last executing test programs: 3m15.168848836s ago: executing program 2 (id=506): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) r1 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000002200)={'#! ', './file1', [{0x20, '-lA\xf0\x15x\xe9}c)\xf6t\x15\x1f\vBx-@\xdd\xeb\x15\x88\xec\xc4\x94{\x82\xe6\x88\xf2\xe9\xbf\xf2^E\xcdU3\xd7\xf9\xee\x01\x93\xf5\x8f\x82\xfco\xdc\xca\xbf\x92Z\xe1\x8f\xcaM\xea\x82\fNS\x99\x93\b\xb1\x1ad\xf02\xd3\xbb\xb2\xe0\xc7\\\xfc\xb8\xd6\xa6\t\x16R\x9aY(\x03\x9bl/\xd3}\bc<>\xcb\xb2JQh/T\xe1ei\xa5\xcd\x7f\xa5WIfg)\xf4X\xf8\xff\xfc\xf8\xdf\b\x94\xc6BE\xae\x8a\xcbH)\xb3)\xb4\x1d\xb3Aq\x06\x15\xc9\x92\x16\x16tB\x1bMRj\xa9-[$\xbc\x19\'>\xb1\xed\xe9\xbaW\xbf_z\x1c\xc2\xd82@\r\xb4`\xacAQ\x82F:\xce\xcf\xfeh(\xdbf\x0f\x00\xde8:\x9a\x06#?\xd9\x15\xe34`\xc7\xb8\xc8\x1d\xec\xc8\xa9\xa0w\xa5s\xdd\f\x96D\x88\xcd\xa7\x105\x8d\xe1\xca\xb3o~\xc4W,\xbd\x02o\xec\xde\f\x99=X\xde}4\x93\xdc\xfe\x8c\x98\xf81\xa2e\x15\x87\x99\r\xd7\x9e\x05_Q\xc0c$w\x95kon`(\x90\xea8r\x99+T)`\xdd7=\xb6m\xe0G\x8e_g\xdbU\xd4\x9aa0\\\xa5\x88DXp\xf6\xb6`\xcc\xd3\x82\x04\xdf\xa2\xe2X\xad\xa0\xfc\xbb\x9aHP\xd26\xfc\xcb\x11\xb0jl\xda\xce~\x85\x06\x84Sh;9\x95\xd0\x9c\x02\a\x11\xc7\x82\xb248*\xa3\x9e\x8b\xe6F\xac\xb5\x18\x10X\xbc\x84]\x13(\x86m\x80'}]}, 0x17d) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040), 0x0}, 0x0) 3m11.61246162s ago: executing program 2 (id=515): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) socket(0xa, 0x3, 0x3a) bind$802154_raw(r0, 0x0, 0x0) 3m9.929535242s ago: executing program 2 (id=518): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x1000010, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) timer_create(0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x0, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x9}, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000740)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)="c93b7e9243d8b1ecd3a418681b708263d261c78f38484c096b5402a8c87aa8e61635e47d9c59940e299a22c0b1010ea08a97d3a90ac5dc2e0e19fcbfd1df8662867c99fbb6a0843a26fbd68cf84e62aa26c41fd2bf36132aa74540817f00eee4108b93db1e8c427f214d379750a6b873af8a6dece8818234454351532789e1546059ecaad57d25963b7a15290f8eab862aee13924cfb9bcc38", 0x99}, {&(0x7f00000004c0)="a5f3e3ac380421e8dd57fefa56202b16350df730c676594138fa088a2213c4b5", 0x20}, {&(0x7f0000000440)="e8520593888193283e783ff7b6043985ceba664b5d6596ed485e01480a", 0x1d}], 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000c0000000000000001000000010000006fa0d27273987b67679871a716d2996e772ae772a1208504efc4a87e7c202548f7b49c3a57b6596fb42f88b8b05a28f0c1f6873c4cfb85cae6f0d020cda38d61b24ae301cd6cee79b3010000000000003c520f200a95b4493962001d58d71dd361bf9c8246ab7b47371600"/138, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x4000014}}], 0x1, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) (async) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 1m40.67530538s ago: executing program 2 (id=525): r0 = epoll_create1(0x80000) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x20082) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x20000000}) r2 = dup3(r0, r0, 0x80000) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000080)=0xffff) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x100100, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000100)) ioctl$F2FS_IOC_COMPRESS_FILE(r3, 0xf518, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0x4122, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000140)={0x0, 0x3, 0x7fffffff}) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f00000008c0)={{'\x00', 0x2}, {0x4}, 0x100, 0x0, 0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)="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", 0x191, 0x0, &(0x7f0000000780)={0x2, 0xcd, {0x1, 0xc, 0xb5, "7bf4ff9e6c123375bcb40c910886cdcf72bf6a7795035827f501a6ac6e0b7130fd5041be6469bb8537dc918f49eb7d843772d0029d421dc3b9899bbdcd2b573bfb922cbd4675fd57e8dfd54d26149ea442dcb1f12575ca7d119a9867747d1494e2a7a19b0b9da487d48151bd8a31ada1eec60557c67af1fcc2730ef0fb17f623a29ea6c842f485b518aba4ee95c5dcc10a094dc58a4e6da83cfa0deba1eaa611ee2e05e1f27091e5fa211fe14f9d0434115cc03235", 0xb, "9dfd704221ea1b954709c5"}, 0x37, "d90740ec5dbf18a6892f054239233ab6b11db5e8b458d103885d36222ecfa5371bad79c774e12af620ba573759f918a2275f29f68f3e7b"}, 0x110}) close_range(r2, r1, 0x0) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x144, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004001}, 0x84) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000b80)={{r3}, "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"}) r4 = socket$phonet(0x23, 0x2, 0x1) pwrite64(r4, &(0x7f0000001b80)="1b3fab4b08d9dacdd118202a0fb79abb332f514aea6c21c6a9206f84ea014586a63be8d6740ece2b24336e441ccbf1ef675596da7a368dbf299cb3d821dd2d413e5fd021112a9ce0dea1241041d26107a26a545dac47afdde381b14a8f7b06", 0x5f, 0x1) r5 = fsmount(r3, 0x1, 0x3) ioctl$PPPIOCGDEBUG(r5, 0x80047441, &(0x7f0000001c00)) fstat(r3, &(0x7f0000001c40)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001cc0), 0x8000, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000001d00)={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x31}, 0x5e9}, {0xa, 0x4e24, 0x9, @mcast2, 0x4}, 0x0, {[0x7, 0x1000, 0x40, 0x1, 0x6, 0x9, 0xbec5, 0x4]}}, 0x5c) close_range(r6, r2, 0x2) ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x3b88, &(0x7f0000001d80)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000001dc0)={0x28, 0x5, r7, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2c7}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000001e00)={0x9, 0x5, 0x0, 'queue1\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000001ec0), 0x101400, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x2c, 0x8, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000022c0)={r6, 0xe0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000002000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000002040)=[0x0], &(0x7f0000002080)=[0x0], 0x0, 0xbe, &(0x7f00000020c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002100), &(0x7f0000002140), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000002180)}}, 0x10) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000002300)={0x0, 0x8, 0x8a, 0x7, @vifc_lcl_ifindex=r8, @multicast1}, 0x10) 1m40.664698023s ago: executing program 2 (id=527): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000040)=0x10000, 0x4) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9533, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1m40.66306127s ago: executing program 2 (id=530): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x35) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000240)="94", 0x1) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) socket$inet(0x2, 0x2, 0x0) r8 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020300090a0001000000000e0002000000e000000900004cf2886ae16d4c6403756d818c71e6000000000000020001000000000000000002000000000300050000000000020000007f00000100"/90], 0x50}}, 0x0) close(0xffffffffffffffff) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xd) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x70, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x4cb6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x4080) 1m40.657457327s ago: executing program 32 (id=530): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x35) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000240)="94", 0x1) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) socket$inet(0x2, 0x2, 0x0) r8 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020300090a0001000000000e0002000000e000000900004cf2886ae16d4c6403756d818c71e6000000000000020001000000000000000002000000000300050000000000020000007f00000100"/90], 0x50}}, 0x0) close(0xffffffffffffffff) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xd) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x70, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x4cb6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x4080) 1m34.516644554s ago: executing program 1 (id=555): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0xa1fc, 0x58, {0xffffffffffffffff}, {0x0}, 0x7, 0x1}) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000100)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@cachetag={'cachetag', 0x3d, ')\\\x98~'}}, {@sq={'sq', 0x3d, 0xed3}}, {@timeout={'timeout', 0x3d, 0x7f}}, {@timeout={'timeout', 0x3d, 0x2}}], [{@smackfshat={'smackfshat', 0x3d, '$-(^{:'}}, {@hash}, {@appraise}, {@fowner_eq={'fowner', 0x3d, r0}}, {@hash}, {@dont_hash}]}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x13, "d1b5ed45dc5363165250e43ce57b011dc3f4e1"}, &(0x7f0000000240)=0x1b) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e22, 0x2, @empty, 0x12000000}}, 0x1, 0x3, 0x0, 0xff, 0x20, 0x8, 0x7}, 0x9c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000003c0)={0x7}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000000400)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000440)={0x0, r6, 0x6, 0xffff, 0x7}) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000480)) r7 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x3, 0x4040) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r7, 0x80184151, &(0x7f0000001500)={0x0, &(0x7f0000000500)="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", 0x1000}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001700)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001940)={r4, 0x20, &(0x7f0000001900)={&(0x7f00000017c0)=""/209, 0xd1, 0x0, &(0x7f00000018c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x2, 0xd, &(0x7f0000001540)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc171}}], &(0x7f00000015c0)='GPL\x00', 0x9, 0xc7, &(0x7f0000001600)=""/199, 0x41000, 0x10, '\x00', r8, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000001740)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001780)={0x3, 0x5, 0xb4, 0x4}, 0x10, r9, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000001980)=[{0x4, 0x3, 0xc, 0xb}, {0x4, 0x1, 0x9, 0x7}, {0x0, 0x3, 0xf, 0x1}, {0x5, 0x5, 0x4, 0x8}], 0x10, 0xcad2}, 0x94) getresuid(&(0x7f0000001a80), &(0x7f0000001ac0), &(0x7f0000001b00)) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000001b40)=0x7fff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0x11, 0xe, &(0x7f0000001b80)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @generic={0x4, 0x9, 0x4, 0x1, 0xd}], &(0x7f0000001c00)='syzkaller\x00', 0x7, 0x4c, &(0x7f0000001c40)=""/76, 0x1e00, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001cc0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)=[r5, r4, r4, r4, r4, 0xffffffffffffffff, r5, r5], 0x0, 0x10, 0x40}, 0x94) mknod$loop(&(0x7f0000001e00)='./file0\x00', 0x8, 0x1) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000001e40)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001e80), 0x402000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00), 0x5400) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000001f80)={0x0, 0x0, 0x5, r8, 0x7}, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000001fc0)={{0x1, 0x1, 0x18, r10, {0x6}}, './file1\x00'}) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000002000)="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", 0x1000) ioctl$HIDIOCAPPLICATION(r5, 0x4802, 0x7) setsockopt$inet_sctp_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f0000003000)={0x80, 0xf7, 0x3, 0x81, 0x2, 0x7f, 0x40, 0xb5, 0x5, 0x2, 0x9, 0x6, 0x5, 0x1}, 0xe) creat(&(0x7f0000003040)='./file1\x00', 0x0) 1m34.11513206s ago: executing program 1 (id=559): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x4, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006210200010000001ffe02000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32=r1, @ANYBLOB="00000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001400000000000000000000000000000000009ae165a5482e361fea196b98272e00000000000000"], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="050000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) mmap$binder(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffffffffff5f) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000000) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$qrtrtun(r9, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f0000000280), &(0x7f0000000300)=0x4) r11 = socket(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) r12 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r12, 0x1000000) r13 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r12, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ddfcb85d", @ANYRES16=r13, @ANYBLOB="000201040000000000000073797a30000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 1m30.492657569s ago: executing program 1 (id=566): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xda, 0xfa}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000035327ae308fac2dd0b920003000000e75f00000002000004081d62", @ANYRES32, @ANYBLOB='B\x00'/20, @ANYRES32, @ANYBLOB="0100000001000000010000000d"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000e0ffff8c04"]) getpeername$packet(r3, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000800)=0x14) r4 = accept4(r1, 0x0, 0x0, 0x800) r5 = accept4(r1, &(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f0000000540)=0x80, 0x80800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$qrtr(r5, &(0x7f0000001140)={&(0x7f0000000840)={0x2a, 0x4, 0x18002}, 0xc, &(0x7f0000000d40)=[{&(0x7f0000000880)="a020d582835af62ef39f4ffb71b29ab663bc010acfc987330d019526ea41ca2aa7583076fedf919d315e62b745b6633916bb0cbae0854a0e86f9990b28ddd45f635f9e046f62cb3560f4cdefc3a3676566ccae85d61f9215b1bca6393002576407dce73b464d7ecabf2aee6f2a18e72f6d9928d7cc6670d89d0a83cdf7758003e26406e2928dbf79401ee0154ecdcb566f6a697eac365ca7a4fad5da75b7", 0x9e}, {&(0x7f0000000940)="a4e4a867998411e9c632babc836a0c78038bdf1ece1cf43a1dc882f6473aaa534ced470ed465045b81ff4db5b4410434be8a262161265df94915ccb5", 0x3c}, {&(0x7f0000000980)="b4e321b7943780856cc9c46ad01dc518a9d071f010f35e68eafcd8b500a20ec834d35d85e4b154ced804c2dfcff1b6c149a09c8ae0f595c6e9d1957a8e9ac8a18be4ae012ed0c6fe646afcb47baacb3c0956b7482bea82e1d2893389a4676ebc1965ec15320bdfa5ef4fa75c3040107e86800c7bf9a3dfd78ec2ef6faa5a81f6eb45b95d6b36bdc4f0c83d00de442d87c007fbc4328923ba9fb29e85569531ea63fb29cb1fd53a8a720e9140fd02cc4c660ac3b3d082", 0xb6}, {&(0x7f0000000a40)="2814dc6403528afa2dcae2da34e5b9cd07ec0fc3abd226c6cd37cd8c5e371d4c23136faee8bafb75f0d83deb18573783c4b8024a7f5a158d4ba18c9d442da4adadeb739d9ae2c3d623dbeeabb3cd5e6d5c8c74", 0x53}, {&(0x7f0000000ac0)="e9f54e72e92d38fd5d515a41609d6eee7b4f3857a902955b58d64539118d5e7602c02fa9feb0ff5280755366a7c1e718def17516e95b7d8c2310804ce0bd2ac00e0bdf260c98fd10ef00d3c20cb422c525813f3e952a3b6a052145f228107176db23fada8b714c7f5002936a51eb98deb09f5c0390d5f0d1d276ddbd61214411e5b2ed508926f269cac685ef2742a86fd5dff07ef9a3c32655180169e33bb9cf48a670b50a5169e4c0830c19b91dd26230ac040e33169cb8b7ed2118d87fcc68b956a8b3a1016d4a967574411c111b", 0xcf}, {&(0x7f0000000d00)="ad097e", 0x3}], 0x6, &(0x7f0000000dc0)=[{0xd8, 0xff, 0xffff, "a5a45bf0f4410791b077ca833d79942e33195cbd6dc38ec33a4168f0512e3fa18724075a72594236012c14e30c8dd9f6d982b249e7238315fde3087a677eda1776771f8a95759fc83059c708ca4ead76b8d31503ad0174a01b5b02ec4c9d7b9b374a82db866c254c0165b4e175f22d96ba4319827db8c53e922a7a3a6ff6f22f4f8889a45502fafaf2cb1f3aaaaf807fbf3cc51b5854c4733a43a15928503ce6e3856ab6bba40c584bfbeae59cca61ee7f59edf1cd34c23a6ad10de5782b9638a9e425a4f9df4c"}, {0xf8, 0x3a, 0x1, "15310fd30f2a684afa2d50e9b1b88007d6f673477add90c23301c254ff10061ed7bf313a5fb2741f613ea2cfe1fe713b073ec4c8a9e6c0e9d3b9817b22bd6ae67bdee56303d3478fb24416e9473d48feb671551196d76a283d93f2ea7ef9217cbc09c0287a4651faacfe3baadac5a68338bacf960b37f3c3e69e03f0575717038fce560e5a2ea112afb3dd9616ef3914fc01bab15bede73eb63ec6c26f786946eb18e148e2f89aced9359dd6c46417c3f24176d3d7fa25db0018f589a74d9c32e5e3e17a9b3b0c87514121fbd9597f2fbe8f4690acbb6c35225b7f4a9e67254160128dc73bf1ec15"}, {0x80, 0x1, 0x3, "dcf2a1f6cfee8d973366b76a2b63e54f2ac63ed1749b7fc1859ae3881ef634958112677a7c54e2d9def045b44855f7a8c9ea24373eb20645e675424f992c114089f7bf4ed9b6c7d01381c05ff715fe2e94ddca12cafba3a20227ebd8c7bb505f9e686f1d8d65621474c3"}, {0x100, 0x107, 0x9, "f4a64c4993329a23e906a0359cbb636315bbd83e57e343c08d61b118d19e757b59fec6978e1efdbc5e80c39815ebde19dc32f1562a44235370ba6f7d3f1e2728a7a68ff50111008e4e468a3a8b19f9c6e3bd412bafbb3e9a763c299a57edf809e47b7f7363bfc413516f78571a636c654f590c70a850115345c23c47044dd7c8380ea81dc63a9f70c33c99faed88f352ca5731eb1e13aab1a0fee794b7df89f968c7072959e7b9b4ec89a42dc039c43fbbba6b341b62485bbc50eed6d6dab5bff53c022f2c2b97cebfae646df77c83399cece2b1d630cff21a020ebebafab9abc3ad493f18f809dc3ba3"}, {0x30, 0x0, 0x8, "8ab0bb70c1ddec5f32ae93d8678892b2fe267c6e5d47550eb6a3"}], 0x380, 0x20000810}, 0x38) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r7) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r9, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x480}, 0x40) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r9, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6f}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40885) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0xb0}, @void, @void, @val={0x5, 0x3, {0x7, 0x39, 0x9}}, @void, @void, @val={0x3c, 0x4, {0x0, 0xf7, 0x5, 0x6}}, @void, @void, @void, @void}, 0x3c) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r13 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r13, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @raw_data}) 1m29.470817665s ago: executing program 3 (id=569): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x40002103, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0xfffffff9, 0x4) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB="0300000000000000000000000000000000000000ac5d4b20e6b760c242490c75b3e82894d388cd93a1f8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\b\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x2, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001740009058bff7f0000100109050b362f00"/50], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') getdents(r2, &(0x7f0000000380)=""/200, 0x1d) socket$nl_route(0x10, 0x3, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pipe(&(0x7f00000001c0)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x501, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x3, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) gettid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) 1m26.352683938s ago: executing program 1 (id=576): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) read$FUSE(r5, &(0x7f0000006b40)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r6, @ANYRES8=r3], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000044802664922da03a0b2c4159208ea9f0000000000000075f313f148846080a1817f7efaf445ba69c9d0977d8fa19972fd1c1efd0d19e77c0c148380332ed4891018d3187f62fae89954c00409be6651bd2e9c1008c5a8a78de29f29b0d9cffc8be69929bea1fab67542e9f6d4ffe644c3860b9d3b38e9b6e8b7fd0fc63f63ac16d7c8d1e1fc0489b1c9da72f0d9"], 0x48) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) 1m25.904749495s ago: executing program 3 (id=579): syz_emit_ethernet(0x56, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604dc58c00200600fe80000000000000000000000000001afe8000000000000000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002fffd90780067162400ff000000705f5dffed"], 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @empty, 0x4000002}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) sendto$inet_nvme_pdu(r0, &(0x7f0000000000)=@data_h2c={{0x6, 0xd, 0x18, 0x6, 0x80ea1}, 0x3, 0x8, 0x66b, 0x3, "143199a0"}, 0xfffffffffffffe41, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x268041, &(0x7f0000000240)={[{@nfs_export_on, 0x3a}], [], 0x2f}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x200}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x2200000c) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000705, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000780)="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", 0x20a) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1100000004e6ff0004000000027cc2a107edc5a1b8702e7bfe15bdccbdacb8c35f93f206f8bd9c0c"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000440)}, 0x10) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 1m23.250329307s ago: executing program 3 (id=583): r0 = inotify_init() readv(r0, &(0x7f0000000000), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r3], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x7, 0x6}, {0xffff}, {0x6, 0xa}}, [{0xffffffffffffffb7, 0xb, 0xd1de}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) 1m21.612656061s ago: executing program 4 (id=588): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x0, 0x6, 0x13, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0xfffc, 0xffff, 0x0, 0x400}, 0xfffffffc, [0x0, 0x10000000, 0x0, 0x2, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffc0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x58, 0x0, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x2, 0x3, 0x3, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x8, 0x0, 0x0, 0x2000, 0x0, 0xe0a4, 0x6, 0x400, 0x20009], [0xb4e0, 0x0, 0x10, 0x8, 0x3, 0xc, 0x10, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x3, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x40000005, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7e0, 0x101, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400], [0x0, 0x7, 0x20000000, 0x1, 0x2, 0x6e3a, 0x2, 0xfffffff9, 0x0, 0x10000, 0x0, 0x200, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x7, 0x0, 0x77d, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x8000000, 0x3, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x2], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1225, 0x0, 0x0, 0x0, 0x200, 0x5, 0xfffffffe, 0x4, 0xffffffd, 0x200, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x8000]}, 0x45c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000fcffffff0000000001010000180200000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)='\b', 0x1}], 0x1) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) syz_emit_ethernet(0x22, &(0x7f0000000180)={@link_local, @random="c8820f760fa8", @val={@void, {0x8100, 0x3, 0x1, 0x1}}, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "7496761b6b9d041c"}}}}, 0x0) clock_gettime(0x0, &(0x7f0000001080)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000001000)=[{{&(0x7f0000000340)=@isdn, 0x80, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/201, 0xc9}, {&(0x7f0000000200)}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000000b00)=""/95, 0x5f}, {&(0x7f0000000b80)=""/107, 0x6b}], 0x6, &(0x7f0000000c80)=""/127, 0x7f}, 0xffffffff}, {{&(0x7f0000000d00)=@nfc, 0x80, &(0x7f0000000f00)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000d80)}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/103, 0x67}, {&(0x7f0000000e40)=""/100, 0x64}, {&(0x7f0000000ec0)=""/8, 0x8}], 0x6, &(0x7f0000000f80)=""/127, 0x7f}, 0xa}], 0x2, 0xa0, &(0x7f00000010c0)={r5, r6+60000000}) 1m21.592610655s ago: executing program 3 (id=589): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x741920, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_connect(0x0, 0x42, &(0x7f0000000180)={{0x12, 0x1, 0x141, 0xd8, 0x58, 0x36, 0x20, 0x5c8, 0x403, 0x569b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x30, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xf8, 0x2, 0x0, 0xe, 0x1, 0x0, 0xd7, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "f2cd28"}, {0x5, 0x24, 0x0, 0x671c}, {0xd, 0x24, 0xf, 0x1, 0xe9, 0x1, 0x5, 0x8}, [@mdlm_detail={0x4, 0x24, 0x13, 0x3}]}]}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000380)=""/186) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x2, 0x6, 0x80000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_SIOCOUTQ(r3, 0x5411, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x3, r5, &(0x7f0000000480)="e4b5eea546a2", 0x6, 0x494}]) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1m21.449971277s ago: executing program 4 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x67cc00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x6}}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000004c0)={0x0, @null, @netrom={'nr', 0x0}, 0xfffffe4c, 'syz1\x00', @bcast, 0x5, 0x1, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r5, 0x29, 0x48, &(0x7f0000000000)=0x94cd, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000200)=[{0x28, 0xa9, 0x1, 0xfffff034}, {0x48, 0x0, 0x7, 0x1}, {0x5, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x7c, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60f2a40000462f00fe880000000000000000000000000001fe800000000000000000000000000065580000"], 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x6002, 0x4, 0x3d0, 0x200, 0x0, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7}}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0xfe, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'nicvf0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001680)) eventfd2(0x1, 0x1) 1m21.256618444s ago: executing program 4 (id=591): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x909'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @u32=0x4788}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r6]) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r9, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0) r10 = syz_open_dev$mouse(&(0x7f0000000180), 0x40, 0x10400) ioctl$SG_SET_RESERVED_SIZE(r10, 0x2275, &(0x7f0000000240)=0xffffff89) getsockopt$inet6_buf(r9, 0x29, 0x3d, &(0x7f00000020c0)=""/171, &(0x7f00000000c0)=0xab) 1m21.255278875s ago: executing program 1 (id=592): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x9}, {0x3, 0x5, 0x2}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x41, 0xff9, 0x1}, 0x28) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) creat(&(0x7f00000000c0)='./file0\x00', 0x80) 1m20.31178338s ago: executing program 1 (id=594): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80142, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) timerfd_create(0x6, 0x80000) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000980)=ANY=[], 0x48}}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x20002060, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$P9_RLCREATE(r2, &(0x7f0000000200)={0x18, 0xf, 0x1, {{0x80, 0x3}, 0x2}}, 0x18) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x100000001, 0x8dc1, 0xfffffe0000000001, 0x80, 0xfffffffd}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syslog(0x4, &(0x7f0000000300)=""/212, 0xd4) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 1m17.345037462s ago: executing program 4 (id=595): unshare(0x22020600) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14"], 0x18}}], 0x1, 0x0) (async, rerun: 64) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x120) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r4 = socket$inet6(0xa, 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) (rerun: 64) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0)=[{0x4, 0xffffffff}], 0x1, 0x1c3, 0x0, 0x0, 0x42, 0x2e}) (async, rerun: 32) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 32) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000003800000000000000010000000c"], 0x68}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x18) (async) sendmmsg$inet6(r4, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) (async, rerun: 64) shutdown(r4, 0x0) (rerun: 64) 1m16.698365695s ago: executing program 3 (id=596): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b80a0000000f23c80f21f866350c00a0000f23f866b9800000c00f326635000400000f300fc76a002e0f080f23742e3b5753baf80c66b8f494f78e66efbafc0c66b83ac8000066efda6509", 0x4f}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=0x0], 0x0) 1m14.214335558s ago: executing program 4 (id=598): r0 = inotify_init() readv(r0, &(0x7f0000000000), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r3], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x7, 0x6}, {0xffff}, {0x6, 0xa}}, [{0xffffffffffffffb7, 0xb, 0xd1de}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) 1m8.551176976s ago: executing program 4 (id=600): ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) ioctl$sock_ifreq(0xffffffffffffffff, 0x89fd, &(0x7f0000000100)={'bond0\x00', @ifru_names='ipvlan0\x00'}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x708, 0xec72, 0x8, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) accept4(r7, 0x0, 0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x3, r1, 0x80000}) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000380)={0x0, 0x8, 0x6, '\x00', &(0x7f00000002c0)=0x80}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000000000000a0000010900020073797a31000000000900010073797a3100000000100003800c000080080003400000000030c383958178e691eb8e3cb5bf3f3c99f5116b91cee0babb478755f1dcf391bb08b0d0dca5792b40f3661fe2d90d580721986535f5a11c98184bd73ed5cc682f89dad092a047babc11c1899241fbdcd6d8"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="30b859ce97cb0e9dcbd1f5d9bf1080ba73ffc47d8d8d45cff1db52b26e74c4dea5c187a0be17b508b39e3f030d0c4bc58e57a851df016d24379541b4ed036c14a192e92be85d823d045ec5970677142a465b63f18c259219", @ANYRES16, @ANYBLOB="23af24bd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x800) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x8, 0x31, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000400)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x70) 55.072038425s ago: executing program 33 (id=594): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80142, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) timerfd_create(0x6, 0x80000) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000980)=ANY=[], 0x48}}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x20002060, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$P9_RLCREATE(r2, &(0x7f0000000200)={0x18, 0xf, 0x1, {{0x80, 0x3}, 0x2}}, 0x18) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x100000001, 0x8dc1, 0xfffffe0000000001, 0x80, 0xfffffffd}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syslog(0x4, &(0x7f0000000300)=""/212, 0xd4) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 51.483875341s ago: executing program 34 (id=600): ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) ioctl$sock_ifreq(0xffffffffffffffff, 0x89fd, &(0x7f0000000100)={'bond0\x00', @ifru_names='ipvlan0\x00'}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x708, 0xec72, 0x8, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) accept4(r7, 0x0, 0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x3, r1, 0x80000}) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000380)={0x0, 0x8, 0x6, '\x00', &(0x7f00000002c0)=0x80}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000000000000a0000010900020073797a31000000000900010073797a3100000000100003800c000080080003400000000030c383958178e691eb8e3cb5bf3f3c99f5116b91cee0babb478755f1dcf391bb08b0d0dca5792b40f3661fe2d90d580721986535f5a11c98184bd73ed5cc682f89dad092a047babc11c1899241fbdcd6d8"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="30b859ce97cb0e9dcbd1f5d9bf1080ba73ffc47d8d8d45cff1db52b26e74c4dea5c187a0be17b508b39e3f030d0c4bc58e57a851df016d24379541b4ed036c14a192e92be85d823d045ec5970677142a465b63f18c259219", @ANYRES16, @ANYBLOB="23af24bd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x800) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x8, 0x31, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000400)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x70) 7.393455458s ago: executing program 5 (id=644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x6f}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2080}, 0xcc002) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="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"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125", 0xab}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000006c0)={0x84, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x73, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0xff}}]}]}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x84}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 7.217888317s ago: executing program 5 (id=645): syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x2000) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x2000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) r3 = socket(0x2a, 0x2, 0x9) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0xc8, 0x9, 0x6, 0x401, 0x0, 0x0, {0x16, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0xd, 0x1a, 'connmark\x00'}, @IPSET_ATTR_MARK={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0xb, 0x1a, '}%%[\'.\x00'}, @IPSET_ATTR_CADT_FLAGS={0x4e, 0x8, 0x1, 0x0, 0x85}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x67}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000054}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa, 0xc}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}}, 0x24000000) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000000c0)={{0x0, 0x2, 0x5, 0x54, 'syz0\x00', 0x400}, 0x1, 0x2, 0x7, r2, 0x1, 0xfffffff8, 'syz0\x00', &(0x7f0000000080)=['fd\x00'], 0x3}) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) (async) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000010520020052d36b72cbd7000fcdbdf250a0800060008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 6.831987304s ago: executing program 5 (id=646): r0 = socket(0x2c, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x709800, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000002740)=ANY=[@ANYBLOB="180000e8640000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000005b703000000000000850000000600000095", @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESHEX, @ANYRES64=r1, @ANYRES16=r1, @ANYRES8=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0x5, &(0x7f00000007c0)={0x8, 0xc0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) fcntl$getownex(r1, 0x10, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x3, 0x0, 0x800400, 0x5, 0xffffffffffffffff, 0x0, 0x251, 0x40002}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, &(0x7f0000002440)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000b4483d58bd19a700000000000000b31f9aa8121cd0000000005408000d000200007266a55695941f718d8315"], 0x48) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000000400)={0x2020}, 0x2020) r7 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) close_range(r7, 0xffffffffffffffff, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002640)=ANY=[@ANYRES16=r7, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0dd2a00c7608241d2ebb3b165e68ed0b1620c8ab298ae67d3f48e9624d6f1953dceac1c0f3", @ANYRES32=r3], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000002500)="8357c778a944f44d121db58d5879bfa97adaa2de35cfec81eaac4f46589db1afee708418898bd801fc9b0a2d8d32872eb7d1c92ba250b291a354a811bbd02282f580fa0ecf8fc0219d0a35c3ae1f6715d0d675088695bc3bdaab4ce1a9f96fc6a2e55d6c2d7538bf038cfa01357354787101c0a0045b60622a35c791721f92f5a6ba52d0a33cc474cdcc1db1465e3cfdc912f953878ad4a8ff814638e28d6d20388ce656d6b243fdc8ae72d9013010cb1195f6c9e9eed6beb65b267e39b7200f6a65c9db0817efb0db04addc1ec8f4590d41295756283644", &(0x7f0000002600)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000200), &(0x7f0000000080)=@udp=r0, 0x1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x1ec) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000500)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0) 5.840985901s ago: executing program 5 (id=647): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x30, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x10, 0x4, 0x0, 0x1, [@nested={0xc, 0x65, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r3, 0x7) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000040)="ab", 0xff04, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setpipe(r9, 0x407, 0x0) connect$inet(r10, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r9, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x7bd}}, './file0\x00'}) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r11, 0x0, 0x201f00) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) 4.964429752s ago: executing program 0 (id=649): r0 = inotify_init() readv(r0, &(0x7f0000000000), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r3, @ANYBLOB="35ea63cafb5396aecb"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x7, 0x6}, {0xffff}, {0x6, 0xa}}, [{0xffffffffffffffb7, 0xb, 0xd1de}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) 3.934853928s ago: executing program 0 (id=650): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xb}, {0x4, 0xffe0}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x6, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x3, 0x7, 0x2, 0x4, 0x34}}, {0x4}}]}]}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x4, &(0x7f0000000300)="22f2ec292b6fcc26a5dbdf92389b9d42959e5685f33c6d4dd1ee492d08ae37658b84c8e5bb61752dc6cec600718f59860cdc11117964799f971390ff0e72679d881ed7b4f7a1ff7cc25896d12129feb647585990f25be51552fecb54796692750b4369699a1f01c63edf918cd98433c2725bb71555f3ced3b482f5a4e990f0adcecb590bf8a763ab2763569e8b9d256ef6c71af9549a52df65f375dede7a1e4acca83a007722af554bce62532700c321f980990a792eadfd0eddf8378f5fff3c67423fbc6af6a1f15ee6175d39b99f596c11474ce938871982336d2289dc881cf4af152bcc54aca7a65a0238cb8464611e3a68a0102a57") ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000002100003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) 2.765071316s ago: executing program 0 (id=651): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) r2 = getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r8) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x30, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}]}, 0x30}}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1b, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xf}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000c80)={r6, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) dup(r7) 1.372753546s ago: executing program 0 (id=652): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000080)={'veth0_to_bond\x00', {0x2, 0x0, @broadcast}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80284504, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x4b, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4ad}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 1.252100111s ago: executing program 5 (id=653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000002060112000000000000000000000000050001"], 0x60}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000170a"], 0x2c}}, 0x0) r7 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/667, 0xe) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_LOCK(r8, 0x6405) ioctl$COMEDI_UNLOCK(r8, 0x6406) socket(0x1d, 0x2, 0x1) fallocate(r7, 0x0, 0x1, 0x4400001) 1.067622879s ago: executing program 0 (id=654): r0 = memfd_secret(0x80000) fcntl$setlease(r0, 0x400, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000000)={0x3, 0x5}) close(r0) 796.686196ms ago: executing program 0 (id=655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3808}]}, 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x40084) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, &(0x7f00000001c0)=@raw=[@ldst={0x0, 0x0, 0x1, 0xa, 0x1, 0x2, 0xffffffffffffffff}, @generic={0x5, 0xc, 0xe, 0xffff, 0x1}], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x1e00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x48001}, 0x20000000) 0s ago: executing program 5 (id=656): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)}, 0x20) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x3}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x323, @tick=0x65757100}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0xf0, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2, 0xff}, @in=@dev={0xac, 0x14, 0x14, 0x23}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2}, {0x0, 0x8000000000000, 0x7}, {}, 0x0, 0x203502, 0x2}}, 0xf0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x5, r4, 0x2}) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="211a0000000000002000128008000100687372001400028008000100", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r11], 0x48}}, 0x0) ioctl$KVM_GET_MSRS_sys(r7, 0xc008ae88, &(0x7f0000000200)={0xa, 0x0, [{0x29b, 0x0, 0x8}, {0xa51, 0x0, 0x2}, {0x4000011b, 0x0, 0x8}, {0x977}, {0xa1b, 0x0, 0xec8ccd5}, {0xbbd, 0x0, 0x10001}, {0xb9a, 0x0, 0x2}, {0xaa2, 0x0, 0x3}, {0x870, 0x0, 0x3}, {0x8dc, 0x0, 0x24c3c83}]}) kernel console output (not intermixed with test programs): idProduct=0202, bcdDevice=92.d4 [ 132.957181][ T5902] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 132.975756][ T5902] usb 4-1: Product: syz [ 132.988226][ T5902] usb 4-1: Manufacturer: syz [ 133.011508][ T5902] usb 4-1: config 0 descriptor?? [ 133.025345][ T6466] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.077227][ T43] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 133.110686][ T6488] netlink: 'syz.1.125': attribute type 2 has an invalid length. [ 133.116461][ T43] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 102, setting to 64 [ 133.170368][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.193884][ T43] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 133.218399][ T43] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 133.379496][ T6500] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 134.427754][ T43] usb 1-1: Product: syz [ 134.495174][ T43] usb 1-1: Manufacturer: syz [ 134.565991][ T43] usb 1-1: SerialNumber: syz [ 134.761222][ T43] usb 1-1: config 0 descriptor?? [ 134.782427][ T43] hub 1-1:0.0: bad descriptor, ignoring hub [ 134.788461][ T43] hub 1-1:0.0: probe with driver hub failed with error -5 [ 134.899067][ T43] usb 1-1: selecting invalid altsetting 0 [ 135.053175][ T5902] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input5 [ 135.079793][ T1216] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.159836][ T5903] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 135.271486][ T5902] usb 4-1: USB disconnect, device number 10 [ 135.277623][ C1] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 135.288158][ T1216] usb 2-1: Using ep0 maxpacket: 8 [ 135.297937][ T1216] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 135.334957][ T1216] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 135.353200][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 135.378624][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 135.381875][ T10] libceph: connect (1)[c::]:6789 error -101 [ 135.394783][ T1216] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 135.397546][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 135.413095][ T5903] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 135.487143][ T1216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.587600][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.660315][ T6506] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 135.694787][ T5948] libceph: connect (1)[c::]:6789 error -101 [ 135.695432][ T5903] usb 5-1: config 0 descriptor?? [ 135.869639][ T5948] libceph: mon0 (1)[c::]:6789 connect error [ 136.018289][ T1216] usb 2-1: string descriptor 0 read error: -71 [ 136.108556][ T1216] hub 2-1:32.0: USB hub found [ 136.138520][ T1216] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 136.189603][ T6519] ceph: No mds server is up or the cluster is laggy [ 136.255299][ T43] usb 1-1: USB disconnect, device number 5 [ 136.295680][ C1] raw-gadget.3 gadget.4: ignoring, device is not running [ 136.318753][ C1] raw-gadget.3 gadget.4: ignoring, device is not running [ 136.326495][ C1] raw-gadget.3 gadget.4: ignoring, device is not running [ 136.335675][ T5903] usbhid 5-1:0.0: can't add hid device: -32 [ 136.342167][ T5903] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 136.926409][ T5903] usb 5-1: USB disconnect, device number 13 [ 136.951177][ T1216] usb 2-1: USB disconnect, device number 4 [ 138.512694][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.519285][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.613000][ T1216] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 140.479694][ T1216] usb 2-1: Using ep0 maxpacket: 8 [ 140.796928][ T6549] Set syz1 is full, maxelem 65536 reached [ 140.992663][ T1216] usb 2-1: device descriptor read/all, error -71 [ 141.362705][ T6575] netlink: 156 bytes leftover after parsing attributes in process `syz.3.143'. [ 141.669823][ T1216] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 141.859927][ T1216] usb 2-1: Using ep0 maxpacket: 16 [ 141.881870][ T1216] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 141.908710][ T1216] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.978291][ T1216] usb 2-1: config 0 has no interface number 0 [ 142.074368][ T1216] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 142.107922][ T1216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.149397][ T1216] usb 2-1: Product: syz [ 142.194832][ T1216] usb 2-1: Manufacturer: syz [ 142.225354][ T1216] usb 2-1: SerialNumber: syz [ 142.398604][ T1216] usb 2-1: config 0 descriptor?? [ 142.424292][ T1216] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 142.439597][ T1216] usb 2-1: No valid video chain found. [ 142.457336][ T6601] random: crng reseeded on system resumption [ 142.625971][ T9] usb 2-1: USB disconnect, device number 6 [ 144.139763][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 144.314738][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 144.320269][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 144.359198][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.415305][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.437214][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.476630][ T9] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 144.514781][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.528249][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.567523][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 144.589988][ T9] usb 5-1: config 0 descriptor?? [ 144.619619][ T1216] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 144.640464][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.725635][ T10] usb 4-1: config 0 descriptor?? [ 144.755703][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 144.816387][ T1216] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 144.849684][ T1216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.892409][ T1216] usb 2-1: config 0 descriptor?? [ 145.025911][ T9] dragonrise 0003:0079:0011.0003: unknown main item tag 0x0 [ 145.081863][ T9] dragonrise 0003:0079:0011.0003: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.4-1/input0 [ 145.166018][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 145.226829][ T6611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.262625][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 145.311600][ T6611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.314204][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 145.349853][ T1216] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 145.411939][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 145.431768][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 145.478902][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 145.521842][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 145.541762][ T6611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.549335][ T1216] [drm:udl_init] *ERROR* Selecting channel failed [ 145.551546][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 145.580748][ T6611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.706730][ T1216] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 145.744908][ T1216] [drm] Initialized udl on minor 2 [ 145.783675][ T1216] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 145.847990][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 145.854899][ T5977] usb 5-1: USB disconnect, device number 14 [ 145.864276][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 145.874495][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 145.910227][ T1216] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 145.920069][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 145.954517][ T10] pwc: recv_control_msg error -32 req 02 val 2800 [ 145.986687][ T43] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 145.995221][ T10] pwc: recv_control_msg error -32 req 04 val 1100 [ 146.025906][ T10] pwc: recv_control_msg error -32 req 04 val 1200 [ 146.029996][ T1216] usb 2-1: USB disconnect, device number 7 [ 146.053636][ T43] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 146.067384][ T10] pwc: Registered as video103. [ 146.160988][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 151.776372][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.4.166'. [ 151.938599][ T1216] usb 4-1: USB disconnect, device number 11 [ 151.979780][ T10] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 152.168409][ T5977] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 152.204149][ T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 152.219693][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.232594][ T5977] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 152.246902][ T10] usb 2-1: Product: syz [ 152.255135][ T10] usb 2-1: Manufacturer: syz [ 152.267677][ T10] usb 2-1: SerialNumber: syz [ 152.286209][ T10] usb 2-1: config 0 descriptor?? [ 152.748400][ T10] airspy 2-1:0.0: usb_control_msg() failed -71 request 0a [ 152.878128][ T10] airspy 2-1:0.0: Could not detect board [ 152.981716][ T10] airspy 2-1:0.0: probe with driver airspy failed with error -71 [ 153.095833][ T10] usb 2-1: USB disconnect, device number 8 [ 153.319797][ T1216] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 153.482595][ T1216] usb 4-1: Using ep0 maxpacket: 32 [ 153.501247][ T1216] usb 4-1: config 0 has an invalid interface number: 226 but max is 0 [ 153.509505][ T1216] usb 4-1: config 0 has no interface number 0 [ 153.526235][ T1216] usb 4-1: config 0 interface 226 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.540423][ T43] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 153.569158][ T1216] usb 4-1: config 0 interface 226 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.589882][ T1216] usb 4-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 153.609493][ T1216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.654556][ T1216] usb 4-1: config 0 descriptor?? [ 153.719291][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 153.745331][ T43] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 153.767517][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.843770][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 153.864611][ T43] usb 5-1: config 0 has no interface number 0 [ 153.878404][ T43] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.911599][ T43] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 153.927221][ T43] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 153.935620][ T43] usb 5-1: Product: syz [ 153.944825][ T43] usb 5-1: SerialNumber: syz [ 153.961123][ T43] usb 5-1: config 0 descriptor?? [ 153.973668][ T43] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 154.019656][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 154.028084][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.059671][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 154.087464][ T1216] uclogic 0003:5543:0081.0005: interface is invalid, ignoring [ 154.090181][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.126881][ T10] usb 2-1: config 0 descriptor?? [ 154.173928][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 154.180886][ T1216] usb 5-1: USB disconnect, device number 15 [ 154.188856][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 154.258645][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 154.318863][ T6705] netlink: 'syz.2.175': attribute type 1 has an invalid length. [ 154.327617][ T6705] netlink: 160 bytes leftover after parsing attributes in process `syz.2.175'. [ 154.896494][ T5977] usb 4-1: USB disconnect, device number 12 [ 156.855234][ T1216] usb 2-1: USB disconnect, device number 9 [ 157.629740][ T5948] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 157.875914][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.900483][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.911055][ T5948] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 157.925514][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.489864][ T5948] usb 1-1: config 0 descriptor?? [ 158.741237][ T5948] greenasia 0003:0E8F:0012.0006: ignoring exceeding usage max [ 158.787342][ T5948] greenasia 0003:0E8F:0012.0006: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.0-1/input0 [ 158.828277][ T6767] FAULT_INJECTION: forcing a failure. [ 158.828277][ T6767] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 158.841803][ T6767] CPU: 0 UID: 0 PID: 6767 Comm: syz.1.189 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 158.841831][ T6767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.841853][ T6767] Call Trace: [ 158.841865][ T6767] [ 158.841875][ T6767] dump_stack_lvl+0x189/0x250 [ 158.841905][ T6767] ? irqentry_exit+0x74/0x90 [ 158.841931][ T6767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.841976][ T6767] should_fail_ex+0x414/0x560 [ 158.842005][ T6767] _copy_from_user+0x2d/0xb0 [ 158.842036][ T6767] __sys_bpf+0x1ed/0x860 [ 158.842072][ T6767] ? __pfx___sys_bpf+0x10/0x10 [ 158.842136][ T6767] __x64_sys_bpf+0x7c/0x90 [ 158.842166][ T6767] do_syscall_64+0xfa/0x3b0 [ 158.842193][ T6767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.842213][ T6767] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 158.842235][ T6767] ? clear_bhb_loop+0x60/0xb0 [ 158.842261][ T6767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.842282][ T6767] RIP: 0033:0x7fe3a3f8ebe9 [ 158.842306][ T6767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.842324][ T6767] RSP: 002b:00007fe3a4db3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 158.842355][ T6767] RAX: ffffffffffffffda RBX: 00007fe3a41b6180 RCX: 00007fe3a3f8ebe9 [ 158.842371][ T6767] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 158.842384][ T6767] RBP: 00007fe3a4db3090 R08: 0000000000000000 R09: 0000000000000000 [ 158.842398][ T6767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.842411][ T6767] R13: 00007fe3a41b6218 R14: 00007fe3a41b6180 R15: 00007ffc541547c8 [ 158.842445][ T6767] [ 159.015388][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.064338][ T5948] greenasia 0003:0E8F:0012.0006: no inputs found [ 159.497593][ T6773] netlink: 'syz.2.191': attribute type 1 has an invalid length. [ 159.522673][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 159.723220][ T6783] No source specified [ 159.903529][ T6791] netlink: 36 bytes leftover after parsing attributes in process `syz.3.197'. [ 160.143285][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 160.155356][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.163965][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.182091][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'. [ 160.193180][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.200744][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.222218][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.236673][ T6800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.196'. [ 160.245850][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.382293][ T9] usb 1-1: USB disconnect, device number 6 [ 161.538797][ T6810] xt_addrtype: ipv6 does not support BROADCAST matching [ 161.614481][ T6812] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 161.649714][ T5977] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 161.789259][ T6815] No source specified [ 161.853938][ T6823] capability: warning: `syz.1.204' uses 32-bit capabilities (legacy support in use) [ 162.607205][ T5977] usb 4-1: device descriptor read/64, error -71 [ 162.899660][ T5977] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 163.029649][ T5977] usb 4-1: device descriptor read/64, error -71 [ 163.140136][ T5977] usb usb4-port1: attempt power cycle [ 163.220442][ T6833] ptrace attach of "./syz-executor exec"[5833] was attempted by " [ 163.462165][ T6840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.208'. [ 163.751239][ T6843] loop2: detected capacity change from 0 to 7 [ 163.759088][ T6841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.208'. [ 163.848839][ T6843] Dev loop2: unable to read RDB block 7 [ 163.869698][ T6843] loop2: unable to read partition table [ 163.939927][ T6843] loop2: partition table beyond EOD, truncated [ 163.952446][ T6843] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 164.373591][ T6855] netlink: 830 bytes leftover after parsing attributes in process `syz.3.212'. [ 164.530172][ T5903] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 166.978232][ T10] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 166.979694][ T1216] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 167.242151][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 167.451813][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 167.464321][ T1216] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 167.538299][ T10] usb 3-1: config 129 has an invalid interface number: 28 but max is 0 [ 167.676028][ T10] usb 3-1: config 129 has no interface number 0 [ 167.691939][ T1216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.693345][ T10] usb 3-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 167.750147][ T1216] usb 1-1: Product: syz [ 167.872598][ T1216] usb 1-1: Manufacturer: syz [ 167.878816][ T10] usb 3-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 167.897814][ T10] usb 3-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 167.916644][ T1216] usb 1-1: SerialNumber: syz [ 167.930424][ T10] usb 3-1: config 129 interface 28 has no altsetting 0 [ 167.992101][ T10] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 168.010827][ T1216] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 168.013189][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.058133][ T10] usb 3-1: Product: syz [ 168.068669][ T10] usb 3-1: Manufacturer: syz [ 168.080598][ T10] usb 3-1: SerialNumber: syz [ 168.108966][ T43] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 168.176839][ T6880] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 168.188609][ T6911] netlink: zone id is out of range [ 168.194181][ T6911] netlink: zone id is out of range [ 168.199403][ T6911] netlink: zone id is out of range [ 168.204731][ T6911] netlink: zone id is out of range [ 168.210004][ T6911] netlink: zone id is out of range [ 168.215197][ T6911] netlink: zone id is out of range [ 168.220410][ T6911] netlink: zone id is out of range [ 168.225628][ T6911] netlink: zone id is out of range [ 168.230842][ T6911] netlink: zone id is out of range [ 168.236031][ T6911] netlink: zone id is out of range [ 168.313789][ T6903] netlink: 72 bytes leftover after parsing attributes in process `syz.4.224'. [ 168.335511][ T6903] netlink: 28 bytes leftover after parsing attributes in process `syz.4.224'. [ 168.455214][ T10] etas_es58x 3-1:129.28: Starting syz syz (Serial Number syz) [ 168.477724][ T10] etas_es58x 3-1:129.28: could not retrieve the product info string [ 168.525430][ T6883] fuse: Unknown parameter '0x00000000000000000x0000000000000008' [ 168.562034][ T30] audit: type=1800 audit(1755457494.579:3): pid=6885 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.221" name="file1" dev="tmpfs" ino=247 res=0 errno=0 [ 168.585697][ T1216] usb 1-1: USB disconnect, device number 7 [ 168.645446][ T10] usb 3-1: USB disconnect, device number 9 [ 168.691144][ T10] etas_es58x 3-1:129.28: Disconnecting syz syz [ 168.959180][ T6928] netlink: 112 bytes leftover after parsing attributes in process `syz.3.228'. [ 168.968290][ T6928] nbd: must specify at least one socket [ 169.213753][ T43] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 169.265816][ T43] ath9k_htc: Failed to initialize the device [ 169.285147][ T1216] usb 1-1: ath9k_htc: USB layer deinitialized [ 169.303345][ T6942] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 169.480326][ T6944] netlink: 'syz.0.232': attribute type 2 has an invalid length. [ 169.492723][ T6944] netlink: 72 bytes leftover after parsing attributes in process `syz.0.232'. [ 169.857955][ T6963] tipc: Started in network mode [ 169.863330][ T6963] tipc: Node identity ac14140f, cluster identity 4711 [ 169.873488][ T6963] tipc: New replicast peer: 255.255.255.255 [ 169.881643][ T6963] tipc: Enabled bearer , priority 10 [ 169.944164][ T6964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.237'. [ 170.234103][ T6963] netlink: 'syz.3.235': attribute type 2 has an invalid length. [ 170.620424][ T1216] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 170.820448][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 170.849701][ T1216] usb 5-1: Using ep0 maxpacket: 16 [ 170.885146][ T1216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.959176][ T1216] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 171.000506][ T1216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.001778][ T9] tipc: Node number set to 2886997007 [ 171.049491][ T1216] usb 5-1: config 0 descriptor?? [ 171.571150][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.590216][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.695595][ T1216] kye 0003:0458:5016.0007: control desc unexpectedly large [ 171.808616][ T1216] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0007/input/input7 [ 171.987889][ T1216] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0007/input/input8 [ 172.054066][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 172.160468][ T1216] kye 0003:0458:5016.0007: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 172.248759][ T1216] usb 5-1: USB disconnect, device number 17 [ 172.270884][ T9] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.846216][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 172.854957][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 172.866186][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.885773][ T9] usb 3-1: config 0 descriptor?? [ 172.978482][ T7019] fido_id[7019]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 173.420284][ T9] logitech 0003:046D:C29C.0008: hidraw0: USB HID v1.01 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 173.530529][ T7008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.589979][ T7030] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 173.610667][ T7030] macvtap1: entered allmulticast mode [ 173.644089][ T7030] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 173.659699][ T5847] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 173.679257][ T7030] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 173.705505][ T7030] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 174.069894][ T5977] Process accounting resumed [ 174.080009][ T9] logitech 0003:046D:C29C.0008: no inputs found [ 174.109265][ T5847] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=9c.25 [ 174.116346][ T9] usb 3-1: USB disconnect, device number 10 [ 174.154278][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.185787][ T5847] usb 1-1: Product: syz [ 174.195997][ T5847] usb 1-1: Manufacturer: syz [ 174.209291][ T5847] usb 1-1: SerialNumber: syz [ 174.250970][ T5847] usb 1-1: config 0 descriptor?? [ 174.275161][ T5847] gspca_main: spca501-2.14.0 probing 0000:0000 [ 174.509877][ T7028] qnx6: unable to read the first superblock [ 174.542300][ T5847] gspca_spca501: reg write: error -71 [ 174.562684][ T5847] spca501 1-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 174.586613][ T5847] spca501 1-1:0.0: probe with driver spca501 failed with error -22 [ 174.610860][ T5847] usb 1-1: Found UVC 0.00 device syz (0000:0000) [ 174.641274][ T5847] usb 1-1: No valid video chain found. [ 174.664245][ T5847] usb 1-1: USB disconnect, device number 8 [ 175.385096][ T5847] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 175.773995][ T5847] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 175.886964][ T5847] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 175.931023][ T5847] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 175.967868][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.997067][ T5847] usb 5-1: Product: syz [ 176.004417][ T5847] usb 5-1: Manufacturer: syz [ 176.032502][ T5847] usb 5-1: SerialNumber: syz [ 176.157337][ T5847] usb 5-1: config 0 descriptor?? [ 176.493405][ T7066] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 176.514902][ T7066] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 176.616757][ T7089] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 176.832279][ T7066] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 176.871264][ T7066] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 177.098320][ T7066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.107984][ T7066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.119980][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 177.154075][ T5847] Error reading MAC address [ 177.174231][ T5847] usb 5-1: USB disconnect, device number 18 [ 177.613820][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.625231][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.635831][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.649637][ T10] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 177.658852][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.674805][ T10] usb 4-1: config 0 descriptor?? [ 178.096580][ T10] razer 0003:1532:011B.0009: unknown main item tag 0x0 [ 178.119644][ T10] razer 0003:1532:011B.0009: item fetching failed at offset 4/5 [ 178.169997][ T10] razer 0003:1532:011B.0009: probe with driver razer failed with error -22 [ 178.190078][ T5847] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 178.285467][ T10] usb 4-1: USB disconnect, device number 16 [ 178.377510][ T5847] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 178.410340][ T5847] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 178.430338][ T5847] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 178.439861][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.742223][ T5977] kernel write not supported for file bpf-prog (pid: 5977 comm: kworker/0:5) [ 180.895430][ T5847] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 180.972160][ T5847] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input9 [ 181.178512][ T5847] input: failed to attach handler kbd to device input9, error: -5 [ 181.492042][ T5847] usb 3-1: USB disconnect, device number 11 [ 181.832695][ T7150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.281'. [ 183.249012][ T7160] netlink: 40 bytes leftover after parsing attributes in process `syz.1.286'. [ 184.030812][ T7165] ip6gretap0: entered promiscuous mode [ 184.037148][ T7165] vlan2: entered promiscuous mode [ 185.345961][ T7181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.287'. [ 185.377318][ T7181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.287'. [ 185.399583][ T7181] syz_tun: entered promiscuous mode [ 185.429905][ T7181] syz_tun: left promiscuous mode [ 185.758948][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.294'. [ 185.929733][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 186.189686][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 186.220310][ T5977] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 186.230307][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.243983][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.259069][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 186.316004][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 186.337259][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.373395][ T10] usb 5-1: config 0 descriptor?? [ 186.407069][ T5977] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 186.428666][ T5977] usb 1-1: config 0 has no interface number 1 [ 186.446104][ T5977] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 186.468970][ T5977] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.510916][ T5977] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 186.560275][ T5977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.568379][ T5977] usb 1-1: SerialNumber: syz [ 186.658673][ T5977] usb 1-1: config 0 descriptor?? [ 186.877299][ T5977] usb 1-1: Found UVC 0.00 device (0002:0000) [ 187.008629][ T5977] usb 1-1: No valid video chain found. [ 187.680929][ T5977] usb 1-1: USB disconnect, device number 9 [ 188.100557][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 188.106646][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 188.191029][ T10] usb 5-1: USB disconnect, device number 19 [ 189.127122][ T7232] netlink: 40 bytes leftover after parsing attributes in process `syz.2.302'. [ 189.663496][ T7240] tmpfs: Bad value for 'mpol' [ 190.969662][ T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 191.172142][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 191.199688][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 191.229015][ T9] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 191.244404][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.259889][ T43] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 191.275989][ T9] usb 3-1: config 0 descriptor?? [ 191.376494][ T7244] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.559765][ T5977] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 191.790155][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 191.809923][ T5977] usb 4-1: Using ep0 maxpacket: 32 [ 191.882542][ T5977] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 191.999436][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.061251][ T10] usb 2-1: device descriptor read/64, error -71 [ 192.278984][ T5977] usb 4-1: config 0 descriptor?? [ 192.424394][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 192.514022][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 192.709274][ T7239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.749980][ T9] glorious 0003:22D4:1503.000A: item fetching failed at offset 5/7 [ 192.765562][ T10] usb 2-1: device descriptor read/64, error -71 [ 192.877864][ T7239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.940445][ T9] glorious 0003:22D4:1503.000A: probe with driver glorious failed with error -22 [ 192.999821][ T10] usb usb2-port1: attempt power cycle [ 193.217608][ T5977] as10x_usb: device has been detected [ 193.376820][ T5977] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 193.606879][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 193.773571][ T10] usb 2-1: device descriptor read/8, error -71 [ 193.989270][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.001156][ T9] usb 3-1: USB disconnect, device number 12 [ 194.215915][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 194.473335][ T5977] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 194.480449][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.493726][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 194.503596][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 194.513806][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.232813][ T10] usb 2-1: device descriptor read/8, error -71 [ 195.267087][ T43] usb 5-1: string descriptor 0 read error: -71 [ 195.334945][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 195.365934][ T5977] as10x_usb: error during firmware upload part1 [ 195.369652][ T43] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 195.374248][ T10] usb usb2-port1: unable to enumerate USB device [ 195.415318][ T5977] Registered device nBox DVB-T Dongle [ 195.432543][ T5977] usb 4-1: USB disconnect, device number 17 [ 195.454799][ T43] usb 5-1: config 0 descriptor?? [ 196.690573][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 196.715167][ T43] usb 5-1: can't set config #0, error -71 [ 197.516462][ T10] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 197.529605][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.540365][ T10] usb 2-1: Product: syz [ 197.544618][ T10] usb 2-1: Manufacturer: syz [ 197.720771][ T10] usb 2-1: SerialNumber: syz [ 197.733653][ T7270] nfs: Unknown parameter 'ntext' [ 197.833485][ T43] usb 5-1: USB disconnect, device number 20 [ 197.842689][ T10] usb 2-1: config 0 descriptor?? [ 197.872032][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.316'. [ 197.882831][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 197.998965][ T5977] Unregistered device nBox DVB-T Dongle [ 198.043267][ T5977] as10x_usb: device has been disconnected [ 198.238413][ T7279] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.247985][ T7279] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.256952][ T7279] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.265731][ T7279] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.510182][ T7279] vxlan0: entered promiscuous mode [ 198.635844][ T7283] netlink: 'syz.2.317': attribute type 66 has an invalid length. [ 198.850005][ T7291] capability: warning: `syz.4.318' uses deprecated v2 capabilities in a way that may be insecure [ 199.115239][ T43] usb 2-1: USB disconnect, device number 14 [ 199.610242][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.617452][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.805032][ T7308] 9pnet: p9_errstr2errno: server reported unknown error @΂(0x0000000000000003 [ 199.813473][ T7310] binder: 7305:7310 ioctl c00c620f 200000000100 returned -22 [ 200.039705][ T10] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 201.614352][ T7353] fuse: Bad value for 'group_id' [ 201.619481][ T7353] fuse: Bad value for 'group_id' [ 201.638574][ T30] audit: type=1326 audit(1755457527.669:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7348 comm="syz.1.334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3a3f8ebe9 code=0x0 [ 202.406168][ T7357] sp0: Synchronizing with TNC [ 202.813819][ T7379] tipc: Failed to remove unknown binding: 66,3,3/0:2417988748/2417988749 [ 202.859863][ T43] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 203.072161][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 203.156323][ T43] usb 1-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 203.232533][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.330540][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 203.376931][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=24 [ 203.444883][ T43] usb 1-1: SerialNumber: syz [ 203.477662][ T43] usb 1-1: config 0 descriptor?? [ 203.528993][ T7384] netlink: 'syz.4.345': attribute type 10 has an invalid length. [ 203.548475][ T7384] net_ratelimit: 234 callbacks suppressed [ 203.548587][ T7384] openvswitch: netlink: Flow key attr not present in new flow. [ 203.859683][ T5977] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 203.917594][ T43] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 203.946475][ T7393] @: renamed from bond_slave_0 (while UP) [ 203.959663][ T43] usb 1-1: USB disconnect, device number 10 [ 204.019972][ T5977] usb 2-1: device descriptor read/64, error -71 [ 204.132919][ T7402] netlink: 'syz.3.351': attribute type 10 has an invalid length. [ 204.184881][ T7402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.200646][ T7402] team0: Port device bond0 added [ 205.245043][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'. [ 205.306531][ T7423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.358'. [ 205.374991][ T7424] team_slave_0: entered promiscuous mode [ 205.381284][ T7424] team_slave_1: entered promiscuous mode [ 205.427865][ T7424] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 205.483813][ T7424] team0: Device macvtap1 is already an upper device of the team interface [ 205.537249][ T7424] team_slave_0: left promiscuous mode [ 205.542814][ T7424] team_slave_1: left promiscuous mode [ 205.689924][ T43] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 205.784861][ T7431] netlink: 228 bytes leftover after parsing attributes in process `syz.0.361'. [ 205.879680][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 205.896026][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 205.924228][ T43] usb 3-1: config index 0 descriptor too short (expected 39001, got 89) [ 206.148045][ T43] usb 3-1: config 1 has too many interfaces: 55, using maximum allowed: 32 [ 206.320385][ T43] usb 3-1: config 1 has an invalid descriptor of length 219, skipping remainder of the config [ 206.350008][ T43] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 55 [ 206.368295][ T43] usb 3-1: string descriptor 0 read error: -22 [ 206.410147][ T43] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 206.424837][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.509186][ T7447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.364'. [ 206.568587][ T7448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.364'. [ 206.637333][ T7450] bridge0: port 3(syz_tun) entered blocking state [ 206.674603][ T7450] bridge0: port 3(syz_tun) entered disabled state [ 206.697556][ T7450] syz_tun: entered allmulticast mode [ 206.800211][ T7450] syz_tun: entered promiscuous mode [ 206.867785][ T7450] bridge0: port 3(syz_tun) entered blocking state [ 206.874744][ T7450] bridge0: port 3(syz_tun) entered forwarding state [ 207.460589][ T7459] /dev/sg0: Can't lookup blockdev [ 208.319491][ T5977] usb 3-1: USB disconnect, device number 14 [ 208.835555][ T7476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.372'. [ 209.842856][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'. [ 209.864832][ T5977] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 210.101508][ T7498] netlink: 9280 bytes leftover after parsing attributes in process `syz.4.376'. [ 210.280020][ T43] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 210.632625][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 210.661510][ T5977] usb 1-1: Using ep0 maxpacket: 8 [ 210.679275][ T5977] usb 1-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 1024 [ 210.679934][ T43] usb 3-1: config 11 has an invalid interface number: 79 but max is 0 [ 210.708195][ T43] usb 3-1: config 11 has no interface number 0 [ 210.729716][ T5977] usb 1-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 16 [ 210.737151][ T43] usb 3-1: config 11 interface 79 has no altsetting 0 [ 210.753167][ T43] usb 3-1: string descriptor 0 read error: -22 [ 210.782278][ T5977] usb 1-1: config 1 interface 0 has no altsetting 0 [ 210.789987][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=9906, bcdDevice=f0.06 [ 210.832987][ T5977] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.833881][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.862566][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.908616][ T43] smsc95xx v2.0.0 [ 210.912611][ T5977] usb 1-1: Product: syz [ 210.912634][ T5977] usb 1-1: Manufacturer: я [ 210.912652][ T5977] usb 1-1: SerialNumber: syz [ 210.918439][ T7481] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 210.979728][ T7481] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 211.178283][ T43] smsc95xx 3-1:11.79 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 211.195376][ T43] smsc95xx 3-1:11.79: probe with driver smsc95xx failed with error -22 [ 211.724027][ T43] usb 3-1: USB disconnect, device number 15 [ 211.910017][ T5977] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 211.962826][ T7516] netlink: 76 bytes leftover after parsing attributes in process `syz.4.381'. [ 211.999183][ T5977] usb 1-1: USB disconnect, device number 11 [ 213.259272][ T7533] process 'syz.3.384' launched './file1' with NULL argv: empty string added [ 214.393659][ T7536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.387'. [ 215.193102][ T7546] vlan0: entered promiscuous mode [ 216.377010][ T7558] netlink: 40 bytes leftover after parsing attributes in process `syz.0.393'. [ 216.612374][ T7562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.391'. [ 217.611991][ T7558] netlink: 'syz.0.393': attribute type 10 has an invalid length. [ 217.611991][ T7559] netlink: 'syz.0.393': attribute type 10 has an invalid length. [ 217.618618][ T7558] team0: Device ipvlan1 failed to register rx_handler [ 217.836366][ T7559] team0: Device ipvlan1 failed to register rx_handler [ 218.089739][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 218.319982][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.399'. [ 218.329106][ T7593] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 218.394114][ T7593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.663143][ T5902] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 218.733505][ T7601] netlink: 56 bytes leftover after parsing attributes in process `syz.3.403'. [ 218.761205][ T7601] netlink: 'syz.3.403': attribute type 1 has an invalid length. [ 218.838160][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 218.863781][ T5902] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 218.887197][ T5902] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.899233][ T5902] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.913091][ T5902] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.923306][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.931942][ T5902] usb 3-1: Product: syz [ 218.936281][ T5902] usb 3-1: Manufacturer: syz [ 218.941021][ T5902] usb 3-1: SerialNumber: syz [ 218.979650][ T5948] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 219.153883][ T30] audit: type=1326 audit(1755457546.189:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.3.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7575f8ebe9 code=0x7ffc0000 [ 219.186963][ T5948] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 219.212959][ T30] audit: type=1326 audit(1755457546.189:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.3.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7575f8ebe9 code=0x7ffc0000 [ 219.235661][ T30] audit: type=1326 audit(1755457546.189:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.3.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f7575f8ebe9 code=0x7ffc0000 [ 219.277749][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.317078][ T30] audit: type=1326 audit(1755457546.189:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.3.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7575f8ebe9 code=0x7ffc0000 [ 219.340632][ T30] audit: type=1326 audit(1755457546.189:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.3.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7575f8ebe9 code=0x7ffc0000 [ 219.340897][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.369946][ T5902] usb 3-1: 0:2 : does not exist [ 219.377720][ T30] audit: type=1326 audit(1755457546.189:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.3.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7575f8ebe9 code=0x7ffc0000 [ 219.399881][ T30] audit: type=1326 audit(1755457546.189:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.3.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7575f8ebe9 code=0x7ffc0000 [ 219.432690][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.468864][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.508833][ T30] audit: type=1326 audit(1755457546.189:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.3.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7575f8ebe9 code=0x7ffc0000 [ 219.538205][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.567143][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.592819][ T30] audit: type=1326 audit(1755457546.189:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.3.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7575f8ebe9 code=0x7ffc0000 [ 219.643800][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.663840][ T30] audit: type=1326 audit(1755457546.189:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.3.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7575f8ebe9 code=0x7ffc0000 [ 219.699970][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.728723][ T5948] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 219.739027][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.753151][ T7619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.762090][ T5948] usb 2-1: Product: syz [ 219.784780][ T5948] usb 2-1: Manufacturer: syz [ 219.808863][ T7621] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 219.820623][ T7622] netlink: 3 bytes leftover after parsing attributes in process `syz.3.409'. [ 219.835757][ T7622] batadv1: entered promiscuous mode [ 219.841134][ T7622] batadv1: entered allmulticast mode [ 219.860609][ T5948] usb 2-1: SerialNumber: syz [ 219.890219][ T5948] usb 2-1: config 0 descriptor?? [ 219.962236][ T5948] ims_pcu 2-1:0.0: Zero length descriptor [ 219.995690][ T5948] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 220.217829][ T5902] usb 3-1: USB disconnect, device number 16 [ 220.246115][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 220.371367][ T7631] pim6reg: entered allmulticast mode [ 220.414699][ T7632] pim6reg: left allmulticast mode [ 220.733470][ T7634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.412'. [ 221.797573][ T10] usb 2-1: USB disconnect, device number 17 [ 221.923500][ T7646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.259418][ T7654] binder: 7653:7654 ioctl c0306201 200000000640 returned -22 [ 222.407726][ T7660] lo speed is unknown, defaulting to 1000 [ 222.427030][ T7660] lo speed is unknown, defaulting to 1000 [ 222.441866][ T7660] lo speed is unknown, defaulting to 1000 [ 223.154239][ T7660] infiniband syz0: set active [ 223.159197][ T7660] infiniband syz0: added lo [ 223.165688][ T7660] syz0: rxe_create_cq: returned err = -12 [ 223.171852][ T7660] infiniband syz0: Couldn't create ib_mad CQ [ 223.178010][ T7660] infiniband syz0: Couldn't open port 1 [ 223.192562][ T1216] lo speed is unknown, defaulting to 1000 [ 223.240742][ T7660] RDS/IB: syz0: added [ 223.245431][ T7660] smc: adding ib device syz0 with port count 1 [ 223.251983][ T7660] smc: ib device syz0 port 1 has pnetid [ 223.262225][ T7660] lo speed is unknown, defaulting to 1000 [ 223.422479][ T7660] lo speed is unknown, defaulting to 1000 [ 223.575020][ T7660] lo speed is unknown, defaulting to 1000 [ 223.728347][ T7660] lo speed is unknown, defaulting to 1000 [ 223.882335][ T7660] lo speed is unknown, defaulting to 1000 [ 224.121391][ T1216] lo speed is unknown, defaulting to 1000 [ 224.317878][ T7663] veth1_macvtap: left promiscuous mode [ 224.876150][ T43] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 226.711267][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 226.720893][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.739323][ T7663] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.421'. [ 226.742699][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.814723][ T43] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 226.867304][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.900208][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 226.925639][ T43] usb 3-1: config 0 descriptor?? [ 227.626081][ T43] hid_mf 0003:0079:1801.000B: item fetching failed at offset 0/2 [ 227.653290][ T43] hid_mf 0003:0079:1801.000B: HID parse failed. [ 227.663166][ T43] hid_mf 0003:0079:1801.000B: probe with driver hid_mf failed with error -22 [ 227.860934][ T7687] overlay: ./file0 is not a directory [ 228.061641][ T43] usb 3-1: USB disconnect, device number 17 [ 231.123022][ T7715] program syz.3.434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.347438][ T5948] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 231.584961][ T5948] usb 4-1: config 6 has an invalid interface number: 57 but max is 0 [ 231.598730][ T5948] usb 4-1: config 6 has no interface number 0 [ 231.608112][ T5948] usb 4-1: config 6 interface 57 has no altsetting 0 [ 231.621308][ T5948] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.00 [ 231.634850][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.643702][ T5948] usb 4-1: Product: syz [ 231.652990][ T5948] usb 4-1: Manufacturer: syz [ 231.663505][ T5948] usb 4-1: SerialNumber: syz [ 231.921268][ T5948] usb-storage 4-1:6.57: USB Mass Storage device detected [ 232.303290][ T5948] usb 4-1: USB disconnect, device number 19 [ 235.136404][ T7752] netlink: 36 bytes leftover after parsing attributes in process `syz.0.443'. [ 235.197103][ T7752] netlink: 128 bytes leftover after parsing attributes in process `syz.0.443'. [ 235.218699][ T7755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.443'. [ 235.227634][ T7755] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 235.686515][ T7766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.919673][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 237.703204][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.851527][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 237.994043][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 238.018662][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.035484][ T7793] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.043077][ T7793] IPv6: NLM_F_CREATE should be set when creating new route [ 238.050448][ T7793] IPv6: NLM_F_CREATE should be set when creating new route [ 238.057738][ T7793] IPv6: NLM_F_CREATE should be set when creating new route [ 238.066506][ T10] usb 2-1: config 0 descriptor?? [ 238.125393][ T5977] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 238.313162][ T5977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 238.353365][ T5977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 238.389544][ T5977] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 238.419846][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.450952][ T7799] overlayfs: failed to resolve './file1': -2 [ 238.451058][ T7800] overlayfs: failed to resolve './file1': -2 [ 238.480827][ T5977] usb 3-1: config 0 descriptor?? [ 239.229191][ T5977] em28xx 3-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 239.232212][ T7791] @: renamed from vlan0 (while UP) [ 239.243539][ T10] kovaplus 0003:1E7D:2D50.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 239.243647][ T5977] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 239.680566][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 239.680587][ T30] audit: type=1326 audit(1755457565.874:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7812 comm="syz.4.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193b78ebe9 code=0x7ffc0000 [ 239.723798][ T30] audit: type=1326 audit(1755457565.874:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7812 comm="syz.4.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193b78ebe9 code=0x7ffc0000 [ 240.391752][ T5977] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 240.560547][ T30] audit: type=1326 audit(1755457566.229:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7808 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666fb8ebe9 code=0x7fc00000 [ 240.587035][ T30] audit: type=1326 audit(1755457566.566:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7808 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f666fb8ebe9 code=0x7fc00000 [ 240.655122][ T5977] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 241.443964][ C0] hrtimer: interrupt took 26539 ns [ 241.514592][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.039015][ T5977] em28xx 3-1:0.0: board has no eeprom [ 243.073582][ T30] audit: type=1326 audit(1755457566.566:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7808 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666fb8ebe9 code=0x7fc00000 [ 243.096529][ T10] kovaplus 0003:1E7D:2D50.000C: couldn't init struct kovaplus_device [ 243.104822][ T10] kovaplus 0003:1E7D:2D50.000C: couldn't install mouse [ 243.115252][ T5977] em28xx 3-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81) [ 243.123457][ T5977] em28xx 3-1:0.0: dvb set to bulk mode. [ 243.129548][ T30] audit: type=1326 audit(1755457566.566:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7808 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666fb8ebe9 code=0x7fc00000 [ 243.157800][ T9] em28xx 3-1:0.0: Binding DVB extension [ 243.172558][ T30] audit: type=1326 audit(1755457566.566:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7808 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666fb8ebe9 code=0x7fc00000 [ 243.207576][ T10] kovaplus 0003:1E7D:2D50.000C: probe with driver kovaplus failed with error -71 [ 243.236047][ T9] em28xx 3-1:0.0: writing to i2c device at 0x82 failed (error=-5) [ 243.254630][ T9] em28xx 3-1:0.0: writing to i2c device at 0x82 failed (error=-5) [ 243.284753][ T10] usb 2-1: USB disconnect, device number 18 [ 243.303612][ T30] audit: type=1326 audit(1755457566.566:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7808 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666fb8ebe9 code=0x7fc00000 [ 243.325455][ T5977] usb 3-1: USB disconnect, device number 18 [ 243.338499][ T9] em28xx 3-1:0.0: writing to i2c device at 0x82 failed (error=-19) [ 243.379116][ T5977] em28xx 3-1:0.0: Disconnecting em28xx [ 243.417513][ T30] audit: type=1326 audit(1755457566.566:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7808 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666fb8ebe9 code=0x7fc00000 [ 243.454381][ T7831] overlayfs: missing 'lowerdir' [ 243.551668][ T30] audit: type=1326 audit(1755457566.566:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7808 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666fb8ebe9 code=0x7fc00000 [ 243.611018][ T7839] overlayfs: missing 'lowerdir' [ 243.709789][ T7844] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 243.839219][ T9] DVB: Unable to find symbol drxk_attach() [ 243.878246][ T9] em28xx 3-1:0.0: Registering input extension [ 243.891958][ T5977] em28xx 3-1:0.0: Closing input extension [ 243.946532][ T7850] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 243.976173][ T7853] warning: `syz.3.467' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 244.014597][ T5977] em28xx 3-1:0.0: Freeing device [ 244.082783][ T7857] fuse: Bad value for 'fd' [ 245.116916][ T1216] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 245.457332][ T1216] usb 4-1: Using ep0 maxpacket: 32 [ 245.512268][ T1216] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 245.535837][ T1216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.609607][ T1216] usb 4-1: config 0 descriptor?? [ 245.642199][ T1216] gspca_main: sunplus-2.14.0 probing 041e:400b [ 245.728190][ T7876] macsec1: entered promiscuous mode [ 245.733631][ T7876] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 245.745914][ T7876] macsec1: entered allmulticast mode [ 245.751828][ T7876] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 245.859475][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.937702][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.218958][ T1216] gspca_sunplus: reg_w_riv err -110 [ 246.242309][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.338414][ T1216] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 246.559730][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.569106][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.608541][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.626562][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.645264][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.780888][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.797291][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.951549][ T7903] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 246.994076][ T7903] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 247.222105][ T5903] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 247.416583][ T5903] usb 1-1: too many configurations: 168, using maximum allowed: 8 [ 247.428076][ T5903] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 247.437611][ T5903] usb 1-1: can't read configurations, error -61 [ 247.608590][ T5903] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 247.637965][ T7913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.483'. [ 247.740433][ T5977] usb 4-1: USB disconnect, device number 20 [ 247.845510][ T5903] usb 1-1: too many configurations: 168, using maximum allowed: 8 [ 247.866037][ T5903] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 247.873687][ T5903] usb 1-1: can't read configurations, error -61 [ 247.891043][ T5903] usb usb1-port1: attempt power cycle [ 248.079148][ T7924] syz.3.486: attempt to access beyond end of device [ 248.079148][ T7924] nbd3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 248.561965][ T7919] block device autoloading is deprecated and will be removed. [ 248.570504][ T5903] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 248.667175][ T5903] usb 1-1: too many configurations: 168, using maximum allowed: 8 [ 248.679584][ T5903] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 248.698014][ T5903] usb 1-1: can't read configurations, error -61 [ 248.698985][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 248.858612][ T5903] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 248.926241][ T5903] usb 1-1: too many configurations: 168, using maximum allowed: 8 [ 248.936447][ T5903] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 248.967563][ T5903] usb 1-1: can't read configurations, error -61 [ 248.976921][ T5903] usb usb1-port1: unable to enumerate USB device [ 249.458931][ T7944] lo speed is unknown, defaulting to 1000 [ 249.489364][ T980] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 249.756956][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 249.795782][ T980] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 249.916456][ T980] usb 3-1: config 8 has no interface number 0 [ 250.018659][ T980] usb 3-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 250.109401][ T980] usb 3-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 250.167938][ T980] usb 3-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 250.219889][ T980] usb 3-1: config 8 interface 39 has no altsetting 0 [ 250.284094][ T980] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 250.334151][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.351776][ T980] usb 3-1: Product: syz [ 250.363613][ T980] usb 3-1: Manufacturer: syz [ 250.372066][ T980] usb 3-1: SerialNumber: syz [ 250.776886][ T7960] bridge0: entered promiscuous mode [ 250.882351][ T7960] macvlan2: entered promiscuous mode [ 251.401614][ T980] ipheth 3-1:8.39: ipheth_enable_ncm: usb_control_msg: -110 [ 252.233375][ T980] ipheth 3-1:8.39: Apple iPhone USB Ethernet device attached [ 252.421234][ T7969] netlink: 'syz.0.495': attribute type 10 has an invalid length. [ 253.204563][ T7971] evm: overlay not supported [ 253.329709][ T9] usb 3-1: USB disconnect, device number 19 [ 253.905576][ T9] ipheth 3-1:8.39: Apple iPhone USB Ethernet now disconnected [ 256.055134][ T8009] syz_tun: entered allmulticast mode [ 256.106571][ T8009] overlayfs: failed to resolve './file0': -2 [ 256.313892][ T8000] syz_tun: left allmulticast mode [ 256.374073][ T980] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 256.748272][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 256.755621][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.767284][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.782194][ T980] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 256.817650][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.849502][ T980] usb 3-1: config 0 descriptor?? [ 256.943480][ T8019] lo speed is unknown, defaulting to 1000 [ 257.069443][ T5977] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 257.574153][ T980] usbhid 3-1:0.0: can't add hid device: -71 [ 257.749316][ T980] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 257.993679][ T980] usb 3-1: USB disconnect, device number 20 [ 258.002270][ T5977] usb 2-1: config 0 has no interfaces? [ 258.030944][ T8025] netlink: 'syz.0.512': attribute type 10 has an invalid length. [ 258.042514][ T5977] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 258.055185][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.073898][ T5977] usb 2-1: Product: syz [ 258.078273][ T5977] usb 2-1: Manufacturer: syz [ 258.082938][ T5977] usb 2-1: SerialNumber: syz [ 258.117782][ T5977] usb 2-1: config 0 descriptor?? [ 258.207017][ T8033] fuse: Bad value for 'fd' [ 258.262293][ T8033] fuse: Bad value for 'fd' [ 260.169602][ T8048] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 260.990873][ T8049] /dev/nullb0: Can't lookup blockdev [ 261.407182][ T5977] usb 2-1: USB disconnect, device number 19 [ 261.569684][ T8064] netlink: 'syz.0.524': attribute type 10 has an invalid length. [ 262.307693][ T5903] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 262.713603][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 263.152877][ T5903] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 263.394673][ T5903] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.467610][ T5903] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.523130][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.529718][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.540254][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.600893][ T5903] usb 1-1: Product: syz [ 263.891083][ T5903] usb 1-1: Manufacturer: syz [ 264.937885][ T5903] usb 1-1: SerialNumber: syz [ 266.531263][ T8100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.532'. [ 268.539901][ C0] sched: DL replenish lagged too much [ 268.856934][ T5903] usb 1-1: can't set config #1, error -71 [ 268.951504][ T5903] usb 1-1: USB disconnect, device number 16 [ 293.415886][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.602124][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.789089][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.934295][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.264095][ T36] bridge_slave_1: left allmulticast mode [ 294.270125][ T36] bridge_slave_1: left promiscuous mode [ 294.295973][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.438512][ T36] bridge_slave_0: left allmulticast mode [ 294.463676][ T36] bridge_slave_0: left promiscuous mode [ 294.476865][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.589682][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.617307][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.634628][ T36] bond0 (unregistering): Released all slaves [ 297.004223][ T36] hsr_slave_0: left promiscuous mode [ 297.027322][ T36] hsr_slave_1: left promiscuous mode [ 297.044976][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.067400][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.083709][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.098607][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.148703][ T36] veth1_macvtap: left promiscuous mode [ 297.154664][ T36] veth0_macvtap: left promiscuous mode [ 297.166794][ T36] veth1_vlan: left promiscuous mode [ 297.173002][ T36] veth0_vlan: left promiscuous mode [ 298.124771][ T36] team0 (unregistering): Port device team_slave_1 removed [ 298.204568][ T36] team0 (unregistering): Port device team_slave_0 removed [ 299.056793][ T6020] smc: removing ib device syz0 [ 299.139120][ T5903] lo speed is unknown, defaulting to 1000 [ 299.144964][ T5903] syz0: Port: 1 Link DOWN [ 329.097046][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.105868][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 349.958160][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'. [ 349.989082][ T8379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.555886][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 350.572271][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.580864][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 350.584444][ T8396] No control pipe specified [ 350.609100][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 350.617311][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 350.635829][ T8397] netlink: 'syz.4.539': attribute type 10 has an invalid length. [ 350.902173][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 350.913791][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.922409][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 350.937180][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 350.946024][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 352.765704][ T8427] netlink: 32 bytes leftover after parsing attributes in process `syz.3.545'. [ 352.784058][ T8392] chnl_net:caif_netlink_parms(): no params data found [ 353.126144][ T5850] Bluetooth: hci3: command tx timeout [ 353.247262][ T8423] sctp: failed to load transform for md5: -2 [ 353.327345][ T5902] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 353.375212][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 353.645403][ T8392] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.652862][ T8392] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.667497][ T8392] bridge_slave_0: entered allmulticast mode [ 353.680773][ T5902] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.699515][ T8392] bridge_slave_0: entered promiscuous mode [ 353.720492][ T5902] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 353.743859][ T8392] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.751404][ T8392] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.762553][ T8392] bridge_slave_1: entered allmulticast mode [ 353.771270][ T5902] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.785372][ T8392] bridge_slave_1: entered promiscuous mode [ 353.795690][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.814828][ T5902] usb 1-1: Product: syz [ 353.824557][ T5902] usb 1-1: Manufacturer: syz [ 353.851040][ T5902] usb 1-1: SerialNumber: syz [ 353.901501][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.549'. [ 354.159999][ T8433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.798597][ T8446] netlink: 'syz.3.550': attribute type 10 has an invalid length. [ 354.863925][ T8433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.879271][ T5902] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 354.924223][ T5902] usb 1-1: USB disconnect, device number 17 [ 355.089033][ T8392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.176328][ T8392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.270033][ T8458] netlink: 104 bytes leftover after parsing attributes in process `syz.1.552'. [ 355.347792][ T5850] Bluetooth: hci3: command tx timeout [ 355.381712][ T8392] team0: Port device team_slave_0 added [ 355.387898][ T8461] Illegal XDP return value 756056064 on prog (id 276) dev N/A, expect packet loss! [ 355.410735][ T8392] team0: Port device team_slave_1 added [ 355.433298][ T5902] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 355.436448][ T8463] PKCS8: Unsupported PKCS#8 version [ 355.598264][ T8392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.604938][ T5902] usb 1-1: Using ep0 maxpacket: 8 [ 355.617637][ T8392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.628265][ T5902] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 355.657807][ T8392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.674910][ T8392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.706028][ T5902] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 355.716270][ T8392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.716335][ T8392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.823509][ T8475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.559'. [ 355.847935][ T5902] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.919284][ T5902] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 355.922534][ T8475] bridge0: entered promiscuous mode [ 355.934563][ T5902] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 355.978115][ T5902] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.010578][ T5902] usb 1-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.031135][ T5902] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 356.040381][ T8478] xt_CT: No such helper "snmp" [ 356.051864][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.064441][ T8475] bridge0: port 3(macvlan2) entered blocking state [ 356.085821][ T8475] bridge0: port 3(macvlan2) entered disabled state [ 356.094681][ T8475] macvlan2: entered allmulticast mode [ 356.100634][ T8475] bridge0: entered allmulticast mode [ 356.527568][ T5902] usb 1-1: usb_control_msg returned -32 [ 356.534225][ T5902] usbtmc 1-1:16.0: can't read capabilities [ 356.544506][ T8475] macvlan2: left allmulticast mode [ 356.549867][ T8475] bridge0: left allmulticast mode [ 356.563953][ T8475] bridge0: left promiscuous mode [ 356.572628][ C1] usbtmc 1-1:16.0: invalid notification: 14 [ 356.579095][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.585134][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.591154][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.597182][ C1] usbtmc 1-1:16.0: invalid notification: 11 [ 356.603300][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.609717][ C1] usbtmc 1-1:16.0: invalid notification: 2 [ 356.615728][ C1] usbtmc 1-1:16.0: invalid notification: 5 [ 356.621752][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.627789][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.633820][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.639838][ C1] usbtmc 1-1:16.0: invalid notification: 60 [ 356.646159][ C1] usbtmc 1-1:16.0: invalid notification: 12 [ 356.652878][ C1] usbtmc 1-1:16.0: invalid notification: 79 [ 356.659152][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.665156][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.671170][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.677203][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.683219][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.689290][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.695328][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.701369][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.707412][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.713519][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.721192][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.727306][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.733402][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.739458][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.745472][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.751480][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.757573][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.763592][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.769631][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.775637][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.781674][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.787811][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.793853][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.799862][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.805879][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.811914][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.817977][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.824040][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.830113][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.836177][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.842223][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.848273][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.854328][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.860348][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.866610][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.872685][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.878707][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.884713][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.890742][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.896746][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.902750][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.908776][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.914821][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.920860][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.926931][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.932988][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.939037][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.942104][ T8487] netlink: 96 bytes leftover after parsing attributes in process `syz.0.547'. [ 356.945068][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.959897][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.965957][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.972036][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.978159][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.984334][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.990433][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 356.996547][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.002655][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.008762][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.014876][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.020968][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.027122][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.033164][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.039234][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.045269][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.051308][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.057340][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.063743][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.069805][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.075925][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.082104][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.089746][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.095846][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.101942][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.108061][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.114181][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.120217][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.127344][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.133402][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.139402][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.145469][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.151477][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.157522][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.163520][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.169528][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.175529][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.181536][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.187548][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.193632][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.199641][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.205660][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.211673][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.217675][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.223705][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.229750][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.235842][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.241860][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.247873][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.253912][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.259926][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.265943][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.272007][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.278042][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.284053][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.290082][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.296102][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.302139][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.308157][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.314166][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.320185][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.326200][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.332232][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.338264][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.344300][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.350331][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.356341][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.362354][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.368377][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.374398][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.380412][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.386436][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.392459][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.398528][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.404609][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.410671][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.416741][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.422774][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.428796][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.434803][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.440807][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.446805][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.452823][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.458833][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.464838][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.470847][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.476848][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.483296][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.489418][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.495463][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.501500][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.507597][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.513685][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.519777][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.525852][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.531933][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.538020][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.544121][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.550195][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.556280][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.562333][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.568391][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.574437][ T5850] Bluetooth: hci3: command tx timeout [ 357.574490][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.585882][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.591957][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.598048][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.604105][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.609696][ T8392] hsr_slave_0: entered promiscuous mode [ 357.610134][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.621551][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.627597][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.633640][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.639676][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.645710][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.651740][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.657768][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.663815][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.669845][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.675984][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.678107][ T8392] hsr_slave_1: entered promiscuous mode [ 357.682032][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.693580][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.699671][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.705708][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.711725][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.717743][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.723758][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.729792][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.735805][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.741829][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.747901][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.755575][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 357.794404][ T8392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.805552][ T8392] Cannot create hsr debugfs directory [ 357.825265][ T8482] syzkaller1: entered promiscuous mode [ 357.838815][ T8482] syzkaller1: entered allmulticast mode [ 357.975577][ T5902] usb 1-1: USB disconnect, device number 18 [ 358.069016][ T8489] tipc: Enabling of bearer rejected, failed to enable media [ 358.146009][ T8494] i2c i2c-0: Invalid block write size 34 [ 358.157236][ T8494] netlink: 'syz.3.561': attribute type 1 has an invalid length. [ 358.218405][ T8494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.233727][ T8497] netlink: 'syz.4.562': attribute type 10 has an invalid length. [ 358.832224][ T8500] netlink: 'syz.0.563': attribute type 1 has an invalid length. [ 358.840129][ T8500] netlink: 224 bytes leftover after parsing attributes in process `syz.0.563'. [ 358.849215][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'. [ 358.987952][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 358.987972][ T30] audit: type=1326 audit(1755457677.476:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8502 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666fb8ebe9 code=0x7ffc0000 [ 359.084663][ T8505] CIFS: iocharset name too long [ 359.377045][ T30] audit: type=1326 audit(1755457677.476:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8502 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666fb8ebe9 code=0x7ffc0000 [ 359.429216][ T30] audit: type=1326 audit(1755457677.476:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8502 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f666fb8ebe9 code=0x7ffc0000 [ 360.126491][ T5850] Bluetooth: hci3: command tx timeout [ 360.305783][ T30] audit: type=1326 audit(1755457677.476:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8502 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666fb8ebe9 code=0x7ffc0000 [ 360.329319][ T8392] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 360.392866][ T30] audit: type=1326 audit(1755457677.476:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8502 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666fb8ebe9 code=0x7ffc0000 [ 360.397744][ T8511] fuse: Bad value for 'fd' [ 360.439692][ T8392] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 360.457908][ T8513] syz.0.568(8513): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 360.463518][ T30] audit: type=1326 audit(1755457677.476:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8502 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f666fb8ebe9 code=0x7ffc0000 [ 360.510346][ T8392] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 360.517254][ T5903] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 360.525809][ T30] audit: type=1326 audit(1755457677.505:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8502 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666fb8ebe9 code=0x7ffc0000 [ 360.548529][ T30] audit: type=1326 audit(1755457677.505:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8502 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666fb8ebe9 code=0x7ffc0000 [ 360.570147][ T30] audit: type=1326 audit(1755457677.505:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8502 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f666fb8ebe9 code=0x7ffc0000 [ 360.601725][ T8392] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 360.654219][ T30] audit: type=1326 audit(1755457677.505:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8502 comm="syz.0.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666fb8ebe9 code=0x7ffc0000 [ 360.704184][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 360.720690][ T5903] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 360.732564][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.831633][ T8392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.099348][ T5903] usb 2-1: Product: syz [ 361.105696][ T5903] usb 2-1: Manufacturer: syz [ 361.138492][ T8392] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.143238][ T5903] usb 2-1: SerialNumber: syz [ 361.211707][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.219002][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.241822][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.249140][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.326716][ T5903] usb 2-1: config 0 descriptor?? [ 361.362241][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 361.518339][ T5903] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 361.584668][ T8509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.841734][ T8534] netlink: 'syz.4.573': attribute type 10 has an invalid length. [ 361.881854][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 362.035306][ T5903] gspca_vc032x: reg_r err -71 [ 362.099116][ T5903] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 362.419916][ T5903] usb 2-1: USB disconnect, device number 20 [ 362.478361][ T9] usb 4-1: can't read configurations, error -61 [ 363.684474][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 363.794105][ T8555] netlink: 44 bytes leftover after parsing attributes in process `syz.4.578'. [ 363.987291][ T9] usb 4-1: device descriptor read/all, error -71 [ 363.990697][ T8555] netlink: 43 bytes leftover after parsing attributes in process `syz.4.578'. [ 363.994030][ T9] usb usb4-port1: attempt power cycle [ 364.640328][ T8555] netlink: 'syz.4.578': attribute type 5 has an invalid length. [ 364.783386][ T8555] netlink: 43 bytes leftover after parsing attributes in process `syz.4.578'. [ 364.814968][ T8392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.667947][ T8581] kthread_run failed with err -4 [ 367.204249][ T8590] netlink: 'syz.3.583': attribute type 10 has an invalid length. [ 368.684834][ T8392] veth0_vlan: entered promiscuous mode [ 368.727381][ T8392] veth1_vlan: entered promiscuous mode [ 368.788027][ T8612] ref_ctr increment failed for inode: 0x250 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802a522800 [ 368.808097][ T8392] veth0_macvtap: entered promiscuous mode [ 368.823189][ T8392] veth1_macvtap: entered promiscuous mode [ 368.852683][ T8392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.868032][ T8392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.875833][ T5903] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 368.893585][ T8392] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.902782][ T8392] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.912035][ T8392] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.921568][ T8392] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.973878][ T8612] uprobe: syz.1.592:8612 failed to unregister, leaking uprobe [ 369.042762][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 369.049006][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.060595][ T5903] usb 4-1: config 1 has an invalid interface number: 248 but max is 0 [ 369.446908][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.454371][ T5903] usb 4-1: config 1 has no interface number 0 [ 369.468013][ T5903] usb 4-1: config 1 interface 248 has no altsetting 0 [ 369.484172][ T5903] usb 4-1: New USB device found, idVendor=05c8, idProduct=0403, bcdDevice=56.9b [ 369.535922][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.566239][ T5903] usb 4-1: Product: syz [ 369.570504][ T5903] usb 4-1: Manufacturer: syz [ 369.575142][ T5903] usb 4-1: SerialNumber: syz [ 369.769856][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 369.769876][ T30] audit: type=1326 audit(1755457687.551:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a3f8ebe9 code=0x7ffc0000 [ 369.800336][ T8619] fuse: Bad value for 'fd' [ 369.861571][ T30] audit: type=1326 audit(1755457687.598:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3a3f8ebe9 code=0x7ffc0000 [ 370.094814][ T30] audit: type=1326 audit(1755457687.598:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a3f8ebe9 code=0x7ffc0000 [ 370.197708][ T5847] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 370.238842][ T30] audit: type=1326 audit(1755457687.598:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe3a3f8ebe9 code=0x7ffc0000 [ 370.273341][ T30] audit: type=1326 audit(1755457687.598:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a3f8ebe9 code=0x7ffc0000 [ 370.344445][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.979125][ T5847] usb 1-1: device descriptor read/64, error -71 [ 372.614970][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.688592][ T30] audit: type=1326 audit(1755457687.598:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe3a3f8ebe9 code=0x7ffc0000 [ 372.912638][ T5847] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 372.943507][ T30] audit: type=1326 audit(1755457687.598:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a3f8ebe9 code=0x7ffc0000 [ 373.199661][ T5903] usb 4-1: Found UVC 0.00 device syz (05c8:0403) [ 373.253904][ T5903] usb 4-1: No valid video chain found. [ 373.333563][ T5847] usb 1-1: device descriptor read/64, error -71 [ 373.368524][ T5903] usb 4-1: USB disconnect, device number 24 [ 373.385915][ T30] audit: type=1326 audit(1755457687.598:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fe3a3f8ebe9 code=0x7ffc0000 [ 373.497175][ T5847] usb usb1-port1: attempt power cycle [ 374.006221][ T30] audit: type=1326 audit(1755457687.598:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a3f8ebe9 code=0x7ffc0000 [ 376.107056][ T30] audit: type=1326 audit(1755457687.598:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3a3f8ebe9 code=0x7ffc0000 [ 376.148751][ T30] audit: type=1326 audit(1755457687.598:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a3f8ebe9 code=0x7ffc0000 [ 376.171135][ T30] audit: type=1326 audit(1755457687.598:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe3a3f8ebe9 code=0x7ffc0000 [ 376.200884][ T30] audit: type=1326 audit(1755457687.598:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a3f8ebe9 code=0x7ffc0000 [ 377.031898][ T30] audit: type=1326 audit(1755457687.598:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3a3f8ebe9 code=0x7ffc0000 [ 377.057160][ T30] audit: type=1326 audit(1755457687.598:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a3f8ebe9 code=0x7ffc0000 [ 377.079970][ T30] audit: type=1326 audit(1755457687.598:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fe3a3f8ebe9 code=0x7ffc0000 [ 377.102780][ T30] audit: type=1326 audit(1755457687.598:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a3f8ebe9 code=0x7ffc0000 [ 377.127237][ T30] audit: type=1326 audit(1755457687.598:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe3a3f8ebe9 code=0x7ffc0000 [ 377.151784][ T8642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.167621][ T8638] IPVS: length: 24 != 7608 [ 377.188921][ T5847] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 377.239077][ T30] audit: type=1326 audit(1755457687.598:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a3f8ebe9 code=0x7ffc0000 [ 377.292386][ T8642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.541542][ T5903] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 381.712770][ T5847] usb 1-1: device descriptor read/all, error -71 [ 383.292551][ T8659] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 389.302158][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.796639][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.803021][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.570811][ T5948] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 397.115986][ T5948] usb 1-1: device descriptor read/64, error -71 [ 398.516404][ T5948] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 398.997849][ T5948] usb 1-1: device descriptor read/64, error -71 [ 400.223385][ T5948] usb usb1-port1: attempt power cycle [ 400.633179][ T5948] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 400.999168][ T5948] usb 1-1: device not accepting address 26, error -71 [ 401.541963][ T5948] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 402.027809][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 404.238936][ T5948] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 404.890443][ T8689] netlink: 'syz.5.610': attribute type 10 has an invalid length. [ 405.437340][ T5948] usb 1-1: config 0 has no interface number 0 [ 405.698020][ T5948] usb 1-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 406.867004][ T5948] usb 1-1: string descriptor 0 read error: -71 [ 406.888349][ T5948] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 407.131903][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.208176][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 407.219703][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 407.228761][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 408.362531][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 408.494361][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 412.816826][ T5156] Bluetooth: hci5: command tx timeout [ 412.961668][ T5948] usb 1-1: config 0 descriptor?? [ 414.009361][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 414.290105][ T5948] usb 1-1: can't set config #0, error -71 [ 414.328310][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 415.193785][ T5850] Bluetooth: hci5: command tx timeout [ 415.226510][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 415.517632][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 415.537690][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 415.627494][ T5839] bridge0: port 3(syz_tun) entered disabled state [ 415.960800][ T5948] usb 1-1: USB disconnect, device number 27 [ 417.321210][ T5839] syz_tun (unregistering): left allmulticast mode [ 417.530251][ T5842] Bluetooth: hci5: command tx timeout [ 417.780968][ T5156] Bluetooth: hci2: command tx timeout [ 419.747980][ T5156] Bluetooth: hci5: command tx timeout [ 419.811108][ T5839] syz_tun (unregistering): left promiscuous mode [ 419.876814][ T5839] bridge0: port 3(syz_tun) entered disabled state [ 420.004643][ T5156] Bluetooth: hci2: command tx timeout [ 420.192560][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 420.202895][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 420.211696][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 420.220801][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 420.229954][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 420.336138][ T5920] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 420.531402][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 420.547871][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.576316][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.600260][ T5920] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 420.636806][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.669871][ T5920] usb 1-1: config 0 descriptor?? [ 420.691196][ T5920] hub 1-1:0.0: USB hub found [ 420.892652][ T5920] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 421.091525][ T8701] chnl_net:caif_netlink_parms(): no params data found [ 421.331205][ T8714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.369566][ T8694] chnl_net:caif_netlink_parms(): no params data found [ 421.474430][ T8714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.592172][ T5920] usbhid 1-1:0.0: can't add hid device: -71 [ 421.637375][ T5920] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 421.754395][ T5920] usb 1-1: USB disconnect, device number 28 [ 422.235928][ T5842] Bluetooth: hci2: command tx timeout [ 422.399399][ T5842] Bluetooth: hci6: command tx timeout [ 424.451911][ T5842] Bluetooth: hci2: command tx timeout [ 424.708431][ T5842] Bluetooth: hci6: command tx timeout [ 426.668319][ T8701] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.678990][ T8701] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.709893][ T8701] bridge_slave_0: entered allmulticast mode [ 426.733766][ T8701] bridge_slave_0: entered promiscuous mode [ 426.757753][ T8701] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.782466][ T8701] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.814784][ T8701] bridge_slave_1: entered allmulticast mode [ 426.837442][ T8701] bridge_slave_1: entered promiscuous mode [ 426.915806][ T3499] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.942753][ T5842] Bluetooth: hci6: command tx timeout [ 426.964935][ T3499] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.021264][ T8715] chnl_net:caif_netlink_parms(): no params data found [ 427.661430][ T8743] netlink: 16 bytes leftover after parsing attributes in process `syz.5.617'. [ 428.273067][ T8744] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 428.683037][ T3499] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.699269][ T3499] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.722335][ T8694] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.744482][ T8694] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.751881][ T8694] bridge_slave_0: entered allmulticast mode [ 428.760471][ T8694] bridge_slave_0: entered promiscuous mode [ 428.769236][ T8694] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.783284][ T8694] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.790530][ T8694] bridge_slave_1: entered allmulticast mode [ 428.803701][ T8694] bridge_slave_1: entered promiscuous mode [ 428.974003][ T8748] netlink: 16 bytes leftover after parsing attributes in process `syz.5.619'. [ 429.168240][ T5842] Bluetooth: hci6: command tx timeout [ 429.640984][ T8701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.886545][ T3499] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.907128][ T3499] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.759368][ T8701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.837732][ T8694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.921855][ T3499] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.932990][ T3499] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.576518][ T8767] Invalid ELF header magic: != ELF [ 432.634290][ T8694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.858086][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.623'. [ 432.867225][ T8766] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 432.874816][ T8766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.942578][ T8715] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.949745][ T8715] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.961942][ T8715] bridge_slave_0: entered allmulticast mode [ 432.975687][ T8715] bridge_slave_0: entered promiscuous mode [ 432.991993][ T8694] team0: Port device team_slave_0 added [ 433.022625][ T8701] team0: Port device team_slave_0 added [ 433.085954][ T8701] team0: Port device team_slave_1 added [ 433.120896][ T8715] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.140123][ T8715] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.179369][ T8715] bridge_slave_1: entered allmulticast mode [ 433.214331][ T8715] bridge_slave_1: entered promiscuous mode [ 433.272915][ T8694] team0: Port device team_slave_1 added [ 433.947668][ T8701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.957600][ T8701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.020041][ T8701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.187572][ T8715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.221201][ T8694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.232945][ T8694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.258957][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.266200][ T8694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.280061][ T8701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.288481][ T8701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.314521][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.321028][ T8701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.360644][ T8715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.521506][ T8694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.528942][ T8694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.556386][ T8694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.833621][ T3499] bridge_slave_1: left allmulticast mode [ 434.839373][ T3499] bridge_slave_1: left promiscuous mode [ 434.851582][ T3499] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.863848][ T3499] bridge_slave_0: left allmulticast mode [ 434.876206][ T3499] bridge_slave_0: left promiscuous mode [ 434.882122][ T3499] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.132194][ T5903] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 435.506012][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 435.818301][ T5903] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 435.828565][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.836686][ T5903] usb 1-1: Product: syz [ 435.841548][ T5903] usb 1-1: Manufacturer: syz [ 435.846210][ T5903] usb 1-1: SerialNumber: syz [ 435.855241][ T5903] usb 1-1: config 0 descriptor?? [ 435.990466][ T5903] gspca_main: sq930x-2.14.0 probing 2770:930c [ 436.174368][ T8787] netlink: 'syz.5.628': attribute type 10 has an invalid length. [ 436.584213][ T3499] bond0 (unregistering): (slave 1@): Releasing backup interface [ 436.595256][ T3499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.606175][ T3499] bond0 (unregistering): Released all slaves [ 436.634260][ T8715] team0: Port device team_slave_0 added [ 436.645602][ T8715] team0: Port device team_slave_1 added [ 436.762356][ T5903] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 436.784405][ T5903] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 436.825175][ T5903] usb 1-1: USB disconnect, device number 29 [ 436.888112][ T3499] tipc: Left network mode [ 436.907471][ T8694] hsr_slave_0: entered promiscuous mode [ 436.924537][ T8694] hsr_slave_1: entered promiscuous mode [ 436.937987][ T8694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.951542][ T8694] Cannot create hsr debugfs directory [ 436.967752][ T8701] hsr_slave_0: entered promiscuous mode [ 436.978561][ T8701] hsr_slave_1: entered promiscuous mode [ 436.992999][ T8701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.007719][ T8701] Cannot create hsr debugfs directory [ 437.019374][ T8715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.053130][ T8715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.085604][ T8715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.102252][ T8715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.109769][ T8715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.136130][ T8715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.551585][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 438.551704][ T30] audit: type=1804 audit(1755457751.869:108): pid=8805 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.630" name="/newroot/17/file1" dev="fuse" ino=1 res=1 errno=0 [ 438.824729][ T8807] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 438.824729][ T8807] SȘȞZ6' [ 438.986554][ T30] audit: type=1800 audit(1755457751.869:109): pid=8805 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.630" name="/" dev="fuse" ino=1 res=0 errno=0 [ 439.064527][ T30] audit: type=1800 audit(1755457751.878:110): pid=8805 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.630" name="/" dev="fuse" ino=1 res=0 errno=0 [ 439.329651][ T3499] mac80211_hwsim hwsim9 wlan0 (unregistering): left allmulticast mode [ 439.361436][ T3499] mac80211_hwsim hwsim9 wlan0 (unregistering): left promiscuous mode [ 439.727016][ T3499] hsr_slave_0: left promiscuous mode [ 439.772312][ T3499] hsr_slave_1: left promiscuous mode [ 439.850589][ T3499] veth0_macvtap: left promiscuous mode [ 439.868245][ T3499] veth1_vlan: left promiscuous mode [ 439.873724][ T3499] veth0_vlan: left promiscuous mode [ 441.381498][ T8849] netlink: 16 bytes leftover after parsing attributes in process `syz.5.640'. [ 441.809804][ T3499] team0 (unregistering): Port device team_slave_1 removed [ 441.853619][ T3499] team0 (unregistering): Port device team_slave_0 removed [ 442.314078][ T8715] hsr_slave_0: entered promiscuous mode [ 442.325370][ T8715] hsr_slave_1: entered promiscuous mode [ 442.334732][ T8715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.348425][ T8715] Cannot create hsr debugfs directory [ 442.891492][ T8868] veth0_to_bridge: entered promiscuous mode [ 443.031177][ T8866] veth0_to_bridge: left promiscuous mode [ 443.260351][ T8701] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 443.273218][ T8701] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 443.441732][ T8701] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 443.712842][ T3499] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.740192][ T8701] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 443.806401][ T3499] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.920265][ T3499] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.099423][ T3499] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.186196][ T8694] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 444.240907][ T8694] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 444.268435][ T8694] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 444.539577][ T8694] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 444.611081][ T8901] netlink: 'syz.0.648': attribute type 10 has an invalid length. [ 444.664989][ T8904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.648'. [ 444.708590][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.648'. [ 444.722829][ T8901] bond0: (slave bond_slave_0): Releasing backup interface [ 444.804584][ T8904] bridge0: entered promiscuous mode [ 444.816459][ T8904] macvlan2: entered promiscuous mode [ 444.842272][ T8910] macvlan3: entered promiscuous mode [ 444.863805][ T8715] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 444.901368][ T8715] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 445.068672][ T8715] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 445.473679][ T8919] netlink: 'syz.0.649': attribute type 10 has an invalid length. [ 445.548025][ T3499] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.863181][ T8715] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 445.947224][ T3499] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.101737][ T8701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.149472][ T3499] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.983944][ T3499] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.199523][ T8701] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.279525][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.286720][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.332014][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.339278][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.861915][ T8947] loop6: detected capacity change from 0 to 524287999 [ 448.324672][ T8946] netlink: 'syz.0.651': attribute type 1 has an invalid length. [ 448.332442][ T8946] netlink: 224 bytes leftover after parsing attributes in process `syz.0.651'. [ 448.344558][ T8947] Dev loop6: unable to read RDB block 8 [ 448.355412][ T8947] loop6: unable to read partition table [ 448.361804][ T8947] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 448.438330][ T8715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.602375][ T8694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.737206][ T8950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.652'. [ 448.868132][ T8715] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.964205][ T8694] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.006780][ T6020] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.014054][ T6020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.090853][ T3499] bridge_slave_1: left allmulticast mode [ 449.098390][ T3499] bridge_slave_1: left promiscuous mode [ 449.233705][ T8960] netlink: 16 bytes leftover after parsing attributes in process `syz.5.653'. [ 449.961567][ T3499] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.986648][ T3499] bridge_slave_0: left allmulticast mode [ 450.018415][ T3499] bridge_slave_0: left promiscuous mode [ 450.032426][ T3499] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.074407][ T3499] bridge_slave_1: left allmulticast mode [ 450.083742][ T3499] bridge_slave_1: left promiscuous mode [ 450.096071][ T3499] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.122087][ T3499] bridge_slave_0: left allmulticast mode [ 450.127822][ T3499] bridge_slave_0: left promiscuous mode [ 450.139387][ T3499] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.178109][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.656'. [ 450.271271][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.656'. [ 562.531638][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 562.538701][ C1] rcu: 0-...!: (0 ticks this GP) idle=624c/1/0x4000000000000000 softirq=40016/40016 fqs=0 [ 562.549972][ C1] rcu: (detected by 1, t=10502 jiffies, g=31709, q=385 ncpus=2) [ 562.557849][ C1] Sending NMI from CPU 1 to CPUs 0: [ 562.557890][ C0] NMI backtrace for cpu 0 [ 562.557916][ C0] CPU: 0 UID: 0 PID: 8975 Comm: dhcpcd-run-hook Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 562.557938][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 562.557953][ C0] RIP: 0010:preempt_count_sub+0x0/0x170 [ 562.557980][ C0] Code: c7 c7 34 e5 a0 8f e8 7f 2a 8f 00 e9 5c ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 53 48 bb 00 00 00 00 00 fc ff df 48 c7 c0 e0 d2 a7 [ 562.557997][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00000046 [ 562.558021][ C0] RAX: 0000000000000001 RBX: 0000000000000802 RCX: 0000000000000000 [ 562.558033][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 562.558043][ C0] RBP: ffffc90000007c78 R08: ffffffff99d33c33 R09: 1ffffffff33a6786 [ 562.558057][ C0] R10: dffffc0000000000 R11: fffffbfff33a6787 R12: dffffc0000000000 [ 562.558071][ C0] R13: ffff8880765780a8 R14: ffffffff99d33c30 R15: 1ffff92000000f7c [ 562.558085][ C0] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 562.558100][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 562.558113][ C0] CR2: 0000562ae4fed950 CR3: 0000000078c1c000 CR4: 00000000003526f0 [ 562.558128][ C0] Call Trace: [ 562.558142][ C0] [ 562.558150][ C0] _raw_spin_unlock_irqrestore+0xad/0x110 [ 562.558186][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 562.558217][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 562.558246][ C0] debug_object_activate+0x2e2/0x420 [ 562.558280][ C0] enqueue_hrtimer+0x30/0x3a0 [ 562.558304][ C0] __hrtimer_run_queues+0x656/0xc60 [ 562.558334][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 562.558352][ C0] ? read_tsc+0x9/0x20 [ 562.558383][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 562.558417][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 562.558440][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 562.558459][ C0] [ 562.558465][ C0] [ 562.558472][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 562.558492][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 562.558523][ C0] Code: 74 05 e8 fb 9b 5e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 63 cc 27 f6 65 8b 05 1c 7a 33 07 85 c0 74 40 48 c7 04 24 0e 36 [ 562.558539][ C0] RSP: 0018:ffffc9000432f540 EFLAGS: 00000206 [ 562.558554][ C0] RAX: eec299b6abd88000 RBX: 0000000000000a02 RCX: eec299b6abd88000 [ 562.558567][ C0] RDX: 0000000000000006 RSI: ffffffff8d982fba RDI: 0000000000000001 [ 562.558579][ C0] RBP: ffffc9000432f5c0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 562.558593][ C0] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: dffffc0000000000 [ 562.558607][ C0] R13: ffff888058efc9c0 R14: ffffffff99d27090 R15: 1ffff92000865ea8 [ 562.558632][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 562.558665][ C0] ? exit_mmap+0x53f/0xb50 [ 562.558685][ C0] debug_check_no_obj_freed+0x451/0x470 [ 562.558723][ C0] ? exit_mmap+0x53f/0xb50 [ 562.558740][ C0] kmem_cache_free+0x113/0x400 [ 562.558767][ C0] exit_mmap+0x53f/0xb50 [ 562.558785][ C0] ? uprobe_clear_state+0x20f/0x290 [ 562.558805][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 562.558822][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 562.558850][ C0] ? __pfx_exit_aio+0x10/0x10 [ 562.558873][ C0] ? uprobe_clear_state+0x274/0x290 [ 562.558890][ C0] ? mm_update_next_owner+0xa7/0x870 [ 562.558918][ C0] __mmput+0x118/0x410 [ 562.558937][ C0] exec_mmap+0x680/0x7a0 [ 562.558963][ C0] ? generic_permission+0x2e5/0x690 [ 562.558989][ C0] ? __pfx_exec_mmap+0x10/0x10 [ 562.559021][ C0] begin_new_exec+0x129c/0x2120 [ 562.559051][ C0] ? __pfx_load_elf_phdrs+0x10/0x10 [ 562.559076][ C0] load_elf_binary+0x96a/0x2790 [ 562.559102][ C0] ? load_elf_binary+0x861/0x2790 [ 562.559118][ C0] ? load_misc_binary+0x110/0xc40 [ 562.559137][ C0] ? __lock_acquire+0xab9/0xd20 [ 562.559158][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 562.559186][ C0] bprm_execve+0x999/0x1440 [ 562.559222][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 562.559255][ C0] do_execveat_common+0x510/0x6a0 [ 562.559278][ C0] __x64_sys_execve+0x94/0xb0 [ 562.559307][ C0] do_syscall_64+0xfa/0x3b0 [ 562.559326][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.559344][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.559362][ C0] ? clear_bhb_loop+0x60/0xb0 [ 562.559383][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.559401][ C0] RIP: 0033:0x7f78bad06107 [ 562.559431][ C0] Code: Unable to access opcode bytes at 0x7f78bad060dd. [ 562.559441][ C0] RSP: 002b:00007ffe0b514fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 562.559459][ C0] RAX: ffffffffffffffda RBX: 0000562ae4ffe080 RCX: 00007f78bad06107 [ 562.559472][ C0] RDX: 0000562ae4ffe0a8 RSI: 0000562ae4ffe080 RDI: 0000562ae4ffe138 [ 562.559485][ C0] RBP: 0000562ae4ffe138 R08: 00007ffe0b518e7d R09: 0000000000000000 [ 562.559498][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 0000562ae4ffe0a8 [ 562.559511][ C0] R13: 00007f78baecbe8b R14: 0000562ae4ffe0a8 R15: 0000000000000000 [ 562.559533][ C0] [ 562.559878][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g31709 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 563.068745][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=32794 [ 563.076754][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g31709 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 563.088152][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 563.098257][ C1] rcu: RCU grace-period kthread stack dump: [ 563.104166][ C1] task:rcu_preempt state:I stack:26968 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 563.116159][ C1] Call Trace: [ 563.119479][ C1] [ 563.122469][ C1] __schedule+0x16aa/0x4c90 [ 563.127053][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 563.132432][ C1] ? schedule+0x165/0x360 [ 563.136817][ C1] ? __lock_acquire+0xab9/0xd20 [ 563.141720][ C1] ? __pfx___schedule+0x10/0x10 [ 563.146643][ C1] ? schedule+0x91/0x360 [ 563.150935][ C1] schedule+0x165/0x360 [ 563.155134][ C1] schedule_timeout+0x12b/0x270 [ 563.160029][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 563.165446][ C1] ? __pfx_process_timeout+0x10/0x10 [ 563.170782][ C1] ? prepare_to_swait_event+0x341/0x380 [ 563.176399][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 563.181325][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 563.186323][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.191578][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 563.196918][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 563.202175][ C1] ? finish_swait+0xcd/0x1f0 [ 563.206821][ C1] rcu_gp_kthread+0x99/0x390 [ 563.211516][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 563.216789][ C1] ? __kthread_parkme+0x7b/0x200 [ 563.221813][ C1] ? __kthread_parkme+0x1a1/0x200 [ 563.226900][ C1] kthread+0x70e/0x8a0 [ 563.231020][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 563.236255][ C1] ? __pfx_kthread+0x10/0x10 [ 563.240890][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 563.246116][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.251348][ C1] ? __pfx_kthread+0x10/0x10 [ 563.255992][ C1] ret_from_fork+0x3fc/0x770 [ 563.260627][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 563.265784][ C1] ? __switch_to_asm+0x39/0x70 [ 563.270583][ C1] ? __switch_to_asm+0x33/0x70 [ 563.275385][ C1] ? __pfx_kthread+0x10/0x10 [ 563.280018][ C1] ret_from_fork_asm+0x1a/0x30 [ 563.284836][ C1]