][ T8657] netlink: 148 bytes leftover after parsing attributes in process `syz.2.680'. [ 371.969130][ T8657] netlink: 59 bytes leftover after parsing attributes in process `syz.2.680'. [ 372.074101][ T51] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 372.628156][ T51] usb 1-1: Using ep0 maxpacket: 16 [ 372.660549][ T51] usb 1-1: config index 0 descriptor too short (expected 42, got 18) [ 372.682044][ T51] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 372.709988][ T51] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 372.786595][ T8664] team0: No ports can be present during mode change [ 372.814830][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.686'. [ 373.219166][ T51] usb 1-1: string descriptor 0 read error: -71 [ 373.232295][ T51] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 373.241658][ T51] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 373.258308][ T51] r8152-cfgselector 1-1: Unknown version 0x0000 [ 373.265315][ T51] r8152-cfgselector 1-1: config 0 descriptor?? [ 373.272706][ T51] r8152-cfgselector 1-1: can't set config #0, error -71 [ 373.297724][ T51] r8152-cfgselector 1-1: USB disconnect, device number 14 [ 374.423529][ T8664] team0 (unregistering): Port device team_slave_0 removed [ 375.015638][ T8664] team0 (unregistering): Port device team_slave_1 removed [ 375.123998][ T5904] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 375.358307][ T5904] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 375.373937][ T5904] usb 4-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 375.442962][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 376.192010][ T5904] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 376.230961][ T5904] usb 4-1: config 1 has no interface number 1 [ 376.241686][ T5904] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 376.322557][ T5904] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 376.370614][ T5904] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 376.386944][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.402605][ T5904] usb 4-1: Product: syz [ 376.411022][ T5904] usb 4-1: Manufacturer: syz [ 376.427480][ T5904] usb 4-1: SerialNumber: syz [ 376.713705][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.693'. [ 376.727314][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.5.693'. [ 377.374032][ T5904] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 377.440014][ T5904] usb 4-1: MIDIStreaming interface descriptor not found [ 377.632981][ T5904] usb 4-1: USB disconnect, device number 15 [ 378.864227][ T6805] udevd[6805]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.912064][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.088008][ T58] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 380.839872][ T58] usb 6-1: Using ep0 maxpacket: 16 [ 381.144277][ T58] usb 6-1: config index 0 descriptor too short (expected 42, got 18) [ 381.172817][ T58] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 381.227044][ T58] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 381.292453][ T58] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 381.332196][ T58] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 381.360733][ T58] usb 6-1: Product: syz [ 381.377626][ T58] usb 6-1: SerialNumber: syz [ 381.413941][ T58] r8152-cfgselector 6-1: Unknown version 0x0000 [ 381.433135][ T58] r8152-cfgselector 6-1: config 0 descriptor?? [ 381.624328][ T58] hub 6-1:0.0: bad descriptor, ignoring hub [ 381.640646][ T58] hub 6-1:0.0: probe with driver hub failed with error -5 [ 381.706272][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 382.505331][ T5831] r8152-cfgselector 6-1: USB disconnect, device number 2 [ 382.968177][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'. [ 382.982171][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.704'. [ 383.932768][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'. [ 386.152239][ T8773] netlink: 'syz.3.712': attribute type 12 has an invalid length. [ 386.160754][ T8773] netlink: 'syz.3.712': attribute type 29 has an invalid length. [ 386.169000][ T8773] netlink: 148 bytes leftover after parsing attributes in process `syz.3.712'. [ 386.180241][ T8773] netlink: 59 bytes leftover after parsing attributes in process `syz.3.712'. [ 388.369452][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.715'. [ 389.067679][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.5.718'. [ 389.147879][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.718'. [ 391.532160][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.721'. [ 392.752040][ T8825] kvm: kvm [8824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7100 [ 392.776736][ T8825] kvm: kvm [8824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x7954 [ 392.891454][ T8825] kvm: kvm [8824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x7128 [ 392.910093][ T8825] kvm: kvm [8824]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x7108 [ 393.323380][ T8835] netlink: 'syz.5.723': attribute type 10 has an invalid length. [ 393.350493][ T5831] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 394.251088][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 394.283078][ T5831] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 394.300227][ T5831] usb 4-1: config 0 has no interface number 0 [ 394.312708][ T5831] usb 4-1: config 0 interface 12 has no altsetting 0 [ 394.329257][ T5831] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 394.353330][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.371749][ T5831] usb 4-1: Product: syz [ 394.384397][ T5831] usb 4-1: Manufacturer: syz [ 394.389178][ T5831] usb 4-1: SerialNumber: syz [ 394.462874][ T5831] usb 4-1: config 0 descriptor?? [ 395.134520][ T8838] Cache volume key already in use (9p,(null),) [ 396.153207][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 396.510620][ T5831] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 396.727838][ T5831] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32 [ 396.943425][ T5831] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 397.003647][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.733'. [ 397.013664][ T8860] netlink: 12 bytes leftover after parsing attributes in process `syz.5.733'. [ 397.042242][ T5831] f81534 4-1:0.12: probe with driver f81534 failed with error -32 [ 397.054632][ T5831] usb 4-1: USB disconnect, device number 16 [ 399.215810][ T8879] netlink: 'syz.0.737': attribute type 10 has an invalid length. [ 400.023501][ T8887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.146584][ T59] block nbd0: Possible stuck request ffff88802580e000: control (read@0,4096B). Runtime 270 seconds [ 400.430088][ T8886] lo: entered allmulticast mode [ 400.562038][ T8898] FAULT_INJECTION: forcing a failure. [ 400.562038][ T8898] name failslab, interval 1, probability 0, space 0, times 0 [ 400.611412][ T8898] CPU: 1 UID: 0 PID: 8898 Comm: syz.4.742 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 400.611439][ T8898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 400.611450][ T8898] Call Trace: [ 400.611456][ T8898] [ 400.611463][ T8898] dump_stack_lvl+0x241/0x360 [ 400.611497][ T8898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.611526][ T8898] ? __wake_up_klogd+0xcc/0x110 [ 400.611553][ T8898] should_fail_ex+0x40a/0x550 [ 400.611577][ T8898] should_failslab+0xac/0x100 [ 400.611598][ T8898] ? alloc_empty_file+0x9e/0x1d0 [ 400.611617][ T8898] kmem_cache_alloc_noprof+0x70/0x380 [ 400.611642][ T8898] alloc_empty_file+0x9e/0x1d0 [ 400.611664][ T8898] alloc_file_clone+0x58/0xe0 [ 400.611687][ T8898] do_shmat+0x6f7/0xc70 [ 400.611706][ T8898] ? do_shmat+0x2b5/0xc70 [ 400.611728][ T8898] ? __pfx_do_shmat+0x10/0x10 [ 400.611754][ T8898] __x64_sys_shmat+0x106/0x190 [ 400.611779][ T8898] ? __pfx___x64_sys_shmat+0x10/0x10 [ 400.611798][ T8898] ? do_syscall_64+0x100/0x230 [ 400.611822][ T8898] ? do_syscall_64+0xb6/0x230 [ 400.611845][ T8898] do_syscall_64+0xf3/0x230 [ 400.611865][ T8898] ? clear_bhb_loop+0x35/0x90 [ 400.611888][ T8898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.611908][ T8898] RIP: 0033:0x7fc7f198cde9 [ 400.611923][ T8898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.611937][ T8898] RSP: 002b:00007fc7f273e038 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 400.611956][ T8898] RAX: ffffffffffffffda RBX: 00007fc7f1ba6080 RCX: 00007fc7f198cde9 [ 400.611967][ T8898] RDX: 0000000000007000 RSI: 0000400000ffd000 RDI: 0000000000000001 [ 400.611978][ T8898] RBP: 00007fc7f273e090 R08: 0000000000000000 R09: 0000000000000000 [ 400.611988][ T8898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.611997][ T8898] R13: 0000000000000001 R14: 00007fc7f1ba6080 R15: 00007ffe6c1f6838 [ 400.612021][ T8898] [ 400.882632][ T8883] lo: left allmulticast mode [ 401.380341][ T8895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.444427][ T8896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.741'. [ 402.067616][ T8912] netlink: zone id is out of range [ 402.120584][ T8912] netlink: zone id is out of range [ 402.216908][ T8912] netlink: set zone limit has 4 unknown bytes [ 403.447455][ T8930] netlink: 'syz.2.751': attribute type 10 has an invalid length. [ 403.594083][ T5875] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 403.904097][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 404.029419][ T8934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.159135][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.233300][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.313719][ T5875] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 404.423525][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.527416][ T5875] usb 5-1: config 0 descriptor?? [ 405.274241][ T5875] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 406.461511][ T8949] random: crng reseeded on system resumption [ 407.524606][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.760'. [ 407.642789][ T8974] netlink: 'syz.5.760': attribute type 12 has an invalid length. [ 407.651083][ T8974] netlink: 'syz.5.760': attribute type 29 has an invalid length. [ 407.659433][ T8974] netlink: 148 bytes leftover after parsing attributes in process `syz.5.760'. [ 407.668941][ T8974] netlink: 59 bytes leftover after parsing attributes in process `syz.5.760'. [ 408.137583][ T8977] FAULT_INJECTION: forcing a failure. [ 408.137583][ T8977] name failslab, interval 1, probability 0, space 0, times 0 [ 408.163956][ T8977] CPU: 1 UID: 0 PID: 8977 Comm: syz.3.761 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 408.163995][ T8977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 408.164005][ T8977] Call Trace: [ 408.164011][ T8977] [ 408.164018][ T8977] dump_stack_lvl+0x241/0x360 [ 408.164050][ T8977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.164074][ T8977] ? __pfx__printk+0x10/0x10 [ 408.164098][ T8977] ? fs_reclaim_acquire+0x93/0x130 [ 408.164115][ T8977] ? __pfx___might_resched+0x10/0x10 [ 408.164136][ T8977] should_fail_ex+0x40a/0x550 [ 408.164160][ T8977] should_failslab+0xac/0x100 [ 408.164181][ T8977] __kmalloc_noprof+0xdd/0x4c0 [ 408.164200][ T8977] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 408.164215][ T8977] ? __lock_acquire+0x1397/0x2100 [ 408.164238][ T8977] tomoyo_realpath_from_path+0xcf/0x5e0 [ 408.164266][ T8977] tomoyo_check_open_permission+0x258/0x4f0 [ 408.164291][ T8977] ? tomoyo_check_open_permission+0x207/0x4f0 [ 408.164313][ T8977] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 408.164370][ T8977] ? do_raw_spin_unlock+0x13c/0x8b0 [ 408.164385][ T8977] ? tomoyo_file_open+0x165/0x220 [ 408.164408][ T8977] security_file_open+0xac/0x250 [ 408.164430][ T8977] do_dentry_open+0x320/0x1960 [ 408.164457][ T8977] ? vfs_open+0x31/0x370 [ 408.164480][ T8977] vfs_open+0x3b/0x370 [ 408.164502][ T8977] path_openat+0x2c81/0x3590 [ 408.164554][ T8977] ? __pfx_path_openat+0x10/0x10 [ 408.164595][ T8977] do_filp_open+0x27f/0x4e0 [ 408.164620][ T8977] ? __pfx_do_filp_open+0x10/0x10 [ 408.164641][ T8977] ? do_raw_spin_lock+0x14f/0x370 [ 408.164694][ T8977] do_sys_openat2+0x13e/0x1d0 [ 408.164716][ T8977] ? __pfx_do_sys_openat2+0x10/0x10 [ 408.164734][ T8977] ? __fget_files+0x2a/0x410 [ 408.164758][ T8977] ? __fget_files+0x2a/0x410 [ 408.164782][ T8977] __x64_sys_openat+0x247/0x2a0 [ 408.164805][ T8977] ? __pfx___x64_sys_openat+0x10/0x10 [ 408.164829][ T8977] ? do_syscall_64+0x100/0x230 [ 408.164853][ T8977] ? do_syscall_64+0xb6/0x230 [ 408.164876][ T8977] do_syscall_64+0xf3/0x230 [ 408.164896][ T8977] ? clear_bhb_loop+0x35/0x90 [ 408.164920][ T8977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.164939][ T8977] RIP: 0033:0x7f3e6ad8b750 [ 408.164954][ T8977] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 408.164973][ T8977] RSP: 002b:00007f3e6bb4bb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 408.164991][ T8977] RAX: ffffffffffffffda RBX: 0000000000004400 RCX: 00007f3e6ad8b750 [ 408.165003][ T8977] RDX: 0000000000004400 RSI: 00007f3e6bb4bc10 RDI: 00000000ffffff9c [ 408.165013][ T8977] RBP: 00007f3e6bb4bc10 R08: 0000000000000000 R09: 0023647261632f69 [ 408.165028][ T8977] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 408.165038][ T8977] R13: 0000000000000000 R14: 00007f3e6afa5fa0 R15: 00007ffe1052d318 [ 408.165063][ T8977] [ 408.165071][ T8977] ERROR: Out of memory at tomoyo_realpath_from_path. [ 409.057416][ T8984] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 409.227478][ T5875] usb 5-1: USB disconnect, device number 16 [ 409.247603][ T8986] netlink: 'syz.5.764': attribute type 10 has an invalid length. [ 411.215510][ T8996] XFS (nullb0): Invalid superblock magic number [ 411.707690][ T5136] Bluetooth: hci5: command 0x0406 tx timeout [ 411.964018][ T5904] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 412.145535][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.286400][ T5873] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 412.397384][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.689895][ T5873] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 412.734394][ T5904] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 412.829561][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.839197][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.865457][ T5873] usb 1-1: Product: syz [ 412.869710][ T5873] usb 1-1: Manufacturer: syz [ 412.920930][ T9028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.942253][ T5904] usb 6-1: config 0 descriptor?? [ 413.204662][ T5873] usb 1-1: SerialNumber: syz [ 413.326873][ T5873] usb 1-1: config 0 descriptor?? [ 413.574626][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 413.591944][ T5873] usb 1-1: USB disconnect, device number 15 [ 413.720367][ T9035] netlink: 'syz.2.775': attribute type 12 has an invalid length. [ 413.730322][ T9035] netlink: 'syz.2.775': attribute type 29 has an invalid length. [ 413.738747][ T9035] netlink: 148 bytes leftover after parsing attributes in process `syz.2.775'. [ 413.749601][ T9035] netlink: 59 bytes leftover after parsing attributes in process `syz.2.775'. [ 414.942538][ T9052] netlink: 'syz.3.779': attribute type 10 has an invalid length. [ 415.167593][ T51] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 416.111791][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.257695][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.443893][ T51] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.481570][ T5904] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 416.497097][ T51] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 416.507335][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.514021][ T5904] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 416.529729][ T5904] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 416.539183][ T51] usb 5-1: config 0 descriptor?? [ 416.764091][ T5904] usb 6-1: USB disconnect, device number 3 [ 416.807302][ T9060] random: crng reseeded on system resumption [ 419.331442][ T51] playstation 0003:054C:0BA0.0005: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 419.629837][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'. [ 420.397423][ T9074] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 420.432810][ T9074] macvtap1: entered promiscuous mode [ 420.451606][ T9074] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 420.930470][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 421.926965][ T51] playstation 0003:054C:0BA0.0005: Failed to retrieve feature with reportID 18: -71 [ 422.047914][ T9089] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 422.390462][ T51] playstation 0003:054C:0BA0.0005: Failed to retrieve DualShock4 pairing info: -71 [ 422.424121][ T9090] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 422.446608][ T51] playstation 0003:054C:0BA0.0005: Failed to get MAC address from DualShock4 [ 422.498252][ T51] playstation 0003:054C:0BA0.0005: Failed to create dualshock4. [ 422.588540][ T51] playstation 0003:054C:0BA0.0005: probe with driver playstation failed with error -71 [ 422.624130][ T51] usb 5-1: USB disconnect, device number 17 [ 422.710204][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.791'. [ 422.887622][ T9100] netlink: 'syz.0.791': attribute type 12 has an invalid length. [ 422.887778][ T9100] netlink: 'syz.0.791': attribute type 29 has an invalid length. [ 422.887893][ T9100] netlink: 148 bytes leftover after parsing attributes in process `syz.0.791'. [ 422.888097][ T9100] netlink: 59 bytes leftover after parsing attributes in process `syz.0.791'. [ 423.415094][ T9103] netlink: 'syz.2.792': attribute type 10 has an invalid length. [ 427.992119][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.804'. [ 428.014900][ T51] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 428.103281][ T9144] netlink: 'syz.4.803': attribute type 10 has an invalid length. [ 428.268974][ T51] usb 3-1: device descriptor read/64, error -71 [ 428.566232][ T51] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 428.831874][ T51] usb 3-1: device descriptor read/64, error -71 [ 428.890757][ T9146] netlink: 'syz.5.804': attribute type 12 has an invalid length. [ 428.899667][ T9146] netlink: 'syz.5.804': attribute type 29 has an invalid length. [ 428.908097][ T9146] netlink: 148 bytes leftover after parsing attributes in process `syz.5.804'. [ 428.917643][ T9146] netlink: 59 bytes leftover after parsing attributes in process `syz.5.804'. [ 429.015868][ T51] usb usb3-port1: attempt power cycle [ 429.474167][ T51] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 429.547325][ T51] usb 3-1: device descriptor read/8, error -71 [ 429.897127][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.808'. [ 429.958148][ T51] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 430.047385][ T51] usb 3-1: device descriptor read/8, error -71 [ 430.299470][ T51] usb usb3-port1: unable to enumerate USB device [ 430.945466][ T59] block nbd0: Possible stuck request ffff88802580e000: control (read@0,4096B). Runtime 300 seconds [ 431.186427][ T9169] geneve2: entered promiscuous mode [ 431.192105][ T9169] geneve2: entered allmulticast mode [ 432.055620][ T9186] netlink: 'syz.5.815': attribute type 10 has an invalid length. [ 432.274295][ T51] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 433.031271][ T51] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.041905][ T51] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.096915][ T51] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 433.107422][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 433.186686][ T51] usb 4-1: SerialNumber: syz [ 433.476424][ T51] usb 4-1: 0:2 : does not exist [ 433.530784][ T51] usb 4-1: USB disconnect, device number 17 [ 433.774078][ T6883] udevd[6883]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.837127][ T5875] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 433.997249][ T30] INFO: task syz.1.464:7689 blocked for more than 143 seconds. [ 434.048343][ T30] Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 434.097726][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.154154][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 434.212745][ T5875] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 434.221909][ T30] task:syz.1.464 state:D stack:25168 pid:7689 tgid:7680 ppid:5819 task_flags:0x400140 flags:0x00004006 [ 434.296215][ T5875] usb 1-1: config 0 has no interface number 0 [ 434.302388][ T5875] usb 1-1: New USB device found, idVendor=0664, idProduct=0306, bcdDevice=eb.63 [ 434.342523][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.344525][ T30] Call Trace: [ 434.376289][ T30] [ 434.392244][ T30] __schedule+0x18bc/0x4c40 [ 434.410436][ T30] ? __pfx___schedule+0x10/0x10 [ 434.428038][ T30] ? __pfx_lock_release+0x10/0x10 [ 434.430636][ T5875] usb 1-1: config 0 descriptor?? [ 434.446704][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 434.468353][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 434.496466][ T30] ? schedule+0x90/0x320 [ 434.532161][ T30] schedule+0x14b/0x320 [ 434.542799][ T30] schedule_preempt_disabled+0x13/0x30 [ 434.564027][ T30] __mutex_lock+0x817/0x1010 [ 434.568897][ T30] ? __mutex_lock+0x602/0x1010 [ 434.574131][ T30] ? sync_bdevs+0x1ae/0x340 [ 434.578816][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 434.592858][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 434.606241][ T30] ? __pfx_lock_release+0x10/0x10 [ 434.618400][ T30] ? _atomic_dec_and_lock+0x9a/0x130 [ 434.630286][ T30] ? iput+0x3be/0xa50 [ 434.639689][ T30] sync_bdevs+0x1ae/0x340 [ 434.648832][ T30] ksys_sync+0xe2/0x1c0 [ 434.658616][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 434.663626][ T30] ? do_syscall_64+0x100/0x230 [ 434.672654][ T30] ? do_syscall_64+0xb6/0x230 [ 434.682199][ T30] __do_sys_sync+0xe/0x20 [ 434.691890][ T30] do_syscall_64+0xf3/0x230 [ 434.698085][ T5875] usb 1-1: string descriptor 0 read error: -71 [ 434.715868][ T5875] usb 1-1: USB disconnect, device number 16 [ 434.723871][ T30] ? clear_bhb_loop+0x35/0x90 [ 434.734566][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.748511][ T30] RIP: 0033:0x7f102538cde9 [ 434.753461][ T30] RSP: 002b:00007f1026191038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 434.762241][ T30] RAX: ffffffffffffffda RBX: 00007f10255a6080 RCX: 00007f102538cde9 [ 434.770583][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 434.778891][ T30] RBP: 00007f10255a6080 R08: 0000000000000000 R09: 0000000000000000 [ 434.787519][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.795809][ T30] R13: 0000000000000000 R14: 00007f10255a6080 R15: 00007fff8fafef48 [ 434.804068][ T30] [ 434.818523][ T30] INFO: task syz.1.464:7691 blocked for more than 144 seconds. [ 434.847339][ T30] Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 434.855217][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.877645][ T30] task:syz.1.464 state:D stack:25616 pid:7691 tgid:7680 ppid:5819 task_flags:0x400040 flags:0x00004006 [ 434.889967][ T30] Call Trace: [ 434.893345][ T30] [ 434.896696][ T30] __schedule+0x18bc/0x4c40 [ 434.901426][ T30] ? __pfx___schedule+0x10/0x10 [ 434.906548][ T30] ? __pfx_lock_release+0x10/0x10 [ 434.911784][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 434.919024][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 434.925650][ T30] ? schedule+0x90/0x320 [ 434.929997][ T30] schedule+0x14b/0x320 [ 434.934325][ T30] schedule_preempt_disabled+0x13/0x30 [ 434.939976][ T30] __mutex_lock+0x817/0x1010 [ 434.944764][ T30] ? __mutex_lock+0x602/0x1010 [ 434.949628][ T30] ? sync_bdevs+0x1ae/0x340 [ 434.964066][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 434.969146][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 434.975429][ T30] ? __pfx_lock_release+0x10/0x10 [ 434.980501][ T30] ? _atomic_dec_and_lock+0x9a/0x130 [ 434.986242][ T30] ? iput+0x3be/0xa50 [ 434.990267][ T30] sync_bdevs+0x1ae/0x340 [ 434.995050][ T30] ksys_sync+0xe2/0x1c0 [ 434.999232][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 435.005215][ T30] ? do_syscall_64+0xb6/0x230 [ 435.009958][ T30] __do_sys_sync+0xe/0x20 [ 435.014717][ T30] do_syscall_64+0xf3/0x230 [ 435.019257][ T30] ? clear_bhb_loop+0x35/0x90 [ 435.025489][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.031422][ T30] RIP: 0033:0x7f102538cde9 [ 435.036320][ T30] RSP: 002b:00007f1026170038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 435.045047][ T30] RAX: ffffffffffffffda RBX: 00007f10255a6160 RCX: 00007f102538cde9 [ 435.053040][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 435.061484][ T30] RBP: 00007f10255a6160 R08: 0000000000000000 R09: 0000000000000000 [ 435.073973][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.081985][ T30] R13: 0000000000000001 R14: 00007f10255a6160 R15: 00007fff8fafef48 [ 435.100369][ T30] [ 435.103451][ T30] INFO: task syz.1.464:7696 blocked for more than 144 seconds. [ 435.123800][ T30] Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 435.131473][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.152447][ T30] task:syz.1.464 state:D stack:27088 pid:7696 tgid:7680 ppid:5819 task_flags:0x400040 flags:0x00004004 [ 435.172695][ T30] Call Trace: [ 435.176345][ T30] [ 435.179308][ T30] __schedule+0x18bc/0x4c40 [ 435.193469][ T30] ? __pfx___schedule+0x10/0x10 [ 435.199761][ T30] ? __pfx_lock_release+0x10/0x10 [ 435.213053][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 435.219357][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 435.230080][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 435.236503][ T30] ? schedule+0x90/0x320 [ 435.240916][ T30] schedule+0x14b/0x320 [ 435.245284][ T30] schedule_preempt_disabled+0x13/0x30 [ 435.250923][ T30] __mutex_lock+0x817/0x1010 [ 435.255602][ T30] ? __mutex_lock+0x602/0x1010 [ 435.260546][ T30] ? sync_bdevs+0x1ae/0x340 [ 435.288396][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 435.293488][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 435.300087][ T30] ? __pfx_lock_release+0x10/0x10 [ 435.305368][ T30] ? _atomic_dec_and_lock+0x9a/0x130 [ 435.310863][ T30] ? iput+0x3be/0xa50 [ 435.314922][ T30] sync_bdevs+0x1ae/0x340 [ 435.319425][ T30] ksys_sync+0xe2/0x1c0 [ 435.323605][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 435.329751][ T30] ? do_syscall_64+0xb6/0x230 [ 435.334511][ T30] __do_sys_sync+0xe/0x20 [ 435.339020][ T30] do_syscall_64+0xf3/0x230 [ 435.343560][ T30] ? clear_bhb_loop+0x35/0x90 [ 435.348390][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.354683][ T30] RIP: 0033:0x7f102538cde9 [ 435.359126][ T30] RSP: 002b:00007f102614f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 435.367643][ T30] RAX: ffffffffffffffda RBX: 00007f10255a6240 RCX: 00007f102538cde9 [ 435.375902][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 435.384163][ T30] RBP: 00007f10255a6240 R08: 0000000000000000 R09: 0000000000000000 [ 435.392162][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.400208][ T30] R13: 0000000000000001 R14: 00007f10255a6240 R15: 00007fff8fafef48 [ 435.410871][ T30] [ 435.413981][ T30] INFO: task syz.1.464:7701 blocked for more than 144 seconds. [ 435.455111][ T30] Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 435.462782][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.471813][ T30] task:syz.1.464 state:D stack:26432 pid:7701 tgid:7680 ppid:5819 task_flags:0x400040 flags:0x00004004 [ 435.483917][ T30] Call Trace: [ 435.487216][ T30] [ 435.490175][ T30] __schedule+0x18bc/0x4c40 [ 435.494772][ T30] ? __pfx___schedule+0x10/0x10 [ 435.499649][ T30] ? __pfx_lock_release+0x10/0x10 [ 435.504769][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 435.510690][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 435.519818][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 435.526319][ T30] ? schedule+0x90/0x320 [ 435.530598][ T30] schedule+0x14b/0x320 [ 435.535873][ T30] schedule_preempt_disabled+0x13/0x30 [ 435.541365][ T30] __mutex_lock+0x817/0x1010 [ 435.546110][ T30] ? __mutex_lock+0x602/0x1010 [ 435.550910][ T30] ? sync_bdevs+0x1ae/0x340 [ 435.555797][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 435.560864][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 435.566137][ T30] ? __pfx_lock_release+0x10/0x10 [ 435.571180][ T30] ? _atomic_dec_and_lock+0x9a/0x130 [ 435.576843][ T30] ? iput+0x3be/0xa50 [ 435.581134][ T30] sync_bdevs+0x1ae/0x340 [ 435.585878][ T30] ksys_sync+0xe2/0x1c0 [ 435.590052][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 435.595289][ T30] __do_sys_sync+0xe/0x20 [ 435.599632][ T30] do_syscall_64+0xf3/0x230 [ 435.604615][ T30] ? clear_bhb_loop+0x35/0x90 [ 435.609325][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.617563][ T30] RIP: 0033:0x7f102538cde9 [ 435.621998][ T30] RSP: 002b:00007f102612e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 435.630697][ T30] RAX: ffffffffffffffda RBX: 00007f10255a6320 RCX: 00007f102538cde9 [ 435.639717][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 435.647867][ T30] RBP: 00007f10255a6320 R08: 0000000000000000 R09: 0000000000000000 [ 435.655917][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.663969][ T30] R13: 0000000000000001 R14: 00007f10255a6320 R15: 00007fff8fafef48 [ 435.671977][ T30] [ 435.675431][ T30] INFO: task syz.1.464:7702 blocked for more than 145 seconds. [ 435.682993][ T30] Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 435.691844][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.700838][ T30] task:syz.1.464 state:D stack:25872 pid:7702 tgid:7680 ppid:5819 task_flags:0x400040 flags:0x00004004 [ 435.713008][ T30] Call Trace: [ 435.716600][ T30] [ 435.719552][ T30] __schedule+0x18bc/0x4c40 [ 435.724149][ T30] ? __pfx___schedule+0x10/0x10 [ 435.729013][ T30] ? __pfx_lock_release+0x10/0x10 [ 435.734233][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 435.741144][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 435.747111][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 435.753451][ T30] ? schedule+0x90/0x320 [ 435.757772][ T30] schedule+0x14b/0x320 [ 435.761940][ T30] schedule_preempt_disabled+0x13/0x30 [ 435.767456][ T30] __mutex_lock+0x817/0x1010 [ 435.772060][ T30] ? __mutex_lock+0x602/0x1010 [ 435.776884][ T30] ? sync_bdevs+0x1ae/0x340 [ 435.781399][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 435.786707][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 435.791741][ T30] ? __pfx_lock_release+0x10/0x10 [ 435.796825][ T30] ? _atomic_dec_and_lock+0x9a/0x130 [ 435.802124][ T30] ? iput+0x3be/0xa50 [ 435.806275][ T30] sync_bdevs+0x1ae/0x340 [ 435.810623][ T30] ksys_sync+0xe2/0x1c0 [ 435.814851][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 435.819642][ T30] __do_sys_sync+0xe/0x20 [ 435.824071][ T30] do_syscall_64+0xf3/0x230 [ 435.828596][ T30] ? clear_bhb_loop+0x35/0x90 [ 435.833284][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.840309][ T30] RIP: 0033:0x7f102538cde9 [ 435.844938][ T30] RSP: 002b:00007f102610d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 435.853379][ T30] RAX: ffffffffffffffda RBX: 00007f10255a6400 RCX: 00007f102538cde9 [ 435.861422][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 435.870354][ T30] RBP: 00007f10255a6400 R08: 0000000000000000 R09: 0000000000000000 [ 435.878652][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.886678][ T30] R13: 0000000000000001 R14: 00007f10255a6400 R15: 00007fff8fafef48 [ 435.894733][ T30] [ 435.897795][ T30] [ 435.897795][ T30] Showing all locks held in the system: [ 435.906344][ T30] 1 lock held by khungtaskd/30: [ 435.911206][ T30] #0: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 435.921162][ T30] 2 locks held by getty/5576: [ 435.925871][ T30] #0: ffff888031c8b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 435.935689][ T30] #1: ffffc90002ff62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 435.946910][ T30] 5 locks held by kworker/u8:10/6056: [ 435.952306][ T30] 3 locks held by kworker/u8:34/6093: [ 435.957850][ T30] 1 lock held by udevd/6410: [ 435.962452][ T30] #0: ffff88802566a4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 435.971803][ T30] 1 lock held by syz.1.464/7689: [ 435.976783][ T30] #0: ffff88802566a4c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 435.986275][ T30] 1 lock held by syz.1.464/7691: [ 435.991226][ T30] #0: ffff88802566a4c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 436.000687][ T30] 1 lock held by syz.1.464/7696: [ 436.005704][ T30] #0: ffff88802566a4c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 436.015478][ T30] 1 lock held by syz.1.464/7701: [ 436.020416][ T30] #0: ffff88802566a4c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 436.029903][ T30] 1 lock held by syz.1.464/7702: [ 436.034897][ T30] #0: ffff88802566a4c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 436.045414][ T30] [ 436.047760][ T30] ============================================= [ 436.047760][ T30] [ 436.056641][ T30] NMI backtrace for cpu 1 [ 436.056656][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 436.056674][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 436.056683][ T30] Call Trace: [ 436.056688][ T30] [ 436.056695][ T30] dump_stack_lvl+0x241/0x360 [ 436.056727][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.056752][ T30] ? __pfx__printk+0x10/0x10 [ 436.056783][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 436.056806][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 436.056822][ T30] ? _printk+0xd5/0x120 [ 436.056841][ T30] ? __pfx__printk+0x10/0x10 [ 436.056862][ T30] ? __wake_up_klogd+0xcc/0x110 [ 436.056880][ T30] ? __pfx__printk+0x10/0x10 [ 436.056901][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 436.056921][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 436.056940][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 436.056960][ T30] watchdog+0x1058/0x10a0 [ 436.056979][ T30] ? watchdog+0x1ea/0x10a0 [ 436.056999][ T30] ? __pfx_watchdog+0x10/0x10 [ 436.057016][ T30] kthread+0x7a9/0x920 [ 436.057032][ T30] ? __pfx_kthread+0x10/0x10 [ 436.057050][ T30] ? __pfx_watchdog+0x10/0x10 [ 436.057067][ T30] ? __pfx_kthread+0x10/0x10 [ 436.057084][ T30] ? __pfx_kthread+0x10/0x10 [ 436.057105][ T30] ? __pfx_kthread+0x10/0x10 [ 436.057123][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.057140][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 436.057159][ T30] ? __pfx_kthread+0x10/0x10 [ 436.057177][ T30] ret_from_fork+0x4b/0x80 [ 436.057195][ T30] ? __pfx_kthread+0x10/0x10 [ 436.057213][ T30] ret_from_fork_asm+0x1a/0x30 [ 436.057254][ T30] [ 436.057261][ T30] Sending NMI from CPU 1 to CPUs 0: [ 436.227889][ C0] NMI backtrace for cpu 0 [ 436.227903][ C0] CPU: 0 UID: 0 PID: 6093 Comm: kworker/u8:34 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 436.227921][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 436.227931][ C0] Workqueue: bat_events batadv_nc_worker [ 436.227952][ C0] RIP: 0010:__rcu_read_unlock+0x47/0x110 [ 436.227973][ C0] Code: 00 d5 03 00 4d 8d ae 44 04 00 00 4c 89 eb 48 c1 eb 03 42 0f b6 04 23 84 c0 75 6b 41 8b 6d 00 ff cd 42 0f b6 04 23 84 c0 75 76 <41> 89 6d 00 85 ed 75 21 4d 8d be 48 04 00 00 4c 89 f8 48 c1 e8 03 [ 436.227986][ C0] RSP: 0018:ffffc9000bbbfa80 EFLAGS: 00000246 [ 436.227999][ C0] RAX: 0000000000000000 RBX: 1ffff11005b6d448 RCX: ffffc9000bbbfa03 [ 436.228010][ C0] RDX: 0000000000000002 RSI: ffffffff8c0ab8e0 RDI: ffffffff8c5fb900 [ 436.228021][ C0] RBP: 0000000000000000 R08: ffffffff901a3677 R09: 1ffffffff20346ce [ 436.228032][ C0] R10: dffffc0000000000 R11: fffffbfff20346cf R12: dffffc0000000000 [ 436.228043][ C0] R13: ffff88802db6a244 R14: ffff88802db69e00 R15: dffffc0000000000 [ 436.228055][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 436.228067][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 436.228078][ C0] CR2: 00007f10e4b78ab8 CR3: 0000000028eb6000 CR4: 00000000003526f0 [ 436.228092][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 436.228100][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 436.228110][ C0] Call Trace: [ 436.228116][ C0] [ 436.228122][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 436.228139][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 436.228160][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 436.228176][ C0] ? nmi_handle+0x2a/0x5a0 [ 436.228204][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 436.228221][ C0] ? nmi_handle+0x14f/0x5a0 [ 436.228241][ C0] ? nmi_handle+0x2a/0x5a0 [ 436.228262][ C0] ? __rcu_read_unlock+0x47/0x110 [ 436.228279][ C0] ? default_do_nmi+0x63/0x160 [ 436.228295][ C0] ? exc_nmi+0x123/0x1f0 [ 436.228309][ C0] ? end_repeat_nmi+0xf/0x53 [ 436.228335][ C0] ? __rcu_read_unlock+0x47/0x110 [ 436.228353][ C0] ? __rcu_read_unlock+0x47/0x110 [ 436.228371][ C0] ? __rcu_read_unlock+0x47/0x110 [ 436.228389][ C0] [ 436.228393][ C0] [ 436.228398][ C0] ? batadv_nc_worker+0xcb/0x610 [ 436.228413][ C0] batadv_nc_worker+0x290/0x610 [ 436.228428][ C0] ? batadv_nc_worker+0xcb/0x610 [ 436.228443][ C0] ? process_scheduled_works+0x976/0x1840 [ 436.228466][ C0] process_scheduled_works+0xa66/0x1840 [ 436.228495][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 436.228515][ C0] ? assign_work+0x364/0x3d0 [ 436.228533][ C0] worker_thread+0x870/0xd30 [ 436.228555][ C0] ? __kthread_parkme+0x169/0x1d0 [ 436.228574][ C0] ? __pfx_worker_thread+0x10/0x10 [ 436.228590][ C0] kthread+0x7a9/0x920 [ 436.228608][ C0] ? __pfx_kthread+0x10/0x10 [ 436.228627][ C0] ? __pfx_worker_thread+0x10/0x10 [ 436.228644][ C0] ? __pfx_kthread+0x10/0x10 [ 436.228661][ C0] ? __pfx_kthread+0x10/0x10 [ 436.228681][ C0] ? __pfx_kthread+0x10/0x10 [ 436.228699][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.228716][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 436.228735][ C0] ? __pfx_kthread+0x10/0x10 [ 436.228755][ C0] ret_from_fork+0x4b/0x80 [ 436.228772][ C0] ? __pfx_kthread+0x10/0x10 [ 436.228791][ C0] ret_from_fork_asm+0x1a/0x30 [ 436.228814][ C0] [ 436.395588][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 436.395607][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 436.395626][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 436.395637][ T30] Call Trace: [ 436.395645][ T30] [ 436.395653][ T30] dump_stack_lvl+0x241/0x360 [ 436.395684][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.395709][ T30] ? __pfx__printk+0x10/0x10 [ 436.395730][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 436.395756][ T30] ? vscnprintf+0x5d/0x90 [ 436.395777][ T30] panic+0x349/0x880 [ 436.395801][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 436.395821][ T30] ? __pfx_panic+0x10/0x10 [ 436.395847][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 436.395868][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 436.395887][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 436.395908][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 436.395928][ T30] watchdog+0x1097/0x10a0 [ 436.395949][ T30] ? watchdog+0x1ea/0x10a0 [ 436.395973][ T30] ? __pfx_watchdog+0x10/0x10 [ 436.395993][ T30] kthread+0x7a9/0x920 [ 436.396021][ T30] ? __pfx_kthread+0x10/0x10 [ 436.396044][ T30] ? __pfx_watchdog+0x10/0x10 [ 436.396063][ T30] ? __pfx_kthread+0x10/0x10 [ 436.396081][ T30] ? __pfx_kthread+0x10/0x10 [ 436.396104][ T30] ? __pfx_kthread+0x10/0x10 [ 436.396122][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.396141][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 436.396161][ T30] ? __pfx_kthread+0x10/0x10 [ 436.396190][ T30] ret_from_fork+0x4b/0x80 [ 436.396209][ T30] ? __pfx_kthread+0x10/0x10 [ 436.396230][ T30] ret_from_fork_asm+0x1a/0x30 [ 436.396259][ T30] [ 436.396411][ T30] Kernel Offset: disabled