last executing test programs: 10m33.207211094s ago: executing program 4 (id=86): io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r2, 0x100000000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)=@ethernet={0x6, @link_local}, 0x80, 0x0}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0x4, &(0x7f0000000300)={0x8, 0x20000008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) 10m32.962219848s ago: executing program 4 (id=89): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b00010000000009040000012ec25d000905d891"], 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000040)={0xdb, 0x0, 0x1ff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0xffffffffffffff92}], 0x1, 0xe8, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) sendmsg$rds(r4, &(0x7f00000029c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_dest={0x18, 0x10c}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0xc4}}], 0x30, 0x40010}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x6, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket(0x22, 0x2, 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x2, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 10m26.821118913s ago: executing program 4 (id=103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @empty}}}, 0x48) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff000000003609080000000000c39af0ffa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m25.308056637s ago: executing program 4 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r1, 0x6, 0x25, &(0x7f0000000040), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000014c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x2, 0x9, 0xdc5, 0x2, 0xdb8b, 0xac0e, 0xa1, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001540)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x7e}}, @filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xff, 0x60000000, 0x0, 0x1, 0x3ff, 0xf14, 0x9, 0x2, 0x5, 0x7, 0x53, 0x7ff, 0x30000, 0xfffffff8, 0x9, 0x6, 0x0, 0x3, 0x2, 0x4, 0xe000000, 0x7, 0xfb04, 0x6, 0x2, 0x1, 0x401, 0x4, 0x9, 0x336c577c, 0x5, 0x7fff, 0x9, 0xffffb60d, 0x5, 0x4c8a, 0x3, 0xff, 0x8, 0x7fff, 0x800, 0xfffffffc, 0x6, 0x800000, 0x4, 0x2, 0x4, 0x9, 0x4, 0x1f, 0xb79458f, 0x0, 0x0, 0x400, 0x9, 0x7fffffff, 0x4af36039, 0xcf, 0xff, 0xbfc, 0x200, 0xf8, 0x536, 0x80, 0x14, 0x8, 0x7, 0x7fffffff, 0xfffffffe, 0xfffffffc, 0x5, 0x400, 0x8, 0x400, 0x7, 0x4, 0x5, 0x5, 0x5, 0x0, 0xc9a, 0xfffffffd, 0x9945, 0x8001, 0x5, 0x7, 0x6, 0x7, 0x4, 0x8, 0x21, 0xb1b8, 0x7fffffff, 0xe7f, 0x2, 0x2, 0x9, 0x9, 0x86, 0xff, 0xa780, 0x3ff, 0x6, 0x8, 0x2, 0x0, 0xa, 0x1, 0x8, 0x7f, 0x0, 0x8000, 0x5, 0x1, 0x1, 0x7, 0x7, 0x9, 0x6, 0x6, 0x5, 0x800, 0xa, 0xb, 0xb5, 0x5, 0x3, 0x10, 0x7, 0x3, 0x7fff, 0x6, 0xf, 0x479, 0x3, 0x3, 0x84, 0xfffffff3, 0x3c877851, 0x5, 0xb4b7, 0x7, 0x37, 0x5, 0x918, 0x7fffffff, 0xfffffffc, 0x9, 0x1, 0x8, 0x0, 0x4, 0x7fff, 0x9, 0x1ff, 0x8d, 0x100, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x862, 0x8e, 0x9, 0x6, 0xc58e0, 0x1, 0x0, 0x4, 0x1e3, 0xffffffff, 0xa1c, 0x8000, 0x200, 0x400, 0x2, 0x0, 0x10000, 0x10, 0xb1bf, 0xfffffff8, 0x6, 0x4, 0xffff2714, 0x2, 0x9, 0x5, 0x4, 0xfffffffd, 0x401, 0x3, 0x97, 0x4, 0x4, 0xfffff000, 0x3, 0xe, 0x6, 0x211, 0x4, 0xfffff001, 0x7, 0xbf1, 0x7ff, 0x7, 0x1, 0x8, 0x8, 0x5, 0x2e, 0x5, 0x587a, 0x2, 0x2, 0xed9, 0x200, 0x3, 0x6, 0xfffffff9, 0xe, 0x7, 0x4, 0x4b, 0x1, 0x5c6f, 0x9, 0x5, 0x30000, 0x6, 0x1, 0x1a, 0x401, 0xf6, 0x2, 0x8, 0x6, 0x5, 0x9, 0x3, 0x1, 0x80000000, 0x3, 0x9, 0x8000, 0x3, 0x100, 0x3, 0x6, 0x101, 0x1, 0x5, 0x2, 0x2, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x24, 0x1, 0x9, 0x9, 0x8, 0x2, 0x6, 0x8, 0x1, 0x6, 0x4, 0x0, 0xffffffff, 0x2, 0x401, 0x615, 0xc7, 0x1, 0x0, 0x5, 0xffffba1c, 0x715, 0xfffffeff, 0x7, 0x0, 0x9, 0xd, 0x101, 0x1, 0xec1, 0x1, 0x0, 0xa0000000, 0x40, 0x7, 0xfffffc00, 0x37000000, 0x9, 0x5, 0x0, 0xe1, 0x2, 0x2, 0x89, 0xfffffff8, 0x8, 0xff, 0xfffffffd, 0x9, 0x2, 0x8, 0x7, 0x80000000, 0x7, 0x1, 0xffff, 0x9, 0x1, 0x3, 0x0, 0xd, 0x10000, 0x7, 0x6, 0x6, 0x9, 0x9, 0x3, 0x4, 0x10001, 0x7, 0x2, 0x3dc0, 0xe97, 0x6, 0x2, 0x1, 0x3, 0xffff0001, 0x9, 0x5, 0x7, 0xff, 0x7fff, 0x7fff, 0x5, 0x3, 0xc1, 0x1, 0x0, 0x200, 0x8, 0x3, 0x4bde4023, 0x6, 0x1, 0x9, 0x7, 0xffffffff, 0x4, 0x9, 0x7, 0x342, 0xc, 0x7, 0x7ff, 0x3, 0x7, 0xa, 0x2, 0x5, 0x3f, 0x2, 0x2, 0x7, 0x54ca, 0x7, 0x1, 0x8, 0x0, 0x9, 0x5b, 0x7fffffff, 0xffff, 0x1, 0x1, 0x40, 0x43, 0x1, 0x8, 0x9, 0x2, 0x8, 0x7fff, 0x3, 0x8001, 0x5, 0x7fff, 0x7, 0xb, 0x9e5, 0x100, 0x7ff, 0x25, 0x5, 0x6, 0xfffffff9, 0x3ff, 0x9, 0x9, 0x5, 0x0, 0x323a, 0x6, 0x80000001, 0xce96, 0x4, 0x7fff, 0x9, 0x3, 0x5a40, 0x3, 0x2, 0x92, 0x7, 0x1, 0x2, 0xd, 0x7, 0x9, 0x400, 0xfffff30b, 0xe, 0x6, 0x6, 0x3, 0x1, 0x1, 0x7, 0x3, 0x100, 0x800, 0x7, 0x101, 0xceb, 0x61ab, 0x5f1, 0x2, 0x80000001, 0x0, 0x2, 0x6, 0x1, 0x8001, 0x2, 0x80000000, 0x80000001, 0x6, 0x33, 0x8, 0x7ff, 0x101, 0x6, 0x3f, 0x7f, 0x4, 0x9, 0x9, 0xff, 0x7, 0x80000000, 0x8, 0x8dd7, 0xffffffff, 0x9, 0x2e92, 0x2, 0x6a27, 0x5, 0x6, 0x8001, 0x0, 0x3, 0x2, 0x794, 0x5, 0xb6, 0x8c, 0x8, 0xe, 0x6, 0x6, 0x2, 0x2, 0x7, 0xae, 0x7, 0x9, 0x9, 0x4, 0x0, 0x6, 0x200, 0x3, 0x9, 0x183, 0x400, 0x6, 0x8001, 0x7f, 0xd, 0x1, 0x101, 0x4, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x2, 0x2, 0x4, {0x8, 0x1, 0x100, 0x2, 0xd, 0x5}, {0x9, 0x0, 0x1, 0x8, 0x30c, 0xfffffff7}, 0x0, 0x8, 0x7fffffff}}]}]}}]}, 0x884}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, 0x0) r6 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000600)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x101}) io_uring_enter(r6, 0x2d42, 0x0, 0x0, 0x0, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r4, 0x9, 0x0, 0x400, 0x4, 0x1, {0x0, r10}}) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r5, 0x0, &(0x7f00000009c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x36, 0x2004, @fd, 0x9, 0x0, 0x0, 0x11, 0x1, {0x1, r10}}) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000300)='net/xfrm_stat\x00') lseek(r11, 0x4, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 10m24.074269588s ago: executing program 4 (id=111): io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r2, 0x100000000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)=@ethernet={0x6, @link_local}, 0x80, 0x0}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0x4, &(0x7f0000000300)={0x8, 0x20000008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) 10m22.735953742s ago: executing program 4 (id=119): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x690040, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000080)=0x1) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000080)=0x1) syz_io_uring_setup(0x2d43, &(0x7f00000000c0)={0x0, 0x8c5c, 0x2000, 0x0, 0xfc}, &(0x7f0000000140), &(0x7f0000000180)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000001c0)) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000001c0)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) setsockopt$MRT6_ASSERT(r3, 0x29, 0xcf, &(0x7f0000000240), 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000c, 0x10, r3, 0x8000000) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r4, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xffffffff, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x2000800}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='objagg_obj_put\x00', r0, 0x0, 0x7}, 0x18) (async) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='objagg_obj_put\x00', r0, 0x0, 0x7}, 0x18) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000480)={{0xa, 0x4e20, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, {0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0xffffffffffffffff, {[0x6, 0x1, 0x5, 0x1000000, 0x7, 0x4, 0x8, 0x8a]}}, 0x5c) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x2, 0x17, 0xdb, 0x7, 0xb, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_address={0x5, 0x6, 0x3c, 0x80, 0x0, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x406}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x2, 0x9, 0xe4, 0x0, 0x40000000}]}, 0x58}}, 0x20048000) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x2, 0x17, 0xdb, 0x7, 0xb, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_address={0x5, 0x6, 0x3c, 0x80, 0x0, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x406}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x2, 0x9, 0xe4, 0x0, 0x40000000}]}, 0x58}}, 0x20048000) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) fcntl$setsig(r0, 0xa, 0xd) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000600)={0x0, 0x0, r0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'ip6_vti0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, 0x10, 0x7800, 0x7, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000007c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10240008}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xe4, 0x0, 0x204, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x815}, 0x8014) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40080) setsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000000a80)=0x7, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x12, r3, 0x8000000) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000ac0)=0x2000, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000ac0)=0x2000, 0x4) fcntl$setownex(r5, 0xf, &(0x7f0000000b00)={0x0, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) 10m22.339750456s ago: executing program 32 (id=119): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x690040, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000080)=0x1) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000080)=0x1) syz_io_uring_setup(0x2d43, &(0x7f00000000c0)={0x0, 0x8c5c, 0x2000, 0x0, 0xfc}, &(0x7f0000000140), &(0x7f0000000180)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000001c0)) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000001c0)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) setsockopt$MRT6_ASSERT(r3, 0x29, 0xcf, &(0x7f0000000240), 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000c, 0x10, r3, 0x8000000) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r4, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xffffffff, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x2000800}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='objagg_obj_put\x00', r0, 0x0, 0x7}, 0x18) (async) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='objagg_obj_put\x00', r0, 0x0, 0x7}, 0x18) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000480)={{0xa, 0x4e20, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, {0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0xffffffffffffffff, {[0x6, 0x1, 0x5, 0x1000000, 0x7, 0x4, 0x8, 0x8a]}}, 0x5c) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x2, 0x17, 0xdb, 0x7, 0xb, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_address={0x5, 0x6, 0x3c, 0x80, 0x0, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x406}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x2, 0x9, 0xe4, 0x0, 0x40000000}]}, 0x58}}, 0x20048000) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x2, 0x17, 0xdb, 0x7, 0xb, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_address={0x5, 0x6, 0x3c, 0x80, 0x0, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x406}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x2, 0x9, 0xe4, 0x0, 0x40000000}]}, 0x58}}, 0x20048000) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) fcntl$setsig(r0, 0xa, 0xd) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000600)={0x0, 0x0, r0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'ip6_vti0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x1, 0x2, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, 0x10, 0x7800, 0x7, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000007c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10240008}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xe4, 0x0, 0x204, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x815}, 0x8014) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40080) setsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000000a80)=0x7, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x12, r3, 0x8000000) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000ac0)=0x2000, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000ac0)=0x2000, 0x4) fcntl$setownex(r5, 0xf, &(0x7f0000000b00)={0x0, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) 8m51.106853147s ago: executing program 2 (id=474): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000140)={0x3ff, 0x6, 0x1, 'queue0\x00', 0x7}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x1, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)='%pS \x00', 0x2}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000e00851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002007fffffff180000000000480000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 8m50.127377147s ago: executing program 2 (id=475): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x6, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x1, 0x0) syz_io_uring_setup(0x360b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x36b}, &(0x7f0000000340), 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x4}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x0, &(0x7f00005c0000/0x2000)=nil) ioctl$UFFDIO_COPY(r4, 0xc020aa08, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xd0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000300)={0x0, 0x4, 0x10000, 0x2000, &(0x7f000086c000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x5c928c36, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x2) mkdir(0x0, 0x0) 8m47.372299752s ago: executing program 2 (id=488): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109004d00128000000000", @ANYRES32=0x0, @ANYBLOB="82f0b7e99bdfb4492a14d6ba482cc24ae5d7157c244055c4c82185f59a3dffa46e02913316fd8eb526f5ed459f9ad47dc4ce7ca965340f96009a262674522626fc"], 0x64}}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(r1, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000950000e100000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000000000000000080045000014000000000002907800000000e000000111009079e0000002000000020000000095"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) landlock_create_ruleset(0x0, 0xece7d3f30ecbde5f, 0x10000000000001) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x34}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000024000000000400000200000008420400", @ANYRES32, @ANYBLOB="5f0004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe13) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fchown(r5, r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$packet(0x11, 0x3, 0x300) 8m46.478438423s ago: executing program 2 (id=490): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001800)={r0, 0x58, &(0x7f0000001780)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001840)={r9, 0x10, 0x10}, 0xc) 8m45.49814121s ago: executing program 2 (id=497): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="030000000002000000400000faa1be35ba123d209811158f4b161e33a0c27d691d4324b3aee8ca212e54e135916e33cadd5df99faab5010d3c6acbe717f36cf4b538f840b5899f852874cd193769023d7b77d3de55148b3b87ab0a996a85993fc5c794d951c568502a0cce9bc71889fc6a97c9c4b960f3f52ebc13", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = dup(r6) r8 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r8, 0xab00, r7) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x31, 0x0, &(0x7f00000008c0)=0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="260000000000000000000000894344ca91", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xb5, &(0x7f0000000340)=""/181, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x6, 0x0, 0x62, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003500010700000000000000000d"], 0x14}}, 0x0) recvmsg(r10, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f00000010c0)="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") bind$alg(r12, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r13 = accept4(r11, 0x0, 0x0, 0x0) write(r13, &(0x7f0000000040)="cb", 0xfffffdef) 8m43.78452819s ago: executing program 2 (id=503): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0xffff, 0x0, "07000000fffff1ff"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffb, 0x8, 0x0, 0x0, "0062ba5d8200000af74591b1ffccc2ffffff00"}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000000780)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioprio_set$pid(0x0, 0x0, 0x6004) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xa) 8m26.76871792s ago: executing program 33 (id=503): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0xffff, 0x0, "07000000fffff1ff"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffb, 0x8, 0x0, 0x0, "0062ba5d8200000af74591b1ffccc2ffffff00"}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000000780)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioprio_set$pid(0x0, 0x0, 0x6004) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xa) 4m34.668258419s ago: executing program 0 (id=1391): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f540000000c0a01080000000000000000010000000900020073797a32000000002800038024000080080003400200000218000b80140001800c000100636f756e74657200040002800900010073797a30"], 0xd8}}, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000580)={0x0, 0xfe49, r3}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000580)={0x0, 0xfe49, r3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000040001000000940000000fad413e85000000070000009500000000"], &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4a, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r10, 0x2000000, 0x18, 0x0, &(0x7f0000000040)="0990ddc84839db92", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg(r8, &(0x7f00000003c0)={&(0x7f0000000300)=@can, 0x80, &(0x7f0000000980)=[{&(0x7f0000000800)}, {&(0x7f0000000100)="40af4a8d98b35327cf0fc314fa9360bae3fb8173ee5db3c1471f", 0x1a}, {&(0x7f00000001c0)="2065169622ffbce1c0405943e250be580c06e6ae4f7bec8d75c41fccdaf952edf945", 0x22}, {0x0}, {&(0x7f0000000440)="ac591530e8fdd0a9cd9e026751cc25ba39820e35ab45287626f3610f02000000000000000000", 0x26}], 0x5, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRES16=r9, @ANYRES64=r2, @ANYRESHEX=r8, @ANYRESHEX=r11, @ANYRESHEX], 0x1f8}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 4m33.12866135s ago: executing program 0 (id=1400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYRESHEX=r0, @ANYRES8], 0x80}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "42c59c23cba5509acc1fcb978db9c707"}]}}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000180)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x1d, 0x0, 0x0, 0x7fff0000}]}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_CMAP(r7, 0x4b71, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) shutdown(r3, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f0000001240)='>', 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) shutdown(r8, 0x1) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x4, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) 4m31.82971687s ago: executing program 0 (id=1404): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) set_mempolicy(0x4003, &(0x7f0000000080)=0x7, 0x3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffccf}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x56, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x4, 0x50000) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_open_pts(0xffffffffffffffff, 0x88140) ioctl$TIOCGSOFTCAR(r11, 0x5419, &(0x7f0000000180)) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x38, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x38}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r13, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r14, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) close_range(0xffffffffffffffff, r10, 0x2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000059156cfe06d60c4e32773680d8eb7a14cf7c764399a9f3b131fa6921531129a4fc8efda847e0fe36dd", @ANYRES16=r15, @ANYBLOB="01002bbd7000fedbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 4m30.436653103s ago: executing program 0 (id=1409): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = dup2(r0, r0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000006c0)={0x0, {0x40000, 0xc, 0x3f000000, 0x2}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 4m30.259605273s ago: executing program 0 (id=1411): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) unshare(0x24020400) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcf, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0}}, 0x10) prlimit64(0x0, 0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, 0x8fc0, 0x1}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0}, 0x48800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000001000000000000000000000000950000edff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$bt_hci(r1, 0x0, 0x2e) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r5, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001380)="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", 0x11a}, {&(0x7f0000000380)="5132ac5e8205378f905fac4b0f7b0ad4ff080df00b5a6655e32124d51a45ebebdf4a86101587d502357bfc43f44098742b83caede42f6e007330dc8ab67371c65d39bc126b8f9bf17dce0ba9d14f263efa7056bb8a0291a4842e42342519a9e795b7d8aee13edfa09bd3f9ae3bdc4c2dccc274c0cf4fe85fa17f46ff8c017571490f296ef2ea1cf31486bd4167bb33cb9a5e1f96de2ee8af5074695ddf5d1ec4d17c9508cdd9e77ec5bc62a820e263a31521f0b9031c9e1e1491f0c99b44960df2aaee22480355aa20d280d1ed54ae539055ca", 0xd3}, {&(0x7f0000000840)="661da68e4cca7c69729c5f3808acccac69431df174bbce91246fce262b3de6a53334d329a142ae0f304e4fbde8fab4d68bedcd182b41227278c65f7de3723a93dbbaeb901b447fb35a9f3f4b671a3e3929c119f9deec5e46cdbe5cac679cad88c9aa61bc7ffd219a18b36ef0bf5ca45da80aa46274d8cda17a4b8588c492dcdd43dee797fe7debf7c1143177d4f4b02255ca5a46", 0x94}], 0x3}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000780)="82cd0eafc5f89141ee1208e4900490249c15f0d9a6acd550f5e639f133e99677736e30499b7092ef5c8069ec56b2daed9a95df90879b7758079a65a6432e160a36ded164326a891f006e435eef617031708536776b73260b2cdfb5fdedc0b07956bacbbe30af8d1810bcc9ef090e", 0x6e}, {&(0x7f0000000640)="72126509caec095807090dba7a3967d9884ce638db1b533a4b22559bf9166ba1568930c85350c8e4c4bc40d2f21c8042ef5f78d0c8450382c66ea27d01387272ddb6350a1b9df7af8dc636bd2a4e14c5ead6ff46562bbb74e63c835b9827f0b5be88de7ea0b09ad394495e7a2e45da891ae90f972844a04ac9427903a3102cc8ec0030873c527172f369fc7d7ebe01950d7c3c1a1df3b5c2c7940b81f27ed3e5bbb9db01d84e36e67763cde8eb69ed38a8401e2c6daa808897bf60b8b795aac9afe46e918edb28ea6fe06a6afcfad209e55826dc2000a46b358665fdfee08e82c24a22ef3e7c3a54", 0xe8}], 0x2}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000a00)="9b94bd4f7c3a6ece62bebec3ebc3f6245c2cf71ebb80b25d12176c92489efa61aac34738d5eb54550e4ee1a5e35c2b82abfcd8c85c175b38e97da83e872522954d2a5ec48d8fa0f5363f20ca098ee73815ead5dccd3b1bd88c69cc612a19197857d16407c95aad3267a5e215e5286ad94990", 0x72}, {&(0x7f0000000500)}, {&(0x7f0000000bc0)="ebb4431e47a08e69be39d99a05e164370fea19918eda462585b3e7d878eab91929a2929e0c3d931b038606966c61ca9cb8691a4b8ff9eb5f4236355b275ae5db5cdd3dd74f0b442723d7c839f08eabfcdcdf92b8b8ccfdda4f3410e0", 0x5c}, {&(0x7f0000000fc0)="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", 0x104}], 0x4}}], 0x4, 0x2000c0c4) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 4m29.264917544s ago: executing program 0 (id=1415): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x20000000}, 0x18) (async) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0x39, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x8) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000a80)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000280)="651cadd22ca69597c1a9dd23750237afc4b67025bafcfa8ae753d7851abd06288171a6d319f1a67be88ea800db2b52a61c4f964ff2", 0x35}, {&(0x7f0000000300)="1115b782098467ecdcc8c14d0b9ed2bd9454a705217c065081bfbcc6a355fbcc84244f77049a4662be6c3af5a1821679937e9df6f716bb10ee23a63e09a5a2f35ae168f6aaa164fa0d086289d096317ea623c770c2a25f31cb94fbee29aa8d46b66f15178ed495e62d9a6cc38345b99698b2655f", 0x74}, {&(0x7f0000000380)="e03adb6601b98707f5fd60b696eb6aed72f01a3cfe32b393963c1fe3a121440ef5d4b89bb637033de30ee1d6208e1158f6a847d8ae83b9adb1a0dc6d68f22fb2fc09a68d50689b0f8269d7fcdb1528acea6f065c1210059ebc0b566128834b1870c83be90920eaa2a6b3dd0b97ba13bc1343116b0409fe2f1a00757fa01f38146eb0971400ea44622f1a7e366f5dd21b3c8fa5c877dbbc1b13bc68b138a99b9fcdd42ba056db679d5e5a3b39522db767f590164fa1aa38a6b5320a85521f66810c7b7b243821c891947d1fe905687a0cbb2821d3437d18cf6de7c63567", 0xdd}, {&(0x7f0000000480)="de1ce8166401c8f3bab33d1ae7b789faddd2159af841e05e5628e0d3e8021db3d156d15a944797a3d6a661d719523cb8e143862a19de5931411f4f1fc07520661b06f8edca501b9dcab87834c53cc24926814c1d5f172806144adf005490c7203a8aef0de026a7ee00937065ca9b7582463a0e81c4e9732bc30045c62fac8af3888e97f684ed9d8d5a48860ccbe4aaa49093fc323faee9e0d2ddb73acb259017b8d8b51faaea3b4ea463cbf24a1881baef069397", 0xb4}, {&(0x7f0000000580)="d75783d3e225266900c54ea4e113d5b574f7b78adcee8683d004e982fdccfc70ff5e08375eaf5564672bab013b0a9ea4c28e080a8f9f0f258e027e224e3d2ac7437922251fc531bb20290bbf70c6f4bb8ce1839f483eecafee90a7de352103d485880e5b423c64beda7b9d8edb3e4e3cace27b7858d8824980713e90c7fc165e1137544358ce300d4da605eac534be804d8c238746c962da1a74236982be61829a43ed80e8f6679cf4", 0xa9}, {&(0x7f0000000640)="3b460aa46ebc845ff78e2825ae4dd5f6b29026df3e87b2f8d0a4837956bd22a0103b4bf0692924b6dbb19a9afde4a3ca9628378134c9792b282e0ff29f79482eb36a43ebcdeeb4b3d7c8dc7d86bf00b063a36398edef80d033e57acb7ec49594e3ffab4b2b402e80aff84dd35370ccabb7f1197371804d18b2603a9ef4", 0x7d}, {&(0x7f0000000740)="8c1db79f16b33c13cf19c31278aa3d16054509cdbfc30388aaafd824943e99922239828df65df859947d974df7afcfd3374c8210cf494935d8f2d98b7dc2bb47341089a033dfc348ae6ff4cbb46a91ed308576f4f1dfed00ca773e0356fbec62c9e8c4a8f28e573e48c1493dc875c7d82d424c8eed355258ee8dca16b9375c39ce8386553c4e810867a080617ac62955757c2668fb979c5848faabdbf7041f2f8afa28c9b5e4e98a1222e03b5a99444dbaee957c328878437751d201b503dc9195e744d44ced41aef165f0591821c5658eca92", 0xd3}, {&(0x7f00000006c0)="ceb407678ffdb811af0d91894b5299805fe69acf5bfd12", 0x17}, {&(0x7f0000000840)="58cc73d60e2c86f4b05c82415ce207c32fa58fa6cdba07", 0x17}, {&(0x7f0000000880)="0ade2e889673133a079771f36a76dff4aadacb50605dc0f0805872238ef6d2c33192149ad231a25ee259e47a31da7ebbe698124654b0e60c02f70786d325235e75aa906645b914308088ff3b1722f703d45bf75f6ccdf8ce2a3982fae97da0da9ccc06d41e3ba0f4af082114b47603797c6966d335389e22fed96f71d49b97db3db8a76015925bd2580cdd4ba9c344cc5f5adc185404", 0x96}], 0xa, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x20080}}], 0x1, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010102}, 0x10) listen(r5, 0x8) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, 0x0, &(0x7f0000000700)) syz_open_procfs(0x0, 0x0) (async) fchdir(r3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) r7 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000f9a000/0x3000)=nil) shmctl$IPC_RMID(r7, 0x0) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) gettid() 4m29.022779635s ago: executing program 34 (id=1415): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x20000000}, 0x18) (async) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0x39, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x8) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000a80)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000280)="651cadd22ca69597c1a9dd23750237afc4b67025bafcfa8ae753d7851abd06288171a6d319f1a67be88ea800db2b52a61c4f964ff2", 0x35}, {&(0x7f0000000300)="1115b782098467ecdcc8c14d0b9ed2bd9454a705217c065081bfbcc6a355fbcc84244f77049a4662be6c3af5a1821679937e9df6f716bb10ee23a63e09a5a2f35ae168f6aaa164fa0d086289d096317ea623c770c2a25f31cb94fbee29aa8d46b66f15178ed495e62d9a6cc38345b99698b2655f", 0x74}, {&(0x7f0000000380)="e03adb6601b98707f5fd60b696eb6aed72f01a3cfe32b393963c1fe3a121440ef5d4b89bb637033de30ee1d6208e1158f6a847d8ae83b9adb1a0dc6d68f22fb2fc09a68d50689b0f8269d7fcdb1528acea6f065c1210059ebc0b566128834b1870c83be90920eaa2a6b3dd0b97ba13bc1343116b0409fe2f1a00757fa01f38146eb0971400ea44622f1a7e366f5dd21b3c8fa5c877dbbc1b13bc68b138a99b9fcdd42ba056db679d5e5a3b39522db767f590164fa1aa38a6b5320a85521f66810c7b7b243821c891947d1fe905687a0cbb2821d3437d18cf6de7c63567", 0xdd}, {&(0x7f0000000480)="de1ce8166401c8f3bab33d1ae7b789faddd2159af841e05e5628e0d3e8021db3d156d15a944797a3d6a661d719523cb8e143862a19de5931411f4f1fc07520661b06f8edca501b9dcab87834c53cc24926814c1d5f172806144adf005490c7203a8aef0de026a7ee00937065ca9b7582463a0e81c4e9732bc30045c62fac8af3888e97f684ed9d8d5a48860ccbe4aaa49093fc323faee9e0d2ddb73acb259017b8d8b51faaea3b4ea463cbf24a1881baef069397", 0xb4}, {&(0x7f0000000580)="d75783d3e225266900c54ea4e113d5b574f7b78adcee8683d004e982fdccfc70ff5e08375eaf5564672bab013b0a9ea4c28e080a8f9f0f258e027e224e3d2ac7437922251fc531bb20290bbf70c6f4bb8ce1839f483eecafee90a7de352103d485880e5b423c64beda7b9d8edb3e4e3cace27b7858d8824980713e90c7fc165e1137544358ce300d4da605eac534be804d8c238746c962da1a74236982be61829a43ed80e8f6679cf4", 0xa9}, {&(0x7f0000000640)="3b460aa46ebc845ff78e2825ae4dd5f6b29026df3e87b2f8d0a4837956bd22a0103b4bf0692924b6dbb19a9afde4a3ca9628378134c9792b282e0ff29f79482eb36a43ebcdeeb4b3d7c8dc7d86bf00b063a36398edef80d033e57acb7ec49594e3ffab4b2b402e80aff84dd35370ccabb7f1197371804d18b2603a9ef4", 0x7d}, {&(0x7f0000000740)="8c1db79f16b33c13cf19c31278aa3d16054509cdbfc30388aaafd824943e99922239828df65df859947d974df7afcfd3374c8210cf494935d8f2d98b7dc2bb47341089a033dfc348ae6ff4cbb46a91ed308576f4f1dfed00ca773e0356fbec62c9e8c4a8f28e573e48c1493dc875c7d82d424c8eed355258ee8dca16b9375c39ce8386553c4e810867a080617ac62955757c2668fb979c5848faabdbf7041f2f8afa28c9b5e4e98a1222e03b5a99444dbaee957c328878437751d201b503dc9195e744d44ced41aef165f0591821c5658eca92", 0xd3}, {&(0x7f00000006c0)="ceb407678ffdb811af0d91894b5299805fe69acf5bfd12", 0x17}, {&(0x7f0000000840)="58cc73d60e2c86f4b05c82415ce207c32fa58fa6cdba07", 0x17}, {&(0x7f0000000880)="0ade2e889673133a079771f36a76dff4aadacb50605dc0f0805872238ef6d2c33192149ad231a25ee259e47a31da7ebbe698124654b0e60c02f70786d325235e75aa906645b914308088ff3b1722f703d45bf75f6ccdf8ce2a3982fae97da0da9ccc06d41e3ba0f4af082114b47603797c6966d335389e22fed96f71d49b97db3db8a76015925bd2580cdd4ba9c344cc5f5adc185404", 0x96}], 0xa, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x20080}}], 0x1, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010102}, 0x10) listen(r5, 0x8) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, 0x0, &(0x7f0000000700)) syz_open_procfs(0x0, 0x0) (async) fchdir(r3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) r7 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000f9a000/0x3000)=nil) shmctl$IPC_RMID(r7, 0x0) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) gettid() 2m54.320440721s ago: executing program 1 (id=1731): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="901b167aca4c7b5cbcb6ab4c0d0f70536bbbb6aaf1db4c3a2b1f4a98a8f3bb834f7bf1590aee2d65c584a4f6d283ff3871a66d9a30cfaf8685f4b90ceb2c1689fa47fff6debbf41dd813c366afa7a6e783b31494146b043a14ceb3621a5478b01d304a219221d990f5c919a87f4616578b05376a17ff4701d349bce388d4fec00cfce7f69d", 0x85, 0xfffffffffffffffd) r1 = request_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='(]\'\xd9\x00', 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='big_key\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r1}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r6 = socket(0x2a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, 0x0, &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffd23, &(0x7f0000000240)={&(0x7f0000000480)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x7}, {0x4, 0xd}, {0x1, 0xa}}}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000010140)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfffffe81, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}, "7011"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x54}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r9, 0x1, 0x50, &(0x7f00000002c0)=0x9, 0x4) bind$netlink(r9, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfc, 0x800}, 0xc) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000340)=0x12) syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000406b1d010140000102030109022bff03010000000904000000010100000a24010100000201020a24050409f5de551432090401000001020000090401010101020000090501090800c400000725018101ffff0904020000010200000904020101010220000e2402013f02c101f73a517a02c50905820910"], 0x0) 2m49.996798884s ago: executing program 1 (id=1740): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0xd8e8b59cd1b6993a) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000005c0)) listen(r4, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x24, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x9}, {0x0, 0xffe0}}}, 0x24}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000580)="120000001200e7ef5a0732db35e580397519ae2e625800", 0x17, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc8}}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r8, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r8, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r8, &(0x7f0000000440)={0x0, 0x1a, 0x0}, 0x0) recvmmsg(r7, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x143, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x7fffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000700)) prctl$PR_SET_TIMERSLACK(0x1d, 0xc0000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040)={0x80002003}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43f91f68d8a90767c0"], 0xfc}, 0x1, 0x0, 0x0, 0x24044005}, 0x0) 2m48.953492302s ago: executing program 1 (id=1746): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, &(0x7f0000000180)=[{0x1, 0x7fff, 0x1000}], 0x1) r2 = semget$private(0x0, 0x4000000009, 0x0) semop(r2, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) semget(0x2, 0x1, 0x120) r3 = semget$private(0x0, 0x1, 0x130) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000600)) semop(r1, &(0x7f00000000c0)=[{0x2, 0x0, 0x1000}], 0x1) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002207000000a98527"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x128, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x116, 0x2, 0x1, 0x8, 0xe0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "b88436b879"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x200000, 0x3, 0x7, 0x6}, {0x6, 0x24, 0x1a, 0xfff9, 0x4}, [@obex={0x5, 0x24, 0x15, 0x2}, @mdlm_detail={0x8e, 0x24, 0x13, 0x9, "45057181a3b4b8d0618e5fb65316e9b1a73cc318c8f20884fa678c0097f4e8ceca28be239631c44fbee87bfc3d6d4e5a1db3bc5456ebda710b6fcd4c4a82873f3f708832443666e9e66b888a5767a88e430d52d88076f4aa80428a1ffd8042cf7f7469732b09969c67c1a2ee97e61b5ba8b3eae0344dfcce75f2265b008cf1ad17430f0aa8ecfc498eb9"}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x40, 0x6, 0x28}, @mdlm_detail={0x1b, 0x24, 0x13, 0x8, "9a167da0f1a5e5d53013d5018aa055f069461542e42a26"}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x72, 0x4, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x1, 0x37}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0xa, 0x63}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x2, 0x5, 0x8, 0x8, 0x5}, 0x13, &(0x7f0000000080)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x9, 0xff, 0x1, 0xf}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x409}}, {0xaf, &(0x7f00000003c0)=@string={0xaf, 0x3, "0894b9924ee15ecfdab48ee80abc5ab9d53069f1fcae718ded0de21c998ab9c13164cffb93f66aa19cb5cbf460de4d0933cbfd68d257f3beeadeb7df6bd6b4e25b7123ee2d3bf8cfd1007ada6807a646cf7bbe559d534a46817cc50c42431ad8d13bf4ad21d7a2505c426239b232b296e3c7c7d7e8acfe21a5d1d10647d81564d0577952310da82242666f2b494a9c3f038c1ae9d405a2f2eed9d3fd6a8e7b4f72ed3303777c49461e3097926d"}}, {0xb1, &(0x7f0000000480)=@string={0xb1, 0x3, "1b66226db1fbb8a6b9344490ee2272cf2b2609c507cfaad24f31f36861454e930f482ff9a14132a4bb5bfd88c0bd09d2824d00b37a0c95b51c8614d98fcd360921ee53cc288cb87768003f34b5cbfb26a7e09b479284a1a9d810b32a99ad0e1e7d6a3a8aa57698cdbc12e371485b51c91838bc256d94231ed232db8105b5fe9fb32a1847b2bef888903c00d0ac9a54b6523da842df26022144a1c5d75e3e3ac31ab1313b8ed14f47f4255aab92c544"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x810}}]}) 2m45.981954774s ago: executing program 1 (id=1759): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x0, 0x95000000}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x100000000) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xa00040, &(0x7f0000000000)={[{@uid={'uid', 0x3d, 0xee01}}]}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0x69e7) syz_clone(0x41080, 0x0, 0x0, 0x0, 0x0, 0x0) 2m45.847502449s ago: executing program 1 (id=1760): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0xffff, @local}, 0x1a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063017a00000000009500000000000000fe4e385066e42ad8b7d524dd56000730194b7101401cfa9d802a9995639ea8dc36319330f9b412251f810f9d1058a84c9d8b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2m44.898829299s ago: executing program 1 (id=1761): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000240)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xb) r8 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r8, 0xab00, r9) ioctl$NBD_DO_IT(r8, 0xab03) r10 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) symlinkat(&(0x7f0000000040)='.\x00', r11, &(0x7f0000000140)='./file0\x00') fchmodat(r11, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(r11, &(0x7f0000000000)='./file2\x00', 0x0) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) pread64(r8, &(0x7f0000000240)=""/70, 0x46, 0x52c) 2m29.149657559s ago: executing program 35 (id=1761): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000240)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xb) r8 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r8, 0xab00, r9) ioctl$NBD_DO_IT(r8, 0xab03) r10 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) symlinkat(&(0x7f0000000040)='.\x00', r11, &(0x7f0000000140)='./file0\x00') fchmodat(r11, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(r11, &(0x7f0000000000)='./file2\x00', 0x0) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) pread64(r8, &(0x7f0000000240)=""/70, 0x46, 0x52c) 1m4.056365686s ago: executing program 6 (id=2105): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1e1}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]]}, 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000001c0), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = io_uring_setup(0x2ad6, &(0x7f0000000100)={0x0, 0x400ffb1, 0x800, 0x3}) close(r6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205647, &(0x7f0000000140)={0x9b0000, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x19, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x8180, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x0, 0x2d, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @empty}}}}) socket$nl_audit(0x10, 0x3, 0x9) 1m2.280354295s ago: executing program 6 (id=2108): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={0x0, 0x68e5}, 0x8) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, 0xe) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000600)=""/229, &(0x7f0000000180)=0xe5) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000500)={0x1, r6}) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000400)={0x1}) sendto$inet6(r2, &(0x7f0000000100)='O', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x60000, @loopback, 0x20000000}, 0x1c) sendto$inet6(r2, &(0x7f0000000380)="a1", 0x34000, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x70f280) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r7, 0xc0305302, &(0x7f0000000140)={0x3, 0x8, 0x5, 0x9, 0xc, 0x2}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00(\x00\x00\x00au'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\bV'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 58.270264587s ago: executing program 6 (id=2121): syz_open_procfs(0xffffffffffffffff, &(0x7f0000001340)='setgroups\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r0 = socket(0x10, 0x803, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/full\x00'}, {0x20, '/dev/full\x00'}, {0x20, '/dev/full\x00'}], 0xa, "67e7303689fabc025796b7d4479ec2194f78b28f127d665371"}, 0x45) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x4000000) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) write$cgroup_type(r6, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') 55.750721284s ago: executing program 6 (id=2128): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000600)=@v3={0x3000000, [{0x5, 0x4a}, {0x3, 0xc4}]}, 0x18, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000071108c000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f00000004c0)={0x11, {{0x29, 0x0, 0x4000000, @private2, 0x1ff}}}, 0x88) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xff], 0x0, 0x200000000000000, 0x1, 0x1}}, 0x40) r6 = syz_open_dev$sg(0x0, 0x0, 0x802) read(r6, 0x0, 0x0) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x10) inotify_init() r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x44}}, 0x24008090) 54.652376523s ago: executing program 6 (id=2130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x2}]}, @func={0x6, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x0, 0x61, 0x0, 0x0, 0x2e]}}, 0x0, 0x40, 0x0, 0x3, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000061c73f73f75b44a570c0da5bd771a21d6d81394bdefc782ad9ccaea1bc007f4c5aa83fe5f390f9ebf161e33b6c04f18787a08212eb407a34b9a1585ae26d16deabbf3830cbfdd8"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000340)={0xffffffffffffffff, 0x1ff, 0x2, 0x7ff, 0x5, [{0x8b07, 0x1, 0x10000, '\x00', 0x80}, {0x2, 0x9, 0x8, '\x00', 0x90a}, {0x3, 0x5, 0x2, '\x00', 0x9ecc69a67a4d0b93}, {0x0, 0x8, 0x7, '\x00', 0x101}, {0x2, 0x5, 0x2, '\x00', 0x200}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f5"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) recvmmsg(r2, &(0x7f00000000c0), 0x10152, 0x2, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5001002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd22}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000008"], 0xfe44, 0x0) setsockopt$inet_int(r5, 0x0, 0x18, 0x0, 0x0) setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x0) 53.069581398s ago: executing program 6 (id=2136): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000000300)="18b5a111d3bbae74b2f8f4b625e3d3acf614c721dff74fface68fb8682a8b2b919da5014f03abe01fd35e767b02b268149dc334593440d7544db9660422b3ae0b12154f4e793b8cb898ce7a86a631643ba97f3631580ed54e8459b4ab1d2e8fc65883881c58122c072c65f3805de9ec7f6442360f1868c6dd99116644d7c2572ef1f0aac1a6c4a0bb115", 0x8a, 0x40080, 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x67ce626eb9b39ab3, 0x4008072, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000)={0x4}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x7, 0x401}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a40)={0x70, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x48, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x70}}, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 52.108579791s ago: executing program 36 (id=2136): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000000300)="18b5a111d3bbae74b2f8f4b625e3d3acf614c721dff74fface68fb8682a8b2b919da5014f03abe01fd35e767b02b268149dc334593440d7544db9660422b3ae0b12154f4e793b8cb898ce7a86a631643ba97f3631580ed54e8459b4ab1d2e8fc65883881c58122c072c65f3805de9ec7f6442360f1868c6dd99116644d7c2572ef1f0aac1a6c4a0bb115", 0x8a, 0x40080, 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x67ce626eb9b39ab3, 0x4008072, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000)={0x4}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x7, 0x401}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a40)={0x70, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x48, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x70}}, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 9.97996163s ago: executing program 5 (id=2253): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x880}, 0x40040840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0xa7, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x18) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0xa00, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) close_range(r0, r0, 0x0) 8.246878446s ago: executing program 9 (id=2255): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) unshare(0x24020400) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcf, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0}}, 0x10) prlimit64(0x0, 0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, 0x8fc0, 0x1}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0}, 0x48800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000010000000000000000000000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$bt_hci(r1, 0x0, 0x2e) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r5, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001380)="435d61e778eb38a7b38869e147b2bb2d8ea5f836c654c0d9d14ceca9529604eb9a1f8d24c87b2153413b8bc5d52b8aa671b64b2290f0d96afeaa40f60d23f9f9f7d8b4c37a6409abd84ddbe5264f73200c67d8f9742d0f51951f7bb8fe27a59cc395ba580c12f6e995b8a62901c58273c223abb61def8a24a9d9c3e164fcc9c0ef085049e39d964b4afa4e79d6dc9d4f792776248a6ac45606026857497e7760e7dcc543cbd35aaaca6b30aa8acb8e4e77cd6626b8371a55fa07ede86c92893bad324de1fef3953ff5c36951f9647ffd6924de49d9a66baeb6a75df64352c800a13b897dbd01621199d6d5424e90a346c805c801fd6be1e96f2a69e5937a4e7df9445d776f56182a9c26c219e3462d7ef57f9037d6b14a5f0288", 0x11a}, {&(0x7f0000000380)="5132ac5e8205378f905fac4b0f7b0ad4ff080df00b5a6655e32124d51a45ebebdf4a86101587d502357bfc43f44098742b83caede42f6e007330dc8ab67371c65d39bc126b8f9bf17dce0ba9d14f263efa7056bb8a0291a4842e42342519a9e795b7d8aee13edfa09bd3f9ae3bdc4c2dccc274c0cf4fe85fa17f46ff8c017571490f296ef2ea1cf31486bd4167bb33cb9a5e1f96de2ee8af5074695ddf5d1ec4d17c9508cdd9e77ec5bc62a820e263a31521f0b9031c9e1e1491f0c99b44960df2aaee22480355aa20d280d1ed54ae539055ca", 0xd3}, {&(0x7f0000000840)="661da68e4cca7c69729c5f3808acccac69431df174bbce91246fce262b3de6a53334d329a142ae0f304e4fbde8fab4d68bedcd182b41227278c65f7de3723a93dbbaeb901b447fb35a9f3f4b671a3e3929c119f9deec5e46cdbe5cac679cad88c9aa61bc7ffd219a18b36ef0bf5ca45da80aa46274d8cda17a4b8588c492dcdd43dee797fe7debf7c1143177d4f4b02255ca5a46", 0x94}], 0x3}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000780)="82cd0eafc5f89141ee1208e4900490249c15f0d9a6acd550f5e639f133e99677736e30499b7092ef5c8069ec56b2daed9a95df90879b7758079a65a6432e160a36ded164326a891f006e435eef617031708536776b73260b2cdfb5fdedc0b07956bacbbe30af8d1810bcc9ef090e", 0x6e}, {&(0x7f0000000640)="72126509caec095807090dba7a3967d9884ce638db1b533a4b22559bf9166ba1568930c85350c8e4c4bc40d2f21c8042ef5f78d0c8450382c66ea27d01387272ddb6350a1b9df7af8dc636bd2a4e14c5ead6ff46562bbb74e63c835b9827f0b5be88de7ea0b09ad394495e7a2e45da891ae90f972844a04ac9427903a3102cc8ec0030873c527172f369fc7d7ebe01950d7c3c1a1df3b5c2c7940b81f27ed3e5bbb9db01d84e36e67763cde8eb69ed38a8401e2c6daa808897bf60b8b795aac9afe46e918edb28ea6fe06a6afcfad209e55826dc2000a46b358665fdfee08e82c24a22ef3e7c3a54", 0xe8}], 0x2}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000a00)="9b94bd4f7c3a6ece62bebec3ebc3f6245c2cf71ebb80b25d12176c92489efa61aac34738d5eb54550e4ee1a5e35c2b82abfcd8c85c175b38e97da83e872522954d2a5ec48d8fa0f5363f20ca098ee73815ead5dccd3b1bd88c69cc612a19197857d16407c95aad3267a5e215e5286ad94990", 0x72}, {&(0x7f0000000500)}, {&(0x7f0000000bc0)="ebb4431e47a08e69be39d99a05e164370fea19918eda462585b3e7d878eab91929a2929e0c3d931b038606966c61ca9cb8691a4b8ff9eb5f4236355b275ae5db5cdd3dd74f0b442723d7c839f08eabfcdcdf92b8b8ccfdda4f3410e0", 0x5c}, {&(0x7f0000000fc0)="79a5ab1a0f9d91cfde8f26d84e989a7f13232cff8a084fdb400fe2092c2396051c32b0689f415a6b36647bd3072f2c326f78eaffb66d50b1f9b44eab40bd546e7ff8b43dd2e179857398e9c78c53b9e98941e7e870bee89f6dc90febbee5456bbb93000cfd62257b62804b4eb4ed0e9b8c6f3702ab333ef840acd1aa9fa01a967eb19b17fe01945f32bc9f890b23f5b45204f3cf83fee26c98eabfe0fdfed43133d23d5500412496348ece7fd361121a67bdfe57827e59c4188c2a52a4f8cc435945d1fa708afe4a29a4d594d8ea498f36c63a9232457c7e3c52be4ed2176833045089552cfe660944fa112c4fcfd5d6ac9dc8fd92589b77f75e82c0cde6975fd6f14658", 0x104}], 0x4}}], 0x4, 0x2000c0c4) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 8.129268376s ago: executing program 5 (id=2257): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000ff0f000007000000000000003e5efdeec2e53a85327fadf0ecc132b5da10012e2d10eb79a7b50a492e84f00734b0c1eefebe06b92cd353e8d0ee396358650a36942065e1a29ef7340b89df871db9fcb5a1ca2ce0", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x48) prlimit64(r0, 0xb, &(0x7f0000000300)={0x7ff, 0x8000000000200003}, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)) write$proc_mixer(0xffffffffffffffff, 0x0, 0xb8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10) r7 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) close_range(r7, 0xffffffffffffffff, 0x0) epoll_create(0x8) shutdown(0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7.828325025s ago: executing program 5 (id=2261): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setresuid(0xee00, 0xee01, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x44000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x3c, 0x2, [@TCA_MATCHALL_ACT={0x38, 0x2, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}}]}, 0x70}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0x0, 0x4, 0x42474752, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x7, 0x1, 0x1}}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0x0, 0x20}, 0x6) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000004c0)={0x8, @win={{0x7, 0x2, 0x80000000, 0xf0}, 0x5, 0x200, &(0x7f0000000140)={{0xc4, 0x6, 0x3, 0x6}, &(0x7f0000000000)={{0xcd03, 0x6, 0x1ff, 0x2}}}, 0x8, &(0x7f0000000180)="7cfaba994db6a510a95c30878a8bd76b902f3e0e89aae58b4d93cb752b717e33a93f2fb3a383bb7b013badc075ef712dc68bdb00d2beb7f34876082b4f86dfdb483812f355b37c397d6bbffefdf1b8f8ed4667156d21", 0x2}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000001600010026bd7020fedbdf25021f21fd", @ANYRES32=r9, @ANYBLOB="08000100e00000011400060005000000030000000f0000000800000008000100e000000208000400ac1e000108000900040000000800040000000000080004007f00000108000900020000000800080000030000"], 0x6c}}, 0x0) 7.742549627s ago: executing program 8 (id=2262): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x537, 0x0, 0x4, 0x5, 0x8cce, 0x18b]}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x1b, &(0x7f0000000180)=@assoc_value, &(0x7f0000000000)=0x8) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaa0088a83e00810048000800450000a600000000002f907800000000e0000001a00088a800929078d31be993b13cee600d0f9ac83913a89ef2f6d1dcc8f8db2a86e34f95c59471759dc22c3ea8d14010e1830413f0403418a3e451ca352c6e4c5d14bc5eabb39885e627ce450cbbfe0a97ed686cbb775ef1e955acf37d9dd8116f102f09ac3d7435eb27082d17d99d87ce078f6e54c8351ccf2604aadca8879d37b8e44b8b38e2bb62b1b2124cc00beed5a5"], 0x79) syz_io_uring_setup(0x71cc, &(0x7f0000000340)={0x0, 0x6da4, 0x0, 0x1, 0xffdffffe, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x6296, 0x0, 0x0, 0x0, 0x0) 7.616492193s ago: executing program 5 (id=2263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000000000000050000000000000000000000030000000000f100ffffffff"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0xf6, &(0x7f0000001700)=""/246, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0, 0x55}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000800)={0x2, 0x0, @ioapic={0x0, 0x0, 0xfffffffe, 0x10020f58, 0x0, [{0x0, 0x0, 0x0, '\x00', 0x2}, {}, {}, {0x0, 0x35}, {0x0, 0x0, 0x22}, {0x0, 0x0, 0x4}, {}, {}, {0x0, 0x3, 0x0, '\x00', 0x4}, {}, {0x0, 0x7d, 0x4}, {0x0, 0xfc, 0x0, '\x00', 0xff}, {}, {0x0, 0x0, 0x80, '\x00', 0x7}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x8}, {}, {0x3, 0x0, 0x0, '\x00', 0x1}, {}, {0x7}, {0x3, 0x1}, {}, {0xfc}]}}) 7.530503038s ago: executing program 8 (id=2264): socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x400}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = epoll_create(0x7ff) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000001c0)={0x10000004}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r6, 0x5081a12d9ecd9d1b, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0xf4c7cf3b98eda2b6}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r1, 0xc28, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000040) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r11 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r11, 0x29, 0x49, 0x0, 0x2a) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r12 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x80a3504513e3890d}, 0x0) recvmmsg(r12, &(0x7f0000001bc0)=[{{0x0, 0x700, 0x0}}], 0x7, 0x0, 0x0) 6.474995856s ago: executing program 8 (id=2265): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x4a, &(0x7f0000000e40)={@multicast, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "080108", 0x14, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, {[], {{0xff00, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = semget$private(0x0, 0x4000000009, 0x0) semop(r2, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) semop(r2, &(0x7f0000000200), 0x53) semop(0x0, &(0x7f0000000100)=[{0x0, 0x7, 0x1000}], 0x1) semtimedop(0x0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0xc63e}, {0x4}], 0x2) semctl$GETZCNT(0x0, 0x5, 0xf, 0x0) 6.364088972s ago: executing program 3 (id=2266): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xbf, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000004000000ff0f00000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006deba0d25dac3fe9293b8dea7654135842e1ddd7a5fd"], 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000000160900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a000000000000"], 0x78}}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000200)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b041e7dff102c6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a0120d1b4e671487a7b018d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69ecce", 0xe8}, {&(0x7f0000000100)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a85ff030000000000003e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c62d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a90500b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d980ddfa9098d327d9559e82fceb2b1b1ca4b45c9e22b2de", 0xe3}, {&(0x7f0000000380)="c58cf2a0f0f863621a483b19e7ecfce0d34e53fbf2959272146847c314ac0cdfd79dc1815274c3ee57068b3793c243bc98585fab48eb353478689f452328afb023f75f93227bbe5a4aa3fea049ec0862c493e14eb44aacf27f9060bc2c826383c904750402dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e6", 0x87}, {&(0x7f0000000b00)="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", 0xff}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b2374095ca6f14a6d13e03375c7029e28592c419bfb8957ac024ba8dc90ab15427410b870f3035ff95146d6e29f9b56ac096281d2f2b249f20c9fdc3239f838acc6b3433571d3043d", 0xaf}, {&(0x7f0000000500)="8700144add194dc92e62bfdc1de91e98227f67410fae0aa2958eeb11856055f582d7ed3b9ca5bf48d2e97becf8673e1532a8", 0x32}, {&(0x7f00000008c0)="6aa7e221ef79afca996dde651fad6b8fc385c4567b3af29b90b3221f98f93ce7f8d32156d842e64f2dd8e9b969c22d076b5dbfb714449b009ff42ec0e2a2c1785d5129", 0x43}, {&(0x7f0000000dc0)="f50266", 0x3}], 0x9, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback}}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) 5.89331927s ago: executing program 5 (id=2267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x108, 0x5c, 0x160, 0x108, 0x3e0, 0x248, 0x228, 0x25a, 0x248, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @local, [], [], 'team0\x00', 'batadv_slave_0\x00'}, 0x5002, 0xa8, 0x108, 0x52020000, {0x0, 0x6802000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x874, 0x380, 0x0, 0x8bc0}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@srh={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) (async) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) r2 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x2000) read$msr(r2, &(0x7f0000000200)=""/15, 0xf) (async, rerun: 32) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (rerun: 32) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x1, 0x0, 'queue1\x00', 0x9}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r5 = getpid() (rerun: 32) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) (async) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x14, r10, 0xb05}, 0x14}}, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) (async) close_range(r1, 0xffffffffffffffff, 0x0) 4.800398518s ago: executing program 8 (id=2268): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ce1b4398c6706713add755649b85c775652e8d76b7d576371ac2e1e1df4c5e1dbf19f3a5609036eb8a5f6bb7fd0c345da66a1481d576201224654f70655ff9ba66bc"], 0x8c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'ip6erspan0\x00', {0x2, 0x4e21, @private=0xa010100}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002fc0)=""/102400, 0x19000) mkdir(0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, 0x0) syz_open_procfs(0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0xdfa, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.984757122s ago: executing program 7 (id=2269): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000111401020000"], 0x18}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001b640)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000800000000000457fd6a1e4c17e5d000fad413ec50000000f00d225824dd305bf2b982d796500"], &(0x7f00000025c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) syz_open_dev$vim2m(&(0x7f0000000000), 0xdcc2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='cpuacct.usage_user\x00', 0x275a, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x6, 0x9, &(0x7f0000000080)={{0xc, @multicast2, 0x0, 0x0, 'ovf\x00'}}, 0x44) getsockopt$inet_tcp_int(r7, 0x6, 0x9, 0x0, &(0x7f0000000040)) 3.975311199s ago: executing program 9 (id=2270): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x14}], {0x14}}, 0xc8}}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmsg$kcm(r2, &(0x7f0000000380)={&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/219, 0xdb}, {&(0x7f0000000500)=""/219, 0xdb}], 0x2, &(0x7f0000000600)=""/148, 0x94}, 0x0) writev(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 3.872429203s ago: executing program 3 (id=2271): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x86, 0x2, 0x7fffffff, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x7, 0x7, 0x2, 0xf}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$RTC_SET_TIME(r2, 0x7002, 0x0) r3 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/248, 0xf8}, {&(0x7f00000014c0)=""/4111, 0x100f}], 0x2}, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r8}, 0x10) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000000c0), 0x31}, 0x0) write(r5, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) 2.927954241s ago: executing program 7 (id=2272): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffb, 0x8, 0x0, 0x0, "0062ba5d8200000af74591b1ffccc2ffffff00"}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000000780)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) ioprio_set$pid(0x0, 0x0, 0x6004) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xa) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, 0x0) 2.081347933s ago: executing program 7 (id=2273): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRES64=r1, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES32=r1, @ANYRESDEC=r1], 0xff2e) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) ioctl$TCXONC(r1, 0x540a, 0x2) 1.872337848s ago: executing program 9 (id=2274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) ioprio_get$pid(0x3, r0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000240)='./file0\x00') (async) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) open(&(0x7f0000022ff6)='./control\x00', 0x220040, 0x88) (async) unlink(&(0x7f0000000340)='./file0\x00') (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000180)={0x10000}) (async) rmdir(&(0x7f0000000040)='./control\x00') (async, rerun: 64) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (rerun: 64) getdents64(r6, &(0x7f0000000180)=""/105, 0x69) 1.784350492s ago: executing program 9 (id=2275): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsm_set_self_attr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x10f, 0xef, "abb1f9621d5f97cf80ae0cc68bac5085ee14e076249e3c23f2e55917c0cc70e60d3d0a0bc02f750e61e9274f6db5b80509508ca05f0fc727c44b3113cff16ddabafd32d86d29d14c58cd47875a7514e4789fb56d7858dd17514d5539c225e67b0c2d49f09fc807d9ceba9e611a3afa0b5e8b3fcb892947e2a36a6d2a39abf399ed27567e440c183921f380b1ab7e141b61004224656b02a19ff657005bdbe4b6c8130d79f4c71a9ed681c7e19b5cad0bba7c3ee9247d56d24f114f1fa8e0856643ea1686a6b8196a809cf2547a09903eebd4a835c4dbcd6ce0af502e12a589319262982d46aa1886c605e458bdab64"}, 0x10f, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) getpeername(r1, 0x0, &(0x7f00000001c0)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x880001, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f00000002c0)=""/4096, 0x1000) mknod(&(0x7f0000000140)='./file0\x00', 0x2, 0xaa) syz_open_dev$radio(&(0x7f0000000180), 0x2, 0x2) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=bin$:0-0:']) 1.724988424s ago: executing program 7 (id=2276): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1c0, 0x0, 0xe0, 0xe0, 0x0, 0x0, 0x158, 0x2e8, 0x2e8, 0x158, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0x90, 0x0, {0x6020000}}, @unspec=@TRACE={0x20}}, {{@ip={@local, @dev, 0x0, 0x0, '\x00', 'wg1\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) unshare(0x6040600) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) eventfd(0x0) (async) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0x2009, 0x3}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000280)={0x0, 0x9e, 0x0, 0x0, 0x81}) 1.460433298s ago: executing program 7 (id=2277): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000500)=0xde5, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0xffff, @local}, 0x1a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063017a00000000009500000000000000fe4e385066e42ad8b7d524dd56000730194b7101401cfa9d802a9995639ea8dc36319330f9b412251f810f9d1058a84c9d8b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.413764813s ago: executing program 8 (id=2278): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="250a9500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0xffffffffffffffda, 0x404, {0x3, 0x0, 0x10000000000fff, 0x2, 0x2, 0x3, {0x1, 0x7, 0x7ffffffe, 0x6, 0x800000000002, 0x5, 0x2, 0x200, 0x8, 0xc000, 0xb, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 539.965602ms ago: executing program 9 (id=2279): r0 = syz_usb_connect$hid(0x9, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000bfde2ad3187e7086786bbb2000000000100000000000900"/41, @ANYRES32=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000090"], 0x0, 0x0, 0x0, 0x0}, 0x0) memfd_create(0x0, 0x0) r1 = syz_io_uring_setup(0x690b, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x3, 0x316}, &(0x7f0000000200), &(0x7f0000000100)=0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000001c0)="240066b8010000000f01c1660f3880310f01cfbaf80c66b8b81acb8f66efbafc0cecbaf80c66b8bcb4ea8866efbafc0cedba430066ed66b8579e00000f23d00f21f866352000000f0f23f8643e660f6db79a5f6766c7442400993f19006766c7442402000001006766c744240600000000670f011c24", 0x76}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_io_uring_setup(0x1866, &(0x7f0000000140), &(0x7f0000000500)=0x0, &(0x7f0000000240)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x9, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000bfde2ad3187e7086786bbb2000000000100000000000900"/41, @ANYRES32=0x0], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000090"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) memfd_create(0x0, 0x0) (async) syz_io_uring_setup(0x690b, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x3, 0x316}, &(0x7f0000000200), &(0x7f0000000100)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000001c0)="240066b8010000000f01c1660f3880310f01cfbaf80c66b8b81acb8f66efbafc0cecbaf80c66b8bcb4ea8866efbafc0cedba430066ed66b8579e00000f23d00f21f866352000000f0f23f8643e660f6db79a5f6766c7442400993f19006766c7442402000001006766c744240600000000670f011c24", 0x76}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) syz_io_uring_setup(0x1866, &(0x7f0000000140), &(0x7f0000000500), &(0x7f0000000240)) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) (async) syz_io_uring_submit(r6, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) 483.074959ms ago: executing program 7 (id=2280): r0 = timerfd_create(0x9, 0x800) ftruncate(0xffffffffffffffff, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000020c0)=""/4106, 0x100a}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000300)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x36, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="12010100ffd9f810f80600b0f97d0102030109021b0401000000020904"], 0x0) 428.773135ms ago: executing program 3 (id=2281): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="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", 0x2000, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc1105517, &(0x7f0000000540)) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfd, {}, {}, @raw32={[0x2600]}}], 0xffc8) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000140)={[{'\x01\x00\x00\x00&'}, {'#%^'}], [{@audit}, {@obj_user={'obj_user', 0x3d, 'func'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_role}]}) (async) mount$nfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000140)={[{'\x01\x00\x00\x00&'}, {'#%^'}], [{@audit}, {@obj_user={'obj_user', 0x3d, 'func'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_role}]}) 428.273059ms ago: executing program 8 (id=2282): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x62, 0x8, 0xe6, 0x20, 0x525, 0x1080, 0x585f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x71, 0x0, 0x2, 0x4f, 0xe4, 0x3d, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f00000001c0), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000280)={0x0, 0x8, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x30, "4b721b782a17a7b6a00d923e3f7fdafda2073830fb8cfb34eb7cbd173e61bd850519514421d152a18722b7d79e58f6e4"}}) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_usb_control_io$uac1(r0, 0x0, 0x0) 244.53601ms ago: executing program 9 (id=2283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000040)="66470f10a7f17f0000c4617c2984bc00000000f3446d450fa7c0c4812e5de166b860000f00d04a0fc76955c46271ac9200a000008f2960931c620f20d835080000000f22d8", 0x45}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000240)=""/172, &(0x7f00000000c0)=0xac) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) 212.149523ms ago: executing program 3 (id=2284): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x18, 0x409, 0x70bd27, 0x25dfdbf8, {0xa, 0x0, 0x20, 0x0, 0xff, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24024081) 98.295206ms ago: executing program 3 (id=2285): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) io_uring_setup(0x5d35, &(0x7f0000000000)={0x0, 0x89e1, 0x20000, 0x1, 0xbf}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xd50, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x69) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x1a, 0x0) 24.420536ms ago: executing program 5 (id=2286): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init1(0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x1) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000040)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000040)={0x1f, 0x0, 0x2}) 0s ago: executing program 3 (id=2287): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='fsi_slave_invalid_cfam\x00'}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x23}, @l2cap_cid_signaling={{0x1f}, [@l2cap_conn_req={{0x2, 0x9, 0x4}, {0x9, 0x9}}, @l2cap_disconn_req={{0x6, 0x2, 0x4}, {0x1, 0xff8e}}, @l2cap_disconn_rsp={{0x7, 0x11, 0x4}, {0x75, 0xb0ff}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x7, 0xa3}}]}}, 0x28) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioperm(0x0, 0x8, 0xfffdfffffffffec9) socket$packet(0x11, 0x0, 0x300) socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="cbf212b35ad1df8b39878ded7e45818c87ba6fcb66e2f7f5d1dd6e1c934f3e186c98eb443986c54a44aa13bd15b4113e2cf2c07240cb816d4e47ebccf4f6f8672ae9f3480b3adf5c7b15fe89451820c60304e38efc5200ae7f3a3a673b23b38b2c8bc2c09940d91e3f527260c203cbc8d8b3a7a6c55b4f3927ab5bacd9d54cf478e779e68e77a05b3a8f5fac36344672d59123df956d9812e783d17bf9480e90e2acbc397c13fc9a0c7596b1ac43c4b240a628d385dd6e9c4ebfbc6a306d439614d97cd489c0c81073908be3d3ad4014f348", @ANYRES16, @ANYBLOB="000329bd7000fedbdf250b000000980005800800010065746800080001007564700008000100657468000800010065746800070001006962000008000100756470000800010065746800080001007564700008000100756470004c00028008000400000000000800030000000000080001000b0000000800010000000000080001001700000008000300fdffffff080002004700000008000400000000000800040000010000180004801300010062726f6164636173742d6c696e6b0000540003800800030006000000080003000300000008000200020000000800030002000000080002000800000008000100001000000800020007000000080003000200000008000300ff7f000008000100000000008c000280040004002c000380080002000700000008000200ff0700000800010000000000080002000500000008000200360800000800010006000000040004000400040008"], 0x458}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b1000f80b", 0x33fe0}], 0x1}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): using dummy_hcd [ 464.068944][ T5888] usb 4-1: device descriptor read/8, error -71 [ 464.326018][ T5888] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 464.356804][ T5888] usb 4-1: device descriptor read/8, error -71 [ 464.416951][ T971] usbhid 2-1:1.0: can't add hid device: -71 [ 464.423114][ T971] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 464.466312][ T971] usb 2-1: USB disconnect, device number 49 [ 464.537433][ T5888] usb usb4-port1: unable to enumerate USB device [ 465.250578][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1353'. [ 466.077803][T12138] tipc: Started in network mode [ 466.082954][T12138] tipc: Node identity 4, cluster identity 4711 [ 466.089444][T12138] tipc: Node number set to 4 [ 466.094281][T12138] tipc: Cannot configure node identity twice [ 466.529483][T12148] netlink: 'syz.5.1356': attribute type 9 has an invalid length. [ 466.537332][T12148] netlink: 134704 bytes leftover after parsing attributes in process `syz.5.1356'. [ 467.745908][T12151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1361'. [ 467.962998][T12173] netlink: 'syz.1.1363': attribute type 10 has an invalid length. [ 468.066905][T12173] hsr0: entered promiscuous mode [ 468.131060][T12178] random: crng reseeded on system resumption [ 473.058296][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 473.139677][ T5838] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 473.185270][T12229] overlay: ./file0 is not a directory [ 473.264272][T12243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1375'. [ 473.552359][T12243] hsr_slave_1 (unregistering): left promiscuous mode [ 473.592818][T12258] syz.1.1380: attempt to access beyond end of device [ 473.592818][T12258] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 475.020277][T12292] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 476.176706][ T5886] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 476.596061][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 476.613774][ T5886] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.655206][ T5886] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 476.668687][ T5886] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 476.678994][ T5886] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 476.704851][ T5886] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 476.718618][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.738434][ T5886] usb 6-1: Product: syz [ 476.742748][ T5886] usb 6-1: Manufacturer: syz [ 476.753613][ T5886] usb 6-1: SerialNumber: syz [ 477.041323][ T5886] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 477.069556][ T5886] usb 6-1: USB disconnect, device number 31 [ 477.195278][ T971] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 477.425793][ T971] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 477.480618][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.552012][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.706995][T12344] delete_channel: no stack [ 477.735799][ T971] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 477.786268][ T971] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 477.829708][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.867355][ T971] usb 2-1: config 0 descriptor?? [ 478.017563][T12386] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1404'. [ 478.027558][T12386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1404'. [ 478.044470][T12386] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1404'. [ 478.065317][T12386] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1404'. [ 478.334320][ T971] monterey 0003:0566:3004.0016: item fetching failed at offset 5/7 [ 478.343176][ T971] monterey 0003:0566:3004.0016: probe with driver monterey failed with error -22 [ 478.481414][ T8] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 478.541829][ T9] usb 2-1: USB disconnect, device number 50 [ 478.665388][ T8] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 478.735904][ T5888] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 478.813672][ T8] usb 4-1: config 5 has an invalid descriptor of length 85, skipping remainder of the config [ 478.950107][ T8] usb 4-1: config 5 has no interface number 0 [ 479.057893][ T8] usb 4-1: config 5 interface 123 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 479.087376][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.119265][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.145927][ T8] usb 4-1: config 5 interface 123 has no altsetting 0 [ 479.162852][ T5888] usb 6-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 479.172577][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.217938][ T5888] usb 6-1: config 0 descriptor?? [ 479.243995][ T8] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 479.256077][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.273794][ T8] usb 4-1: Product: syz [ 479.286532][ T8] usb 4-1: Manufacturer: syz [ 479.295850][ T8] usb 4-1: SerialNumber: syz [ 479.441253][T12426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1410'. [ 479.726645][T12382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.727818][T12382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.307750][ T8] comedi comedi0: Wrong number of endpoints [ 480.314120][ T8] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 480.345344][ T8] usb 4-1: USB disconnect, device number 54 [ 480.624047][ T8836] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.853254][ T8836] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.600790][ T5888] usbhid 6-1:0.0: can't add hid device: -71 [ 481.609046][ T5888] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 481.619229][ T5888] usb 6-1: USB disconnect, device number 32 [ 482.051981][ T8836] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.094549][T12480] fuse: Unknown parameter 'fd' [ 482.124813][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 482.139503][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 482.152635][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 482.160687][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 482.169726][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 482.177683][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 482.245858][ T5888] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 482.445831][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 482.550731][ T8836] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.610861][ T5888] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 482.628087][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.648885][ T5888] usb 6-1: config 0 descriptor?? [ 483.285916][ T968] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 483.416247][ T968] usb 4-1: device descriptor read/64, error -71 [ 483.431884][ T8836] bridge_slave_1: left allmulticast mode [ 483.448418][ T8836] bridge_slave_1: left promiscuous mode [ 483.502473][ T8836] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.524182][ T8836] bridge_slave_0: left allmulticast mode [ 483.531495][ T8836] bridge_slave_0: left promiscuous mode [ 483.537585][ T8836] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.666311][ T968] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 483.815859][ T968] usb 4-1: device descriptor read/64, error -71 [ 483.926182][ T968] usb usb4-port1: attempt power cycle [ 484.246164][ T5843] Bluetooth: hci1: command tx timeout [ 484.481048][ T968] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 484.625804][ T968] usb 4-1: device descriptor read/8, error -71 [ 484.747775][ T5888] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 484.758015][ T5888] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 484.771756][ T5888] asix 6-1:0.0: probe with driver asix failed with error -71 [ 484.801880][ T5888] usb 6-1: USB disconnect, device number 33 [ 484.865970][ T968] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 484.924531][ T968] usb 4-1: device descriptor read/8, error -71 [ 485.036608][ T968] usb usb4-port1: unable to enumerate USB device [ 485.044295][ T8836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.060495][ T8836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.073060][ T8836] bond0 (unregistering): Released all slaves [ 485.084932][ T8836] bond1 (unregistering): Released all slaves [ 485.246615][ T8836] bond2 (unregistering): Released all slaves [ 485.267449][T12478] chnl_net:caif_netlink_parms(): no params data found [ 485.399642][ T8836] tipc: Left network mode [ 486.334982][T12478] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.389595][T12478] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.397888][ T5843] Bluetooth: hci1: command tx timeout [ 486.545989][T12478] bridge_slave_0: entered allmulticast mode [ 486.570677][T12478] bridge_slave_0: entered promiscuous mode [ 486.610794][T12478] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.651667][T12478] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.680542][T12478] bridge_slave_1: entered allmulticast mode [ 486.710229][T12478] bridge_slave_1: entered promiscuous mode [ 488.514513][ T5843] Bluetooth: hci1: command tx timeout [ 488.895814][T12736] netlink: 'syz.5.1435': attribute type 32 has an invalid length. [ 489.379551][T12478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.181740][T12478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.215640][T12794] netlink: 'syz.6.1439': attribute type 2 has an invalid length. [ 490.223686][T12794] netlink: 'syz.6.1439': attribute type 8 has an invalid length. [ 490.234314][T12794] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1439'. [ 490.283079][ T8836] hsr_slave_0: left promiscuous mode [ 490.302447][ T8836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.344227][ T8836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.382324][ T8836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.391474][ T8836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.602675][ T5843] Bluetooth: hci1: command tx timeout [ 490.614904][ T8836] veth1_macvtap: left promiscuous mode [ 490.620601][ T8836] veth0_macvtap: left promiscuous mode [ 490.624077][T12812] xt_socket: unknown flags 0x2 [ 492.009792][ T8836] veth1_vlan: left promiscuous mode [ 492.026220][ T8836] veth0_vlan: left promiscuous mode [ 492.081023][T12814] ./bus: Can't lookup blockdev [ 495.133625][ T8836] team0 (unregistering): Port device team_slave_1 removed [ 495.247833][ T8836] team0 (unregistering): Port device team_slave_0 removed [ 496.619738][T12866] nfs: Unknown parameter 'a[l' [ 498.044127][T12478] team0: Port device team_slave_0 added [ 498.089304][T12478] team0: Port device team_slave_1 added [ 498.170430][ T29] audit: type=1804 audit(1731376715.485:187): pid=12925 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.1461" name="/newroot/188/file0" dev="fuse" ino=1 res=1 errno=0 [ 498.240546][T12478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.256537][T12478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.301889][T12478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.348556][T12478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.366159][T12478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.403103][T12478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.555572][T12478] hsr_slave_0: entered promiscuous mode [ 498.825041][T12478] hsr_slave_1: entered promiscuous mode [ 500.372073][T13002] openvswitch: netlink: Actions may not be safe on all matching packets [ 500.698196][T12995] vivid-000: kernel_thread() failed [ 502.403993][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.410518][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.723157][T13069] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 502.740073][T12478] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 502.911145][T12478] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 502.963267][T12478] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 503.005587][T13089] dvmrp0: entered allmulticast mode [ 503.015752][ T51] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 503.055082][T12478] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 503.175863][ T51] usb 6-1: Using ep0 maxpacket: 8 [ 503.196883][ T51] usb 6-1: config 1 has an invalid interface number: 199 but max is 6 [ 503.207690][ T51] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 503.257881][ T51] usb 6-1: config 1 has no interface number 0 [ 503.296520][ T51] usb 6-1: too many endpoints for config 1 interface 199 altsetting 178: 39, using maximum allowed: 30 [ 503.364825][ T51] usb 6-1: config 1 interface 199 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 39 [ 503.397984][ T51] usb 6-1: config 1 interface 199 has no altsetting 0 [ 503.414728][ T51] usb 6-1: New USB device found, idVendor=082d, idProduct=0180, bcdDevice=70.4b [ 503.421906][T12478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.425266][ T51] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 503.459947][ T51] usb 6-1: Product: syz [ 503.464184][ T51] usb 6-1: Manufacturer: syz [ 503.477053][T13112] loop2: detected capacity change from 0 to 7 [ 503.477530][ T51] usb 6-1: SerialNumber: syz [ 503.492082][T13119] No such timeout policy "syz0" [ 503.499309][T12478] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.516118][T13112] Dev loop2: unable to read RDB block 7 [ 503.522055][T13112] loop2: unable to read partition table [ 503.522061][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.527927][ T6557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.535850][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 503.546972][T13112] loop2: partition table beyond EOD, truncated [ 503.557763][T13112] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 503.575505][ T8385] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.582772][ T8385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.719672][ T51] usb 6-1: USB disconnect, device number 34 [ 503.736606][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 503.753785][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 503.777321][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 503.798762][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 503.825894][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 503.868553][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 503.885027][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.902768][ T9] usb 2-1: Product: syz [ 503.907741][ T9] usb 2-1: Manufacturer: syz [ 503.912484][ T9] usb 2-1: SerialNumber: syz [ 504.647818][T12478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.720307][ T9] usb 2-1: USB disconnect, device number 51 [ 505.215909][ T5975] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 505.910519][T12478] veth0_vlan: entered promiscuous mode [ 505.951097][T12478] veth1_vlan: entered promiscuous mode [ 506.021613][T12478] veth0_macvtap: entered promiscuous mode [ 506.062243][T12478] veth1_macvtap: entered promiscuous mode [ 506.076455][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 506.081530][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.095542][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.106159][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.116771][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.131894][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.147460][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.157684][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.169021][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.180647][T12478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.188803][ T5975] usb 4-1: Using ep0 maxpacket: 16 [ 506.202722][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 506.217504][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.228459][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.240690][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.255272][ T5975] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 506.256098][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 506.279115][ T5975] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 506.288320][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.291035][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.311216][ T5975] usb 4-1: Product: syz [ 506.315636][ T5975] usb 4-1: Manufacturer: syz [ 506.320982][ T5975] usb 4-1: SerialNumber: syz [ 506.331570][ T9] usb 2-1: config 0 has an invalid interface number: 223 but max is 0 [ 506.343240][ T9] usb 2-1: config 0 has no interface number 0 [ 506.346627][ T5975] usb 4-1: config 0 descriptor?? [ 506.355482][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.368220][ T9] usb 2-1: config 0 interface 223 altsetting 1 has an endpoint descriptor with address 0x54, changing to 0x4 [ 506.383363][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.393753][ T9] usb 2-1: config 0 interface 223 altsetting 1 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 506.417242][T12478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.425099][ T9] usb 2-1: config 0 interface 223 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 506.449402][T12478] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.468205][ T9] usb 2-1: config 0 interface 223 has no altsetting 0 [ 506.475342][T12478] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.500466][T12478] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.516062][ T9] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 506.525591][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.546886][ T9] usb 2-1: Product: syz [ 506.551239][T12478] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.565829][ T9] usb 2-1: Manufacturer: syz [ 506.571357][ T9] usb 2-1: SerialNumber: syz [ 507.556676][ T9] usb 2-1: config 0 descriptor?? [ 507.578926][T13226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.657078][T13226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.759013][ T5975] usb 4-1: Not enough endpoints found in device, aborting! [ 507.830863][ T8390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.841723][ T8390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.887384][ T8836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.895949][ T8836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.009296][T13205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.019340][T13205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.038879][T13205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.048099][T13205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.157670][ T9] usb 2-1: USB disconnect, device number 52 [ 508.903426][T13280] overlayfs: missing 'lowerdir' [ 509.043796][ T5889] usb 4-1: USB disconnect, device number 59 [ 510.595914][ T5889] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 510.626985][ T5888] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 510.767435][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.778942][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 510.786700][ T5888] usb 2-1: too many configurations: 239, using maximum allowed: 8 [ 510.798451][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 510.811650][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 510.817402][ T5888] usb 2-1: config index 0 descriptor too short (expected 65229, got 72) [ 510.823396][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 510.853961][ T5888] usb 2-1: config index 1 descriptor too short (expected 65229, got 72) [ 510.876148][ T5888] usb 2-1: config index 2 descriptor too short (expected 65229, got 72) [ 510.880249][ T5889] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 510.887049][ T5888] usb 2-1: config index 3 descriptor too short (expected 65229, got 72) [ 510.903452][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.904812][ T5888] usb 2-1: config index 4 descriptor too short (expected 65229, got 72) [ 510.920917][ T5889] usb 4-1: Product: syz [ 510.922058][ T5888] usb 2-1: config index 5 descriptor too short (expected 65229, got 72) [ 510.928711][ T5889] usb 4-1: Manufacturer: syz [ 510.942744][ T5888] usb 2-1: config index 6 descriptor too short (expected 65229, got 72) [ 510.968540][ T5888] usb 2-1: config index 7 descriptor too short (expected 65229, got 72) [ 510.980352][ T5888] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 510.989892][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.998370][ T5888] usb 2-1: Product: syz [ 511.002803][ T5889] usb 4-1: SerialNumber: syz [ 511.018115][ T5889] usb 4-1: config 0 descriptor?? [ 511.022318][ T5888] usb 2-1: Manufacturer: syz [ 511.031339][ T5888] usb 2-1: SerialNumber: syz [ 511.035916][ T5889] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 511.062384][ T5889] garmin_gps ttyUSB0: failed to submit interrupt urb: -90 [ 511.074095][ T5888] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 511.095315][ T968] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 511.111220][ T5889] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 511.252996][T13340] input: syz1 as /devices/virtual/input/input36 [ 511.390418][T13291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.419989][T13291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.471115][T13356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.512662][T13356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.719779][ T971] usb 4-1: USB disconnect, device number 60 [ 511.730503][ T971] garmin_gps 4-1:0.0: device disconnected [ 511.826396][ T5889] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 511.961987][ T29] audit: type=1326 audit(1731376729.275:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13378 comm="syz.6.1508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febd797e719 code=0x0 [ 512.025796][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 512.032954][ T5889] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 512.041497][ T5889] usb 6-1: config 0 has no interface number 0 [ 512.064240][ T5889] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 512.090875][ T5889] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 512.144673][ T5889] usb 6-1: config 0 interface 41 has no altsetting 0 [ 512.156968][ T968] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 512.175283][ T968] ath9k_htc: Failed to initialize the device [ 512.205094][ T5889] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 512.221103][ T968] usb 2-1: ath9k_htc: USB layer deinitialized [ 512.282062][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.299838][ T5889] usb 6-1: Product: syz [ 512.304147][ T5889] usb 6-1: Manufacturer: syz [ 512.345944][ T5889] usb 6-1: SerialNumber: syz [ 512.362898][ T5889] usb 6-1: config 0 descriptor?? [ 512.371493][T13361] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 512.387758][T13361] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 512.623200][T13361] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 512.642283][T13361] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 513.240961][ T5889] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -22 [ 513.727976][ T5889] usb 2-1: USB disconnect, device number 53 [ 513.804052][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1513'. [ 513.821181][T13408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1513'. [ 515.116979][ T968] usb 6-1: USB disconnect, device number 35 [ 516.471689][T13428] input: syz1 as /devices/virtual/input/input37 [ 516.640641][T13452] FAULT_INJECTION: forcing a failure. [ 516.640641][T13452] name failslab, interval 1, probability 0, space 0, times 0 [ 516.654706][T13452] CPU: 0 UID: 0 PID: 13452 Comm: syz.1.1521 Not tainted 6.12.0-rc7-syzkaller #0 [ 516.663797][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 516.673907][T13452] Call Trace: [ 516.677249][T13452] [ 516.680287][T13452] dump_stack_lvl+0x241/0x360 [ 516.685031][T13452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.690284][T13452] ? __pfx__printk+0x10/0x10 [ 516.694922][T13452] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 516.700539][T13452] ? __pfx___might_resched+0x10/0x10 [ 516.705877][T13452] should_fail_ex+0x3b0/0x4e0 [ 516.710606][T13452] ? __kernfs_new_node+0xd8/0x870 [ 516.715692][T13452] should_failslab+0xac/0x100 [ 516.720433][T13452] ? __kernfs_new_node+0xd8/0x870 [ 516.725508][T13452] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 516.731030][T13452] __kernfs_new_node+0xd8/0x870 [ 516.735940][T13452] ? __pfx___kernfs_new_node+0x10/0x10 [ 516.741450][T13452] ? __pfx_lock_acquire+0x10/0x10 [ 516.746536][T13452] ? __pfx___might_resched+0x10/0x10 [ 516.751873][T13452] ? sysfs_create_dir_ns+0x189/0x3a0 [ 516.757209][T13452] ? sysfs_create_dir_ns+0x1cf/0x3a0 [ 516.762547][T13452] kernfs_new_node+0x137/0x240 [ 516.767370][T13452] __kernfs_create_file+0x49/0x2e0 [ 516.772547][T13452] sysfs_add_file_mode_ns+0x24a/0x310 [ 516.777977][T13452] sysfs_create_file_ns+0x197/0x2a0 [ 516.783235][T13452] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 516.789014][T13452] ? __dev_fwnode+0x50/0x80 [ 516.793561][T13452] ? device_create_file+0xf2/0x1c0 [ 516.798704][T13452] device_add+0x522/0xbf0 [ 516.803069][T13452] input_register_device+0xa53/0x1110 [ 516.808478][T13452] uinput_create_device+0x40e/0x630 [ 516.813714][T13452] uinput_ioctl_handler+0x488/0x1770 [ 516.819249][T13452] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 516.825015][T13452] ? __fget_files+0x3f3/0x470 [ 516.829735][T13452] ? __pfx_uinput_ioctl+0x10/0x10 [ 516.834788][T13452] __se_sys_ioctl+0xf9/0x170 [ 516.839410][T13452] do_syscall_64+0xf3/0x230 [ 516.844031][T13452] ? clear_bhb_loop+0x35/0x90 [ 516.848738][T13452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.854697][T13452] RIP: 0033:0x7f6c4db7e719 [ 516.859139][T13452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.878960][T13452] RSP: 002b:00007f6c4e8c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.887457][T13452] RAX: ffffffffffffffda RBX: 00007f6c4dd35f80 RCX: 00007f6c4db7e719 [ 516.895539][T13452] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 516.903546][T13452] RBP: 00007f6c4e8c6090 R08: 0000000000000000 R09: 0000000000000000 [ 516.911547][T13452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.919631][T13452] R13: 0000000000000000 R14: 00007f6c4dd35f80 R15: 00007ffdc6ccbe18 [ 516.927736][T13452] [ 518.611863][T13469] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1526'. [ 522.147128][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 522.168538][T13479] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 522.195539][T13479] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 522.832293][T13479] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 522.845358][T13479] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 523.221721][T13479] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 523.278022][T13479] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 523.309947][T13513] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1537'. [ 523.497115][T13478] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 523.503609][T13478] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 523.531045][T13478] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 523.551456][T13478] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 523.589223][T13518] Bluetooth: hci5: unexpected event for opcode 0x203c [ 523.815810][ T5975] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 523.996080][ T8] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 524.425177][ T8] usb 6-1: config 1 interface 0 has no altsetting 0 [ 524.472488][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 524.556521][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.665843][ T8] usb 6-1: Product: syz [ 524.682163][ T8] usb 6-1: Manufacturer: syz [ 524.696470][ T8] usb 6-1: SerialNumber: syz [ 524.757794][ T5975] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 524.769129][T13539] netlink: 'syz.6.1542': attribute type 3 has an invalid length. [ 524.785747][ T5975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 524.794147][T13539] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.1542'. [ 524.820710][ T5975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 59391, setting to 1024 [ 524.856211][ T5975] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 524.875781][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.911865][ T5975] usb 2-1: config 0 descriptor?? [ 524.924389][T13510] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 524.941851][ T5975] gspca_main: spca561-2.14.0 probing abcd:cdee [ 525.336301][ T5975] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 525.346893][ T5975] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 525.354554][ T5975] usb 2-1: MIDIStreaming interface descriptor not found [ 525.360731][ T8] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 525.596736][T13518] Bluetooth: hci2: command 0x0405 tx timeout [ 525.606228][T13518] Bluetooth: hci1: command 0x0c1a tx timeout [ 525.612913][T13518] Bluetooth: hci4: command 0x0406 tx timeout [ 525.911661][T13528] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1540'. [ 526.055299][ T5975] usb 2-1: USB disconnect, device number 54 [ 526.324702][ T9] usb 6-1: USB disconnect, device number 36 [ 526.341023][ T9] usblp0: removed [ 527.801269][T13518] Bluetooth: hci1: command 0x0c1a tx timeout [ 528.416213][ T8] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 529.154530][ T8] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 529.168423][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.184340][ T8] usb 2-1: config 0 has no interface number 0 [ 529.192403][ T8] usb 2-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x23, changing to 0x3 [ 529.207512][ T8] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 529.232121][ T8] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x3 has invalid maxpacket 8208, setting to 1024 [ 529.243729][ T8] usb 2-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 529.262219][ T8] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 529.271882][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.287682][ T8] usb 2-1: config 0 descriptor?? [ 529.337461][ T8] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 529.356031][ T5889] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 529.363937][ T5975] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 529.408183][ T8836] usb 2-1: Failed to submit usb control message: -71 [ 529.417761][ T8] usb 2-1: USB disconnect, device number 55 [ 529.432023][ T8836] usb 2-1: unable to send the bmi data to the device: -71 [ 529.488144][ T8836] usb 2-1: unable to get target info from device [ 529.495187][ T8836] usb 2-1: could not get target info (-71) [ 529.506580][ T8836] usb 2-1: could not probe fw (-71) [ 529.537008][ T5975] usb 6-1: Using ep0 maxpacket: 32 [ 529.551584][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.583258][ T5975] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 529.596545][ T5975] usb 6-1: config 0 has no interface number 0 [ 529.597003][ T5975] usb 6-1: config 0 interface 12 has no altsetting 0 [ 529.640215][ T5975] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 529.640322][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.640428][ T5975] usb 6-1: Product: syz [ 529.640516][ T5975] usb 6-1: Manufacturer: syz [ 529.640619][ T5975] usb 6-1: SerialNumber: syz [ 529.673458][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 529.673591][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 529.673684][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.673882][ T5889] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 529.673978][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.846138][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 529.886601][ T5975] usb 6-1: config 0 descriptor?? [ 529.911586][ T5889] usb 4-1: config 0 descriptor?? [ 530.600948][ T5889] usb 4-1: USB disconnect, device number 61 [ 530.715549][T13661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.724843][T13661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.727967][T13724] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 530.782188][ T5975] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 530.795712][ T5975] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 530.803088][ T5975] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 530.816284][ T5975] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 530.833193][ T5975] usb 6-1: USB disconnect, device number 37 [ 530.867673][T13739] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1565'. [ 530.888880][T13725] overlay: Bad value for 'index' [ 530.941840][T13746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 532.004707][T13762] openvswitch: netlink: Message has 4 unknown bytes. [ 532.326639][T13764] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1572'. [ 533.196367][ T968] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 533.357010][ T968] usb 2-1: no configurations [ 533.368636][ T968] usb 2-1: can't read configurations, error -22 [ 533.818726][T13830] sp0: Synchronizing with TNC [ 533.879545][ T968] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 534.052033][ T968] usb 2-1: no configurations [ 534.065855][ T968] usb 2-1: can't read configurations, error -22 [ 534.084858][ T968] usb usb2-port1: attempt power cycle [ 534.437463][T13875] tmpfs: Bad value for 'mpol' [ 534.445832][ T968] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 534.457411][T13875] netlink: 'syz.6.1594': attribute type 66 has an invalid length. [ 534.466974][ T968] usb 2-1: no configurations [ 534.471619][ T968] usb 2-1: can't read configurations, error -22 [ 534.616016][ T968] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 534.673072][ T968] usb 2-1: no configurations [ 534.679778][ T968] usb 2-1: can't read configurations, error -22 [ 534.700494][ T968] usb usb2-port1: unable to enumerate USB device [ 534.793881][ T5975] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 534.952582][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.970077][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.059438][ T5975] usb 6-1: New USB device found, idVendor=056a, idProduct=037e, bcdDevice=6c.75 [ 535.156454][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.380482][ T5975] usb 6-1: config 0 descriptor?? [ 535.742171][T13902] netlink: 'syz.3.1601': attribute type 2 has an invalid length. [ 537.463200][ T5975] wacom 0003:056A:037E.0017: Unknown device_type for 'HID 056a:037e'. Ignoring. [ 537.536871][ T5975] usb 6-1: USB disconnect, device number 38 [ 541.281847][T13995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1616'. [ 541.291545][T13993] netlink: 'syz.5.1614': attribute type 11 has an invalid length. [ 541.329888][T13997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.346281][T13997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.596030][ T968] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 541.782944][ T968] usb 4-1: config 0 has an invalid interface number: 166 but max is 1 [ 541.817968][ T968] usb 4-1: config 0 has no interface number 1 [ 541.843211][ T968] usb 4-1: config 0 interface 166 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 541.889809][ T968] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 541.911835][T14009] ebtables: ebtables: counters copy to user failed while replacing table [ 541.941698][ T968] usb 4-1: New USB device found, idVendor=093a, idProduct=2468, bcdDevice=e4.25 [ 541.966197][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.974578][ T968] usb 4-1: Product: syz [ 542.013262][ T968] usb 4-1: Manufacturer: syz [ 542.024054][ T968] usb 4-1: SerialNumber: syz [ 542.067495][ T968] usb 4-1: config 0 descriptor?? [ 542.089268][ T968] gspca_main: pac207-2.14.0 probing 093a:2468 [ 542.551961][ T968] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 542.631692][ T968] usb 4-1: USB disconnect, device number 62 [ 542.994079][T14031] infiniband syz1: set active [ 542.999988][T14031] infiniband syz1: added bond_slave_1 [ 543.358615][T14031] RDS/IB: syz1: added [ 543.364750][T14031] smc: adding ib device syz1 with port count 1 [ 543.372064][T14031] smc: ib device syz1 port 1 has pnetid [ 543.568018][T14045] 9pnet_fd: Insufficient options for proto=fd [ 543.749548][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1625'. [ 543.915921][T14050] netlink: 'syz.7.1627': attribute type 1 has an invalid length. [ 543.936252][T14050] netlink: 9116 bytes leftover after parsing attributes in process `syz.7.1627'. [ 544.005541][T14050] netlink: 'syz.7.1627': attribute type 1 has an invalid length. [ 544.013823][T14050] netlink: 205 bytes leftover after parsing attributes in process `syz.7.1627'. [ 545.034350][T14046] hsr_slave_1 (unregistering): left promiscuous mode [ 546.566737][ T968] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 549.252600][ T8] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 552.578347][T14176] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1650'. [ 552.789244][T14187] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1651'. [ 552.906268][T14187] ɶƣ0GC!: entered promiscuous mode [ 554.397342][T14218] netlink: 'syz.3.1658': attribute type 1 has an invalid length. [ 556.108716][ T5889] IPVS: starting estimator thread 0... [ 556.230142][T14245] IPVS: using max 16 ests per chain, 38400 per kthread [ 558.455832][ T5975] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 559.162492][ T5975] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 559.190668][ T5975] usb 2-1: config 0 has no interface number 0 [ 559.449418][ T5975] usb 2-1: too many endpoints for config 0 interface 20 altsetting 20: 170, using maximum allowed: 30 [ 559.981428][ T5975] usb 2-1: config 0 interface 20 altsetting 20 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 559.994811][ T5975] usb 2-1: config 0 interface 20 has no altsetting 0 [ 560.002383][ T5975] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 560.011648][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.326857][ T5975] usb 2-1: config 0 descriptor?? [ 560.359281][ T5975] ums-realtek 2-1:0.20: USB Mass Storage device detected [ 560.690487][ T8] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 561.611007][ T5975] usb 2-1: USB disconnect, device number 61 [ 561.696782][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 561.703853][ T8] usb 6-1: device descriptor read/all, error -71 [ 562.744139][T14350] x_tables: duplicate underflow at hook 3 [ 563.198302][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.205936][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.507876][T14360] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1686'. [ 563.517741][T14360] netlink: 'syz.6.1686': attribute type 6 has an invalid length. [ 563.655459][T14364] Process accounting resumed [ 563.663377][T14364] kernel write not supported for file /asound/timers (pid: 14364 comm: syz.3.1688) [ 563.749285][T14370] input: syz1 as /devices/virtual/input/input42 [ 565.321937][ T968] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 565.405818][ T971] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 565.455859][ T968] usb 2-1: device descriptor read/64, error -71 [ 565.545801][ T971] usb 4-1: device descriptor read/64, error -71 [ 565.696520][ T968] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 565.785797][ T971] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 565.937470][ T971] usb 4-1: device descriptor read/64, error -71 [ 565.985960][ T968] usb 2-1: device descriptor read/64, error -71 [ 566.056405][ T971] usb usb4-port1: attempt power cycle [ 566.415880][ T971] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 566.448967][ T971] usb 4-1: device descriptor read/8, error -71 [ 566.552254][ T968] usb usb2-port1: attempt power cycle [ 566.800930][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1702'. [ 566.816976][ T971] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 567.046638][ T968] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 567.205818][ T971] usb 4-1: device descriptor read/8, error -71 [ 567.206435][ T968] usb 2-1: device descriptor read/8, error -71 [ 567.526419][ T971] usb usb4-port1: unable to enumerate USB device [ 567.605764][ T968] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 567.628468][ T968] usb 2-1: device descriptor read/8, error -71 [ 567.736914][ T968] usb usb2-port1: unable to enumerate USB device [ 568.470921][T14463] bond0: Unable to set down delay as MII monitoring is disabled [ 569.369430][T14463] syz.1.1708 (14463): drop_caches: 2 [ 569.461386][T14472] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1709'. [ 569.495882][T14472] 9pnet_fd: Insufficient options for proto=fd [ 569.689214][T14475] netlink: 'syz.6.1710': attribute type 3 has an invalid length. [ 571.306055][ T5889] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 571.672573][ T5889] usb 2-1: device descriptor read/all, error -71 [ 572.744476][T14553] netlink: 'syz.6.1722': attribute type 11 has an invalid length. [ 572.860116][T14562] loop7: detected capacity change from 0 to 16384 [ 573.131380][T14562] I/O error, dev loop7, sector 768 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 573.162301][T14562] Buffer I/O error on dev loop7, logical block 96, lost async page write [ 573.196894][T14562] Buffer I/O error on dev loop7, logical block 97, lost async page write [ 573.224156][T14562] Buffer I/O error on dev loop7, logical block 98, lost async page write [ 573.754914][T14564] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 573.803910][T14562] Buffer I/O error on dev loop7, logical block 99, lost async page write [ 573.898214][T14562] Buffer I/O error on dev loop7, logical block 100, lost async page write [ 573.938162][T14564] Buffer I/O error on dev loop7, logical block 0, async page read [ 573.968790][T14562] Buffer I/O error on dev loop7, logical block 101, lost async page write [ 574.013867][T14564] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 574.044502][T14562] Buffer I/O error on dev loop7, logical block 102, lost async page write [ 574.067814][T14564] Buffer I/O error on dev loop7, logical block 0, async page read [ 574.094505][T14562] Buffer I/O error on dev loop7, logical block 103, lost async page write [ 574.112102][T14564] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 574.124395][T14564] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 574.149277][T14564] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 574.169004][T14564] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 574.192351][T14564] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 574.215357][T14564] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 574.233958][T14564] ldm_validate_partition_table(): Disk read failed. [ 574.242137][T14564] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 574.261885][T14564] Dev loop7: unable to read RDB block 0 [ 574.271192][T14564] loop7: unable to read partition table [ 574.283475][T14564] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 574.297710][ T968] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 574.455907][ T968] usb 2-1: Using ep0 maxpacket: 16 [ 574.463399][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.494666][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.513214][ T968] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 574.523388][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.551002][ T968] usb 2-1: config 0 descriptor?? [ 574.968741][ T968] appleir 0003:05AC:8241.0018: unknown main item tag 0x0 [ 575.004005][ T968] appleir 0003:05AC:8241.0018: unknown main item tag 0x0 [ 575.037726][ T968] appleir 0003:05AC:8241.0018: unknown main item tag 0x0 [ 575.074240][ T968] appleir 0003:05AC:8241.0018: unknown main item tag 0x0 [ 575.116079][ T968] appleir 0003:05AC:8241.0018: unknown main item tag 0x0 [ 575.140667][ T968] appleir 0003:05AC:8241.0018: No inputs registered, leaving [ 575.208543][ T968] appleir 0003:05AC:8241.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 575.302216][ T968] usb 2-1: USB disconnect, device number 68 [ 576.682593][T14638] hub 9-0:1.0: USB hub found [ 576.695231][T14638] hub 9-0:1.0: 1 port detected [ 577.069184][T14637] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1733'. [ 577.160115][T14641] netlink: 129384 bytes leftover after parsing attributes in process `syz.7.1734'. [ 577.226172][ T8] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 577.248589][ T5838] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 577.395924][ T8] usb 2-1: config index 0 descriptor too short (expected 65323, got 119) [ 577.422140][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.432825][ T8] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 577.443208][ T8] usb 2-1: config 1 has no interface number 1 [ 577.449566][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 577.462984][ T8] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 577.537732][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 577.547385][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.555813][ T8] usb 2-1: Product: syz [ 577.560391][ T8] usb 2-1: Manufacturer: syz [ 577.568604][ T8] usb 2-1: SerialNumber: syz [ 578.434262][ T8] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 578.495868][ T8] usb 2-1: USB disconnect, device number 69 [ 579.899124][T14700] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1741'. [ 580.075724][ T8] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 580.131981][T14709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.173524][ T29] audit: type=1400 audit(1731376797.485:189): lsm=SMACK fn=smack_task_kill action=denied subject="w" object="_" requested=w pid=14705 comm="syz.6.1743" opid=14705 ocomm="syz.6.1743" [ 580.212875][T14709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.247988][ T8] usb 6-1: descriptor type invalid, skip [ 580.273278][ T8] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 580.285842][ T8] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 580.305772][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 580.314438][T14709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.345358][ T8] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 580.381333][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.405819][ T8] usb 6-1: Product: syz [ 580.410063][ T8] usb 6-1: Manufacturer: 栀 [ 580.425765][ T8] usb 6-1: SerialNumber: syz [ 580.502978][T14719] binder: 14717:14719 ioctl 40046205 0 returned -22 [ 580.572809][T14723] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 580.653430][ T8] usb 6-1: 0:2 : does not exist [ 580.674054][ T8] usb 6-1: USB disconnect, device number 41 [ 581.015928][ T5886] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 581.418389][T14754] Invalid ELF header magic: != ELF [ 581.426400][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.438442][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.448464][ T5886] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 581.457796][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.953697][ T5886] usb 2-1: config 0 descriptor?? [ 582.616212][T14774] hub 9-0:1.0: USB hub found [ 582.637509][T14774] hub 9-0:1.0: 1 port detected [ 582.810664][T14773] input: syz1 as /devices/virtual/input/input43 [ 582.839628][ T5886] steelseries 0003:1038:12B6.0019: unbalanced delimiter at end of report description [ 582.850444][ T5886] steelseries 0003:1038:12B6.0019: probe with driver steelseries failed with error -22 [ 583.041298][T14741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.126195][T14741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.149048][ T5975] usb 2-1: USB disconnect, device number 70 [ 583.160536][T14786] netlink: 'syz.5.1755': attribute type 4 has an invalid length. [ 583.168538][T14786] netlink: 'syz.5.1755': attribute type 4 has an invalid length. [ 583.176398][T14786] netlink: 126012 bytes leftover after parsing attributes in process `syz.5.1755'. [ 583.187959][T14786] netlink: 'syz.5.1755': attribute type 4 has an invalid length. [ 583.195938][T14786] netlink: 'syz.5.1755': attribute type 4 has an invalid length. [ 583.203791][T14786] netlink: 126012 bytes leftover after parsing attributes in process `syz.5.1755'. [ 583.245851][T14786] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 583.252552][T14786] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 583.263567][T14786] vhci_hcd vhci_hcd.0: Device attached [ 583.516024][ T5886] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 583.683784][T14798] vhci_hcd: connection reset by peer [ 583.690819][ T52] vhci_hcd: stop threads [ 583.695113][ T52] vhci_hcd: release socket [ 583.718632][ T52] vhci_hcd: disconnect device [ 585.498159][T14832] nbd1: detected capacity change from 0 to 22 [ 586.429477][ T5838] block nbd1: Receive control failed (result -104) [ 587.535797][ T5975] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 587.651473][T14864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 587.728620][ T5975] usb 6-1: config 1 has an invalid interface number: 4 but max is 2 [ 587.745879][ T5975] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 587.757113][ T5975] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.776743][ T5975] usb 6-1: config 1 has no interface number 1 [ 587.783292][ T5975] usb 6-1: too many endpoints for config 1 interface 4 altsetting 0: 187, using maximum allowed: 30 [ 587.801910][ T5975] usb 6-1: config 1 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 587.821822][ T5975] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 587.832529][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.841694][ T5975] usb 6-1: Product: syz [ 587.846115][ T5975] usb 6-1: Manufacturer: syz [ 587.851177][ T5975] usb 6-1: SerialNumber: syz [ 588.348612][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1769'. [ 588.899144][ T5886] vhci_hcd: vhci_device speed not set [ 590.599272][T14946] netlink: 'syz.5.1773': attribute type 3 has an invalid length. [ 590.614635][T14946] netlink: 'syz.5.1773': attribute type 1 has an invalid length. [ 590.632190][ T5975] hub 6-1:1.4: bad descriptor, ignoring hub [ 590.644033][ T5975] hub 6-1:1.4: probe with driver hub failed with error -5 [ 590.651915][T14946] netlink: 198140 bytes leftover after parsing attributes in process `syz.5.1773'. [ 590.666915][ T5975] usb 6-1: USB disconnect, device number 42 [ 591.245824][ T8] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 591.405915][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 591.422827][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.442906][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 591.462729][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 591.474468][ T8] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=3 [ 591.482877][ T8] usb 4-1: Manufacturer: syz [ 591.487675][ T8] usb 4-1: SerialNumber: syz [ 591.709788][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 592.025189][ T8] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 592.043671][ T8] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 592.055209][ T8] usb 4-1: USB disconnect, device number 68 [ 594.756077][T15063] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 594.821977][T15037] kvm: pic: single mode not supported [ 594.822125][T15037] kvm: pic: non byte read [ 594.845426][T15037] kvm: pic: non byte read [ 595.354654][ T5838] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 596.086661][ T8] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 596.245870][ T8] usb 4-1: device descriptor read/64, error -71 [ 596.506220][ T8] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 596.697457][ T8] usb 4-1: device descriptor read/64, error -71 [ 596.837633][ T8] usb usb4-port1: attempt power cycle [ 597.329205][ T8] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 597.357360][ T8] usb 4-1: device descriptor read/8, error -71 [ 597.608600][ T8] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 597.642560][ T8] usb 4-1: device descriptor read/8, error -71 [ 597.762176][ T8] usb usb4-port1: unable to enumerate USB device [ 598.223127][T15109] binder: 15108:15109 ioctl c0306201 20001a80 returned -14 [ 601.999177][ T8390] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.020061][T13518] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 602.035938][T13518] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 602.076671][T13518] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 602.101004][T13518] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 602.117024][T13518] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 602.128064][T13518] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 604.243900][ T5838] Bluetooth: hci3: command tx timeout [ 604.883736][T15158] chnl_net:caif_netlink_parms(): no params data found [ 605.862678][T15158] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.897290][T15158] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.946010][T15158] bridge_slave_0: entered allmulticast mode [ 605.967230][T15158] bridge_slave_0: entered promiscuous mode [ 605.986140][T15158] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.993418][T15158] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.010011][T15158] bridge_slave_1: entered allmulticast mode [ 606.035014][T15158] bridge_slave_1: entered promiscuous mode [ 606.108971][T15387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1822'. [ 606.120793][T15387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1822'. [ 606.132154][T15387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1822'. [ 606.146658][T15158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.164601][T15158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.242154][T15158] team0: Port device team_slave_0 added [ 606.254954][T15158] team0: Port device team_slave_1 added [ 606.315873][ T5838] Bluetooth: hci3: command tx timeout [ 606.328829][T15158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.336294][T15158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.371087][T15158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.401535][T15158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.415977][T15158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.452881][T15158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.568724][T15158] hsr_slave_0: entered promiscuous mode [ 606.587798][T15158] hsr_slave_1: entered promiscuous mode [ 606.594843][T15158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.619918][T15158] Cannot create hsr debugfs directory [ 606.886594][T15501] pim6reg1: entered promiscuous mode [ 606.891977][T15501] pim6reg1: entered allmulticast mode [ 608.282085][T15158] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 608.353539][T15158] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 608.396120][ T5838] Bluetooth: hci3: command tx timeout [ 608.444398][T15158] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 608.558307][T15158] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 608.686222][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 608.774567][T15158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.810576][T15158] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.849954][T10011] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.857172][T10011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.889158][T10011] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.896418][T10011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.905752][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 608.918279][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 608.928762][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 608.982916][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 609.051918][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 44502, setting to 1024 [ 609.109923][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 609.140471][ T9] usb 4-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 609.179922][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.197051][ T9] usb 4-1: Product: syz [ 609.201361][ T9] usb 4-1: Manufacturer: syz [ 609.206391][ T9] usb 4-1: SerialNumber: syz [ 609.246137][ T9] usb 4-1: config 0 descriptor?? [ 609.252391][T15570] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 609.273435][ T9] omninet 4-1:0.0: required endpoints missing [ 609.281464][ T8] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 609.420430][T15158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.476027][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 609.493341][ T8] usb 6-1: config 1 interface 0 altsetting 181 bulk endpoint 0x1 has invalid maxpacket 1024 [ 609.503995][ T8] usb 6-1: config 1 interface 0 altsetting 181 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 609.517650][ T8] usb 6-1: config 1 interface 0 has no altsetting 0 [ 609.527386][ T5886] usb 4-1: USB disconnect, device number 73 [ 609.606639][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 609.616595][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.624904][ T8] usb 6-1: Product: syz [ 609.629515][ T8] usb 6-1: Manufacturer: syz [ 609.634326][ T8] usb 6-1: SerialNumber: syz [ 609.648925][T15583] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 609.929769][T15158] veth0_vlan: entered promiscuous mode [ 609.963874][T15158] veth1_vlan: entered promiscuous mode [ 610.044182][T15158] veth0_macvtap: entered promiscuous mode [ 610.069559][T15583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.079771][T15158] veth1_macvtap: entered promiscuous mode [ 610.096414][T15583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.119089][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.137993][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.149880][ T8] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 181 proto 1 vid 0x0525 pid 0xA4A8 [ 610.162404][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.175543][ T8] usb 6-1: USB disconnect, device number 43 [ 610.187564][ T8] usblp0: removed [ 610.191277][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.205749][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.216376][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.226285][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.237380][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.247414][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.258338][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.279082][T15158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.305200][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.320052][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.330305][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.340862][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.350910][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.361990][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.371915][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.382591][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.393969][T15158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.414041][T15158] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.423764][T15158] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.433722][T15158] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.442656][T15158] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.477581][ T5838] Bluetooth: hci3: command tx timeout [ 610.536011][ T5886] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 610.583169][T10011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.600455][T10011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.639959][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.668184][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.097469][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 611.111755][ T5886] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 86, using maximum allowed: 30 [ 611.123827][ T5886] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.878985][ T5886] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 611.933946][ T5886] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 611.948977][ T5886] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 611.969250][ T5886] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 86 [ 611.991532][ T5886] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 612.020062][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 612.033177][ T5886] usb 4-1: SerialNumber: syz [ 612.054212][T15639] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 612.298854][ T5886] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 612.312292][ T5886] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 612.355113][ T29] audit: type=1804 audit(1731376829.665:190): pid=15681 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.1844" name="/newroot/2/bus/bus" dev="overlay" ino=35 res=1 errno=0 [ 612.710196][T15671] block nbd5: shutting down sockets [ 613.147362][T15639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.216565][T15639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.374819][ T9] usb 4-1: USB disconnect, device number 74 [ 613.395884][T15695] macsec1: entered promiscuous mode [ 613.405862][T15695] macvlan1: entered promiscuous mode [ 613.427115][T15695] macsec1: entered allmulticast mode [ 613.453005][T15695] macvlan1: entered allmulticast mode [ 613.466171][T15695] veth1_vlan: entered allmulticast mode [ 613.515324][T15695] macvlan1: left allmulticast mode [ 613.544011][T15695] veth1_vlan: left allmulticast mode [ 613.549814][T15695] macvlan1: left promiscuous mode [ 613.789520][T15729] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 616.135935][ T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 616.226793][T15776] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 616.295851][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 616.312995][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 616.343713][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.352422][ T40] block nbd1: Possible stuck request ffff888025720000: control (read@0,11264B). Runtime 30 seconds [ 616.354709][ T5838] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 617.337222][ T9] usb 6-1: config 0 descriptor?? [ 617.402819][ T9] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 618.238793][ T9] gspca_sunplus: reg_w_riv err -71 [ 618.262811][ T9] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 618.303556][ T9] usb 6-1: USB disconnect, device number 44 [ 618.785548][T15821] @: renamed from vlan0 (while UP) [ 619.246147][ T5838] Bluetooth: hci5: command 0x0405 tx timeout [ 620.025934][ T5888] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 620.369511][T15865] netlink: 'syz.7.1877': attribute type 20 has an invalid length. [ 622.487804][ T5838] Bluetooth: hci5: command 0x0405 tx timeout [ 622.557672][ T5888] usb 6-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 622.573930][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.857037][ T5888] usb 6-1: config 0 descriptor?? [ 623.879636][ T5888] usb 6-1: can't set config #0, error -71 [ 623.886852][ T5888] usb 6-1: USB disconnect, device number 45 [ 624.609750][ T5838] Bluetooth: hci5: command 0x0405 tx timeout [ 624.648729][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.658766][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.555737][ T5889] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 626.803287][ T5838] Bluetooth: hci5: command 0x0405 tx timeout [ 627.234375][ T5889] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 627.256230][ T5889] usb 4-1: config 0 has no interface number 0 [ 627.262404][ T5889] usb 4-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=ff.ba [ 627.311422][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.322528][ T5889] usb 4-1: config 0 descriptor?? [ 628.390301][ T5889] kaweth 4-1:0.1: Firmware present in device. [ 628.397023][ T5889] kaweth 4-1:0.1: Error reading configuration (-71), no net device created [ 628.406299][ T5889] kaweth 4-1:0.1: probe with driver kaweth failed with error -5 [ 628.419984][ T5889] usb 4-1: USB disconnect, device number 75 [ 628.497929][T16005] dummy0: entered promiscuous mode [ 628.504273][T16005] macsec1: entered allmulticast mode [ 628.532474][T16005] dummy0: entered allmulticast mode [ 628.556157][T16005] dummy0: left allmulticast mode [ 628.573999][T16005] dummy0: left promiscuous mode [ 629.189926][T16029] Cannot find set identified by id 0 to match [ 632.144224][T16077] xt_TPROXY: Can be used only with -p tcp or -p udp [ 632.605891][T16087] tipc: Started in network mode [ 632.906341][T16087] tipc: Node identity ac14140f, cluster identity 4711 [ 632.916093][T16087] tipc: New replicast peer: 255.255.255.255 [ 632.946723][T16087] tipc: Enabled bearer , priority 10 [ 633.355095][T16102] netlink: 'syz.3.1924': attribute type 21 has an invalid length. [ 633.423355][T16102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1924'. [ 633.690308][T16109] hub 9-0:1.0: USB hub found [ 633.695879][ T5838] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 633.703897][T16109] hub 9-0:1.0: 1 port detected [ 633.723498][T16109] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.1923'. [ 634.398739][ T9] tipc: Node number set to 2886997007 [ 634.424485][T16113] xt_hashlimit: max too large, truncated to 1048576 [ 635.926003][ T5889] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 635.957587][T16132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.047213][T16174] input: syz0 as /devices/virtual/input/input44 [ 639.496036][ T5889] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 639.586625][T13518] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 639.593213][T13518] Bluetooth: Wrong link type (-22) [ 639.613330][T16209] hub 9-0:1.0: USB hub found [ 639.627878][T16209] hub 9-0:1.0: 1 port detected [ 639.638145][T16209] netlink: 209844 bytes leftover after parsing attributes in process `syz.8.1942'. [ 639.657478][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 639.664671][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.675953][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.686178][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 639.699093][ T5889] usb 6-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 639.708459][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.722497][ T5889] usb 6-1: config 0 descriptor?? [ 640.155908][ T5889] wacom 0003:056A:0116.001A: hidraw0: USB HID v0.00 Device [HID 056a:0116] on usb-dummy_hcd.5-1/input0 [ 640.355386][ T5888] usb 6-1: USB disconnect, device number 46 [ 643.006097][T16251] xt_socket: unknown flags 0x50 [ 645.060581][ T5889] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 645.274594][ T5889] usb 6-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 645.325737][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.333823][ T5889] usb 6-1: Product: syz [ 645.355815][ T5889] usb 6-1: Manufacturer: syz [ 645.365888][ T5889] usb 6-1: SerialNumber: syz [ 645.470520][ T5889] usb 6-1: config 0 descriptor?? [ 645.495279][ T5889] f81232 6-1:0.0: f81232 converter detected [ 645.524141][ T5889] usb 6-1: f81232 converter now attached to ttyUSB0 [ 645.709277][ T5886] usb 6-1: USB disconnect, device number 47 [ 645.721159][ T5886] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 645.737463][ T5886] f81232 6-1:0.0: device disconnected [ 646.136370][T16307] hub 9-0:1.0: USB hub found [ 646.155790][T16307] hub 9-0:1.0: 1 port detected [ 646.186251][T16307] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1956'. [ 646.905512][ T40] block nbd1: Possible stuck request ffff888025720000: control (read@0,11264B). Runtime 60 seconds [ 647.060513][T16316] netlink: 'syz.5.1959': attribute type 4 has an invalid length. [ 647.641071][T13518] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 647.648692][T13518] Bluetooth: Wrong link type (-22) [ 647.655767][T13518] Bluetooth: hci3: link tx timeout [ 647.661481][T13518] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 648.226490][ T5886] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 648.388322][ T5886] usb 9-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 648.403448][ T5886] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 648.414242][ T5886] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 648.426994][ T5886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 648.435704][ T5886] usb 9-1: SerialNumber: syz [ 648.655328][ T5886] usb 9-1: 0:2 : does not exist [ 648.772330][T16331] overlayfs: statfs failed on './file0' [ 649.680023][T13518] Bluetooth: hci3: command 0x0406 tx timeout [ 650.050446][T16372] syz.3.1972: attempt to access beyond end of device [ 650.050446][T16372] nbd3: rw=0, sector=16, nr_sectors = 8 limit=0 [ 650.064403][T16372] REISERFS warning (device nbd3): sh-2006 read_super_block: bread failed (dev nbd3, block 2, size 4096) [ 650.076206][T16372] syz.3.1972: attempt to access beyond end of device [ 650.076206][T16372] nbd3: rw=0, sector=128, nr_sectors = 8 limit=0 [ 650.089357][T16372] REISERFS warning (device nbd3): sh-2006 read_super_block: bread failed (dev nbd3, block 16, size 4096) [ 650.100675][T16372] REISERFS warning (device nbd3): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd3 [ 650.239330][T16376] lo speed is unknown, defaulting to 1000 [ 650.262742][T16376] lo speed is unknown, defaulting to 1000 [ 650.286243][T16376] lo speed is unknown, defaulting to 1000 [ 650.313755][T16376] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 650.345536][T16376] lo speed is unknown, defaulting to 1000 [ 650.353752][T16376] lo speed is unknown, defaulting to 1000 [ 650.361202][T16376] lo speed is unknown, defaulting to 1000 [ 650.369462][T16376] lo speed is unknown, defaulting to 1000 [ 650.377012][T16376] lo speed is unknown, defaulting to 1000 [ 650.384494][T16376] lo speed is unknown, defaulting to 1000 [ 650.922843][T16395] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1976'. [ 650.932734][T16395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1976'. [ 650.942434][T16395] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1976'. [ 650.951881][T16395] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1976'. [ 652.108254][ T5889] usb 9-1: USB disconnect, device number 3 [ 653.644888][T16449] fuse: Bad value for 'fd' [ 653.839311][T16456] xt_bpf: check failed: parse error [ 654.924398][T16474] ptrace attach of "./syz-executor exec"[15158] was attempted by "./syz-executor exec"[16474] [ 655.614302][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 655.834686][T16487] netlink: 'syz.5.1997': attribute type 12 has an invalid length. [ 655.993159][ T9] usb 9-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config [ 656.010904][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 656.037795][ T9] usb 9-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=22.e3 [ 656.054291][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.073120][ T9] usb 9-1: Product: syz [ 656.080180][ T9] usb 9-1: Manufacturer: syz [ 656.084971][ T9] usb 9-1: SerialNumber: syz [ 656.103476][ T9] usb 9-1: config 0 descriptor?? [ 656.235870][ T5886] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 657.177525][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 657.190656][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.201489][ T5886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 657.224475][ T5886] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 657.233922][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.244077][ T5886] usb 6-1: Product: syz [ 657.248686][ T5886] usb 6-1: Manufacturer: syz [ 657.253318][ T5886] usb 6-1: SerialNumber: syz [ 657.260871][ T5886] usb 6-1: config 0 descriptor?? [ 657.530953][ T5886] snd-usb-6fire 6-1:0.0: unable to receive device firmware state. [ 657.543602][ T5886] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 657.557126][ T5886] usb 6-1: USB disconnect, device number 48 [ 658.032101][ T5886] usb 9-1: USB disconnect, device number 4 [ 658.564747][T16556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2008'. [ 658.664605][ T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 658.746022][ T5886] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 658.949283][ T5886] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 658.986310][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 659.020593][ T5886] usb 9-1: config 0 has no interface number 0 [ 659.060237][ T5886] usb 9-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=ff.ba [ 659.151355][ T5886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.226345][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.271261][ T5886] usb 9-1: config 0 descriptor?? [ 659.275741][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 659.371808][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 659.395310][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.418937][ T9] usb 6-1: config 0 descriptor?? [ 659.437505][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 659.443470][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 659.461904][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 659.557038][T16580] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2011'. [ 659.566496][T16580] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2011'. [ 660.490333][ T51] usb 6-1: reset high-speed USB device number 49 using dummy_hcd [ 660.526033][ T971] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 660.537632][ T51] usb 6-1: device reset changed ep0 maxpacket size! [ 660.558263][ T51] usb 6-1: USB disconnect, device number 49 [ 660.762789][ T971] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 660.773944][ T971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.670334][ T971] usb 4-1: config 0 has no interface number 0 [ 661.676610][ T5886] kaweth 9-1:0.1: Firmware present in device. [ 661.683234][ T971] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 661.694377][ T5886] kaweth 9-1:0.1: Error reading configuration (-71), no net device created [ 661.703082][ T971] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 661.716936][ T5886] kaweth 9-1:0.1: probe with driver kaweth failed with error -5 [ 661.729006][ T5886] usb 9-1: USB disconnect, device number 5 [ 661.745375][ T971] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 661.755013][T16624] netlink: 'syz.8.2019': attribute type 4 has an invalid length. [ 661.770317][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.779067][ T971] usb 4-1: Product: syz [ 661.783715][ T971] usb 4-1: Manufacturer: syz [ 661.789589][ T971] usb 4-1: SerialNumber: syz [ 661.800983][ T971] usb 4-1: config 0 descriptor?? [ 661.830483][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2019'. [ 661.840429][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2019'. [ 661.998216][ T29] audit: type=1326 audit(1731376879.315:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16635 comm="syz.8.2021" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd72297e719 code=0x0 [ 662.018157][ T971] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 662.020615][ T29] audit: type=1326 audit(1731376879.315:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16590 comm="syz.3.2013" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ba5b7e719 code=0x0 [ 662.045107][ T971] usb 4-1: USB disconnect, device number 77 [ 662.525819][T16654] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2024'. [ 662.574267][T16654] fuse: Bad value for 'rootmode' [ 662.705154][T16661] netlink: 'syz.3.2026': attribute type 2 has an invalid length. [ 662.733544][T16661] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2026'. [ 663.205919][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 663.567925][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 663.582505][ T9] usb 9-1: config 0 has no interface number 0 [ 663.588845][ T9] usb 9-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=ff.ba [ 663.598884][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.680030][ T9] usb 9-1: config 0 descriptor?? [ 664.403264][T16685] UBIFS error (pid: 16685): cannot open "ubifs", error -22 [ 664.779813][T16691] pim6reg1: entered promiscuous mode [ 664.793280][T16691] pim6reg1: entered allmulticast mode [ 665.286032][T13518] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 665.355021][T16705] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.2035'. [ 665.985983][ T9] kaweth 9-1:0.1: Firmware present in device. [ 666.009285][ T9] kaweth 9-1:0.1: Error reading configuration (-71), no net device created [ 666.036804][ T9] kaweth 9-1:0.1: probe with driver kaweth failed with error -5 [ 666.058730][ T9] usb 9-1: USB disconnect, device number 6 [ 668.676240][ T8] IPVS: starting estimator thread 0... [ 668.846880][T16745] IPVS: using max 24 ests per chain, 57600 per kthread [ 669.372101][T16793] xt_CT: You must specify a L4 protocol and not use inversions on it [ 669.472152][T16800] nbd: must specify a device to reconfigure [ 669.557069][ T51] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 669.824697][ T51] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 670.044331][ T51] usb 9-1: config 0 has no interface number 0 [ 670.225716][ T51] usb 9-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=ff.ba [ 670.234886][ T51] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.271945][ T51] usb 9-1: config 0 descriptor?? [ 670.730029][T16802] cgroup: Unknown subsys name 'measure' [ 670.730029][T16805] cgroup: Unknown subsys name 'measure' [ 672.637874][ T51] kaweth 9-1:0.1: Firmware present in device. [ 672.645314][ T51] kaweth 9-1:0.1: Error reading configuration (-71), no net device created [ 672.680291][ T51] kaweth 9-1:0.1: probe with driver kaweth failed with error -5 [ 672.713036][T16822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.716223][ T51] usb 9-1: USB disconnect, device number 7 [ 675.147992][ T51] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 675.242274][T16872] netlink: 'syz.5.2065': attribute type 10 has an invalid length. [ 675.336050][T16872] netlink: 212848 bytes leftover after parsing attributes in process `syz.5.2065'. [ 675.439803][ T51] usb 4-1: unable to get BOS descriptor or descriptor too short [ 675.467174][ T51] usb 4-1: config 127 has an invalid interface number: 98 but max is 0 [ 675.485761][ T51] usb 4-1: config 127 has no interface number 0 [ 675.527764][ T51] usb 4-1: config 127 interface 98 altsetting 1 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 675.575546][ T51] usb 4-1: config 127 interface 98 has no altsetting 0 [ 675.590609][ T51] usb 4-1: string descriptor 0 read error: -22 [ 675.599218][ T51] usb 4-1: New USB device found, idVendor=07c0, idProduct=1504, bcdDevice=4b.9b [ 675.610011][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.637745][ T51] iowarrior 4-1:127.98: no interrupt-out endpoint found [ 675.802369][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2071'. [ 676.133165][T16924] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2075'. [ 676.941927][ T5888] usb 4-1: USB disconnect, device number 78 [ 677.158615][ T40] block nbd1: Possible stuck request ffff888025720000: control (read@0,11264B). Runtime 90 seconds [ 677.555799][ T51] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 677.877544][ T51] usb 4-1: Using ep0 maxpacket: 32 [ 678.610011][ T51] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 678.619965][ T51] usb 4-1: config 0 has no interface number 0 [ 678.630239][ T51] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.641296][ T51] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.651202][ T51] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 678.660764][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.674202][ T51] usb 4-1: config 0 descriptor?? [ 678.750009][T16987] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2087'. [ 679.046114][ T5886] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 679.786816][ T51] uclogic 0003:28BD:0094.001B: pen parameters not found [ 679.793844][ T51] uclogic 0003:28BD:0094.001B: interface is invalid, ignoring [ 679.944327][ T5886] usb 6-1: device descriptor read/64, error -71 [ 679.987521][ T5888] usb 4-1: USB disconnect, device number 79 [ 680.129743][T17013] delete_channel: no stack [ 680.345760][ T5886] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 680.486317][ T5886] usb 6-1: device descriptor read/64, error -71 [ 680.679335][ T5886] usb usb6-port1: attempt power cycle [ 681.275991][ T5886] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 681.338898][ T5886] usb 6-1: device descriptor read/8, error -71 [ 681.428388][T17060] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2098'. [ 681.471710][T17060] netlink: 'syz.6.2098': attribute type 39 has an invalid length. [ 681.769787][ T5886] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 681.806024][ T5886] usb 6-1: device descriptor read/8, error -71 [ 682.820365][ T5886] usb usb6-port1: unable to enumerate USB device [ 683.625685][T17071] xt_CT: No such helper "netbios-ns" [ 685.718497][T17106] fuse: Invalid rootmode [ 686.613932][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.651238][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.471540][ T29] audit: type=1326 audit(1731376904.785:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17134 comm="syz.5.2109" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f075e77e719 code=0x0 [ 687.975961][ T51] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 688.076898][T17158] loop5: detected capacity change from 0 to 7 [ 688.145482][T17158] buffer_io_error: 23 callbacks suppressed [ 688.156517][ T51] usb 4-1: Using ep0 maxpacket: 32 [ 688.156555][T17158] Buffer I/O error on dev loop5, logical block 0, async page read [ 688.164198][ T51] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.169796][T17158] Buffer I/O error on dev loop5, logical block 0, async page read [ 688.169898][T17158] Buffer I/O error on dev loop5, logical block 0, async page read [ 688.235705][T17158] Buffer I/O error on dev loop5, logical block 0, async page read [ 688.239544][ T51] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 688.243748][T17158] Buffer I/O error on dev loop5, logical block 0, async page read [ 688.285698][T17158] Buffer I/O error on dev loop5, logical block 0, async page read [ 688.293987][T17158] Buffer I/O error on dev loop5, logical block 0, async page read [ 688.341801][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 688.351794][ T51] usb 4-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 688.359491][T17158] ldm_validate_partition_table(): Disk read failed. [ 688.395936][T17158] Buffer I/O error on dev loop5, logical block 0, async page read [ 688.406784][T17158] Buffer I/O error on dev loop5, logical block 0, async page read [ 688.435799][T17158] Buffer I/O error on dev loop5, logical block 0, async page read [ 688.459518][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.459875][T17158] Dev loop5: unable to read RDB block 0 [ 688.501204][T17158] loop5: unable to read partition table [ 688.507245][T17158] loop5: partition table beyond EOD, truncated [ 688.514672][T17158] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 688.514672][T17158] ) failed (rc=-5) [ 688.545697][ T51] usb 4-1: Product: syz [ 688.559594][ T51] usb 4-1: Manufacturer: syz [ 688.574000][ T51] usb 4-1: SerialNumber: syz [ 688.687160][ T51] usb 4-1: config 0 descriptor?? [ 689.412688][ T51] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 691.457777][ T5889] usb 4-1: USB disconnect, device number 80 [ 691.531489][T17215] overlayfs: failed to resolve './file0/file0': -2 [ 692.491289][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 692.678880][T17210] lo speed is unknown, defaulting to 1000 [ 693.041189][ T29] audit: type=1326 audit(1731376910.355:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17209 comm="syz.6.2121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febd797e719 code=0x0 [ 693.075851][ T51] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 693.239223][ T51] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 693.255763][ T51] usb 6-1: config 0 has no interface number 0 [ 693.272752][ T51] usb 6-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=ff.ba [ 693.302835][ T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.327345][ T51] usb 6-1: config 0 descriptor?? [ 693.905356][T17261] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 693.975924][T17261] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 694.175338][T17299] netlink: 5312 bytes leftover after parsing attributes in process `syz.8.2129'. [ 694.184745][T17299] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 695.086625][T17261] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 695.130150][T17261] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 695.953304][T17261] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 695.995005][T17261] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 696.040544][ T51] kaweth 6-1:0.1: Firmware present in device. [ 696.048728][ T51] kaweth 6-1:0.1: Error reading configuration (-71), no net device created [ 696.057728][ T51] kaweth 6-1:0.1: probe with driver kaweth failed with error -5 [ 696.068870][ T51] usb 6-1: USB disconnect, device number 54 [ 696.094860][T17261] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 696.101562][T17261] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 696.922482][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.614607][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.989952][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 698.001912][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 698.011543][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 698.021754][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 698.029558][ T5838] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 698.037147][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 698.054222][T13518] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 698.063914][T13518] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 698.087991][T13518] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 698.098162][T13518] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 698.111517][T13518] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 698.133256][T13518] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 698.146947][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.228480][T17413] fuse: Unknown parameter '0x000000000000000300000000000000000003u*K /f~' [ 698.342221][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.460707][T17381] lo speed is unknown, defaulting to 1000 [ 699.231532][ T35] dvmrp1 (unregistering): left allmulticast mode [ 699.263254][ T5939] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 699.483261][ T5939] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 699.495684][ T5939] usb 4-1: config 0 has no interface number 0 [ 699.501973][ T5939] usb 4-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=ff.ba [ 699.522514][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.561487][ T5939] usb 4-1: config 0 descriptor?? [ 699.700233][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.726579][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.754526][ T35] infiniband syz1: set down [ 699.764061][ T35] bond0 (unregistering): Released all slaves [ 700.014997][ T35] bond1 (unregistering): (slave batadv1): Releasing active interface [ 700.023294][ T35] batadv1: left promiscuous mode [ 700.032770][ T35] bond1 (unregistering): (slave batadv2): Releasing active interface [ 700.046793][ T35] bond1 (unregistering): Released all slaves [ 700.246063][T13518] Bluetooth: hci5: command tx timeout [ 700.304274][ T35] tipc: Left network mode [ 700.379021][T17381] chnl_net:caif_netlink_parms(): no params data found [ 700.531229][T17413] lo speed is unknown, defaulting to 1000 [ 700.960406][T17381] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.976553][T17381] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.984355][T17381] bridge_slave_0: entered allmulticast mode [ 700.993136][T17381] bridge_slave_0: entered promiscuous mode [ 701.005121][T17381] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.014249][T17381] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.021892][T17381] bridge_slave_1: entered allmulticast mode [ 701.058127][T17381] bridge_slave_1: entered promiscuous mode [ 701.293373][ T35] hsr_slave_0: left promiscuous mode [ 701.335095][ T5939] kaweth 4-1:0.1: Firmware present in device. [ 701.341491][ T35] hsr_slave_1: left promiscuous mode [ 701.344332][ T5939] kaweth 4-1:0.1: Error reading configuration (-71), no net device created [ 701.356112][ T5939] kaweth 4-1:0.1: probe with driver kaweth failed with error -5 [ 701.368344][ T5939] usb 4-1: USB disconnect, device number 81 [ 701.377093][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.384585][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.408012][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.415496][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.500180][ T35] veth1_macvtap: left promiscuous mode [ 701.525725][ T35] veth0_macvtap: left promiscuous mode [ 701.531515][ T35] veth1_vlan: left promiscuous mode [ 701.566528][ T35] veth0_vlan: left promiscuous mode [ 702.235913][T13210] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 702.324727][T13518] Bluetooth: hci5: command tx timeout [ 702.398142][T13210] usb 4-1: not running at top speed; connect to a high speed hub [ 702.423881][T13210] usb 4-1: config 6 has an invalid interface number: 165 but max is 1 [ 702.437083][T13210] usb 4-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 702.446158][T13210] usb 4-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 702.454893][T13210] usb 4-1: config 6 has an invalid interface number: 85 but max is 1 [ 702.463335][T13210] usb 4-1: config 6 has no interface number 0 [ 702.469618][T13210] usb 4-1: config 6 has no interface number 1 [ 702.476925][T13210] usb 4-1: config 6 interface 165 altsetting 9 endpoint 0x5 has invalid maxpacket 12675, setting to 64 [ 702.489104][T13210] usb 4-1: config 6 interface 165 altsetting 9 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 702.500340][T13210] usb 4-1: config 6 interface 165 altsetting 9 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 702.522037][T13210] usb 4-1: config 6 interface 165 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 702.535882][T13210] usb 4-1: config 6 interface 165 altsetting 9 endpoint 0x3 has invalid wMaxPacketSize 0 [ 702.547353][T13210] usb 4-1: config 6 interface 165 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 702.558927][T13210] usb 4-1: config 6 interface 165 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 702.570054][T13210] usb 4-1: config 6 interface 165 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 702.581067][T13210] usb 4-1: config 6 interface 165 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 702.592206][T13210] usb 4-1: config 6 interface 165 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 702.603878][T13210] usb 4-1: config 6 interface 85 altsetting 10 has a duplicate endpoint with address 0xC, skipping [ 702.614819][T13210] usb 4-1: config 6 interface 85 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 702.625878][T13210] usb 4-1: config 6 interface 85 altsetting 10 has a duplicate endpoint with address 0x9, skipping [ 702.636837][T13210] usb 4-1: config 6 interface 85 altsetting 10 has a duplicate endpoint with address 0x3, skipping [ 702.647960][T13210] usb 4-1: config 6 interface 85 altsetting 10 has a duplicate endpoint with address 0x9, skipping [ 702.660467][T13210] usb 4-1: config 6 interface 85 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 702.684362][T13210] usb 4-1: config 6 interface 165 has no altsetting 0 [ 702.714519][T13210] usb 4-1: config 6 interface 85 has no altsetting 0 [ 702.723964][T13210] usb 4-1: New USB device found, idVendor=1740, idProduct=0600, bcdDevice=d1.7e [ 702.745710][T13210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.755775][T13210] usb 4-1: Product: ⢲驎炇⮄䷜빜ᵪ區㳲ｧ⛲翱髰 [ 702.776574][T13210] usb 4-1: Manufacturer:  [ 702.781257][T13210] usb 4-1: SerialNumber: 《 [ 702.792901][T17699] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 702.801002][T17699] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 702.980528][ T35] team0 (unregistering): Port device team_slave_1 removed [ 703.683603][ T35] team0 (unregistering): Port device team_slave_0 removed [ 703.827761][ T3017] smc: removing ib device syz1 [ 704.395842][T13518] Bluetooth: hci5: command tx timeout [ 705.065351][T17381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.129110][T17381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.170511][T13210] usb 4-1: USB disconnect, device number 82 [ 705.325756][ T51] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 705.333569][T17381] team0: Port device team_slave_0 added [ 705.363336][T17381] team0: Port device team_slave_1 added [ 705.500894][ T51] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 705.633172][ T51] usb 6-1: New USB device found, idVendor=a9c7, idProduct=8501, bcdDevice=16.64 [ 705.647193][ T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.670779][ T51] usb 6-1: Product: syz [ 705.694345][ T51] usb 6-1: Manufacturer: syz [ 705.704093][ T51] usb 6-1: SerialNumber: syz [ 705.834069][T17381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.852800][ T51] usb 6-1: config 0 descriptor?? [ 705.872131][T17381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.918417][ T51] usb 6-1: Found UVC 0.00 device syz (a9c7:8501) [ 705.950369][ T51] usb 6-1: No valid video chain found. [ 706.015851][T17381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.229287][T17381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.250337][T17381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.287007][T17381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.511397][T13518] Bluetooth: hci5: command tx timeout [ 706.653473][T17739] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2148'. [ 706.894279][ T51] usb 6-1: USB disconnect, device number 55 [ 707.331981][T17381] hsr_slave_0: entered promiscuous mode [ 707.384548][T17381] hsr_slave_1: entered promiscuous mode [ 707.422751][T17381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 707.440895][T17381] Cannot create hsr debugfs directory [ 707.496921][ T40] block nbd1: Possible stuck request ffff888025720000: control (read@0,11264B). Runtime 120 seconds [ 707.673125][T17887] lo speed is unknown, defaulting to 1000 [ 707.751092][T17887] lo speed is unknown, defaulting to 1000 [ 707.790400][T17887] lo speed is unknown, defaulting to 1000 [ 707.804375][ T35] IPVS: stop unused estimator thread 0... [ 707.825899][ T5888] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 707.832375][T17887] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 707.878727][T17887] lo speed is unknown, defaulting to 1000 [ 707.944349][T17887] lo speed is unknown, defaulting to 1000 [ 707.989426][T17887] lo speed is unknown, defaulting to 1000 [ 708.002897][ T5888] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 708.026045][ T5888] usb 4-1: config 0 has no interface number 0 [ 708.032296][ T5888] usb 4-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=ff.ba [ 708.053825][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.062437][T17887] lo speed is unknown, defaulting to 1000 [ 708.066697][T17381] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 708.086955][ T5888] usb 4-1: config 0 descriptor?? [ 708.092515][T17887] lo speed is unknown, defaulting to 1000 [ 708.096511][T17381] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 708.116245][T17381] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 708.126044][T17887] lo speed is unknown, defaulting to 1000 [ 708.178165][T17381] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 709.037786][ T5888] kaweth 4-1:0.1: Firmware present in device. [ 709.044439][ T5888] kaweth 4-1:0.1: Error reading configuration (-71), no net device created [ 709.053396][ T5888] kaweth 4-1:0.1: probe with driver kaweth failed with error -5 [ 709.064372][ T5888] usb 4-1: USB disconnect, device number 83 [ 709.107846][T17381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.172287][T17381] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.191743][ T8836] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.198943][ T8836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.339464][T17973] team0: Port device team_slave_1 removed [ 709.359516][T10009] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.366724][T10009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.595332][T17381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.705729][ T5889] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 709.868191][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.904642][ T5889] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 709.943841][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.963803][ T5889] usb 4-1: config 0 descriptor?? [ 710.617989][T17381] veth0_vlan: entered promiscuous mode [ 710.648165][T17381] veth1_vlan: entered promiscuous mode [ 710.709349][T17381] veth0_macvtap: entered promiscuous mode [ 710.730364][T17381] veth1_macvtap: entered promiscuous mode [ 710.769393][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.784999][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.799552][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.818450][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.851489][ T5889] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 710.855252][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.863708][ T5889] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001C/input/input49 [ 710.887867][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.901872][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.913494][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.923792][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.934589][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.954338][T17381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.986645][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.166839][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.177755][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.188572][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.546788][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.723431][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.862798][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.885840][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.903751][T17381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.915425][T17381] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.966650][T17381] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.975431][T17381] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.984242][T17381] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.015281][ T5889] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 712.054203][ T5889] usb 4-1: USB disconnect, device number 84 [ 712.201239][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.215130][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.260395][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.282131][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.137599][ T5888] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 713.411068][ T5888] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 713.475780][ T5888] usb 10-1: config 0 has no interface number 0 [ 713.567417][ T5888] usb 10-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=ff.ba [ 713.661551][ T5888] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.714060][ T5888] usb 10-1: config 0 descriptor?? [ 714.035826][ T51] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 714.905936][ T51] usb 4-1: device descriptor read/64, error -71 [ 715.145736][ T51] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 715.345792][ T51] usb 4-1: device descriptor read/64, error -71 [ 715.460248][ T51] usb usb4-port1: attempt power cycle [ 715.815861][ T51] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 715.865630][ T51] usb 4-1: device descriptor read/8, error -71 [ 715.955078][ T5888] kaweth 10-1:0.1: Firmware present in device. [ 715.976983][ T5888] kaweth 10-1:0.1: Error reading configuration (-71), no net device created [ 715.996776][ T5888] kaweth 10-1:0.1: probe with driver kaweth failed with error -5 [ 716.019463][ T5888] usb 10-1: USB disconnect, device number 2 [ 716.117921][ T51] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 716.159601][ T51] usb 4-1: device descriptor read/8, error -71 [ 716.276210][ T51] usb usb4-port1: unable to enumerate USB device [ 718.095964][T18194] netlink: 'syz.3.2189': attribute type 1 has an invalid length. [ 718.117822][T18194] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2189'. [ 718.462353][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 718.739339][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 718.759259][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.772997][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 718.783840][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.986162][ T9] usb 4-1: config 0 descriptor?? [ 719.996701][ T9] cdc_subset 4-1:0.0: probe with driver cdc_subset failed with error -22 [ 720.025125][T18239] ptm ptm5: ldisc open failed (-12), clearing slot 5 [ 722.775901][ T5888] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 722.930315][ T5888] usb 10-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 722.937925][T18273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 722.940907][ T5888] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.965010][T18270] block nbd5: shutting down sockets [ 722.968767][ T5888] usb 10-1: Product: syz [ 722.977041][ T5888] usb 10-1: Manufacturer: syz [ 722.990113][ T5888] usb 10-1: SerialNumber: syz [ 723.000339][ T5888] usb 10-1: config 0 descriptor?? [ 723.013619][ T5888] usb 10-1: bad CDC descriptors [ 723.022179][ T5888] cdc_acm 10-1:0.0: Zero length descriptor references [ 723.045769][ T5888] cdc_acm 10-1:0.0: probe with driver cdc_acm failed with error -22 [ 723.057755][ T5889] usb 4-1: USB disconnect, device number 89 [ 723.238444][ T29] audit: type=1326 audit(1731376940.555:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18252 comm="syz.9.2205" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bbed7e719 code=0x0 [ 723.525853][ T5889] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 723.745311][T18306] overlay: filesystem on ./bus not supported as upperdir [ 723.906959][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 723.941637][ T5889] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 723.949961][ T5889] usb 6-1: config 0 has no interface number 0 [ 724.061297][ T5889] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.074512][ T5889] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.103844][ T5889] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 724.240038][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.284852][ T5889] usb 6-1: config 0 descriptor?? [ 724.947574][ T5889] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0094.001D/input/input50 [ 725.059505][ T5889] uclogic 0003:28BD:0094.001D: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.5-1/input1 [ 727.417522][ T51] usb 6-1: reset high-speed USB device number 56 using dummy_hcd [ 727.614538][ T5888] usb 10-1: USB disconnect, device number 3 [ 730.604981][ T5975] usb 6-1: USB disconnect, device number 56 [ 731.166041][ T8] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 731.338285][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 731.349170][ T8] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 731.395414][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 731.422044][ T8] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 731.450410][ T8] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 731.464762][T18404] hub 9-0:1.0: USB hub found [ 731.469876][T18404] hub 9-0:1.0: 1 port detected [ 731.476656][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.493898][T18404] netlink: 209844 bytes leftover after parsing attributes in process `syz.8.2222'. [ 731.574505][ T8] usb 10-1: config 0 descriptor?? [ 731.819920][ T8] hdpvr 10-1:0.0: firmware version 0xd dated jl;S11!vOp [ 731.819920][ T8] 4(r [ 731.819920][ T8] d2}d~٭^r [ 732.088419][ T8] hdpvr 10-1:0.0: device init failed [ 732.093849][ T8] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -12 [ 732.154258][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 732.169638][ T12] kworker/u8:1 (12) used greatest stack depth: 17680 bytes left [ 732.200719][ T8] usb 10-1: USB disconnect, device number 4 [ 732.396424][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.440496][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.461584][ T9] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 732.472018][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.483614][ T9] usb 6-1: config 0 descriptor?? [ 733.203103][ T9] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 733.219945][ T9] cp2112 0003:10C4:EA90.001E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 733.291262][ T9] cp2112 0003:10C4:EA90.001E: error requesting version [ 733.304801][ T9] cp2112 0003:10C4:EA90.001E: probe with driver cp2112 failed with error -71 [ 733.320902][ T9] usb 6-1: USB disconnect, device number 57 [ 735.251611][T18500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2236'. [ 735.845745][ T51] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 736.872212][ T51] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 737.073757][ T51] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.094457][ T51] usb 9-1: config 0 descriptor?? [ 737.283168][T18521] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2239'. [ 737.710344][ T51] ath6kl: Failed to submit usb control message: -71 [ 737.717519][ T51] ath6kl: unable to send the bmi data to the device: -71 [ 737.724624][ T51] ath6kl: Unable to send get target info: -71 [ 737.732418][ T51] ath6kl: Failed to init ath6kl core: -71 [ 737.740718][ T51] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 737.765772][ T51] usb 9-1: USB disconnect, device number 8 [ 737.916440][ T40] block nbd1: Possible stuck request ffff888025720000: control (read@0,11264B). Runtime 150 seconds [ 738.021444][T18530] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.2237'. [ 741.545096][T18588] binder: Bad value for 'stats' [ 741.633707][T18594] binder: 18593:18594 ioctl 5402 0 returned -22 [ 742.303707][T18595] hub 9-0:1.0: USB hub found [ 742.312520][T18595] hub 9-0:1.0: 1 port detected [ 742.341283][T18595] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2258'. [ 745.402534][T18641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2266'. [ 745.770162][T18650] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2269'. [ 745.781394][T18643] xt_HMARK: spi-set and port-set can't be combined [ 745.980760][T18651] netlink: 'syz.9.2270': attribute type 4 has an invalid length. [ 746.237088][T18651] netlink: 'syz.9.2270': attribute type 4 has an invalid length. [ 747.052168][ T51] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 747.076162][T13210] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 747.136255][ C1] raw-gadget.1 gadget.8: ignoring, device is not running [ 747.330420][ T51] usb 4-1: device descriptor read/64, error -71 [ 747.405738][T13210] usb 9-1: device descriptor read/64, error -32 [ 747.530640][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.537168][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.616655][ T51] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 747.726381][T13210] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 747.786064][ T51] usb 4-1: device descriptor read/64, error -71 [ 747.896940][ T51] usb usb4-port1: attempt power cycle [ 747.936855][T13210] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 747.947049][T13210] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.964810][T13210] usb 9-1: config 0 descriptor?? [ 747.972328][T13210] cp210x 9-1:0.0: cp210x converter detected [ 748.198164][T18697] tmpfs: Bad value for 'mpol' [ 748.245820][ T51] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 748.253495][T13210] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 748.285747][T13210] cp210x 9-1:0.0: querying part number failed [ 748.306558][ T51] usb 4-1: device descriptor read/8, error -71 [ 748.324674][T13210] usb 9-1: cp210x converter now attached to ttyUSB0 [ 748.347720][T13210] usb 9-1: USB disconnect, device number 10 [ 748.389232][T13210] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 748.486737][T13210] cp210x 9-1:0.0: device disconnected [ 748.623968][ T51] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 748.759990][ T51] usb 4-1: device descriptor read/8, error -71 [ 748.967662][ T51] usb usb4-port1: unable to enumerate USB device [ 749.330355][T18726] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2280'. [ 749.615967][T13210] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 749.777886][T13210] usb 9-1: Using ep0 maxpacket: 32 [ 749.799266][T13210] usb 9-1: config 0 has an invalid interface number: 113 but max is 0 [ 749.811950][T13210] usb 9-1: config 0 has no interface number 0 [ 749.822383][T13210] usb 9-1: config 0 interface 113 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 749.914471][T13210] usb 9-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f [ 749.953850][T13210] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.979930][T13210] usb 9-1: Product: syz [ 749.998879][T13210] usb 9-1: Manufacturer: syz [ 750.019795][T13210] usb 9-1: SerialNumber: syz [ 750.076950][ T30] INFO: task syz.1.1761:14840 blocked for more than 143 seconds. [ 750.104929][ T30] Not tainted 6.12.0-rc7-syzkaller #0 [ 750.117103][T13210] usb 9-1: config 0 descriptor?? [ 750.134622][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 750.174472][T18732] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 750.211220][ T30] task:syz.1.1761 state:D stack:22160 pid:14840 tgid:14823 ppid:5845 flags:0x00004006 [ 750.313811][ T30] Call Trace: [ 750.364421][ T30] [ 750.397153][ T30] __schedule+0x17fa/0x4bd0 [ 750.444116][ T30] ? __pfx___schedule+0x10/0x10 [ 750.471223][ T30] ? __pfx_lock_release+0x10/0x10 [ 750.481401][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 750.494682][ T30] ? schedule+0x90/0x320 [ 750.503850][ T30] schedule+0x14b/0x320 [ 750.519701][ T30] io_schedule+0x8d/0x110 [ 750.535255][ T30] folio_wait_bit_common+0x882/0x12b0 [ 750.557354][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 750.584055][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 750.590016][ T30] __filemap_get_folio+0xaf/0xbd0 [ 750.605216][ T30] truncate_inode_pages_range+0x57e/0xfc0 [ 750.616917][ T30] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 750.635742][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 750.641891][ T30] ? __pfx_has_bh_in_lru+0x10/0x10 [ 750.685639][ T30] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 750.691304][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 750.715851][ T30] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 750.721506][ T30] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 750.745665][ T30] blkdev_flush_mapping+0x108/0x270 [ 750.751054][ T30] ? bdev_release+0x456/0x700 [ 750.762726][ T30] bdev_release+0x460/0x700 [ 750.775146][ T30] blkdev_release+0x15/0x20 [ 750.785609][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 750.791022][ T30] __fput+0x23f/0x880 [ 750.795122][ T30] task_work_run+0x24f/0x310 [ 750.817552][ T30] ? __pfx_task_work_run+0x10/0x10 [ 750.822816][ T30] get_signal+0x15e8/0x1740 [ 750.833985][T18762] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 750.845629][ T30] ? kick_process+0xef/0x160 [ 750.850387][ T30] ? __pfx_get_signal+0x10/0x10 [ 750.855351][ T30] arch_do_signal_or_restart+0x96/0x860 [ 750.897128][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 750.903728][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 750.906326][T13210] net1080 9-1:0.113 usb0: register 'net1080' at usb-dummy_hcd.8-1, NetChip TurboCONNECT, a2:8f:52:34:26:0e [ 750.910004][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 750.927371][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 750.933077][ T30] do_syscall_64+0x100/0x230 [ 750.938074][ T30] ? clear_bhb_loop+0x35/0x90 [ 750.942913][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.950933][ T30] RIP: 0033:0x7f6c4db7e719 [ 750.957779][ T30] RSP: 002b:00007f6c4bbb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 750.971909][ T30] RAX: fffffffffffffffc RBX: 00007f6c4dd362e0 RCX: 00007f6c4db7e719 [ 750.984533][ T30] RDX: 0000000000000046 RSI: 0000000020000240 RDI: 0000000000000006 [ 750.996587][ T30] RBP: 00007f6c4dbf139e R08: 0000000000000000 R09: 0000000000000000 [ 751.004777][ T30] R10: 000000000000052c R11: 0000000000000246 R12: 0000000000000000 [ 751.013616][ T30] R13: 0000000000000000 R14: 00007f6c4dd362e0 R15: 00007ffdc6ccbe18 [ 751.021865][ T30] [ 751.024994][ T30] [ 751.024994][ T30] Showing all locks held in the system: [ 751.033527][ T30] 1 lock held by khungtaskd/30: [ 751.038645][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 751.048738][ T30] 2 locks held by kworker/u8:5/990: [ 751.053966][ T30] #0: ffff8880b863ea58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 751.064239][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 751.070682][T13210] usb 9-1: USB disconnect, device number 11 [ 751.076108][ T30] 2 locks held by getty/5593: [ 751.096868][T13210] net1080 9-1:0.113 usb0: unregister 'net1080' usb-dummy_hcd.8-1, NetChip TurboCONNECT [ 751.106547][ T30] #0: ffff8880319740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 751.125640][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 751.136529][ T30] 7 locks held by kworker/1:0/13210: [ 751.141891][ T30] #0: ffff888020ed5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 751.154851][ T30] #1: ffffc9000d9f7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 751.174035][ T30] #2: ffff888028978190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 751.183741][ T30] #3: ffff88823bf1e190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 751.207014][ T30] #4: ffff8880296ca160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 751.225159][ T30] #5: ffffffff8fcc1408 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdev+0x12/0x30 [ 751.242842][ T30] #6: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 751.245273][T18773] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2287'. [ 751.253930][ T30] 1 lock held by syz.1.1761/14840: [ 751.253954][ T30] #0: ffff8880256694c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x17e/0x700 [ 751.289626][ T30] 1 lock held by syz.9.2283/18741: [ 751.295399][ T30] #0: ffffffff8e93d200 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 751.315453][ T30] 1 lock held by syz.3.2287/18768: [ 751.321098][ T30] 1 lock held by syz.3.2287/18772: [ 751.328008][ T30] #0: ffff888028978190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x156/0x770 [ 751.337271][ T30] [ 751.339755][ T30] ============================================= [ 751.339755][ T30] [ 751.362527][ T30] NMI backtrace for cpu 0 [ 751.366932][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller #0 [ 751.375748][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 751.385855][ T30] Call Trace: [ 751.389174][ T30] [ 751.392147][ T30] dump_stack_lvl+0x241/0x360 [ 751.396884][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 751.402186][ T30] ? __pfx__printk+0x10/0x10 [ 751.406846][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 751.411848][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 751.417362][ T30] ? _printk+0xd5/0x120 [ 751.421617][ T30] ? __pfx__printk+0x10/0x10 [ 751.426295][ T30] ? __wake_up_klogd+0xcc/0x110 [ 751.431199][ T30] ? __pfx__printk+0x10/0x10 [ 751.435846][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 751.440920][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 751.446955][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 751.452988][ T30] watchdog+0xff4/0x1040 [ 751.457287][ T30] ? watchdog+0x1ea/0x1040 [ 751.461760][ T30] ? __pfx_watchdog+0x10/0x10 [ 751.466487][ T30] kthread+0x2f0/0x390 [ 751.470594][ T30] ? __pfx_watchdog+0x10/0x10 [ 751.475317][ T30] ? __pfx_kthread+0x10/0x10 [ 751.479921][ T30] ret_from_fork+0x4b/0x80 [ 751.484391][ T30] ? __pfx_kthread+0x10/0x10 [ 751.489004][ T30] ret_from_fork_asm+0x1a/0x30 [ 751.493833][ T30] [ 751.498428][ T30] Sending NMI from CPU 0 to CPUs 1: [ 751.503718][ C1] NMI backtrace for cpu 1 [ 751.503734][ C1] CPU: 1 UID: 0 PID: 3017 Comm: kworker/u8:8 Not tainted 6.12.0-rc7-syzkaller #0 [ 751.503756][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 751.503768][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 751.503800][ C1] RIP: 0010:unwind_next_frame+0x17dc/0x22d0 [ 751.503833][ C1] Code: b6 04 20 84 c0 0f 85 36 08 00 00 48 8b 6c 24 08 8b 84 24 84 00 00 00 39 45 00 0f 85 0a 01 00 00 48 8b 44 24 58 42 80 3c 20 00 <74> 0a 48 8b 7c 24 78 e8 b8 12 ba 00 4c 8b 7d 38 48 8d 7d 08 48 89 [ 751.503849][ C1] RSP: 0018:ffffc9000b41f5d0 EFLAGS: 00000246 [ 751.503864][ C1] RAX: 1ffff92001683edb RBX: ffffffff90a2def0 RCX: 0000000000000000 [ 751.503878][ C1] RDX: dffffc0000000000 RSI: ffffc9000b418000 RDI: ffffc9000b41fed0 [ 751.503891][ C1] RBP: ffffc9000b41f6a0 R08: ffffc9000b41fed0 R09: 0000000000000000 [ 751.503904][ C1] R10: ffffc9000b41f6f0 R11: fffff52001683ee0 R12: dffffc0000000000 [ 751.503918][ C1] R13: ffffc9000b41f6a0 R14: ffffffff81608030 R15: ffffc9000b41f6f0 [ 751.503932][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 751.503948][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 751.503961][ C1] CR2: 0000001b3081eff8 CR3: 000000007a868000 CR4: 00000000003526f0 [ 751.503977][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 751.503988][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 751.504000][ C1] Call Trace: [ 751.504006][ C1] [ 751.504015][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 751.504043][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 751.504072][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 751.504097][ C1] ? nmi_handle+0x2a/0x5a0 [ 751.504123][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 751.504148][ C1] ? nmi_handle+0x14f/0x5a0 [ 751.504166][ C1] ? nmi_handle+0x2a/0x5a0 [ 751.504185][ C1] ? unwind_next_frame+0x17dc/0x22d0 [ 751.504213][ C1] ? default_do_nmi+0x63/0x160 [ 751.504241][ C1] ? exc_nmi+0x123/0x1f0 [ 751.504267][ C1] ? end_repeat_nmi+0xf/0x53 [ 751.504287][ C1] ? kthread+0x2f0/0x390 [ 751.504309][ C1] ? unwind_next_frame+0x17dc/0x22d0 [ 751.504337][ C1] ? unwind_next_frame+0x17dc/0x22d0 [ 751.504365][ C1] ? unwind_next_frame+0x17dc/0x22d0 [ 751.504400][ C1] [ 751.504406][ C1] [ 751.504417][ C1] ? worker_thread+0x870/0xd30 [ 751.504444][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 751.504467][ C1] arch_stack_walk+0x11c/0x150 [ 751.504488][ C1] ? kthread+0x2f0/0x390 [ 751.504507][ C1] stack_trace_save+0x118/0x1d0 [ 751.504529][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 751.504551][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 751.504581][ C1] kasan_save_track+0x3f/0x80 [ 751.504605][ C1] ? kasan_save_track+0x3f/0x80 [ 751.504627][ C1] ? kasan_save_free_info+0x40/0x50 [ 751.504646][ C1] ? __kasan_slab_free+0x59/0x70 [ 751.504670][ C1] ? kmem_cache_free+0x1a2/0x420 [ 751.504688][ C1] ? nsim_dev_trap_report_work+0x765/0xab0 [ 751.504711][ C1] ? process_scheduled_works+0xa63/0x1850 [ 751.504735][ C1] ? worker_thread+0x870/0xd30 [ 751.504780][ C1] ? skb_release_data+0x6a0/0x8a0 [ 751.504805][ C1] kasan_save_free_info+0x40/0x50 [ 751.504824][ C1] __kasan_slab_free+0x59/0x70 [ 751.504849][ C1] ? nsim_dev_trap_report_work+0x765/0xab0 [ 751.504872][ C1] kmem_cache_free+0x1a2/0x420 [ 751.504891][ C1] ? nsim_dev_trap_report_work+0x765/0xab0 [ 751.504917][ C1] nsim_dev_trap_report_work+0x765/0xab0 [ 751.504948][ C1] ? process_scheduled_works+0x976/0x1850 [ 751.504973][ C1] process_scheduled_works+0xa63/0x1850 [ 751.505011][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 751.505040][ C1] ? assign_work+0x364/0x3d0 [ 751.505065][ C1] worker_thread+0x870/0xd30 [ 751.505094][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 751.505115][ C1] ? __kthread_parkme+0x169/0x1d0 [ 751.505143][ C1] ? __pfx_worker_thread+0x10/0x10 [ 751.505168][ C1] kthread+0x2f0/0x390 [ 751.505184][ C1] ? __pfx_worker_thread+0x10/0x10 [ 751.505209][ C1] ? __pfx_kthread+0x10/0x10 [ 751.505226][ C1] ret_from_fork+0x4b/0x80 [ 751.505251][ C1] ? __pfx_kthread+0x10/0x10 [ 751.505268][ C1] ret_from_fork_asm+0x1a/0x30 [ 751.505301][ C1] [ 751.931961][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 751.938955][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller #0 [ 751.947734][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 751.957805][ T30] Call Trace: [ 751.961117][ T30] [ 751.964057][ T30] dump_stack_lvl+0x241/0x360 [ 751.968764][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 751.973984][ T30] ? __pfx__printk+0x10/0x10 [ 751.978589][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 751.984598][ T30] ? vscnprintf+0x5d/0x90 [ 751.988950][ T30] panic+0x349/0x880 [ 751.992859][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 751.999411][ T30] ? __pfx_panic+0x10/0x10 [ 752.003843][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 752.009261][ T30] ? __irq_work_queue_local+0x137/0x410 [ 752.014919][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 752.020306][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 752.026492][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 752.032670][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 752.039028][ T30] watchdog+0x1033/0x1040 [ 752.043419][ T30] ? watchdog+0x1ea/0x1040 [ 752.047884][ T30] ? __pfx_watchdog+0x10/0x10 [ 752.052693][ T30] kthread+0x2f0/0x390 [ 752.056777][ T30] ? __pfx_watchdog+0x10/0x10 [ 752.061469][ T30] ? __pfx_kthread+0x10/0x10 [ 752.066073][ T30] ret_from_fork+0x4b/0x80 [ 752.070515][ T30] ? __pfx_kthread+0x10/0x10 [ 752.075122][ T30] ret_from_fork_asm+0x1a/0x30 [ 752.079920][ T30] [ 752.083333][ T30] Kernel Offset: disabled [ 752.087668][ T30] Rebooting in 86400 seconds..