last executing test programs: 2m49.113302595s ago: executing program 0 (id=678): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0x40806685, &(0x7f0000000d40)={0xdaffffff, 0x0, {}, {}, 0x1000000}) 2m48.269931223s ago: executing program 0 (id=681): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000100)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xfffffffffffffd75, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfa}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) pause() write$UHID_CREATE2(r7, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) 2m45.820297575s ago: executing program 0 (id=687): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES16=0x0, @ANYRES32=r0, @ANYRES16=r0], 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004880) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2000001, @mcast1, 0xf}, 0x1c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x31) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="f7", 0x1}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2}], 0x1, 0x40800) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'macvlan1\x00', {0x2, 0x4e21, @empty}}) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x50000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x18, 0x1, 0x2, 0x801, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000c010}, 0x40004) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2m45.449496351s ago: executing program 0 (id=692): r0 = socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ramfs\x00', 0x21800a, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$media(&(0x7f0000000140), 0x4, 0x200) preadv2(r2, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/113, 0x71}, {0x0}], 0x2, 0x7, 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket(0x2a, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x52) shmctl$IPC_STAT(0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20801, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}}, 0x20008880) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRES64=r4, @ANYRES16=r0, @ANYBLOB="797933bc60e5de833315694e4cae9deaceae150618f4debd221f4d4b763bd8f843e19d703dbdde4dffa5de34127a866aa6bc1d3d30d723f537f8b5f0c9533e544f9db33bce7c0c5327ee3b760ad0994b31b2342347de217f955b4050a2c76751b93c2a5a145bc75cefe40b3b19ff4546d20f7168da4965ced9d1d2a61f6b63bc333a68f4a8ebde169ebebee52f206ffada0a7e4aafeed04e3eebf9200726afa197"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4810) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2m42.12721373s ago: executing program 0 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0, 0x0, 0x9}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fef7ff7a0af0fff80000ff79a4f0ff00000000b7060000efffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ba23008500000098000000b70000000000000095000000000000006f88300eaa171100756695acf0af839ec5300a584fe44c80de0b061417e9ade22cecede5d5be6ab3d7828ee094518a5800000082c81ddfe3960a29ea15fa7e26f0f3e51416b698f6da6fe8af496d22585ffab3af24974fae00d824313ffef788c6983945dd3663f79f67e78a48b24a4bcdc33b38c5f86e96111199f0f0af9f42099a0f54041889b971cf394bd43473a5ac2acab9768cbc52ff7f000000000000711727c4a32a6b7ecdae05d2b3fed4572eb0d88976d2adda68000010000000c47b18cf93996a43e2e080f57fadf535d8b3078ebe16b10160fad64474a7b558f7a56f41022feec18e013abd8fda2b96779e534d0675fbcc13ba9f9eb96319fd5b49521d5cb2ced401d7b6fce658f203a9c2da91116d986730da1be85b0000829512099df32814820fbf7be91cd13b77f4e4e599f8bbca388247856073472312a9ff4273b9cd08000000000000616e888cda842c661577818c2069cb41a73b4b7fc28882cad315db3fffc5183deca7a32838ec0ad70d4f55382c1879b71ec504d2f3e3883428ee350123a5cad346f6d517f6fcea5b6bc4fcffffffffffff03f419a6e45fd98e77da4a8202ebbdafe6b2e38c9d7e506f5da2958cf7f0d9b31ca3275e64e29d39d158cebe43308cf8760588001172e19685e9a334aec76530861b772a1da96f0a227514bd0bc26df2b50a45e4eceae1ddfe88d58879d12afdb295ce2edecb253e0471714fa124211203000000000000001f502b6c760655ffb20ae13a1a94f7ae229fbf5da7cae4f994ee82fc98c864c3e352ad16f98208cf1469dd6c1212582a3687f7dbdf708929643f3f0f4e947c40742452685ec044fc71eaca9abc92145677e14054331801b1412b39049ed782742f9a1b6aca9123b243c1a68c047f2db79701b62c8cc0d2f608c7f62d107ebc68df9f8d296721c9d465dad604bc0dc500000000000000000000000000000000000000000568a4997dd54fa83aacd2d209f66de2e26dc2fd862a0b8ee149c148197176745fc8ff1dd5bd6611daa882298a37b041b34668d4662ea8fbe2e787dfc4c8bef2124f0439b2d18ec83361da5cc732f365b0a528db31b90bc1405b6d5301c34319ccae29b1d6034b665c79baeeeac5e71d24e2e3b6ffc5bc2dcb600e645c0048b45e286a49e888d21abfc817085d9c00e08525207e33505226fdda16e6da6dd31f7a1736029b87e8d6a05bcb356298d7dccd7de2af0885bd4939ff96ab74da3871b077e4058c8752ba4994eafed8b239d781638fa339fa0f7dd135af3f80e40f4b885770cf27d205a45d4702f97b8b7c57b180c50b2b370dfb35dc895e8f05d6e71829f36150b2cde31469c4aea0c64850eb3f3e0dc35f8cdd76bdde2018366c3201307c370433762676f72e68c962430a0000000000000000000000000000e737dc2e1a3fdebbb510c663d24f72b954965201f775b3739c14dd4832647c028be09f2809fd396fa26532a30a37737e95f0f41dd024b7bf8a6bf807c9fd9b8c7a39717729339dc3054117cb95693bdd61edcc2860b66545e194a961bdc5457d76ae1a87050e12ead896f3337d5a000000000000000000400000602bfd2f1ace65f2e74dc99cb73a37f40362b7904e8a0ea8d2d9805c924f9985d229"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x7, 0x0, &(0x7f0000000040)="63eced8e46dc3f", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xfc) r6 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 2m42.102978118s ago: executing program 2 (id=490): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xf) ioctl$TCFLSH(r1, 0x540b, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "63f4e6aeab"}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r3}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 2m37.957904644s ago: executing program 0 (id=703): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x40000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000002c0)={0x3e, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66c]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x0, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"4c97aef4", 0x7f, 0x5, 0x8a, 0x3, 0x6, "5b0004000001040000000000009400", "15753066", "fa5aabde", '\'q6O', ["5a535857c62224475793eca7", "7f9ce2d2c4f439ff80e1d1c8", "fa89bbe62b42a3023be516d1", "969a008000002100000800"]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @local, 0x8}, 0x1c) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGETCMAP(r7, 0x4604, &(0x7f00000001c0)={0x2, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000000), 0x0, 0x0}) ioctl$NBD_DO_IT(r2, 0xab03) 2m21.790776255s ago: executing program 32 (id=703): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x40000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000002c0)={0x3e, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66c]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x0, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"4c97aef4", 0x7f, 0x5, 0x8a, 0x3, 0x6, "5b0004000001040000000000009400", "15753066", "fa5aabde", '\'q6O', ["5a535857c62224475793eca7", "7f9ce2d2c4f439ff80e1d1c8", "fa89bbe62b42a3023be516d1", "969a008000002100000800"]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @local, 0x8}, 0x1c) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGETCMAP(r7, 0x4604, &(0x7f00000001c0)={0x2, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000000), 0x0, 0x0}) ioctl$NBD_DO_IT(r2, 0xab03) 1m57.585805807s ago: executing program 2 (id=490): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xf) ioctl$TCFLSH(r1, 0x540b, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "63f4e6aeab"}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r3}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1m45.269810474s ago: executing program 3 (id=813): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x0) 1m45.02547779s ago: executing program 3 (id=815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x7, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, 0x0) socket(0x40000000015, 0x5, 0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat(0xffffffffffffff9c, 0x0, 0x250942, 0x1cd) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xd971e000) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) syz_io_uring_setup(0x5c27, &(0x7f0000000040)={0x0, 0x709e, 0x10, 0x1, 0x23b}, &(0x7f00000000c0), &(0x7f0000000240)) 1m41.378135165s ago: executing program 3 (id=819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0, 0x0, 0x9}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fef7ff7a0af0fff80000ff79a4f0ff00000000b7060000efffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ba23008500000098000000b70000000000000095000000000000006f88300eaa171100756695acf0af839ec5300a584fe44c80de0b061417e9ade22cecede5d5be6ab3d7828ee094518a5800000082c81ddfe3960a29ea15fa7e26f0f3e51416b698f6da6fe8af496d22585ffab3af24974fae00d824313ffef788c6983945dd3663f79f67e78a48b24a4bcdc33b38c5f86e96111199f0f0af9f42099a0f54041889b971cf394bd43473a5ac2acab9768cbc52ff7f000000000000711727c4a32a6b7ecdae05d2b3fed4572eb0d88976d2adda68000010000000c47b18cf93996a43e2e080f57fadf535d8b3078ebe16b10160fad64474a7b558f7a56f41022feec18e013abd8fda2b96779e534d0675fbcc13ba9f9eb96319fd5b49521d5cb2ced401d7b6fce658f203a9c2da91116d986730da1be85b0000829512099df32814820fbf7be91cd13b77f4e4e599f8bbca388247856073472312a9ff4273b9cd08000000000000616e888cda842c661577818c2069cb41a73b4b7fc28882cad315db3fffc5183deca7a32838ec0ad70d4f55382c1879b71ec504d2f3e3883428ee350123a5cad346f6d517f6fcea5b6bc4fcffffffffffff03f419a6e45fd98e77da4a8202ebbdafe6b2e38c9d7e506f5da2958cf7f0d9b31ca3275e64e29d39d158cebe43308cf8760588001172e19685e9a334aec76530861b772a1da96f0a227514bd0bc26df2b50a45e4eceae1ddfe88d58879d12afdb295ce2edecb253e0471714fa124211203000000000000001f502b6c760655ffb20ae13a1a94f7ae229fbf5da7cae4f994ee82fc98c864c3e352ad16f98208cf1469dd6c1212582a3687f7dbdf708929643f3f0f4e947c40742452685ec044fc71eaca9abc92145677e14054331801b1412b39049ed782742f9a1b6aca9123b243c1a68c047f2db79701b62c8cc0d2f608c7f62d107ebc68df9f8d296721c9d465dad604bc0dc500000000000000000000000000000000000000000568a4997dd54fa83aacd2d209f66de2e26dc2fd862a0b8ee149c148197176745fc8ff1dd5bd6611daa882298a37b041b34668d4662ea8fbe2e787dfc4c8bef2124f0439b2d18ec83361da5cc732f365b0a528db31b90bc1405b6d5301c34319ccae29b1d6034b665c79baeeeac5e71d24e2e3b6ffc5bc2dcb600e645c0048b45e286a49e888d21abfc817085d9c00e08525207e33505226fdda16e6da6dd31f7a1736029b87e8d6a05bcb356298d7dccd7de2af0885bd4939ff96ab74da3871b077e4058c8752ba4994eafed8b239d781638fa339fa0f7dd135af3f80e40f4b885770cf27d205a45d4702f97b8b7c57b180c50b2b370dfb35dc895e8f05d6e71829f36150b2cde31469c4aea0c64850eb3f3e0dc35f8cdd76bdde2018366c3201307c370433762676f72e68c962430a0000000000000000000000000000e737dc2e1a3fdebbb510c663d24f72b954965201f775b3739c14dd4832647c028be09f2809fd396fa26532a30a37737e95f0f41dd024b7bf8a6bf807c9fd9b8c7a39717729339dc3054117cb95693bdd61edcc2860b66545e194a961bdc5457d76ae1a87050e12ead896f3337d5a000000000000000000400000602bfd2f1ace65f2e74dc99cb73a37f40362b7904e8a0ea8d2d9805c924f9985d229"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xfc) r4 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 1m39.988234525s ago: executing program 3 (id=822): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r1, 0x0, 0xfffffffffffffff7, 0x6}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r1, 0x0, 0x80000000, 0x2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r1, 0x0, &(0x7f00003bd000/0x3000)=nil, 0x3000, 0x80}) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) userfaultfd(0x80001) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) socket$kcm(0x10, 0x2, 0x4) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x5, 0x2}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1m39.442065769s ago: executing program 3 (id=824): r0 = userfaultfd(0x80001) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000, 0x7f5d79a9f0e8}) 1m37.755102857s ago: executing program 3 (id=829): signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x2]}, 0x8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x44041) sync() write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, 0x0, 0x0) bind$can_raw(r2, &(0x7f0000000080), 0x10) 1m32.323798017s ago: executing program 2 (id=490): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xf) ioctl$TCFLSH(r1, 0x540b, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "63f4e6aeab"}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r3}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1m22.273830003s ago: executing program 33 (id=829): signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x2]}, 0x8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x44041) sync() write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, 0x0, 0x0) bind$can_raw(r2, &(0x7f0000000080), 0x10) 1m12.37394463s ago: executing program 2 (id=490): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xf) ioctl$TCFLSH(r1, 0x540b, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "63f4e6aeab"}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r3}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 39.212244882s ago: executing program 2 (id=490): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xf) ioctl$TCFLSH(r1, 0x540b, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "63f4e6aeab"}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r3}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 22.779843311s ago: executing program 4 (id=978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fallocate(0xffffffffffffffff, 0x712934422d83d35c, 0x2, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x0, 0x40000) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000540)={0x7, @sdr={0x32314d54, 0x7f}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) syz_open_dev$sg(&(0x7f0000000040), 0x20000001, 0x40001) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000022c0)="2c9f26e982033b098e0edb21d6bac5e5f49f6c67bd34f94c8e3409ea2ff7a64466ca12eb16fca6b30980dc2fffa1c341d256356800421357f61c8ba7c2fe7001e9bb8155f73dcb627913642538db3771828481cc89f256affe0a69e4cac367463bc1b77824090f32d7b92eb7d594ab53673a232a7904e3d094e3f3e01c802e0c71494d3b5b50c680af2fd9179aaa331e58f6a83ddbf8efff1e97ce21274a23823c00d4024a343bf0816ccb", &(0x7f0000002380)="e9d3bb51f56b6922a5eede83069481aa5cef7c5c3492e40578953f232cd36df407ae0eb0b226922ef0a0b12674f7d33de4ad9368e924fbc64f2b53e085fe1223a1ba6a0c98e7d03fd9ba1044aa70caba0757a94dfed6885e0645a11ded8d9039050e05592b93300e903fb4edb94aed951f6852b4791da6a8b6938741428de7e0f7dabf58dcc7d622de03b2ba59a6154a87f21c7b1fb84509b1a1cd73002e98d9b236cf9386a273837793b2"}}, &(0x7f0000bbdffc)) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 20.842221221s ago: executing program 4 (id=981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x275a, 0x0) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000201, 0xee00, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0x7}, 0x18) creat(&(0x7f0000000180)='./file0\x00', 0x10) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 19.543501051s ago: executing program 4 (id=984): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) fchown(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, 0x5, r5}) write$dsp(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES8=r3, @ANYRESHEX=r4, @ANYRESDEC=r6], 0x8) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r6, &(0x7f0000004b80), 0x0, 0x4000c000) sendto$inet6(r6, &(0x7f0000000240)="5705d3e9fb41722a225d7f194e9828b24323244888415533083e", 0x1a, 0x20000884, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000e) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 15.130021787s ago: executing program 4 (id=993): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_connect(0x3, 0xbdf, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x98, 0xa4, 0x67, 0x10, 0x7ca, 0xa310, 0x4937, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbcd, 0x3, 0x2, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x80, 0x7, 0xe, 0xc9, 0x74, 0x54, 0xf7, [], [{{0x9, 0x5, 0xc, 0x3, 0x400, 0x9, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0x2}]}}, {{0x9, 0x5, 0x7, 0xc, 0x220, 0x81, 0x40}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x4, 0x7, 0xb, [@generic={0xd3, 0x2c, "06152ecffa46583c04e09ca8f5c039d3802bdd7280fc2ab22f1246850448947f62043950bf3a3ca5150f309ed55d96df1160bc2bdc6b477f32b0c76994cc3d207a408cbcf2858d123aa558102d98e9388b6a01f8c5ec029f8218e0bb79a3bf6662e93f278c66a90cb0383b85ba7f20eab5ad746213c983f74ca40c445f22b0c6c4d893e1dbdf0484b35e2413eda65974d01deab9335fbe719b3cd16c2e4a94e693f20b6462a7fe13f067c3a28835dbe48fe429e79d8f0786c01ed735fb453fda272a2dad2fdbbc4f089a34d5ce006d2083"}, @generic={0xb2, 0x22, "c1b4bf1ae2e71653537e812f0c9485c9f358580773e28e37fe29856351d75149c453a2a9359078f4b7092bc70ed64c61d3ad7a209037734b7f2fdb67deaffb65075d81aa6a4ec397a675ffc038ad2e1b409a3f2e9ce88b3d00aabbe77d0e8804299eb83b4e901904f3a7778a7ecb09f337a1d3e06a63faa3f1f9abe01ec0bd7a77cbd7d90bf903a3b7d6f00c91eb1aba2678c4cfdbab4de8e385370af88d0e79e307494a700164a61000372969d602b6"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0xff, 0x1, 0x64, [@generic={0xd8, 0x9, "1436a603c1898e49f5eeba8dc4189daaf205b7316c4a4501e6831f78d0ea026ed4ac1b28dc7486b217987e0b6a9d1a9969d9b89d1a376cfaefc0c0382f83fe72c0ee2c1d5e850554b3a506015c2e26fbc2d258b97b9235c9c67217d3c794bf699df35b1e6bb0b90a1701560d44555d18563e3912c3d6d9cd80ae77fc5ad1dc835121518a4b6da58097ad1cc96049c37bc2f6adaf9b931e861c3a2d982d64389d4c5e9b89696a10d2c0f3f1395bc49d1620c09713de792e812a57ec37431b2d00ab7d0d645a0d5221334571479ea31ea981dca7e15012"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x4, 0x6, 0x81, [@generic={0xe3, 0x24, "cc707ac0a1de2cb3c26f2987abd55248a83351d8ceb5c7ee763703ac09b83d8511bca9ef522868f83023d8e2c26324fc83492682c252749dad92716c4bf83c7d06daeb0697234d84ae2a775f5268be4b20ebc11549230701ee6a2e3b51350d871c4cfd31be189894a2bd6276f54ed422d02ff33f6cf3c83feee01876768a2670ec1712d8702120291729584fafbb0c8223c535db58943419836bcf06fbfef41aaa0d171e6c2c3e278f4b27b2e34903e58f37e6186cefd3fdb5e93fae28d1a135c1ccfa98ca2be6d77620a380ea8f9a655f5bc740da19f5ef970dfddd1bc380d0a2"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x8}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x1, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfa, 0x10}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x8, 0x5, 0xd5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0xffff}]}}, {{0x9, 0x5, 0x80, 0x3, 0x400, 0x1, 0xff, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0xa3de}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x9, 0x8, 0x9, [@generic={0x9b, 0x11, "98a4f8d4d9738a5a83b7bf0040043615f793da2239d1ddeebcb143a052f7e7e96b42e3ade8916565629518a5aafae424c9931e8fb3106cc6cb19dc23a7085f89d2b37a8cb2ec354ac41d5cd72d857cbd22f7f54bd1a59f5a5e7941b03c6320412902859e664cf4d698ccbed83ad2da42077f6b0e1642058fc9eff7c414dd475c97f3b93e14ccd9fef7a83b39b78e8e7a8f090fd6fc6628c464"}, @uac_iso={0x7, 0x25, 0x1, 0xc1, 0x8, 0xa}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x0, 0xad, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x80}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x6, 0x1, 0x9}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0x0, 0x8, 0x1, [@generic={0xb8, 0x22, "0e03690d3078bf067dc67ee9ce641ea1a9eefeced6aa3cfbdf4e945517418e06f00b4418099993f9a2c03200ae5d0bfffe26b27feef28d15fc8b76d07f1dc19bccfd85a185cac6797f41e46da6c99bf4fd52aae5d43bcecb417a00e5cf5cd28a704bc239d74709eaf526e7880de1ce7c19ebe859ba1a1d61784b7385ea0c2256a2d9b4c601ecd15c1e901934eb38f8299820be9996264e700d64aecfe400cebadb63739f7e81a17ca9feb93b8c7aa3777c257e44c893"}, @generic={0xf9, 0x23, "de31b9ebc517079f9d00fd92b101f9ccf47bfae28796807a3a671b2da10919836a0a50a540a83faf42c07e87f193ed31a56574085cff20cb3793d59e798fe95b802afac1ef31888f9143a2964a9d170022a238f992eaa3b69cc77c70809cc1edd92b9e04123f74a795b421861ff1ae28db58be01a4e811de730783fc43e9c0af9e0f35141d4559102b5ff2eb4827141f6fb982b669c88432b358dee5a479854b7496d8211c3e0364eedf3707461ac1f203dae9fa1d76b463faf61f3feb05e5e40e53f9d70edf4e05ebc200d2aaedc79b498676e303b74c9f521d50f428e6f2c472ca03db273d04a43d90769d2e9ec7a815ab0238fb6758"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x10, 0x6, 0x1, [@generic={0x11, 0x9, "9f95d8f39990c0b1d8d1ec7449cd48"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0xf, 0xe4, 0xe, [@generic={0xfe, 0x23, "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"}]}}]}}, {{0x9, 0x4, 0xef, 0x2, 0x5, 0xd5, 0x91, 0x54, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0xc, 0x7}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x6, 0x0, "af2986"}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0xf7, "0437b7ddf4e0"}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x4, 0x3, [0x8, 0x9, 0x2cce6c514043c34a], 0x2}, @selector_unit={0xb, 0x24, 0x5, 0x2, 0x5, "8537a8b8f68b"}]}, @uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x2, 0x9, 0x5, "487a42b9cdedc5"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xa, 0x5}]}], [{{0x9, 0x5, 0x5, 0x1, 0x8, 0x5, 0x8, 0x6, [@generic={0x22, 0x11, "01db222b807367a84933877d0f9a089980565ca0bd889e5cbd34f9d36f27d828"}, @generic={0xe6, 0x30, "ba009f19abed3a85ca92612c198ea31bf10bca267712883e4f349f5c5ba8ff4f38530deabb9870e7b53a0cc6d10a5a51dd37736c4c52d050a0f89ce39b6914941e63daaa41b3722d1e1a5badb4337746028279b8e3e6cae140fbfc06a325a1637d1be8b7b4b5621c707c9d6a41929bf8bb157d5d03b7d6c1e2aaf342e366bf3c15ae9f1994b1cf16b75c26fa6e89b4fc9f50d9f7976f25c5912edea2f5f5706a3af639c3dcbdb1838d07c4c6d05fb8f8ffa69188054cf366895487758d8c0742a967832cd604c136e073e3aeec93ebf25c4b933c4b6c92450e1b091aa506cb6013e67a28"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0x80, 0x8, 0xb1}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x9, 0x80, 0x7, [@generic={0xd4, 0x22, "8ded77797c7b50d2fd1608a037c7d11b6e04d0f163c3b32274a1f707e590269d371f0a4d0722dc38d0b60a4f59275d9ae8bd241e9d1e8c5ca0a5edb0f56bcb948b572858494dfa779e2dade4f9ca074f42b41704e198017fb31802e56b6e78d45ba95e6a37476e669c7a5b4a54be83346ccae5d9c56c58c9f3e8de2e4f4c1aa64e0b0da52f1792956303d97f580cf89f2a9dcdf525a9616f4f7cf9d9e357a908274d18d6455c9365407ee9c655f8428b2d30ee33243ba3e8e762b842cfbb72de09570964a606e582abd62c359cb79e481818"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x6, 0x1, 0xa}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x6, 0x67, 0x6}}]}}, {{0x9, 0x4, 0xd7, 0x7, 0x2, 0x1e, 0xec, 0x29, 0x6, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "bf80e81c4710"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0xfffd, 0x1}, {0x6, 0x24, 0x1a, 0x401}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x8001, 0x7d, 0x4, 0xf5, 0x56}, @mdlm_detail={0x29, 0x24, 0x13, 0x31, "dc9e90197e18510b6eda42abccc4f9318c16a355af32479294ae7d1bb88ee1747d743d94df"}, @country_functional={0x12, 0x24, 0x7, 0x7f, 0x5, [0x8, 0x0, 0xb552, 0x1, 0xa5, 0x6]}, @mbim={0xc, 0x24, 0x1b, 0x800, 0x0, 0x5, 0xed, 0xc, 0x7f}, @mdlm={0x15, 0x24, 0x12, 0x800}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0xf, 0x0, 0x9}]}, @uac_control={{0xa, 0x24, 0x1, 0x9, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x6, 0x5, 0xfb}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x1, 0x3, [0x4, 0x9, 0x8], 0xbb}, @mixer_unit={0x7, 0x24, 0x4, 0x2, 0x90, "26fd"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x203, 0x2, 0x1, 0x5, 0x2, 0x7}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x1, 0x9, "7f410a"}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x2, 0x48, "96fc"}]}], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x5, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x2}, @generic={0xe5, 0x8, "5a7703e4af67cd87f90a4113d2a3d6c0ac937ed2a31a96e4fca4b6c7b9c3e82bde15b7a622b89dc2faa86b14fd34b0d50117c76180e8d37e6b42ea4597684b49f615c62c46fdcd94d0585218e7ef21d6eedf95448aac472f8ec4579aec11e6222834c2005b974154102cc4fe8931d2f3554d75fe07858ba867fb7232eb0909582af571b49e9b5a6cc838db1fea4520f4260a18da3368fbd547768ed69d2f94f6ebc5fa00209d0791058f90bbc5705593d92a20c8ae77f8f46ecb9038f54448a72d99e9d5412252342cd52a55786e62ea35b83036e7af536f521b2c7aaa65067a0198de"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x5, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x2}, @generic={0x2e, 0x22, "1f0cfa0b6b0c4d50291fa3f0a625d861257aa2aa087084229590b805440d05850e250bf34dec00323953ad36"}]}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x211, 0x6, 0x3, 0x5, 0x20, 0x6}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x7, [{0xaf, &(0x7f00000000c0)=@string={0xaf, 0x3, "3fc0419a9a83045234062c9b258824d15ad470ef20bc795f6aebadc73669f066a3435de133b3a66250e9b0fc89f31ee4e77e7b90c8704cc3975d0b4959a57a61402a24ff732a64628e0dae38625d77eb8da37d07fa14e66f04e632d7629c5bd76c96cc401a06aa9f557cda19ddf34ebf4a7db944337c529de433f8c9bbb5f3d9f3a7551137b8fa7de678e1a20adf80593303558f8361c02ee70a91d731cb6d2c566f8da7a8fa1b7a9cba584cc9"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x43e}}, {0x102, &(0x7f0000001280)=@string={0x102, 0x3, "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"}}, {0x44, &(0x7f0000000f00)=@string={0x44, 0x3, "ab656f7088501be4050dddc5e3ea38cfcb9bda60ee94e3b7b1111692d4cb1760443339c8a82820aae970d2d84f11acb0907b3cc64fa23f6261b923bbf35ac0567173"}}, {0xa5, &(0x7f0000000f80)=@string={0xa5, 0x3, "52d7fcb5ea0eedfaa4d0a12dcd20557156779389a1bf095b37bc2b2ed5950ec56c49a7612d5b9d5b560fb858f8a15c5d3dc97c2cc9d098afe910d5f8c204b7b654fe8721b28a21e16b434a1545ef024ed70d9928f51e238cf0792018e03f52d044ac33ef9c757afd06e996fa6f3853a2917b71ea439a35b33a18a16313569fddcec944b445e07d763256e20b5dc87ea03d8f6d1f55b2bfc328a122fb69d456eb62459a"}}, {0xbf, &(0x7f0000001040)=@string={0xbf, 0x3, "2a7e530714444be49238263323a72a4d55b42ec0495f83e269ff118c2c3138ad94ecc44362bf479a989d4a405a1881ce6cc895568f54c7878b0cc349cf8c51b19042e63d1948015b230079f434987ef9b74267ad07347bf8afef09621dd76df67bafbe3c51652b4646dba0dc7ce7788cf1592c49ba29ab6ee2b169bed7064293924e631f8a4c0407cf47f9caf0b3bc4074a509e7ed3cf8510a12344667e73763fda91ec73fcdab864285c6ff7ef429ad76938b5c45ab522cf5607c1fdd"}}, {0xe8, &(0x7f0000001100)=@string={0xe8, 0x3, "e7ecb2512c6458fc0394b765789ac7dc6e8437e04c46d354cbf64e8abfdb4db489c0346958eca33a5be8e7551e211b2c33a394da17357b125872e5cd840d03eda8de86fa59c183b75e0b71e25f2a84ff65678a5d0157675cc047096cf59527835d94f983eaee45ea914ca75379df9417566edc1b7e5b77ef81b03c86e217a60f8bef4b3a8de82160fcbf55caa920cb35f9b39d7037bd7a5c0f39ae7d08005015ef6b597d08aec920168ffb75ef7fa1e01e2ec5a1800f4c53b965c0662048578c338d374e0d6220f4c8fb92a21ea2d7c5882bc7b36caff04019d11a02606dd1efe1d0368f7c5a"}}]}) writev(r0, &(0x7f0000000180), 0x4) 14.661870025s ago: executing program 5 (id=995): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="ac28a6e078b0fb6b0e08d80b4dce71d529fb7261801fbb3eb727c933d1f62b10f0b94a7f49adaa7f56e82c7fe79d859a51f50779899f126384ac98f3a2e37f80d7e52c2a490804a46ffd6eebe2f96f65045fa6f82d184f31b22bb4a4644b734f40789024c95989ca8d0226c4db136dbab7b7a0a791833a9e6a2fb18e5900e632efc77cfca5f7d3ed83e5c86711b9d29581", 0x91}], 0x1}, 0x8000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)}, 0x4000) chroot(&(0x7f0000000040)='./file0\x00') ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.069686544s ago: executing program 5 (id=998): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f00000000c0)='./file0/../file0\x00', r4, 0x0, 0x262) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setpriority(0x2, 0x0, 0x8) 11.436143089s ago: executing program 5 (id=999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1f080045000024000000020011907800000000000000000000000700109078e2fd008180000000"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001300), 0x20002, 0x0) connect$inet6(r4, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb000018"], &(0x7f0000000100)=""/189, 0x3c, 0xbd, 0x1, 0x0, 0x0, @void, @value}, 0x28) r7 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000440)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) write$smackfs_load(r7, &(0x7f0000000100)=ANY=[], 0x36) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r6}, 0x90) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003740)=ANY=[@ANYBLOB="d41300003c000701fcffffffffdbdf25027c0000c01348806f1169800800c000", @ANYRES32=r1, @ANYBLOB="14008c0045317e1d00000000002700000000010116003000ce2f707279e88f911b77db7be113317cb89820e009a137feb671968ff1753080602f63806c3a79b2112b5ccb86d4f821317b50c2b7aede8f78546244c991043498cd4136a171205f23030709e01b8ef712fba83697fb8374e02dbfaac2aa", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0800dd00", @ANYRES32, @ANYBLOB="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"], 0x13d4}, 0x1, 0x0, 0x0, 0x88c4}, 0x0) 11.231056612s ago: executing program 4 (id=1001): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 10.076653906s ago: executing program 5 (id=1002): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x6, 0x7cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0x40405515, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r11, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 9.807174245s ago: executing program 4 (id=1004): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f00000001c0)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) eventfd2(0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x8000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 8.810867773s ago: executing program 6 (id=1005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x7, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) socket(0x40000000015, 0x5, 0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat(0xffffffffffffff9c, 0x0, 0x250942, 0x1cd) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 8.731161085s ago: executing program 1 (id=1006): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0x40806685, &(0x7f0000000d40)={0xdaffffff, 0x0, {}, {}, 0x1000000}) 8.156163014s ago: executing program 1 (id=1007): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) renameat2(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000000)='./bus\x00', 0x4) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = socket$inet(0x2, 0x3, 0x24b9) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2128300}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x48840}, 0x20000000) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) creat(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x800, 0x120) getdents(r4, &(0x7f0000000140)=""/92, 0x5c) 7.207566904s ago: executing program 6 (id=1008): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x20040844) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) fsetxattr$smack_xattr_label(r0, &(0x7f0000000400)='security.SMACK64MMAP\x00', &(0x7f0000000440)=ANY=[@ANYRES16=r0], 0xc, 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000001f05000c0001000000080004000600000008000500080000000800060000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x111, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r3, {0x4, 0xfff3}, {0x5}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r7}, 0x14) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYRESOCT=r3, @ANYRES32=r7, @ANYBLOB="00000000180000000000000029000000370000003c00000000000000"], 0x40}}], 0x1, 0x4000005) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev, 0x40, r9}) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8df8681976a3a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2e17d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000580)="55bbeefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd230aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57712a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b065896289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f389abdb6943940ad3a772bf4639838127bd4775b1", 0x92}, {&(0x7f00000001c0)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000001880)="b732b06fd220a6dc6eed5ff60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef7971962733ea71dd2bceb1cd2fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac26628a8e1da8150f1a1d8f56351c6c37d7ad2279ad7d1043400e2281c863c243979070cd3920b5bee", 0x87}, {&(0x7f0000001940)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d58667b82a58ec030a57d199f14b172133", 0xd2}, {&(0x7f0000002300)="0b41dae71fdbfbd927fcefd552617a67c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853bf08b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680ae667158a9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a", 0xcd}], 0x7}}, {{0x0, 0x0, &(0x7f0000001ac0)}}], 0x3, 0x2000c044) sendto$inet(r11, &(0x7f00000004c0)="00031eed7121", 0x6, 0x16000000, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0003e9ffff78defdd7d02356db7e592e77da45c7f29fa8560b9ef5000000000000000000", @ANYBLOB="d7182baa016b5c4b733743d1191e24f1c0c8fde7114245b78a917fc1bb5416f2905b007c11636a9996e0e47f94ec1d164bbb", @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="14000200776c616e3000000000000000000000000c00018008000100", @ANYRES32=r12, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x44880}, 0x4000800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000300)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffdf00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x2006}]}, 0x10) 6.958738426s ago: executing program 1 (id=1009): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f00000000c0)='./file0/../file0\x00', r4, 0x0, 0x262) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setpriority(0x2, 0x0, 0x8) 5.746901053s ago: executing program 1 (id=1010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(0x0, 0x0, &(0x7f0000000140)='\x00', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32=0x0, @ANYBLOB], 0x48) r1 = socket$inet(0x2, 0x1, 0x0) listen(r1, 0x0) syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r2, &(0x7f0000000000)="2e000300010000", 0x7) 4.994705391s ago: executing program 6 (id=1011): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0xa, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xfffffffb, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7fe]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_AF_SPEC={0x4}]}, 0x3c}}, 0x440088c4) 4.943499395s ago: executing program 1 (id=1012): socket(0x22, 0xa, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000004000000ff0f00800000a6534c"], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x8, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0xd) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r7 = dup(r6) write$UHID_INPUT(r7, 0x0, 0x0) 3.853259234s ago: executing program 5 (id=1013): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1f080045000024000000020011907800000000000000000000000700109078e2fd008180000000"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001300), 0x20002, 0x0) connect$inet6(r4, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb000018"], &(0x7f0000000100)=""/189, 0x3c, 0xbd, 0x1, 0x0, 0x0, @void, @value}, 0x28) r7 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000440)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) write$smackfs_load(r7, &(0x7f0000000100)=ANY=[], 0x36) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r6}, 0x90) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003740)=ANY=[@ANYBLOB="d41300003c000701fcffffffffdbdf25027c0000c01348806f1169800800c000", @ANYRES32=r1, @ANYBLOB="14008c0045317e1d00000000002700000000010116003000ce2f707279e88f911b77db7be113317cb89820e009a137feb671968ff1753080602f63806c3a79b2112b5ccb86d4f821317b50c2b7aede8f78546244c991043498cd4136a171205f23030709e01b8ef712fba83697fb8374e02dbfaac2aa", @ANYRES32=r5, @ANYBLOB="0a02e12d41611a0692dc70b0f0824136acf465584b25e17588c6dea9f7bd6aa81dc5258845d1e8a0665105c4f58044535115db4665ec757205441e77364fbecad642d4e968b7e7cf363e1cdb88f2ac386a8633dc1d08a6ce8c2c6d661da6b7b20ddd7c4560b21f5c89d60ac781b89140db150916fb6e997e0c000be54883017d5c47efcd62d9ed639d386a886e6e1347a5aa25c7cd60a1e76be67731b10b16fabf5bc0d5a8ebf12331827c7c4a5fa5d46331455fc00927f73209b2e008cdfbb63151a4dc337db5640b183fee52e35884b362a2c974604f89217dad564c79ddf3480d5bd746063876bbaf1773b706ed83fc59497bcb86394898427c5d9e3fc26d7e7a2469cb93905a0d4c93f9e6ed94daf7f3089aeb9ae242a32318500b9561d5e3905d9849e631acd20c5296492762de8959e3393ef286dd8a3207cbdb013afef11d4451c202efeaa248fd97f0483b647dba4a10320c27ac69c207ad526acd81a52c5344dc1201bc087df40042ff6dc1f6fc232df94bcdc3fa02352ea2b2053e0249ef25c07e80f07c02b134389ff79004b324f712667f980571392cb524a217f4c35793249bf1bd95f25260b5509da53c33aef4c5306d9992a832c9002e9736a8aae9b73c5ccb40991424bfa81b5438b453094da9bc9b5e39ddaf4fefa28e360d38c65d08b7c965343a303c1a6c524ea356c3b52ee228a971d72212c59f2f57adf42c0f5ad43b3b3cd1c0b3f9ce149d4d2abaedf977a3398aec0c99c694f8c5a1f4a90f33fddf5a71448f133ef5f148e28b4cc5793815046e34c2bf4043c5e1c530dcda940f1addb75b7ed090b0d6b9b67d116aff911d9b053099ff7d141746665fe88c714d13b988d973f82f94a079750b859f6abe888a83e627ecbeaca88a861b8569ffe1eb3315ffc72aafe7055754de8f551136f186349a7ae883f76aced3d99d8caefa35b5d6214dc11f625d0c9e27a0759bca697dea025970076d03aa83b8790ea6e58cf7709d6fb382916e734bb2c0e525d5dbd841a4fa6d42a999b17fa4206c2796203996a4651dbe03ea34e032ff94bda99f354cab6ce147306711aa632c6ca01f05592cee546c726b739389f253ed1981cc6d44efb1c881f58546eef207ed6bafdcae52cadb5e7d1f19ab2844bd1d6f828601d71e9bdc8c1ce939563d6293ccb2afd0b486a779c62ec7c13a0eaba861cd57b22034b91c0f521d5434dae7dcfd8fec2ae7992a80ec12ef0f396ff9d327548fb6dca12a7e8d9069840ad3a4ce869b6a5a97d57c7013208a32e36955c45b85bf75661dcaa22ce9e5f77499305257012194ce32326a30bf5ce7881de9cf99d6a69e78decfa02cece30339f26c7c889d8771fbde039b6f742ef9a7a6e6725a74a886faa5cc126687d071bd3bd78164a5c657daf2d9330d39399e65a49b33d2a62f25abcfd01b42601bdef837c6242fae6734289f0b2232e5d6a3455958f19c0eb998025fb8549b0aa11c3e72a98f49e4c1668269ae59e4d52e3999f840b0aa070d168c021aca010b5526e3efa1c6d539e8ba3b085ab649de6b8c9019f39076f55c21a8d6986d19f68674b5671e057d9c099484e1e7b2eb24ef6b7feec8e154a0c97617f333f115e5d89104e27e2cd007ae00fb6cb468747ed94c0f56991e079ba0d98f5994bdb3d8014f63c044e9d3756377d1e4ed5a5303a29b7586032fe3749c26c56732b07f4705c24771aa5b1cac8f2f78ebd7fe34cc66590fbe92d63a10280a5822cac14718ffb5152c0fe55446a7bd85c1d07bf96cdf254f4c90e8b8552bfbf154da5c2b77080c7702304a2d075b0647f991ef7da06db90598ad61ee982c5136810f138f358f595cbe68fed62806293671123ae6097dedcefe57cf6524bd030b7cd7f1037d87adddb9646747cb40a4baf11fd8cdeb3f3558e3835e6f746f3565a7e9a2e6b0f015f0bc8593b07c4f880ffc430ad98d890f66095437864a0a4d8336aa69a8716ade5d87dc3390314f1b40f252b0102e9001d5c2ffeeaf5608861f964941855db82f8a72ea66d0b66b545f37d35beb7a993c5e0e68a5b72b2883ab8a01fdad7157d6765c6201becf9f83bfefe81ec26f563f314045d2afab626bd1a26a648f9e51702cb38c1871a56bbfdfd593dee2d14be31e6af16a6a13bc0ddb5064fc64df6454bf7f9ee7e9d9eaf92d24bf0b1c875f902a61d1ca20d4a6d4e51799bddc60a4a6ac711435ff760a28303a1d7f88be2e37004230c3727faf00ce038379c2b77b3a28a580bb742c7c97f5e4b0e42b3d1bec5179ed360d76f1ec748b0d6239e8c9376d1f08b20dd7a897d471ca1c88bd54366f48ae22a26a1451e8c851de157aa9c88110999e1c48b08cb732908e3ed6ab03d69e37873a9e47db1d5abc53bb665574f07788d5279711448e7a4c9220f0ea48497d03605b2cd8142af8a5ec5171ee4fa47d14e641c1bfac65933ded219ddcd7c53f3db7a28845b677f3e1fd049b015b21b06d15d95eac5ed8850bdee368ea60c7c6d294b4127ffb18749246b6e421aea46354c4e0cd8b8df2c8abb7ff077bd9dac2af825c86ffb0615fd43f52224aa602d5bcee76b0031ebfbc15cd8a42bab3653e474f462780634afbfc6498877343640f2784091a3d35c19e7e7ce5a2ddca87b88e38119f276decd041db5c334a93ee82c41a3e697c39e5057b8a03a7a2cfd01a80f64b3929df19e48459511816b0f4d747844ba8934bc2fa0338e8926777c6d9dfffc2d94bbb098e23930cc58488bd3a057e527b4202cd3d338a3ffb9bae5873d5f84996cc76ec781d33421105db05cf11b3dcaab5e8106e037e79db815558f8b49b304b0e43e30ffde55f8b7b3a5ea273cee8f1a486a9c9a3f12b949cd71d219e1c6ce2e4ccf421c6903c9b9874d2b12ca24b2066de32ebcf7ec0502180bd0d080cef09513718f4c5582857def2363dc46e51fb0abf9f497e97afa9617ce647a76c9ad91cd5c12921a56cdbb2e667f157b9f5b1e76038ddd9df36e36b92ad557a9298c5281885259be35c4af69c4a26a07811fc995592acdb5d63bbc475f4c04de5efe43d62507ec357eba74e4e40e44f806d5661591936640c187f4f16f3259aba03faa9614e4674c5ef63cd901c4794542b3e71419fb9724ed127b2d602aa7013f54467b78ddaa06c72093309cd6026e2cff12ea1e8b694a5f096477424b3f1b31ef1fc9db0624d18f922a30265f196d1e4e0d8c575739d3bbc0a8e51d89629ad6c30cdc2e1651d5f5781088c4ea5f6c6b37d27734641b3e68027e4e1f1d51288cf233491d7d7d821f0af9fc5fdd1f34acdafb6b6cb55e2e6f5052fa33174f466f697b281b381468232b004832c545c81ca4637f45acc08040e563c7aad39860ccb74adffd5ca2490c357910ff5011a5b6024531be030dd9aebd723d15ffaa8fdfe11acfbb566ec2e7fad61c64bb1afc495f303fd1e664c4d99a55bb38d883495a7eeb9ac55169afc948cc3b3261aaaa4d4412f6a00cdc25a67cc2e5449aa7fa6f453ac5e11e195cf811cbba159c6c5af7d727d4dbc0865a31414d803244d57721cf8d047856c10e6bd07473c4c6b383c5cb13cbe98b39a35ab619a6adb45f159ab2f9ce1549906a90140924b8cde157c29af329bff14ef5d5bf32f6000249d405d80f413ec6375f6f78602e9b00389ee32850b45ffda5651fc7104f8beb16c2396dbf299c5c83b4171713f8d46a442dd589a1e5b4b56727217cf8822a4cb70c964af122c15215d45a0a6cb0f2bd9dcd12c3252dfeba548e4e0e5d84e1cfe0d0a65b15b6b0fa68906f2c9c95a0e2368faf908d14b4434fe9cd7e12a480df31d499db1c8c4273f0bb9294c8cc2a5e54229478e4ff18a2ef5d1e0001f7008a1ad4369fd59b5909bb11fa45e69787be92291a28da93e0bec3ef88a4592af61a6abb493bbd4cecb805f504b626319e874cdc4c87d52ea7eea7929650d1d3a61e7263c3705138b040c798a9978f1b6b170991c981c713c9bc6e7d8d1b31695f6fdf10ac09166bf75a08162668efcfcc026076d318b21dcca8009668c3ffa279da2b6a7df2e22bca84df34f74a0736ae9558350046ea1680c6304f74b00c218246f52af0d265cffc169b6caf31f5bd6c79b9224478b22596ec908dd6c8587bde53d61acf460c329b7c3c6399480aad5200f48dab91b6726c0f28d7f0b216dfbce038a5f91ab8a84cd8bb7304ddc64569d6a74e88fd5a622912f441a0f66c639fc2bf10d9df48e24bcaebfb929720f157223fc0d67bd183ae66e369cf6c72fc87224e621a24e885ea5f81bbea6ec0cdd61106a41a797b8f23418cdf9f6a615f0a11c0a75b28229a70118e60eb628c044550c8bfa7d67701459c767e157c7cd3a6131168d70457b821d309669f58d55705bbbac6e7c3dde23c7db4495773e9220491798236602d3a749da66c76dd47b4793d5df13591cedbb6f42829eb00e0a4fafdbaf2e80a050f501130d0537de4c4ef639eb7b5f3fc15c13b1c611be22805cfb65dbefa53b9e0ebce3bf00636f6f38c06f2c943100a6c3040d15c3aa987869878d33deb6acb52deffb33fff04bafb39f11e1e3fab007d6db40fece00d5fe09220d34d897a201bc44ee75e5c0db75f213d9fc1d3ff0d479ca0593a09e01c02c13802d61bec22828e06f742866c0223eecdb1edf2a749acd93a394f29fd03419d07e5a08f26f5bdf3240d1f7458369bbd5e34651040173b4d6f6eac70ed599c9e5024ff5f8d61c01af0ae70b3fc040482484c2b81b1984866f5c2920af873db616076f3f2a500baaa3272c8ff8da577a9517dc61a0b8ed5192c303ccd48b0edd2eb91116196da8f2c8e9cd1b16a1c5bcbf49f7474bf1dcebbce9ecdfb94e73434be844ac0dc5fe37fd95132ca0bb1f418202d20d7bc718688fc64a4c3f5e960cda77170cc353bc4e10f75d8a631e0262bf0ade374d5815c191f3f37effb364d323f2c0ee0956afc83f910af2ee5cacc6a4b4327b63b9fb6f864ccce16a48995a307485f17e031a8c3d903e272049d6e13b5b5be77d26e9e91a6def804ad4bbf042763ab08bb4f867594ad4e1cf0427d1844566e9dd9992ed0f765ae15d0cbc65e6c7f1e3469226306295af13391eea0cece20fb6b21010026fe6a7ddd36f89b36d0ba56507a478297f8a1acf0cbb659ec7804817d7e24240c2712022360ecaf9969f8d8fe3ca5fee6a79d1b9f594d063e9bab48e7e8a8101ba2fca24e3e4dc26edd6d7688cc774fa1b5252e16c0ebecffef757c0eaebe8c612412b8a6b32dc69591b2538104e6e6143f58db820baa52ae1ba8b7028b10f2c9193950d986e6db23d6e395ed89d4d16d59ef82a5d4c015b0d0f6d1f2ecbb3c37905a3c9156fb8a72b80a4d8b602c8b853454c2f51d98059c95c09b6f125c61f995354e9c098b25d6e6f3a11933254d8e44e6cdfccfa885b01235a3460928ad4a75718d4b6ce0d49dfb81efd8bdf55d6dc845b1abcd3fecf3fe3e530d41a0cf035f6354e14fa4afd8c1a43ce79db39f172e40f0d9ef5ae758e8bebd0daa1710ccd137dba9f41d5361c21893b8632c17580936865a59fc9a0dcddf09290577e35e45440e08f8e5eb56638afac659a8b310ba13a09e5232d00abb08ef282114ee35645730169a9c5d5d76e378110f6958ced3ed12364c3ad7181357dc6f1fda0012447c261442f98d4e3f3d1a4ded1a3d7155eaeacaf5e2a2dfb35b68550b5880affc17eb279d08f4d4351bb7be52d02b0588d32448434b03ba9fe8e1f9fcf6b577e9d928b8de8e55bd1e068cc0aad73d616f7ddb807c3fb71876aa9f4e5cbd7cd6c9230ceab4dc211648b105bca66b24a07306394b1fe123381b7874edb22a866c563562d2f44c4d46334eea64a81731d5697eadb8659e701c1f563c4535f61645ae15ae5f0ecc93c7784d309ca56a2f54dbec613597b830b66d41820d0ebda75c6726205b067cdc03725b787e1cb946779ff799a4b9776ef62bd769dfa17b37f0e786ed79a0c50169696fb3bcd6e711480bdce478d561f850e63533658fd0d0400d6009b008400814f2e5fd25e07df8292908b851803d39d434cc4afa45d52a3eac138a08e449b11a566cef314f284189d77619d0a56cf379e6e0e30ae4d0c56b3463312c7155c51917e19d90469ac047626757638dfa1ab7f25b8bfc984c4022ab9948bdbbabbe2402f3fd3d5d0097c5f76e90ac032a2eaea84803fa2216fd7b79fe3aff78b4e7ac589fa0d409dd65cdeef494849f593f995f4493ca9a200000c00b20002000000000000000f01b8800700cc00212c000044693df6670fde27c01d0326e36526f720f037080708e0ec2cb3c1920564afdf5a0b4125c9b7eb667307a7fbd0982101a056b80f86d05fbad6904655c9f9ba3d43e6e9b991deff42e867b6be8c30c892c520549aa806e9d0540c94860d77fc7c1c229bfc5ae052c3a87d6024d21e40d495289b0e0f54f6106d9ae2de07f5bae7012f6221f1ee631859b4d450a3726e9526fb35adc2bf8b02777cfb48e1cf2d7636c76d31ef2c62024e00942624b4bfc0c189b9efd8bd40b4fb65a0843f80d8f41b8573fcd124377b8e64a1eabbb0969c1b633ee82f08816f38d4602800488008001e00", @ANYRES32, @ANYBLOB="0800dd00", @ANYRES32, @ANYBLOB="0400a58004002f800900e20073405e240000000000c56232317b83f65e2f97e99e26c996674198b34c55dd2a85999e4c013bd13cf2b4da17239b52421c401bfeb1b3cc839af168ecfdd0be8c65dac9813aaa17dfccec901a70afb0ef2f9fb95e3727807c73ac3c37bf2cc5842d3a2d91391a008dd346c4af99c66408fb908309aaec92b273d50b2ed12a172d0078b56bf1f5cd218154b68ac8fc1a68528b59125e4cfb8793c7579bf13f8564778af8b6fdc95348430800640047504c00b9f27e91a2d0606423974803a4b212a3e140c343f18dcca63f8940be62ba71d57db589e4ce5bed350056774321880eba776f1ad3d0231fe920137f3ab64d61a8cc8a31380a2c2d0e69eb3cf0663b81bfc313d3a38762b799ef4198a558f801e93450714f181efa3ea63e943637304a20a0a9073cde59e7bb903b64542af0c6057d899131793d51ee"], 0x13d4}, 0x1, 0x0, 0x0, 0x88c4}, 0x0) 3.706336698s ago: executing program 6 (id=1014): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 2.246801707s ago: executing program 5 (id=1015): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) syz_open_dev$radio(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SET_THP_DISABLE(0x44, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000000040)={0x0, 0x5, 0x0, @tid=r3}, &(0x7f0000000240)) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x101000, 0x174) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x18642, 0x0) timer_settime(r4, 0x1, &(0x7f00000003c0)={{}, {0x77359400}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001600)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000002640)=""/4115, 0x1013}, {&(0x7f0000001240)=""/107, 0x6b}, {&(0x7f0000000780)=""/207, 0xcf}], 0x5}, 0x0) 2.243526203s ago: executing program 6 (id=1016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0, 0x0, 0x9}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, 0x0, 0x0, 0xfc) r6 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 1.834736755s ago: executing program 2 (id=490): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xf) ioctl$TCFLSH(r1, 0x540b, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "63f4e6aeab"}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r3}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.012337ms ago: executing program 1 (id=1017): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0x40806685, &(0x7f0000000d40)={0xdaffffff, 0x0, {}, {}, 0x1000000}) 0s ago: executing program 6 (id=1018): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x0, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0xaa, {0x9, 0x21, 0xff00, 0xa, 0x1, {0x22, 0xfa4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x3, 0x3a}}}}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xd4}}, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r1}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) syz_clone(0x8a000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0xe1, @loopback, 0x9}, 0x1c) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r5, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r7, 0x0, 0x1, 0x3e7cf1, 0xff1f, 0x0, 0x10000}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000010c0)={0x14, 0x2b, 0xb, 0x0, 0x0, {0x7}}, 0x14}}, 0xc00) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000125c0), 0x8000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000012600)=@v={0x93, 0x0, 0xa0, 0xfe, @MIDI_NOTEON=@note=0x1f, 0x5, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c00008008000340000000021000028007000280"], 0xf4}}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000080)=0x2) kernel console output (not intermixed with test programs): al 1200 [ 540.209485][ T5828] pwc: Registered as video103. [ 540.257558][ T5828] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 540.335016][ T5828] usb 1-1: USB disconnect, device number 14 [ 540.627877][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 540.957638][ T5828] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 541.049189][ T7713] hsr_slave_0: left promiscuous mode [ 541.107876][ T1225] usb 4-1: USB disconnect, device number 23 [ 541.123312][ T7713] hsr_slave_1: left promiscuous mode [ 541.132043][ T5828] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 541.141086][ T7713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.166389][ T7713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.240332][ T7713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.257291][ T7713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.260460][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.334982][ T5828] usb 1-1: config 0 descriptor?? [ 541.343818][ T7713] veth1_macvtap: left promiscuous mode [ 541.358094][ T7713] veth0_macvtap: left promiscuous mode [ 541.373029][ T5828] gspca_main: spca508-2.14.0 probing 8086:0110 [ 541.374165][ T7713] veth1_vlan: left promiscuous mode [ 541.400161][ T7713] veth0_vlan: left promiscuous mode [ 541.572370][ T5828] gspca_spca508: reg_read err -32 [ 541.590084][ T5828] gspca_spca508: reg_read err -32 [ 541.602390][ T5828] gspca_spca508: reg_read err -32 [ 541.613637][ T5828] gspca_spca508: reg_read err -32 [ 541.927105][ T8221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.961652][ T8221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.037257][ T8224] netlink: 40 bytes leftover after parsing attributes in process `syz.1.624'. [ 542.046443][ T5880] Bluetooth: hci4: command tx timeout [ 542.068321][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 542.068342][ T30] audit: type=1326 audit(1750399926.441:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8219 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86918e929 code=0x7ffc0000 [ 542.163924][ T30] audit: type=1326 audit(1750399926.441:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8219 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fc86918e929 code=0x7ffc0000 [ 542.204418][ T30] audit: type=1326 audit(1750399926.441:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8219 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86918e929 code=0x7ffc0000 [ 542.247751][ T30] audit: type=1326 audit(1750399926.451:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8219 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fc86918e929 code=0x7ffc0000 [ 542.291676][ T30] audit: type=1326 audit(1750399926.451:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8219 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86918e929 code=0x7ffc0000 [ 542.325202][ T8228] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 542.445035][ T30] audit: type=1326 audit(1750399926.451:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8219 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86918e929 code=0x7ffc0000 [ 542.466813][ T30] audit: type=1326 audit(1750399926.471:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8219 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc86918e929 code=0x7ffc0000 [ 542.494120][ T30] audit: type=1326 audit(1750399926.471:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8219 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86918e929 code=0x7ffc0000 [ 543.197454][ T30] audit: type=1326 audit(1750399926.471:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8219 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc86918e929 code=0x7ffc0000 [ 543.219228][ T30] audit: type=1326 audit(1750399926.481:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8219 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86918e929 code=0x7ffc0000 [ 543.382270][ T5828] gspca_spca508: reg write: error -71 [ 543.387891][ T5828] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 543.413409][ T8234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 543.426942][ T5828] usb 1-1: USB disconnect, device number 15 [ 543.683830][ T8243] Mount JFS Failure: -22 [ 544.119076][ T5880] Bluetooth: hci4: command tx timeout [ 544.537357][ T7713] team0 (unregistering): Port device team_slave_1 removed [ 544.595816][ T8252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.636'. [ 544.631919][ T7713] team0 (unregistering): Port device team_slave_0 removed [ 544.672865][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 544.917764][ T8261] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 545.111835][ T8264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.640'. [ 546.187167][ T8149] chnl_net:caif_netlink_parms(): no params data found [ 546.229700][ T5828] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 546.279579][ T5880] Bluetooth: hci4: command tx timeout [ 546.469776][ T5828] usb 1-1: Using ep0 maxpacket: 16 [ 546.572013][ T5828] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.620225][ T5828] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 546.636009][ T5828] usb 1-1: New USB device found, idVendor=1d6b, idProduct=1301, bcdDevice= 1.40 [ 546.671401][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.715047][ T5828] usb 1-1: Product: syz [ 546.719285][ T5828] usb 1-1: Manufacturer: syz [ 546.749590][ T5828] usb 1-1: SerialNumber: syz [ 547.024718][ T5828] usb 1-1: 0:2 : does not exist [ 547.042480][ T5828] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 548.104527][ T5828] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 548.117173][ T5828] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 548.156421][ T5828] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 549.116337][ T5828] usb 1-1: USB disconnect, device number 16 [ 549.409039][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.501655][ T8313] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 549.720740][ T8149] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.727956][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.758754][ T8322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 549.766769][ T8149] bridge_slave_0: entered allmulticast mode [ 549.799519][ T8149] bridge_slave_0: entered promiscuous mode [ 549.839453][ T8149] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.850709][ T5828] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 549.852826][ T8326] fuse: Bad value for 'user_id' [ 549.874212][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.890862][ T8326] fuse: Bad value for 'user_id' [ 549.937894][ T8149] bridge_slave_1: entered allmulticast mode [ 549.963292][ T8149] bridge_slave_1: entered promiscuous mode [ 550.062691][ T5828] usb 4-1: config 0 has an invalid interface number: 135 but max is 0 [ 550.075025][ T5828] usb 4-1: config 0 has no interface number 0 [ 550.102331][ T5828] usb 4-1: config 0 interface 135 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32 [ 550.145696][ T5828] usb 4-1: config 0 interface 135 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 550.159939][ T5828] usb 4-1: New USB device found, idVendor=63bc, idProduct=0000, bcdDevice=45.65 [ 550.170389][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.178573][ T5828] usb 4-1: Product: syz [ 550.182996][ T5828] usb 4-1: Manufacturer: syz [ 550.188348][ T5828] usb 4-1: SerialNumber: syz [ 550.196720][ T5828] usb 4-1: config 0 descriptor?? [ 550.208591][ T8317] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 550.217732][ T8317] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 550.232380][ T8149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.279688][ T8149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.380949][ T1225] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 550.509629][ T8149] team0: Port device team_slave_0 added [ 550.664298][ T1225] usb 1-1: Using ep0 maxpacket: 8 [ 550.672138][ T1225] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.710232][ T1225] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.763243][ T8149] team0: Port device team_slave_1 added [ 551.949605][ T8346] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 552.021535][ T1225] usb 1-1: config 0 interface 0 has no altsetting 0 [ 552.030642][ T1225] usb 1-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 552.039774][ T1225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.062268][ T1225] usb 1-1: config 0 descriptor?? [ 552.168029][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.190248][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.236237][ T8149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.259547][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.266827][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.315219][ T8149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.471746][ T5977] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 552.552356][ T8355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 552.861480][ T8355] overlayfs: failed to resolve './file0': -2 [ 552.896467][ T5977] usb 5-1: device descriptor read/64, error -71 [ 553.141888][ T1225] a4tech 0003:09DA:000A.0006: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.0-1/input0 [ 553.144857][ T8149] hsr_slave_0: entered promiscuous mode [ 553.171648][ T5977] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 553.219291][ T8149] hsr_slave_1: entered promiscuous mode [ 553.241607][ T8149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.269101][ T8149] Cannot create hsr debugfs directory [ 553.322647][ T5977] usb 5-1: device descriptor read/64, error -71 [ 553.376105][ T5945] usb 1-1: USB disconnect, device number 17 [ 553.455454][ T9] usb 4-1: USB disconnect, device number 24 [ 553.475283][ T5977] usb usb5-port1: attempt power cycle [ 553.492073][ T1225] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 553.711477][ T1225] usb 2-1: config 0 has an invalid interface number: 135 but max is 0 [ 553.738709][ T1225] usb 2-1: config 0 has no interface number 0 [ 553.765874][ T1225] usb 2-1: config 0 interface 135 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32 [ 553.789972][ T1225] usb 2-1: config 0 interface 135 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 553.807334][ T1225] usb 2-1: New USB device found, idVendor=63bc, idProduct=0000, bcdDevice=45.65 [ 553.826289][ T1225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.846664][ T1225] usb 2-1: Product: syz [ 553.863203][ T1225] usb 2-1: Manufacturer: syz [ 553.878138][ T1225] usb 2-1: SerialNumber: syz [ 553.882932][ T5977] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 553.918035][ T1225] usb 2-1: config 0 descriptor?? [ 553.955573][ T5977] usb 5-1: device descriptor read/8, error -71 [ 553.977807][ T8363] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 554.006327][ T8363] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 554.275501][ T5977] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 554.311256][ T8378] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 554.324823][ T5977] usb 5-1: device descriptor read/8, error -71 [ 554.442676][ T5977] usb usb5-port1: unable to enumerate USB device [ 554.461071][ T8382] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 554.530026][ T8384] fuse: Bad value for 'user_id' [ 554.545160][ T8384] fuse: Bad value for 'user_id' [ 554.972569][ T8149] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 555.007392][ T8149] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 555.045397][ T8149] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 555.124412][ T8149] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 555.793943][ T8395] 9pnet_fd: Insufficient options for proto=fd [ 557.949790][ T8395] lo speed is unknown, defaulting to 1000 [ 557.957614][ T8395] lo speed is unknown, defaulting to 1000 [ 557.968767][ T8395] lo speed is unknown, defaulting to 1000 [ 558.113073][ T8395] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 558.131844][ T8395] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 558.229564][ T8395] lo speed is unknown, defaulting to 1000 [ 558.238224][ T8395] lo speed is unknown, defaulting to 1000 [ 558.246346][ T8395] lo speed is unknown, defaulting to 1000 [ 558.254349][ T8395] lo speed is unknown, defaulting to 1000 [ 558.262234][ T8395] lo speed is unknown, defaulting to 1000 [ 558.305682][ T1225] usb 2-1: USB disconnect, device number 8 [ 559.093202][ T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 559.179380][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.676'. [ 559.253635][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 559.261454][ T43] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 559.270361][ T43] usb 2-1: config 0 has no interface number 0 [ 559.280166][ T43] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 559.289863][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.318062][ T43] usb 2-1: Product: syz [ 559.347993][ T43] usb 2-1: Manufacturer: syz [ 559.364059][ T43] usb 2-1: SerialNumber: syz [ 559.416530][ T43] usb 2-1: config 0 descriptor?? [ 559.434772][ T43] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 559.642003][ T43] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 559.904639][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 559.935607][ T43] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 560.351948][ T8149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.392416][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 560.398791][ T1225] usb 2-1: USB disconnect, device number 9 [ 560.419702][ T8149] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.454545][ T1225] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 560.458855][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.473001][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.511911][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.519225][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.546567][ T1225] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 560.611562][ T1225] quatech2 2-1:0.51: device disconnected [ 560.637490][ T8437] fuse: Bad value for 'user_id' [ 560.642433][ T8437] fuse: Bad value for 'user_id' [ 561.516096][ T8451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.681'. [ 561.557733][ T8450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 563.695004][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.701874][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.069655][ T8149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.267846][ T8149] veth0_vlan: entered promiscuous mode [ 564.316731][ T8149] veth1_vlan: entered promiscuous mode [ 564.327207][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'. [ 564.957756][ T8149] veth0_macvtap: entered promiscuous mode [ 565.088194][ T8149] veth1_macvtap: entered promiscuous mode [ 565.131346][ T8500] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 565.770743][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.830944][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.855585][ T8149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.868289][ T8149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.877314][ T8149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.905328][ T8149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.070880][ T8511] FAULT_INJECTION: forcing a failure. [ 566.070880][ T8511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.084686][ T8509] netlink: 'syz.4.696': attribute type 5 has an invalid length. [ 566.092410][ T8511] CPU: 1 UID: 0 PID: 8511 Comm: syz.1.695 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 566.092439][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 566.092450][ T8511] Call Trace: [ 566.092459][ T8511] [ 566.092467][ T8511] dump_stack_lvl+0x189/0x250 [ 566.092500][ T8511] ? __pfx____ratelimit+0x10/0x10 [ 566.092527][ T8511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.092553][ T8511] ? __pfx__printk+0x10/0x10 [ 566.092573][ T8511] ? __might_fault+0xb0/0x130 [ 566.092608][ T8511] should_fail_ex+0x414/0x560 [ 566.092638][ T8511] _copy_from_iter+0x1db/0x16f0 [ 566.092675][ T8511] ? __lock_acquire+0xab9/0xd20 [ 566.092700][ T8511] ? __pfx__copy_from_iter+0x10/0x10 [ 566.092738][ T8511] ? page_copy_sane+0x4e/0x280 [ 566.092767][ T8511] copy_page_from_iter+0xdd/0x170 [ 566.092799][ T8511] tun_get_user+0x1c4d/0x3ce0 [ 566.092830][ T8511] ? tun_get_user+0x693/0x3ce0 [ 566.092874][ T8511] ? __pfx_tun_get_user+0x10/0x10 [ 566.092910][ T8511] ? __lock_acquire+0xab9/0xd20 [ 566.092940][ T8511] ? ref_tracker_alloc+0x318/0x460 [ 566.092962][ T8511] ? __lock_acquire+0xab9/0xd20 [ 566.092987][ T8511] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 566.093015][ T8511] ? tun_get+0x1c/0x2f0 [ 566.093043][ T8511] ? tun_get+0x1c/0x2f0 [ 566.093065][ T8511] ? tun_get+0x1c/0x2f0 [ 566.093099][ T8511] tun_chr_write_iter+0x113/0x200 [ 566.093126][ T8511] vfs_write+0x548/0xa90 [ 566.093151][ T8511] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 566.093175][ T8511] ? __pfx_vfs_write+0x10/0x10 [ 566.093206][ T8511] ? __fget_files+0x2a/0x420 [ 566.093237][ T8511] ksys_write+0x145/0x250 [ 566.093259][ T8511] ? __pfx_ksys_write+0x10/0x10 [ 566.093275][ T8511] ? rcu_is_watching+0x15/0xb0 [ 566.093304][ T8511] ? do_syscall_64+0xbe/0x3b0 [ 566.093332][ T8511] do_syscall_64+0xfa/0x3b0 [ 566.093353][ T8511] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.093377][ T8511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.093393][ T8511] ? clear_bhb_loop+0x60/0xb0 [ 566.093413][ T8511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.093429][ T8511] RIP: 0033:0x7fc86918d3df [ 566.093446][ T8511] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 566.093460][ T8511] RSP: 002b:00007fc866ff6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 566.093480][ T8511] RAX: ffffffffffffffda RBX: 00007fc8693b5fa0 RCX: 00007fc86918d3df [ 566.093493][ T8511] RDX: 0000000000000038 RSI: 0000200000000580 RDI: 00000000000000c8 [ 566.093504][ T8511] RBP: 00007fc866ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 566.093514][ T8511] R10: 0000000000000038 R11: 0000000000000293 R12: 0000000000000001 [ 566.093525][ T8511] R13: 0000000000000000 R14: 00007fc8693b5fa0 R15: 00007ffda9647738 [ 566.093554][ T8511] [ 566.396123][ T1533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.424383][ T1533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.466641][ T5944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.490551][ T5944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.111226][ T5828] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 567.294354][ T5828] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 567.355357][ T5828] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 567.409901][ T5828] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 567.419209][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.432784][ T5828] usb 5-1: config 0 descriptor?? [ 567.456096][ T8512] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 567.704923][ T5828] ath6kl: Failed to submit usb control message: -71 [ 567.715499][ T5828] ath6kl: unable to send the bmi data to the device: -71 [ 567.745576][ T5828] ath6kl: Unable to send get target info: -71 [ 567.758198][ T5828] ath6kl: Failed to init ath6kl core: -71 [ 567.773822][ T5828] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 570.157864][ T5828] usb 5-1: USB disconnect, device number 20 [ 571.561609][ T1533] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.736617][ T8540] input: syz1 as /devices/virtual/input/input15 [ 571.804266][ T1533] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.936613][ T8540] nbd0: detected capacity change from 0 to 4294967296 [ 571.994348][ T1533] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.690701][ T5880] block nbd0: Receive control failed (result -104) [ 572.768192][ T1533] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.909801][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'. [ 573.095123][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 573.134508][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 573.144407][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 573.153074][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 573.162031][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 573.223128][ T8567] netlink: 40 bytes leftover after parsing attributes in process `syz.4.711'. [ 573.260905][ T1533] bridge_slave_1: left allmulticast mode [ 573.269541][ T1533] bridge_slave_1: left promiscuous mode [ 573.275403][ T1533] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.327233][ T1533] bridge_slave_0: left allmulticast mode [ 573.337658][ T1533] bridge_slave_0: left promiscuous mode [ 573.347151][ T1533] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.689536][ T8576] futex_wake_op: syz.4.711 tries to shift op by 144; fix this program [ 573.713142][ T8586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.713'. [ 574.132852][ T1533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.145544][ T1533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.163085][ T1533] bond0 (unregistering): Released all slaves [ 574.500456][ T8563] lo speed is unknown, defaulting to 1000 [ 575.498127][ T5871] Bluetooth: hci4: command tx timeout [ 576.242970][ T8608] openvswitch: netlink: Duplicate or invalid key (type 0). [ 576.251581][ T8608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.622129][ T5871] Bluetooth: hci4: command tx timeout [ 578.677524][ T1533] hsr_slave_0: left promiscuous mode [ 578.721372][ T1533] hsr_slave_1: left promiscuous mode [ 578.737961][ T1533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.745445][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.788965][ T1533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.796470][ T1533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.883744][ T1533] veth1_macvtap: left promiscuous mode [ 578.906137][ T1533] veth0_macvtap: left promiscuous mode [ 578.912183][ T1533] veth1_vlan: left promiscuous mode [ 578.920964][ T1533] veth0_vlan: left promiscuous mode [ 578.946594][ T1225] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 580.138296][ T1225] usb 2-1: device descriptor read/64, error -71 [ 580.164727][ T5871] Bluetooth: hci4: command tx timeout [ 580.958322][ T1225] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 581.119249][ T1225] usb 2-1: device descriptor read/64, error -71 [ 581.268557][ T1225] usb usb2-port1: attempt power cycle [ 581.553609][ T8654] kvm: pic: single mode not supported [ 581.553825][ T8654] kvm: pic: non byte read [ 581.567906][ T8654] kvm: pic: single mode not supported [ 581.570006][ T8654] kvm: pic: level sensitive irq not supported [ 581.577618][ T8654] kvm: pic: non byte read [ 581.590167][ T8654] kvm: pic: non byte read [ 581.594990][ T8654] kvm: pic: non byte read [ 581.601223][ T8654] kvm: pic: single mode not supported [ 581.601245][ T8654] kvm: pic: level sensitive irq not supported [ 581.605122][ T8657] binder: BINDER_SET_CONTEXT_MGR already set [ 581.607660][ T8654] kvm: pic: non byte read [ 581.624848][ T8654] kvm: pic: single mode not supported [ 581.624871][ T8654] kvm: pic: level sensitive irq not supported [ 581.632556][ T8654] kvm: pic: non byte read [ 581.643984][ T8654] kvm: pic: non byte read [ 581.648843][ T8654] kvm: pic: level sensitive irq not supported [ 581.648921][ T8654] kvm: pic: non byte read [ 581.658644][ T8657] binder: 8653:8657 ioctl 4018620d 200000000040 returned -16 [ 581.660333][ T1225] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 581.681186][ T8654] kvm: pic: level sensitive irq not supported [ 581.681367][ T8654] kvm: pic: non byte read [ 581.714197][ T1225] usb 2-1: device descriptor read/8, error -71 [ 581.839533][ T8661] loop6: detected capacity change from 0 to 63 [ 581.851098][ T8661] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.886196][ T8661] Buffer I/O error on dev loop6, logical block 1, async page read [ 581.903825][ T8661] Buffer I/O error on dev loop6, logical block 2, async page read [ 581.914844][ T8661] Buffer I/O error on dev loop6, logical block 3, async page read [ 581.924475][ T7292] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.947330][ T7292] Buffer I/O error on dev loop6, logical block 1, async page read [ 581.956535][ T7292] Buffer I/O error on dev loop6, logical block 2, async page read [ 581.967266][ T7292] Buffer I/O error on dev loop6, logical block 3, async page read [ 581.977884][ T8662] Buffer I/O error on dev loop6, logical block 0, async page read [ 581.987655][ T8662] Buffer I/O error on dev loop6, logical block 1, async page read [ 582.038676][ T5977] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 582.208715][ T5871] Bluetooth: hci4: command tx timeout [ 582.212905][ T5977] usb 4-1: config 0 has an invalid interface number: 109 but max is 0 [ 582.237228][ T5977] usb 4-1: config 0 has no interface number 0 [ 582.253187][ T5977] usb 4-1: config 0 interface 109 has no altsetting 0 [ 582.261572][ T5977] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 582.270862][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.301283][ T5977] usb 4-1: config 0 descriptor?? [ 582.453351][ T1533] team0 (unregistering): Port device team_slave_1 removed [ 582.529391][ T1533] team0 (unregistering): Port device team_slave_0 removed [ 582.567461][ T5977] usb 4-1: string descriptor 0 read error: -71 [ 582.623291][ T5977] kaweth 4-1:0.109: Firmware present in device. [ 582.640656][ T5977] kaweth 4-1:0.109: Error reading configuration (-71), no net device created [ 582.668143][ T5977] kaweth 4-1:0.109: probe with driver kaweth failed with error -5 [ 582.687316][ T5977] usb 4-1: USB disconnect, device number 25 [ 584.531690][ T8563] chnl_net:caif_netlink_parms(): no params data found [ 584.614274][ T8691] fuse: Bad value for 'group_id' [ 584.638950][ T8691] fuse: Bad value for 'group_id' [ 587.590397][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.683623][ T8563] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.760868][ T8563] bridge_slave_0: entered allmulticast mode [ 587.840479][ T8563] bridge_slave_0: entered promiscuous mode [ 587.869575][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.890134][ T8563] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.897430][ T8563] bridge_slave_1: entered allmulticast mode [ 587.931246][ T8563] bridge_slave_1: entered promiscuous mode [ 588.703720][ T8731] FAULT_INJECTION: forcing a failure. [ 588.703720][ T8731] name failslab, interval 1, probability 0, space 0, times 0 [ 588.717620][ T8731] CPU: 0 UID: 0 PID: 8731 Comm: syz.1.742 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 588.717647][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 588.717657][ T8731] Call Trace: [ 588.717667][ T8731] [ 588.717675][ T8731] dump_stack_lvl+0x189/0x250 [ 588.717709][ T8731] ? __pfx____ratelimit+0x10/0x10 [ 588.717737][ T8731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.717761][ T8731] ? __pfx__printk+0x10/0x10 [ 588.717785][ T8731] ? __pfx___might_resched+0x10/0x10 [ 588.717812][ T8731] ? fs_reclaim_acquire+0x7d/0x100 [ 588.717845][ T8731] should_fail_ex+0x414/0x560 [ 588.717880][ T8731] ? __pfx_proc_alloc_inode+0x10/0x10 [ 588.717905][ T8731] should_failslab+0xa8/0x100 [ 588.717928][ T8731] ? __pfx_proc_alloc_inode+0x10/0x10 [ 588.717952][ T8731] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 588.717972][ T8731] ? proc_alloc_inode+0x2a/0xc0 [ 588.718002][ T8731] ? __pfx_proc_alloc_inode+0x10/0x10 [ 588.718025][ T8731] proc_alloc_inode+0x2a/0xc0 [ 588.718046][ T8731] alloc_inode+0x67/0x1b0 [ 588.718067][ T8731] new_inode+0x22/0x170 [ 588.718090][ T8731] proc_pid_make_inode+0x21/0x130 [ 588.718109][ T8731] proc_ns_instantiate+0x53/0xf0 [ 588.718132][ T8731] proc_fill_cache+0x2d0/0x3d0 [ 588.718151][ T8731] ? __pfx_proc_ns_instantiate+0x10/0x10 [ 588.718172][ T8731] ? __pfx_proc_fill_cache+0x10/0x10 [ 588.718210][ T8731] proc_ns_dir_readdir+0x35a/0x470 [ 588.718238][ T8731] iterate_dir+0x5ac/0x770 [ 588.718260][ T8731] __se_sys_getdents64+0xe4/0x260 [ 588.718279][ T8731] ? __pfx___se_sys_getdents64+0x10/0x10 [ 588.718293][ T8731] ? ksys_write+0x22a/0x250 [ 588.718308][ T8731] ? __pfx_filldir64+0x10/0x10 [ 588.718325][ T8731] ? __pfx_ksys_write+0x10/0x10 [ 588.718347][ T8731] ? do_syscall_64+0xbe/0x3b0 [ 588.718372][ T8731] do_syscall_64+0xfa/0x3b0 [ 588.718394][ T8731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.718408][ T8731] ? asm_sysvec_call_function_single+0x1a/0x20 [ 588.718422][ T8731] ? clear_bhb_loop+0x60/0xb0 [ 588.718440][ T8731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.718453][ T8731] RIP: 0033:0x7fc86918e929 [ 588.718468][ T8731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.718481][ T8731] RSP: 002b:00007fc866fd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 588.718499][ T8731] RAX: ffffffffffffffda RBX: 00007fc8693b6080 RCX: 00007fc86918e929 [ 588.718510][ T8731] RDX: 000000000000100f RSI: 0000200000001f00 RDI: 0000000000000004 [ 588.718520][ T8731] RBP: 00007fc866fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 588.718529][ T8731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.718538][ T8731] R13: 0000000000000000 R14: 00007fc8693b6080 R15: 00007ffda9647738 [ 588.718569][ T8731] [ 590.018174][ T8732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.037754][ T8732] overlayfs: failed to resolve './file0': -2 [ 590.936401][ T8563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.561801][ T8563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.888609][ T5880] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 591.954997][ T5880] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 591.965749][ T5880] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 591.977909][ T5880] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 591.985722][ T8563] team0: Port device team_slave_0 added [ 592.204220][ T5880] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 592.463345][ T8563] team0: Port device team_slave_1 added [ 592.853009][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.875563][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.911352][ T8563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.141583][ T5997] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 593.454649][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.480450][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.512724][ T8563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.525376][ T8746] lo speed is unknown, defaulting to 1000 [ 593.533475][ T5997] usb 4-1: config 0 has an invalid interface number: 135 but max is 0 [ 593.547465][ T5997] usb 4-1: config 0 has no interface number 0 [ 593.564738][ T5997] usb 4-1: config 0 interface 135 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32 [ 593.587567][ T5997] usb 4-1: config 0 interface 135 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 593.611778][ T5997] usb 4-1: New USB device found, idVendor=63bc, idProduct=0000, bcdDevice=45.65 [ 593.629750][ T5997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.660690][ T5997] usb 4-1: Product: syz [ 593.675333][ T5997] usb 4-1: Manufacturer: syz [ 593.680027][ T5997] usb 4-1: SerialNumber: syz [ 593.707820][ T5997] usb 4-1: config 0 descriptor?? [ 593.731005][ T8756] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 593.738544][ T8756] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 595.081588][ T5880] Bluetooth: hci5: command tx timeout [ 595.847919][ T8784] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 595.974642][ T8563] hsr_slave_0: entered promiscuous mode [ 595.982829][ T8563] hsr_slave_1: entered promiscuous mode [ 595.989409][ T8563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 595.997103][ T8563] Cannot create hsr debugfs directory [ 597.091000][ T5880] Bluetooth: hci5: command tx timeout [ 597.760652][ T5997] usb 4-1: USB disconnect, device number 26 [ 599.001614][ T8813] usb usb8: usbfs: process 8813 (syz.4.761) did not claim interface 0 before use [ 599.171769][ T5880] Bluetooth: hci5: command tx timeout [ 599.300066][ T8818] team_slave_0: entered promiscuous mode [ 599.306137][ T8818] team_slave_1: entered promiscuous mode [ 599.337073][ T8817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 599.337570][ T8819] overlayfs: failed to resolve './file0': -2 [ 600.006738][ T8830] netlink: 588 bytes leftover after parsing attributes in process `syz.1.763'. [ 600.261523][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 600.470800][ T24] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 600.510381][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.534647][ T24] usb 2-1: config 0 has no interface number 0 [ 600.560475][ T24] usb 2-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 600.614726][ T24] usb 2-1: New USB device found, idVendor=05c6, idProduct=9035, bcdDevice=26.4c [ 600.683402][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.751582][ T24] usb 2-1: Product: syz [ 600.761896][ T24] usb 2-1: Manufacturer: syz [ 600.775843][ T24] usb 2-1: SerialNumber: syz [ 600.808106][ T24] usb 2-1: config 0 descriptor?? [ 600.839869][ T24] qmi_wwan 2-1:0.4: probe with driver qmi_wwan failed with error -22 [ 600.861628][ T8746] chnl_net:caif_netlink_parms(): no params data found [ 601.020619][ T8837] [U] [ 601.025805][ T8837] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.765'. [ 601.253331][ T5880] Bluetooth: hci5: command tx timeout [ 601.401699][ T1225] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 601.420877][ T8746] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.433236][ T8746] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.440661][ T8746] bridge_slave_0: entered allmulticast mode [ 601.449842][ T8746] bridge_slave_0: entered promiscuous mode [ 601.489694][ T8746] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.500516][ T8746] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.508641][ T8746] bridge_slave_1: entered allmulticast mode [ 601.517266][ T8746] bridge_slave_1: entered promiscuous mode [ 601.563811][ T1225] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.589107][ T1225] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 16 [ 601.614574][ T1225] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 601.628351][ T1225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.639498][ T1225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.649870][ T1225] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 601.672454][ T1225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 601.686262][ T8746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.706778][ T1225] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 601.714212][ T8746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.723098][ T1225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.748267][ T1225] usb 5-1: Product: syz [ 601.760575][ T1225] usb 5-1: Manufacturer: syz [ 601.770718][ T1225] usb 5-1: SerialNumber: syz [ 601.779181][ T8563] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 601.787253][ T1225] usb 5-1: config 0 descriptor?? [ 601.835884][ T8563] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 601.859107][ T8563] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 601.886353][ T8746] team0: Port device team_slave_0 added [ 601.898330][ T8746] team0: Port device team_slave_1 added [ 601.915268][ T8563] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 601.976308][ T8746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.984072][ T8746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.019275][ T8845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.033059][ T8845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.040212][ T8746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.064265][ T1225] usb 5-1: ucan: probing device on interface #0 [ 602.070588][ T1225] usb 5-1: ucan: invalid endpoint configuration [ 602.079960][ T1225] usb 5-1: ucan: probe failed; try to update the device firmware [ 602.097948][ T8746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.118584][ T1225] usb 5-1: USB disconnect, device number 21 [ 602.124925][ T8746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.173646][ T8746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.664254][ T6084] block nbd0: Possible stuck request ffff888025777000: control (read@0,4096B). Runtime 30 seconds [ 602.786244][ T8746] hsr_slave_0: entered promiscuous mode [ 602.793930][ T8746] hsr_slave_1: entered promiscuous mode [ 602.800260][ T8746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.808824][ T8746] Cannot create hsr debugfs directory [ 602.965184][ T1225] usb 2-1: USB disconnect, device number 14 [ 603.629669][ T8563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.725852][ T8563] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.793895][ T7713] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.801158][ T7713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.087886][ T7713] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.095154][ T7713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.076149][ T8746] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 605.298673][ T8746] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 605.459352][ T8746] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 605.486757][ T8746] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 607.580014][ T8746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.185893][ T8746] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.209391][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.216641][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.292059][ T8935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 608.368834][ T8936] overlayfs: failed to resolve './file0': -2 [ 608.489242][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.496408][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.961208][ T8563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.096032][ T8563] veth0_vlan: entered promiscuous mode [ 609.134843][ T8563] veth1_vlan: entered promiscuous mode [ 609.264092][ T8563] veth0_macvtap: entered promiscuous mode [ 609.297517][ T8563] veth1_macvtap: entered promiscuous mode [ 609.359434][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.458217][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.489953][ T8563] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.506321][ T8563] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.515759][ T8563] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.524579][ T8563] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.240172][ T8746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.662394][ T7713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.702652][ T7713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.857919][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.949571][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.286499][ T8973] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 612.362205][ T3479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.568449][ T3479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.687445][ T8746] veth0_vlan: entered promiscuous mode [ 612.798131][ T3479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.857405][ T8746] veth1_vlan: entered promiscuous mode [ 612.910692][ T3479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.000394][ T8746] veth0_macvtap: entered promiscuous mode [ 613.035236][ T8746] veth1_macvtap: entered promiscuous mode [ 613.145621][ T8746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.202514][ T8746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.257207][ T8746] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.630004][ T8746] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.639145][ T8746] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.648933][ T8746] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.223741][ T3479] bridge_slave_1: left allmulticast mode [ 614.243531][ T3479] bridge_slave_1: left promiscuous mode [ 614.249486][ T3479] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.646570][ T3479] bridge_slave_0: left allmulticast mode [ 614.652308][ T3479] bridge_slave_0: left promiscuous mode [ 614.680885][ T3479] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.373177][ T5982] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 615.391346][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 615.408196][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 615.417475][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 615.441407][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 615.451395][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 615.576580][ T5982] usb 5-1: Using ep0 maxpacket: 8 [ 615.620016][ T5982] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 45, changing to 9 [ 615.658130][ T5982] usb 5-1: config 1 interface 0 has no altsetting 0 [ 615.698425][ T5982] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.40 [ 615.733746][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.741816][ T5982] usb 5-1: Product: syz [ 615.756566][ T5982] usb 5-1: Manufacturer: syz [ 615.761235][ T5982] usb 5-1: SerialNumber: syz [ 616.192512][ T5982] usbhid 5-1:1.0: can't add hid device: -71 [ 616.206710][ T5982] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 616.237867][ T5982] usb 5-1: USB disconnect, device number 22 [ 616.426810][ T3479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.444146][ T3479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.461495][ T3479] bond0 (unregistering): Released all slaves [ 616.614000][ T1225] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 616.625967][ T9029] lo speed is unknown, defaulting to 1000 [ 616.804238][ T1225] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 616.836178][ T1225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.877303][ T1225] usb 4-1: Product: syz [ 616.881523][ T1225] usb 4-1: Manufacturer: syz [ 616.973430][ T1225] usb 4-1: SerialNumber: syz [ 617.315555][ T1225] usb 4-1: config 0 descriptor?? [ 617.393473][ T5982] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 617.425593][ T1225] usb 4-1: selecting invalid altsetting 1 [ 617.431713][ T1225] comedi comedi0: could not switch to alternate setting 1 [ 617.443237][ T1225] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 617.537848][ T2134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.566723][ T2134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.574254][ T5880] Bluetooth: hci4: command tx timeout [ 617.603616][ T5982] usb 5-1: Using ep0 maxpacket: 16 [ 617.611599][ T5982] usb 5-1: unable to get BOS descriptor or descriptor too short [ 617.638984][ T5982] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.659092][ T5982] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 617.692563][ T5982] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 617.721690][ T5982] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 617.746534][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.762722][ T3479] hsr_slave_0: left promiscuous mode [ 617.807703][ T3479] hsr_slave_1: left promiscuous mode [ 617.825251][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.832745][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.861627][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.873248][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.939854][ T5997] usb 4-1: USB disconnect, device number 27 [ 617.963891][ T5982] usb 5-1: Product: syz [ 617.968133][ T5982] usb 5-1: Manufacturer: syz [ 617.972936][ T5982] usb 5-1: SerialNumber: syz [ 617.980573][ T3479] veth1_macvtap: left promiscuous mode [ 618.002907][ T3479] veth0_macvtap: left promiscuous mode [ 618.020854][ T3479] veth1_vlan: left promiscuous mode [ 618.027824][ T3479] veth0_vlan: left promiscuous mode [ 619.541777][ T3479] team0 (unregistering): Port device team_slave_1 removed [ 619.654394][ T5880] Bluetooth: hci4: command tx timeout [ 619.687274][ T3479] team0 (unregistering): Port device team_slave_0 removed [ 620.183900][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 620.365264][ T5982] usb 5-1: 0:2 : does not exist [ 620.374090][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 620.403436][ T24] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 620.449807][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.476032][ T5982] usb 5-1: USB disconnect, device number 23 [ 620.497448][ T24] usb 2-1: config 0 descriptor?? [ 620.518163][ T7713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.875793][ T7713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.902867][ T7292] udevd[7292]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.741325][ T5880] Bluetooth: hci4: command tx timeout [ 621.748464][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 621.758733][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 621.774136][ T24] asix 2-1:0.0: probe with driver asix failed with error -71 [ 621.814131][ T5982] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 621.883904][ T24] usb 2-1: USB disconnect, device number 15 [ 622.042529][ T5982] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.072129][ T5982] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 622.214279][ T5828] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 622.364151][ T5828] usb 5-1: device descriptor read/64, error -71 [ 622.422609][ T5982] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 622.467969][ T9029] chnl_net:caif_netlink_parms(): no params data found [ 622.474011][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.690091][ T5982] usb 4-1: Product: syz [ 622.707650][ T5982] usb 4-1: Manufacturer: syz [ 622.717739][ T5982] usb 4-1: SerialNumber: syz [ 622.804045][ T5828] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 622.964097][ T5828] usb 5-1: device descriptor read/64, error -71 [ 622.996993][ T5982] usb 4-1: 0:2 : does not exist [ 623.003226][ T1225] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 623.022413][ T5982] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 623.169451][ T1225] usb 6-1: config 1 has an invalid interface descriptor of length 6, skipping [ 623.220128][ T5828] usb usb5-port1: attempt power cycle [ 623.238847][ T1225] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.259980][ T5982] usb 4-1: USB disconnect, device number 28 [ 623.266807][ T1225] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.645624][ T5828] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 623.696752][ T9029] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.869861][ T5880] Bluetooth: hci4: command tx timeout [ 623.884965][ T5828] usb 5-1: device descriptor read/8, error -71 [ 623.892910][ T9029] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.923581][ T9029] bridge_slave_0: entered allmulticast mode [ 623.955580][ T1225] usb 6-1: string descriptor 0 read error: -22 [ 623.962044][ T1225] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 623.986694][ T1225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.026920][ T1225] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 624.074300][ T9029] bridge_slave_0: entered promiscuous mode [ 624.082237][ T7292] udevd[7292]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.090984][ T9029] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.124305][ T9029] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.132081][ T9029] bridge_slave_1: entered allmulticast mode [ 624.141261][ T9029] bridge_slave_1: entered promiscuous mode [ 624.194184][ T5828] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 624.266067][ T5828] usb 5-1: device descriptor read/8, error -71 [ 624.390255][ T5828] usb usb5-port1: unable to enumerate USB device [ 624.495331][ T9029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.544970][ T9029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.021393][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.074558][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.383772][ T9029] team0: Port device team_slave_0 added [ 626.405988][ T9029] team0: Port device team_slave_1 added [ 626.411149][ T5828] usb 6-1: USB disconnect, device number 2 [ 626.544396][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 626.838240][ T9029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.846373][ T9029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.275102][ T9148] FAULT_INJECTION: forcing a failure. [ 627.275102][ T9148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.364682][ T9029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.389308][ T9029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.397768][ T9029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.443224][ T9029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.444760][ T9148] CPU: 0 UID: 0 PID: 9148 Comm: syz.5.817 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 627.444785][ T9148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 627.444795][ T9148] Call Trace: [ 627.444802][ T9148] [ 627.444809][ T9148] dump_stack_lvl+0x189/0x250 [ 627.444839][ T9148] ? __pfx____ratelimit+0x10/0x10 [ 627.444864][ T9148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.444887][ T9148] ? __pfx__printk+0x10/0x10 [ 627.444919][ T9148] should_fail_ex+0x414/0x560 [ 627.444945][ T9148] _copy_to_user+0x31/0xb0 [ 627.444965][ T9148] simple_read_from_buffer+0xe1/0x170 [ 627.444992][ T9148] proc_fail_nth_read+0x1df/0x250 [ 627.445020][ T9148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 627.445046][ T9148] ? rw_verify_area+0x258/0x650 [ 627.445064][ T9148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 627.445089][ T9148] vfs_read+0x200/0x980 [ 627.445114][ T9148] ? __pfx___mutex_lock+0x10/0x10 [ 627.445139][ T9148] ? __pfx_vfs_read+0x10/0x10 [ 627.445160][ T9148] ? __fget_files+0x2a/0x420 [ 627.445187][ T9148] ? __fget_files+0x3a0/0x420 [ 627.445216][ T9148] ? __fget_files+0x2a/0x420 [ 627.445248][ T9148] ksys_read+0x145/0x250 [ 627.445269][ T9148] ? __pfx_ksys_read+0x10/0x10 [ 627.445286][ T9148] ? rcu_is_watching+0x15/0xb0 [ 627.445315][ T9148] ? do_syscall_64+0xbe/0x3b0 [ 627.445343][ T9148] do_syscall_64+0xfa/0x3b0 [ 627.445365][ T9148] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.445388][ T9148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.445404][ T9148] ? clear_bhb_loop+0x60/0xb0 [ 627.445426][ T9148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.445442][ T9148] RIP: 0033:0x7f530998d33c [ 627.445458][ T9148] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 627.445473][ T9148] RSP: 002b:00007f530a7a4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 627.445493][ T9148] RAX: ffffffffffffffda RBX: 00007f5309bb5fa0 RCX: 00007f530998d33c [ 627.445504][ T9148] RDX: 000000000000000f RSI: 00007f530a7a40a0 RDI: 0000000000000006 [ 627.445515][ T9148] RBP: 00007f530a7a4090 R08: 0000000000000000 R09: 0000000000000000 [ 627.445525][ T9148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.445535][ T9148] R13: 0000000000000000 R14: 00007f5309bb5fa0 R15: 00007ffdb96ced48 [ 627.445565][ T9148] [ 627.805488][ T9153] loop8: detected capacity change from 0 to 7 [ 627.828287][ T7292] Dev loop8: unable to read RDB block 7 [ 627.836943][ T7292] loop8: unable to read partition table [ 627.849856][ T7292] loop8: partition table beyond EOD, truncated [ 627.902487][ T9153] Dev loop8: unable to read RDB block 7 [ 627.944612][ T9153] loop8: unable to read partition table [ 627.950896][ T9153] loop8: partition table beyond EOD, truncated [ 628.004484][ T9153] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 628.004484][ T9153] ) failed (rc=-5) [ 628.088135][ T9029] hsr_slave_0: entered promiscuous mode [ 628.145607][ T9029] hsr_slave_1: entered promiscuous mode [ 628.195452][ T9029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 628.234439][ T9029] Cannot create hsr debugfs directory [ 628.702895][ T9161] fuse: Unknown parameter 'user_i0x0000000000000000' [ 629.777263][ T9170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 631.278994][ T9182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.826'. [ 631.317844][ T9186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.827'. [ 631.817704][ T9029] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 631.839990][ T9029] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 631.874126][ T9029] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 631.913767][ T9029] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 632.643079][ T9207] fuse: Unknown parameter 'user_i0x0000000000000000' [ 632.695206][ T6084] block nbd0: Possible stuck request ffff888025777000: control (read@0,4096B). Runtime 60 seconds [ 633.476894][ T9029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.544794][ T9029] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.633358][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.834'. [ 633.644636][ T1533] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.652030][ T1533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.684538][ T1533] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.691848][ T1533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.735976][ T9219] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 633.987436][ T9230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.035832][ T9230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.226371][ T5945] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 634.425138][ T5945] usb 6-1: Using ep0 maxpacket: 16 [ 634.437982][ T5945] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 634.449551][ T5945] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 634.477918][ T9029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.485227][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 634.513806][ T5945] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 634.534621][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 634.544883][ T5945] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 634.569657][ T5945] usb 6-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 634.592950][ T5945] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 634.604567][ T9029] veth0_vlan: entered promiscuous mode [ 634.618073][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.631989][ T9029] veth1_vlan: entered promiscuous mode [ 634.638081][ T5945] usb 6-1: Product: syz [ 634.642401][ T5945] usb 6-1: Manufacturer: syz [ 634.652539][ T5945] usb 6-1: SerialNumber: syz [ 634.669221][ T5945] usb 6-1: config 0 descriptor?? [ 634.690169][ T9231] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 634.703842][ T9029] veth0_macvtap: entered promiscuous mode [ 634.712745][ T5945] iuu_phoenix 6-1:0.0: iuu_phoenix converter detected [ 634.727558][ T9029] veth1_macvtap: entered promiscuous mode [ 634.740389][ T5945] usb 6-1: iuu_phoenix converter now attached to ttyUSB0 [ 634.785248][ T9029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.818708][ T9029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.839732][ T9029] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.862401][ T9029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.881766][ T9029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.898546][ T9029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.920051][ T5997] usb 6-1: USB disconnect, device number 3 [ 634.986325][ T5997] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 635.002288][ T5997] iuu_phoenix 6-1:0.0: device disconnected [ 635.609918][ T6119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.630024][ T6119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.744187][ T5967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.758769][ T5967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.312269][ T9250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.841'. [ 636.979550][ T9256] netlink: 20 bytes leftover after parsing attributes in process `syz.5.843'. [ 637.841169][ T6119] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.048375][ T6119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.111925][ T6119] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.186789][ T6119] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.325595][ T6119] bridge_slave_1: left allmulticast mode [ 638.331297][ T6119] bridge_slave_1: left promiscuous mode [ 638.339967][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.349307][ T6119] bridge_slave_0: left allmulticast mode [ 638.354978][ T6119] bridge_slave_0: left promiscuous mode [ 638.361435][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.657361][ T5977] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 639.942327][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.954786][ T5977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.984975][ T5977] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 639.997328][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 640.008486][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 640.016914][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 640.034206][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 640.044209][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 640.113243][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.257066][ T5977] usb 5-1: config 0 descriptor?? [ 640.889929][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.849'. [ 641.036235][ T6119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.076457][ T6119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.108243][ T6119] bond0 (unregistering): Released all slaves [ 641.270222][ T9272] lo speed is unknown, defaulting to 1000 [ 641.807379][ T5828] usb 5-1: USB disconnect, device number 28 [ 642.048651][ T9272] chnl_net:caif_netlink_parms(): no params data found [ 642.139052][ T5871] Bluetooth: hci4: command tx timeout [ 642.314544][ T9272] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.335783][ T9272] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.343128][ T9272] bridge_slave_0: entered allmulticast mode [ 642.352206][ T9272] bridge_slave_0: entered promiscuous mode [ 642.367485][ T9272] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.374936][ T9272] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.385843][ T9272] bridge_slave_1: entered allmulticast mode [ 642.396545][ T9272] bridge_slave_1: entered promiscuous mode [ 642.418460][ T9296] netlink: 588 bytes leftover after parsing attributes in process `syz.1.853'. [ 642.435971][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 642.489901][ T9298] fuse: Unknown parameter 'user_id0x0000000000000000' [ 642.518793][ T6119] hsr_slave_0: left promiscuous mode [ 642.561379][ T6119] hsr_slave_1: left promiscuous mode [ 642.590617][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.611526][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.622734][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.630615][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 642.643151][ T9] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 642.652453][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.669957][ T9] usb 6-1: config 0 has no interface number 0 [ 642.691284][ T9] usb 6-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 642.736324][ T9] usb 6-1: config 0 interface 244 has no altsetting 0 [ 642.750694][ T6119] veth1_macvtap: left promiscuous mode [ 642.757454][ T6119] veth0_macvtap: left promiscuous mode [ 642.764280][ T6119] veth1_vlan: left promiscuous mode [ 642.773373][ T9] usb 6-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 642.782960][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.788050][ T6119] veth0_vlan: left promiscuous mode [ 642.791212][ T9] usb 6-1: Product: syz [ 642.800512][ T9] usb 6-1: Manufacturer: syz [ 642.806905][ T9] usb 6-1: SerialNumber: syz [ 643.006654][ T9] usb 6-1: config 0 descriptor?? [ 643.356990][ T9] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort found [ 643.378737][ T9289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.388831][ T9289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.417900][ T9] snd_usb_toneport 6-1:0.244: cannot get proper max packet size [ 643.436227][ T9] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort now disconnected [ 643.473118][ T9] snd_usb_toneport 6-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 643.602057][ T9] usb 6-1: USB disconnect, device number 4 [ 644.017184][ T9305] block device autoloading is deprecated and will be removed. [ 644.235863][ T5871] Bluetooth: hci4: command tx timeout [ 645.759092][ T6119] team0 (unregistering): Port device team_slave_1 removed [ 645.868135][ T6119] team0 (unregistering): Port device team_slave_0 removed [ 646.298909][ T5871] Bluetooth: hci4: command tx timeout [ 646.595113][ T9311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.857'. [ 646.823855][ T9272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.873311][ T9272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.981284][ T9272] team0: Port device team_slave_0 added [ 646.988060][ T5828] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 646.994195][ T9272] team0: Port device team_slave_1 added [ 647.062616][ T9272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.073162][ T9272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.099922][ T9272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.111084][ T9] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 647.122196][ T9272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.131337][ T9272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.157548][ T9272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.178226][ T5828] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 647.194246][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.205416][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.215293][ T5828] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 647.232793][ T5828] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 647.243522][ T5828] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 647.251836][ T5828] usb 2-1: Manufacturer: syz [ 647.267484][ T5828] usb 2-1: config 0 descriptor?? [ 647.268035][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 647.294246][ T9272] hsr_slave_0: entered promiscuous mode [ 647.300748][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 647.313553][ T9272] hsr_slave_1: entered promiscuous mode [ 647.320307][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 647.337403][ T9272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 647.355490][ T9272] Cannot create hsr debugfs directory [ 647.363337][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 647.405067][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 647.427870][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 647.435357][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 647.456233][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 647.477008][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 647.502149][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 647.525770][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 647.533605][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 647.565300][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 647.606197][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 647.646167][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 647.673327][ T9] usb 6-1: string descriptor 0 read error: -22 [ 647.688684][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 647.718526][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.776821][ T9] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 647.838836][ T9325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.856683][ T9325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.991364][ T5828] usbhid 2-1:0.0: can't add hid device: -71 [ 648.023986][ T5828] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 648.067795][ T5828] usb 2-1: USB disconnect, device number 16 [ 648.206453][ T9339] netlink: 588 bytes leftover after parsing attributes in process `syz.4.866'. [ 648.376244][ T5871] Bluetooth: hci4: command tx timeout [ 648.956994][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 648.957014][ T30] audit: type=1326 audit(1750400033.313:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9341 comm="syz.1.867" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc86918e929 code=0x0 [ 649.053027][ T9272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 649.082312][ T9272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 649.117804][ T9272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 649.126343][ T5880] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 649.139331][ T5880] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 649.148882][ T5880] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 649.160443][ T5880] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 649.172796][ T5880] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 649.177292][ T9272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 649.336668][ T9344] lo speed is unknown, defaulting to 1000 [ 649.728896][ T9272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.757814][ T9344] chnl_net:caif_netlink_parms(): no params data found [ 650.231901][ T9272] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.277607][ T9344] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.284785][ T9344] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.297276][ T5871] Bluetooth: hci6: command tx timeout [ 651.324033][ T9344] bridge_slave_0: entered allmulticast mode [ 651.340978][ T9344] bridge_slave_0: entered promiscuous mode [ 651.379544][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.386736][ T7253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.400561][ T9344] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.082190][ T9344] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.212112][ T9344] bridge_slave_1: entered allmulticast mode [ 652.246843][ T5828] usb 6-1: USB disconnect, device number 5 [ 652.304561][ T9344] bridge_slave_1: entered promiscuous mode [ 652.541641][ T6119] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.548920][ T6119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.680760][ T9344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.718280][ T9378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.872'. [ 652.760225][ T9344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.926017][ T9344] team0: Port device team_slave_0 added [ 652.962386][ T9344] team0: Port device team_slave_1 added [ 653.076414][ T5977] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 653.101969][ T9344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.135571][ T9344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.218028][ T9344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.247036][ T5977] usb 5-1: Using ep0 maxpacket: 8 [ 653.254742][ T5977] usb 5-1: unable to get BOS descriptor or descriptor too short [ 653.265128][ T9344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.277008][ T5977] usb 5-1: config 4 interface 0 has no altsetting 0 [ 653.291178][ T9344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.327739][ T9344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.336421][ T5871] Bluetooth: hci6: command tx timeout [ 653.341617][ T5977] usb 5-1: string descriptor 0 read error: -22 [ 653.380615][ T5977] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 653.435817][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.484758][ T5977] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 653.530042][ T5977] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 653.534389][ T9344] hsr_slave_0: entered promiscuous mode [ 653.572977][ T9344] hsr_slave_1: entered promiscuous mode [ 653.581128][ T9344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 653.581364][ T5977] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 653.589473][ T9344] Cannot create hsr debugfs directory [ 653.617277][ T5977] usb 5-1: media controller created [ 653.650024][ T5977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 653.682940][ T9380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.708383][ T9380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.792241][ T5977] zl10353_read_register: readreg error (reg=127, ret==0) [ 653.838247][ T9272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.931149][ T5977] usb 5-1: USB disconnect, device number 29 [ 654.309480][ T9272] veth0_vlan: entered promiscuous mode [ 654.398460][ T9395] netlink: 588 bytes leftover after parsing attributes in process `syz.5.877'. [ 654.480791][ T9272] veth1_vlan: entered promiscuous mode [ 654.510637][ T9344] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 654.600522][ T9399] netlink: 588 bytes leftover after parsing attributes in process `syz.4.879'. [ 654.822135][ T9344] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 654.856832][ T43] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 655.042642][ T43] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 655.053920][ T9400] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 655.113887][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.186296][ T9344] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 655.233825][ T43] usb 5-1: config 0 has no interface number 0 [ 655.288364][ T43] usb 5-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 655.317364][ T9344] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 655.347014][ T43] usb 5-1: New USB device found, idVendor=05c6, idProduct=9035, bcdDevice=26.4c [ 655.356144][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.429362][ T5871] Bluetooth: hci6: command tx timeout [ 655.446543][ T43] usb 5-1: Product: syz [ 655.450789][ T43] usb 5-1: Manufacturer: syz [ 655.455449][ T43] usb 5-1: SerialNumber: syz [ 655.471858][ T43] usb 5-1: config 0 descriptor?? [ 655.484338][ T9272] veth0_macvtap: entered promiscuous mode [ 655.489545][ T43] qmi_wwan 5-1:0.4: probe with driver qmi_wwan failed with error -22 [ 655.535038][ T9272] veth1_macvtap: entered promiscuous mode [ 655.597691][ T9272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.631748][ T9272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.659698][ T9272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.685690][ T9272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.695048][ T9272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.704300][ T9272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.922958][ T9344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.985250][ T6119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.992854][ T9344] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.019272][ T6119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.075303][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.082572][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.163605][ T5967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.172563][ T5967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.199212][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.206571][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.556973][ T5982] usb 5-1: USB disconnect, device number 30 [ 657.602723][ T5871] Bluetooth: hci6: command tx timeout [ 658.174583][ T9422] FAULT_INJECTION: forcing a failure. [ 658.174583][ T9422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.188217][ T9422] CPU: 0 UID: 0 PID: 9422 Comm: syz.4.883 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 658.188246][ T9422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 658.188258][ T9422] Call Trace: [ 658.188268][ T9422] [ 658.188277][ T9422] dump_stack_lvl+0x189/0x250 [ 658.188311][ T9422] ? __pfx____ratelimit+0x10/0x10 [ 658.188339][ T9422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.188366][ T9422] ? __pfx__printk+0x10/0x10 [ 658.188387][ T9422] ? __might_fault+0xb0/0x130 [ 658.188423][ T9422] should_fail_ex+0x414/0x560 [ 658.188454][ T9422] _copy_from_iter+0x1db/0x16f0 [ 658.188486][ T9422] ? rcu_is_watching+0x15/0xb0 [ 658.188516][ T9422] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 658.188542][ T9422] ? __pfx__copy_from_iter+0x10/0x10 [ 658.188572][ T9422] ? __build_skb_around+0x257/0x3e0 [ 658.188599][ T9422] ? netlink_sendmsg+0x642/0xb30 [ 658.188618][ T9422] ? skb_put+0x11b/0x210 [ 658.188644][ T9422] netlink_sendmsg+0x6b2/0xb30 [ 658.188677][ T9422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.188709][ T9422] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 658.188733][ T9422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.188757][ T9422] __sock_sendmsg+0x21c/0x270 [ 658.188789][ T9422] ____sys_sendmsg+0x505/0x830 [ 658.188829][ T9422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 658.188862][ T9422] ? import_iovec+0x74/0xa0 [ 658.188886][ T9422] ___sys_sendmsg+0x21f/0x2a0 [ 658.188913][ T9422] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.188934][ T9422] ? irqentry_exit+0x74/0x90 [ 658.189005][ T9422] ? __fget_files+0x2a/0x420 [ 658.189030][ T9422] ? __fget_files+0x3a0/0x420 [ 658.189067][ T9422] __x64_sys_sendmsg+0x19b/0x260 [ 658.189088][ T9422] ? schedule+0x165/0x360 [ 658.189120][ T9422] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 658.189166][ T9422] ? do_syscall_64+0xbe/0x3b0 [ 658.189199][ T9422] do_syscall_64+0xfa/0x3b0 [ 658.189228][ T9422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.189246][ T9422] ? asm_sysvec_call_function_single+0x1a/0x20 [ 658.189265][ T9422] ? clear_bhb_loop+0x60/0xb0 [ 658.189289][ T9422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.189308][ T9422] RIP: 0033:0x7fd33838e929 [ 658.189326][ T9422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.189342][ T9422] RSP: 002b:00007fd339195038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.189364][ T9422] RAX: ffffffffffffffda RBX: 00007fd3385b6080 RCX: 00007fd33838e929 [ 658.189377][ T9422] RDX: 0000000020011814 RSI: 0000200000000180 RDI: 0000000000000009 [ 658.189390][ T9422] RBP: 00007fd339195090 R08: 0000000000000000 R09: 0000000000000000 [ 658.189402][ T9422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.189413][ T9422] R13: 0000000000000000 R14: 00007fd3385b6080 R15: 00007ffe957a6708 [ 658.189446][ T9422] [ 659.093244][ T7713] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.314213][ T7713] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.393083][ T9344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.614088][ T7713] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.693961][ T7713] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.719625][ T9344] veth0_vlan: entered promiscuous mode [ 659.732585][ T9344] veth1_vlan: entered promiscuous mode [ 659.762327][ T9344] veth0_macvtap: entered promiscuous mode [ 659.777232][ T9344] veth1_macvtap: entered promiscuous mode [ 659.807281][ T9344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.831438][ T9344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.864609][ T9344] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.874838][ T9344] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.884436][ T9344] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.893513][ T9344] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.984163][ T7713] bridge_slave_1: left allmulticast mode [ 659.995520][ T7713] bridge_slave_1: left promiscuous mode [ 660.027747][ T7713] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.061594][ T7713] bridge_slave_0: left allmulticast mode [ 660.085569][ T7713] bridge_slave_0: left promiscuous mode [ 660.101722][ T7713] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.371253][ T5880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 661.414287][ T5880] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 661.435395][ T5880] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 661.448765][ T5880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 661.463666][ T5880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 661.530685][ T9454] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 661.552709][ T30] audit: type=1326 audit(1750400045.902:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9449 comm="syz.1.887" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc86918e929 code=0x0 [ 662.443429][ T7713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.469239][ T7713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.486335][ T7713] bond0 (unregistering): Released all slaves [ 662.777703][ T6084] block nbd0: Possible stuck request ffff888025777000: control (read@0,4096B). Runtime 90 seconds [ 662.974944][ T9459] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 663.164242][ T9465] netlink: 44 bytes leftover after parsing attributes in process `syz.5.889'. [ 663.257186][ T5997] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 663.401299][ T9451] lo speed is unknown, defaulting to 1000 [ 663.524952][ T5997] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x68, changing to 0x8 [ 663.607523][ T5997] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 36872, setting to 1024 [ 663.625491][ T5997] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 663.635941][ T5997] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 663.666789][ T5880] Bluetooth: hci4: command tx timeout [ 663.680247][ T5997] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 663.691397][ T5997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 663.699710][ T5997] usb 5-1: Product: syz [ 663.704480][ T5997] usb 5-1: Manufacturer: syz [ 663.709654][ T5997] usb 5-1: SerialNumber: syz [ 663.736806][ T9459] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 663.876715][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.917114][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.972170][ T5997] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 663.998927][ T7713] hsr_slave_0: left promiscuous mode [ 664.045392][ T7713] hsr_slave_1: left promiscuous mode [ 664.054162][ T7713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.076612][ T7713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.088840][ T7713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.102716][ T7713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.339034][ T7713] veth1_macvtap: left promiscuous mode [ 664.340175][ C1] usblp0: nonzero write bulk status received: -71 [ 664.344628][ T7713] veth0_macvtap: left promiscuous mode [ 664.356804][ T7713] veth1_vlan: left promiscuous mode [ 664.361742][ T5952] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 664.363908][ T9459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.441527][ T9459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.517420][ T7713] veth0_vlan: left promiscuous mode [ 664.519473][ T5952] usb 2-1: device descriptor read/64, error -71 [ 664.758407][ T5828] usb 5-1: USB disconnect, device number 31 [ 664.791382][ T5828] usblp0: removed [ 664.867147][ T5952] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 665.014852][ T5952] usb 2-1: device descriptor read/64, error -71 [ 665.135466][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.5.894'. [ 665.152711][ T5952] usb usb2-port1: attempt power cycle [ 665.437584][ T5997] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 665.607145][ T5952] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 665.719022][ T5952] usb 2-1: device descriptor read/8, error -71 [ 665.726030][ T5997] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.736690][ T5997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 665.751949][ T5997] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 665.753092][ T5880] Bluetooth: hci4: command tx timeout [ 665.761875][ T5997] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 665.765004][ T5997] usb 6-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 665.806485][ T7713] team0 (unregistering): Port device team_slave_1 removed [ 665.825840][ T5997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.835990][ T5997] usb 6-1: Product: syz [ 665.842474][ T5997] usb 6-1: Manufacturer: syz [ 665.848354][ T5997] usb 6-1: SerialNumber: syz [ 665.866661][ T5997] usb 6-1: config 0 descriptor?? [ 665.876646][ T5997] kvaser_usb 6-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 665.889970][ T7713] team0 (unregistering): Port device team_slave_0 removed [ 665.957232][ T5952] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 665.982288][ T5952] usb 2-1: device descriptor read/8, error -71 [ 666.038155][ T5977] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 666.100885][ T5952] usb usb2-port1: unable to enumerate USB device [ 666.229074][ T5977] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 666.239964][ T5977] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 666.249969][ T5977] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 666.265805][ T5977] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 666.275293][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.283454][ T5977] usb 5-1: Product: syz [ 666.288599][ T5977] usb 5-1: Manufacturer: syz [ 666.293343][ T5977] usb 5-1: SerialNumber: syz [ 666.546010][ T5977] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 666.655363][ T9] usb 6-1: USB disconnect, device number 6 [ 666.689577][ T5944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.716072][ T5944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.749710][ T5982] usb 5-1: USB disconnect, device number 32 [ 666.778522][ T5982] usblp0: removed [ 667.005036][ T9490] fuse: Bad value for 'fd' [ 667.055583][ T9451] chnl_net:caif_netlink_parms(): no params data found [ 667.817684][ T5880] Bluetooth: hci4: command tx timeout [ 668.093833][ T9451] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.118648][ T9504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 668.136010][ T9451] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.292430][ T9451] bridge_slave_0: entered allmulticast mode [ 668.315468][ T9451] bridge_slave_0: entered promiscuous mode [ 668.351775][ T9451] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.387860][ T9451] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.412423][ T9451] bridge_slave_1: entered allmulticast mode [ 668.431747][ T9451] bridge_slave_1: entered promiscuous mode [ 668.663161][ T9451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.666756][ T9518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 668.690159][ T9451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.044955][ T9451] team0: Port device team_slave_0 added [ 669.109281][ T9451] team0: Port device team_slave_1 added [ 669.123960][ T9526] fuse: Bad value for 'fd' [ 669.240687][ T9527] trusted_key: encrypted_key: insufficient parameters specified [ 669.800462][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.837301][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.897766][ T5880] Bluetooth: hci4: command tx timeout [ 669.904010][ T9451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.928154][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.938606][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.037369][ T9451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.818846][ T9451] hsr_slave_0: entered promiscuous mode [ 670.826028][ T9451] hsr_slave_1: entered promiscuous mode [ 670.834497][ T9451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 670.842616][ T9451] Cannot create hsr debugfs directory [ 671.047077][ T30] audit: type=1800 audit(1750400055.392:184): pid=9540 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.911" name="bus" dev="overlay" ino=1406 res=0 errno=0 [ 672.542482][ T9550] netlink: 'syz.5.914': attribute type 4 has an invalid length. [ 672.578364][ T9550] netlink: 'syz.5.914': attribute type 4 has an invalid length. [ 672.602615][ T9550] netlink: 'syz.5.914': attribute type 4 has an invalid length. [ 672.651986][ T9553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 672.689334][ T9553] overlayfs: failed to resolve './file0': -2 [ 672.977645][ T9550] netlink: 'syz.5.914': attribute type 4 has an invalid length. [ 673.127514][ T9550] netlink: 'syz.5.914': attribute type 4 has an invalid length. [ 673.135249][ T9550] netlink: 'syz.5.914': attribute type 4 has an invalid length. [ 673.185205][ T9550] netlink: 'syz.5.914': attribute type 4 has an invalid length. [ 673.237492][ T9550] netlink: 'syz.5.914': attribute type 4 has an invalid length. [ 673.245252][ T9550] netlink: 'syz.5.914': attribute type 4 has an invalid length. [ 673.345337][ T9562] overlayfs: failed to resolve './file0': -2 [ 673.347427][ T9550] netlink: 'syz.5.914': attribute type 4 has an invalid length. [ 673.811373][ T9565] fuse: Bad value for 'fd' [ 673.877473][ T9564] netlink: 3 bytes leftover after parsing attributes in process `syz.1.916'. [ 674.379501][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.920'. [ 674.421429][ T9569] netlink: 36 bytes leftover after parsing attributes in process `syz.4.920'. [ 674.525796][ T9569] bridge0: port 3(vlan2) entered blocking state [ 674.533350][ T9569] bridge0: port 3(vlan2) entered disabled state [ 674.540152][ T9569] vlan2: entered allmulticast mode [ 675.577227][ T9569] bridge0: entered allmulticast mode [ 676.478479][ T9569] vlan2: left allmulticast mode [ 676.483426][ T9569] bridge0: left allmulticast mode [ 676.550420][ T5977] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 676.838715][ T9583] loop6: detected capacity change from 0 to 7 [ 676.874859][ T6196] Dev loop6: unable to read RDB block 7 [ 676.907821][ T6196] loop6: unable to read partition table [ 676.914543][ T6196] loop6: partition table beyond EOD, truncated [ 676.923718][ T5977] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 676.933360][ T5977] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 676.944330][ T5977] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 676.962330][ T5977] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 676.965792][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 676.982800][ C1] buffer_io_error: 50 callbacks suppressed [ 676.982816][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 677.003968][ T9587] loop6: detected capacity change from 7 to 0 [ 677.414232][ T9451] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 677.423242][ T9583] ldm_validate_partition_table(): Disk read failed. [ 677.547863][ T9451] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 677.568831][ T9583] Dev loop6: unable to read RDB block 0 [ 677.574464][ T9583] loop6: unable to read partition table [ 677.604512][ T9451] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 677.646334][ T9583] loop6: partition table beyond EOD, truncated [ 677.685805][ T5977] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 677.701754][ T9451] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 677.703570][ T9583] loop_reread_partitions: partition scan of loop6 (8c6iaƍ<>}sCp4sB4@μC8 [ 677.703570][ T9583] :,<~tB) failed (rc=-5) [ 677.734720][ T5977] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 677.744291][ T5977] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 677.779888][ T5977] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 677.803446][ T5977] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 677.816923][ T5977] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 677.837022][ T5977] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 677.853584][ T5977] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 677.868182][ T9602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 677.882451][ T9602] overlayfs: failed to resolve './file0': -2 [ 677.949815][ T9604] validate_nla: 44 callbacks suppressed [ 677.949828][ T9604] netlink: 'syz.4.926': attribute type 11 has an invalid length. [ 677.987905][ T5977] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 678.010226][ T5977] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 678.021643][ T5977] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 678.036394][ T5977] usb 7-1: string descriptor 0 read error: -22 [ 678.043032][ T5977] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 678.077685][ T5977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.169833][ T5977] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 678.442079][ T5977] usb 7-1: USB disconnect, device number 2 [ 678.692248][ T9451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.084294][ T9451] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.419376][ T1533] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.426749][ T1533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.501497][ T9619] fuse: Unknown parameter '0x0000000000000005' [ 679.508697][ T2134] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.515894][ T2134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.969344][ T9626] netlink: 40 bytes leftover after parsing attributes in process `syz.6.932'. [ 680.532544][ T30] audit: type=1326 audit(1750400064.372:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 680.902491][ T30] audit: type=1326 audit(1750400064.372:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 680.924312][ T30] audit: type=1326 audit(1750400064.372:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 680.945951][ T30] audit: type=1326 audit(1750400064.372:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 680.997728][ T30] audit: type=1326 audit(1750400065.242:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 681.162804][ T30] audit: type=1326 audit(1750400065.262:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 681.661773][ T30] audit: type=1326 audit(1750400065.262:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 681.752476][ T30] audit: type=1326 audit(1750400065.262:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 681.912403][ T30] audit: type=1326 audit(1750400065.262:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 681.951491][ T30] audit: type=1326 audit(1750400065.262:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 682.841321][ T9645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 682.877444][ T9645] overlayfs: failed to resolve './file0': -2 [ 682.923267][ T9451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.640762][ T9451] veth0_vlan: entered promiscuous mode [ 683.677133][ T9451] veth1_vlan: entered promiscuous mode [ 683.798725][ T9652] netlink: 20 bytes leftover after parsing attributes in process `syz.5.935'. [ 684.074038][ T9451] veth0_macvtap: entered promiscuous mode [ 684.117439][ T9451] veth1_macvtap: entered promiscuous mode [ 684.202795][ T9451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.264282][ T9451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.310493][ T9451] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.355868][ T9451] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.375300][ T9451] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.404960][ T9451] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.572352][ T9659] loop7: detected capacity change from 0 to 16384 [ 684.875806][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.943'. [ 685.057343][ T9659] netlink: 'syz.5.943': attribute type 6 has an invalid length. [ 685.386622][ T9665] fuse: Unknown parameter '0x0000000000000005' [ 688.268357][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.274825][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.821921][ T1533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.847604][ T1533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.901796][ T9677] netlink: 40 bytes leftover after parsing attributes in process `syz.6.947'. [ 688.921523][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 688.921634][ T30] audit: type=1326 audit(1750400073.281:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9673 comm="syz.6.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 688.948436][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.965625][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.039464][ T30] audit: type=1326 audit(1750400073.291:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9673 comm="syz.6.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 689.134361][ T30] audit: type=1326 audit(1750400073.291:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9673 comm="syz.6.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 689.354482][ T30] audit: type=1326 audit(1750400073.291:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9673 comm="syz.6.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 689.386913][ T30] audit: type=1326 audit(1750400073.331:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9673 comm="syz.6.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 690.200152][ T30] audit: type=1326 audit(1750400073.331:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9673 comm="syz.6.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 690.222779][ T30] audit: type=1326 audit(1750400073.331:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9673 comm="syz.6.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 690.271824][ T30] audit: type=1326 audit(1750400073.331:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9673 comm="syz.6.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 690.362940][ T30] audit: type=1326 audit(1750400073.331:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9673 comm="syz.6.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 690.421056][ T30] audit: type=1326 audit(1750400073.331:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9673 comm="syz.6.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6eb9f8e929 code=0x7ffc0000 [ 690.598514][ T5828] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 690.613190][ T6119] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.778473][ T5828] usb 7-1: Using ep0 maxpacket: 16 [ 690.794084][ T5828] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 690.815769][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.827723][ T5828] usb 7-1: Product: syz [ 690.846137][ T5828] usb 7-1: Manufacturer: syz [ 690.888767][ T6119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.908164][ T5828] usb 7-1: SerialNumber: syz [ 690.949215][ T5828] usb 7-1: config 0 descriptor?? [ 691.057662][ T6119] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.187091][ T5945] usb 7-1: USB disconnect, device number 3 [ 691.195675][ T6119] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.396057][ T6119] bridge_slave_1: left allmulticast mode [ 691.404177][ T6119] bridge_slave_1: left promiscuous mode [ 691.411418][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.435215][ T6119] bridge_slave_0: left allmulticast mode [ 691.442412][ T6119] bridge_slave_0: left promiscuous mode [ 691.455209][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.982725][ T6119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.306972][ T6119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.386654][ T6119] bond0 (unregistering): Released all slaves [ 692.577052][ T9707] fuse: Unknown parameter '0x0000000000000005' [ 692.807881][ T9710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.953'. [ 692.860156][ T6084] block nbd0: Possible stuck request ffff888025777000: control (read@0,4096B). Runtime 120 seconds [ 694.039099][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 694.058403][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 694.066995][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 694.094959][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 694.108436][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 694.178407][ T9715] lo speed is unknown, defaulting to 1000 [ 694.465212][ T6119] hsr_slave_0: left promiscuous mode [ 694.471855][ T6119] hsr_slave_1: left promiscuous mode [ 694.477974][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.487216][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.520208][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.527684][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.578383][ T5997] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 694.645819][ T6119] veth1_macvtap: left promiscuous mode [ 694.674640][ T6119] veth0_macvtap: left promiscuous mode [ 694.700298][ T6119] veth1_vlan: left promiscuous mode [ 694.705817][ T6119] veth0_vlan: left promiscuous mode [ 694.759757][ T5997] usb 6-1: device descriptor read/64, error -71 [ 695.008578][ T5997] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 695.035360][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 695.166628][ T5997] usb 6-1: device descriptor read/64, error -71 [ 695.330892][ T5997] usb usb6-port1: attempt power cycle [ 695.331245][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 695.570494][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 695.607171][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.631616][ T9] usb 5-1: Product: syz [ 695.636008][ T9] usb 5-1: Manufacturer: syz [ 695.645930][ T9] usb 5-1: SerialNumber: syz [ 695.774757][ T5997] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 695.781092][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 695.806759][ T9] r8152-cfgselector 5-1: config 0 descriptor?? [ 695.808989][ T5997] usb 6-1: device descriptor read/8, error -71 [ 696.337546][ T5871] Bluetooth: hci4: command tx timeout [ 696.571584][ T5997] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 696.608027][ T5997] usb 6-1: device descriptor read/8, error -71 [ 696.611925][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 696.621061][ T9] r8152-cfgselector 5-1: bad CDC descriptors [ 696.632124][ T9] r8152-cfgselector 5-1: USB disconnect, device number 33 [ 696.772288][ T5997] usb usb6-port1: unable to enumerate USB device [ 698.360023][ T9743] netlink: 588 bytes leftover after parsing attributes in process `syz.5.964'. [ 698.383239][ T5871] Bluetooth: hci4: command tx timeout [ 698.648703][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 698.824923][ T9] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 699.108531][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.166190][ T9] usb 6-1: config 0 has no interface number 0 [ 699.182776][ T9] usb 6-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 699.201611][ T9] usb 6-1: New USB device found, idVendor=05c6, idProduct=9035, bcdDevice=26.4c [ 699.214306][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.341552][ T9] usb 6-1: Product: syz [ 699.346556][ T9] usb 6-1: Manufacturer: syz [ 699.351474][ T9] usb 6-1: SerialNumber: syz [ 699.369128][ T9] usb 6-1: config 0 descriptor?? [ 699.380138][ T9] qmi_wwan 6-1:0.4: probe with driver qmi_wwan failed with error -22 [ 700.702778][ T5871] Bluetooth: hci4: command tx timeout [ 701.033326][ T6119] team0 (unregistering): Port device team_slave_1 removed [ 701.237705][ T6119] team0 (unregistering): Port device team_slave_0 removed [ 701.556452][ T9] usb 6-1: USB disconnect, device number 11 [ 702.794454][ T5871] Bluetooth: hci4: command tx timeout [ 707.018613][ T5997] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 707.838792][ T5997] usb 6-1: device descriptor read/64, error -71 [ 708.231415][ T5997] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 708.270352][ T9715] chnl_net:caif_netlink_parms(): no params data found [ 708.389534][ T5997] usb 6-1: device descriptor read/64, error -71 [ 708.502718][ T5997] usb usb6-port1: attempt power cycle [ 708.958727][ T5997] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 709.149830][ T5997] usb 6-1: device descriptor read/8, error -71 [ 709.221893][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.246464][ T9715] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.763299][ T9715] bridge_slave_0: entered allmulticast mode [ 709.784630][ T9715] bridge_slave_0: entered promiscuous mode [ 709.798407][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.808202][ T9715] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.816081][ T9715] bridge_slave_1: entered allmulticast mode [ 709.828114][ T9715] bridge_slave_1: entered promiscuous mode [ 709.873208][ T5997] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 710.075921][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 710.075940][ T30] audit: type=1326 audit(1750400094.431:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.5.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530998e929 code=0x7ffc0000 [ 710.098689][ T5997] usb 6-1: device not accepting address 15, error -71 [ 710.114776][ T30] audit: type=1326 audit(1750400094.461:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.5.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f530998e929 code=0x7ffc0000 [ 710.200800][ T30] audit: type=1326 audit(1750400094.461:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.5.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530998e929 code=0x7ffc0000 [ 710.348720][ T5997] usb usb6-port1: unable to enumerate USB device [ 710.389107][ T9715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.399476][ T30] audit: type=1326 audit(1750400094.461:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.5.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530998e929 code=0x7ffc0000 [ 710.442838][ T9715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.480190][ T30] audit: type=1326 audit(1750400094.461:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.5.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f530998e929 code=0x7ffc0000 [ 710.716271][ T30] audit: type=1326 audit(1750400094.501:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.5.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530998e929 code=0x7ffc0000 [ 711.975236][ T30] audit: type=1326 audit(1750400094.501:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.5.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530998e929 code=0x7ffc0000 [ 712.002659][ T30] audit: type=1326 audit(1750400094.501:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.5.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f530998e929 code=0x7ffc0000 [ 712.079360][ T30] audit: type=1326 audit(1750400094.501:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.5.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530998e929 code=0x7ffc0000 [ 712.171767][ T30] audit: type=1326 audit(1750400094.501:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.5.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530998e929 code=0x7ffc0000 [ 712.277091][ T9715] team0: Port device team_slave_0 added [ 712.315215][ T9715] team0: Port device team_slave_1 added [ 712.431978][ T9715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.449984][ T9715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.480557][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.987'. [ 712.528683][ T9715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.574320][ T9715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.590912][ T9715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.759077][ T9715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.036732][ T9715] hsr_slave_0: entered promiscuous mode [ 713.084606][ T9715] hsr_slave_1: entered promiscuous mode [ 713.138247][ T9715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 713.153266][ T9715] Cannot create hsr debugfs directory [ 714.353056][ T9715] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 714.412130][ T9715] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 714.476836][ T9715] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 714.774382][ T9715] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 715.039830][ T5997] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 715.453781][ T5997] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 715.516891][ T9863] new mount options do not match the existing superblock, will be ignored [ 715.554859][ T9863] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 716.180754][ T5997] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 716.291179][ T9715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.309148][ T5997] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 716.317665][ T9715] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.367731][ T5997] usb 5-1: config 0 interface 0 has no altsetting 0 [ 716.370370][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.381920][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.407302][ T5997] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 716.472279][ T5997] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 716.498035][ T5997] usb 5-1: config 0 interface 0 has no altsetting 0 [ 716.513555][ T2134] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.520907][ T2134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.565369][ T5997] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 716.633008][ T5997] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 716.757359][ T5997] usb 5-1: config 0 interface 0 has no altsetting 0 [ 716.832013][ T5997] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 716.950340][ T5997] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.170787][ T5997] usb 5-1: config 0 interface 0 has no altsetting 0 [ 717.208962][ T5997] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.913842][ T5997] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.925023][ T5997] usb 5-1: config 0 interface 0 has no altsetting 0 [ 718.364453][ T5997] usb 5-1: unable to read config index 5 descriptor/start: -71 [ 718.389266][ T5997] usb 5-1: can't read configurations, error -71 [ 718.952009][ T9884] netlink: 588 bytes leftover after parsing attributes in process `syz.5.999'. [ 719.434795][ T5871] Bluetooth: hci5: command 0x0406 tx timeout [ 720.965419][ T9905] fuse: Unknown parameter 'fd0x0000000000000005' [ 722.280195][ T9909] overlayfs: unescaped trailing colons in lowerdir mount option. [ 722.325053][ T9715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.390392][ T9909] evm: overlay not supported [ 722.464141][ T9715] veth0_vlan: entered promiscuous mode [ 722.488695][ T9715] veth1_vlan: entered promiscuous mode [ 722.521502][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1008'. [ 722.557349][ T9715] veth0_macvtap: entered promiscuous mode [ 722.586924][ T9715] veth1_macvtap: entered promiscuous mode [ 722.772713][ T9715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.936951][ T9715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.945885][ T6084] block nbd0: Possible stuck request ffff888025777000: control (read@0,4096B). Runtime 150 seconds [ 722.969328][ T9715] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.978127][ T9715] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.988116][ T9715] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.692666][ T9715] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.561252][ T5944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.635742][ T5944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.906476][ T1533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.955876][ T1533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.603437][ T9938] netlink: 588 bytes leftover after parsing attributes in process `syz.5.1013'. [ 729.843888][ T6013] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.980358][ T31] INFO: task syz.0.703:8540 blocked for more than 143 seconds. [ 729.988316][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 730.017243][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 730.039046][ T31] task:syz.0.703 state:D stack:26056 pid:8540 tgid:8538 ppid:5875 task_flags:0x400140 flags:0x00004004 [ 730.064591][ T31] Call Trace: [ 730.072072][ T31] [ 730.078515][ T31] __schedule+0x16a2/0x4cb0 [ 730.085499][ T31] ? __lock_acquire+0xa80/0xd20 [ 730.089275][ T5952] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 730.090543][ T31] ? schedule+0x165/0x360 [ 730.102743][ T31] ? __pfx___schedule+0x10/0x10 [ 730.107735][ T31] ? schedule+0x91/0x360 [ 730.112168][ T31] schedule+0x165/0x360 [ 730.116446][ T31] schedule_preempt_disabled+0x13/0x30 [ 730.125451][ T31] __mutex_lock+0x724/0xe80 [ 730.130171][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.136438][ T31] ? __mutex_lock+0x51b/0xe80 [ 730.141780][ T31] ? bdev_release+0x1a9/0x650 [ 730.146667][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 730.152063][ T31] ? __asan_memset+0x22/0x50 [ 730.156766][ T31] ? __pfx___fsnotify_parent+0x10/0x10 [ 730.162367][ T31] ? do_raw_spin_lock+0x121/0x290 [ 730.167497][ T31] bdev_release+0x1a9/0x650 [ 730.172310][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 730.177620][ T31] blkdev_release+0x15/0x20 [ 730.182276][ T31] __fput+0x44c/0xa70 [ 730.186388][ T31] task_work_run+0x1d1/0x260 [ 730.191149][ T31] ? __pfx_task_work_run+0x10/0x10 [ 730.196427][ T31] ? __fget_files+0x2a/0x420 [ 730.201209][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 730.206911][ T31] exit_to_user_mode_loop+0xec/0x110 [ 730.212505][ T31] do_syscall_64+0x2bd/0x3b0 [ 730.217106][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.225881][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.232058][ T31] ? clear_bhb_loop+0x60/0xb0 [ 730.236811][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.243004][ T31] RIP: 0033:0x7f687f78e929 [ 730.247549][ T31] RSP: 002b:00007f68805fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 730.256052][ T31] RAX: 0000000000000000 RBX: 00007f687f9b5fa0 RCX: 00007f687f78e929 [ 730.259181][ T5952] usb 7-1: Using ep0 maxpacket: 8 [ 730.264127][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 730.277195][ T31] RBP: 00007f687f810b39 R08: 0000000000000000 R09: 0000000000000000 [ 730.281908][ T5952] usb 7-1: unable to get BOS descriptor or descriptor too short [ 730.285380][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.301238][ T31] R13: 0000000000000000 R14: 00007f687f9b5fa0 R15: 00007ffe1862cf08 [ 730.301894][ T5952] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 730.309750][ T31] [ 730.319532][ T31] [ 730.319532][ T31] Showing all locks held in the system: [ 730.328318][ T5952] usb 7-1: config 1 interface 0 has no altsetting 0 [ 730.335871][ T31] 1 lock held by khungtaskd/31: [ 730.345311][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 730.354228][ T5952] usb 7-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 730.355846][ T31] 2 locks held by getty/5584: [ 730.369278][ T31] #0: ffff88803121c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 730.379528][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 730.390072][ T31] 2 locks held by syz-executor/5864: [ 730.395543][ T31] #0: ffff88807e36a0e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 730.396776][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.407874][ T31] #1: [ 730.414694][ T5952] usb 7-1: Product: syz [ 730.418553][ T31] ffffffff8e1448b8 [ 730.421707][ T5952] usb 7-1: Manufacturer: syz [ 730.421727][ T5952] usb 7-1: SerialNumber: syz [ 730.438200][ T31] (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 730.447740][ T31] 1 lock held by udevd/5917: [ 730.452761][ T31] #0: ffff888025729358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 730.462699][ T31] 4 locks held by kworker/1:5/5952: [ 730.468138][ T31] #0: ffff8880212bed48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 730.479733][ T31] #1: ffffc90005117bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 730.495669][ T31] #2: ffff888028d3c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 730.504827][ T31] #3: ffff888047a1d198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 730.514415][ T31] 8 locks held by kworker/u8:6/6013: [ 730.520006][ T31] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 730.534207][ T31] #1: ffffc90005247bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 730.545076][ T31] #2: ffffffff8f4f1410 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 730.554812][ T31] #3: ffff888079f260e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 730.565237][ T31] #4: ffff888079f25250 (&devlink->lock_key#14){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 730.576446][ T31] #5: ffffffff8f4fe008 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xdb/0x670 [ 730.585866][ T31] #6: ffff88805645cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xe91/0x2320 [ 730.598205][ T31] #7: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 730.609361][ T31] 1 lock held by syz.0.703/8540: [ 730.614338][ T31] #0: ffff888025729358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 730.625166][ T31] 1 lock held by syz.3.829/9193: [ 730.638777][ T31] #0: ffff888025729358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 730.657941][ T6013] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.664653][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1018'. [ 730.699921][ T31] [ 730.702314][ T31] ============================================= [ 730.702314][ T31] [ 730.712804][ T31] NMI backtrace for cpu 0 [ 730.712825][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 730.712849][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 730.712860][ T31] Call Trace: [ 730.712868][ T31] [ 730.712877][ T31] dump_stack_lvl+0x189/0x250 [ 730.712909][ T31] ? __wake_up_klogd+0xd9/0x110 [ 730.712931][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 730.712957][ T31] ? __pfx__printk+0x10/0x10 [ 730.712991][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 730.713029][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 730.713048][ T31] ? _printk+0xcf/0x120 [ 730.713071][ T31] ? __pfx__printk+0x10/0x10 [ 730.713091][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 730.713118][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 730.713144][ T31] watchdog+0xfee/0x1030 [ 730.713170][ T31] ? watchdog+0x1de/0x1030 [ 730.713203][ T31] kthread+0x70e/0x8a0 [ 730.713225][ T31] ? __pfx_watchdog+0x10/0x10 [ 730.713247][ T31] ? __pfx_kthread+0x10/0x10 [ 730.713267][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 730.713292][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.713317][ T31] ? __pfx_kthread+0x10/0x10 [ 730.713337][ T31] ret_from_fork+0x3f9/0x770 [ 730.713363][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 730.713394][ T31] ? __switch_to_asm+0x39/0x70 [ 730.713410][ T31] ? __switch_to_asm+0x33/0x70 [ 730.713425][ T31] ? __pfx_kthread+0x10/0x10 [ 730.713444][ T31] ret_from_fork_asm+0x1a/0x30 [ 730.713479][ T31] [ 730.713486][ T31] Sending NMI from CPU 0 to CPUs 1: [ 730.877648][ C1] NMI backtrace for cpu 1 [ 730.877664][ C1] CPU: 1 UID: 0 PID: 9956 Comm: syz.6.1018 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 730.877683][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 730.877692][ C1] RIP: 0010:__lock_acquire+0x73a/0xd20 [ 730.877716][ C1] Code: 81 00 00 00 83 fb 31 0f 83 e0 05 00 00 48 8d 04 9b 45 8b 66 20 48 8b 4c 24 10 8b 44 c1 f8 44 31 e0 25 00 60 00 00 31 c9 89 c2 da 48 19 c9 49 09 cf 85 c0 b8 01 00 00 00 0f 45 e8 eb 4b 48 89 [ 730.877733][ C1] RSP: 0018:ffffc90002e871e8 EFLAGS: 00000046 [ 730.877748][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 730.877758][ C1] RDX: 0000000000000000 RSI: ffff88802bf16568 RDI: ffff88802bf15a00 [ 730.877768][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81729af5 [ 730.877777][ C1] R10: ffffc90002e87438 R11: ffffffff81acf5a0 R12: 0000000000020007 [ 730.877788][ C1] R13: 0000000000000001 R14: ffff88802bf16568 R15: edf85aaa753b9be8 [ 730.877799][ C1] FS: 00007f6eb7df66c0(0000) GS:ffff888125d85000(0000) knlGS:0000000000000000 [ 730.877812][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 730.877823][ C1] CR2: 00007f6eb7df5f98 CR3: 0000000079c08000 CR4: 00000000003526f0 [ 730.877839][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 730.877848][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 730.877857][ C1] Call Trace: [ 730.877864][ C1] [ 730.877873][ C1] ? unwind_next_frame+0xa5/0x2390 [ 730.877894][ C1] lock_acquire+0x120/0x360 [ 730.877912][ C1] ? unwind_next_frame+0xa5/0x2390 [ 730.877933][ C1] ? unwind_next_frame+0xa5/0x2390 [ 730.877951][ C1] ? anon_vma_fork+0x1f1/0x500 [ 730.877970][ C1] ? unwind_next_frame+0xa5/0x2390 [ 730.877988][ C1] unwind_next_frame+0xc2/0x2390 [ 730.878006][ C1] ? unwind_next_frame+0xa5/0x2390 [ 730.878027][ C1] ? unwind_next_frame+0xa5/0x2390 [ 730.878045][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 730.878064][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 730.878081][ C1] arch_stack_walk+0x11c/0x150 [ 730.878104][ C1] ? anon_vma_fork+0x1f1/0x500 [ 730.878122][ C1] stack_trace_save+0x9c/0xe0 [ 730.878136][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 730.878152][ C1] ? __lock_acquire+0xab9/0xd20 [ 730.878171][ C1] kasan_save_track+0x3e/0x80 [ 730.878186][ C1] ? kasan_save_track+0x3e/0x80 [ 730.878200][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 730.878215][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 730.878231][ C1] ? anon_vma_fork+0x1f1/0x500 [ 730.878273][ C1] ? anon_vma_fork+0x1f1/0x500 [ 730.878291][ C1] __kasan_slab_alloc+0x6c/0x80 [ 730.878307][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 730.878323][ C1] ? anon_vma_fork+0x1f1/0x500 [ 730.878342][ C1] anon_vma_fork+0x1f1/0x500 [ 730.878362][ C1] dup_mmap+0x9eb/0x1ac0 [ 730.878387][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 730.878408][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 730.878428][ C1] ? mm_init+0xca7/0xf00 [ 730.878451][ C1] copy_mm+0x13c/0x4b0 [ 730.878471][ C1] copy_process+0x1706/0x3c00 [ 730.878490][ C1] ? page_table_check_set+0x18d/0x730 [ 730.878514][ C1] ? copy_process+0x97f/0x3c00 [ 730.878537][ C1] ? __pfx_copy_process+0x10/0x10 [ 730.878558][ C1] ? __handle_mm_fault+0x3ce3/0x5620 [ 730.878577][ C1] kernel_clone+0x224/0x7f0 [ 730.878591][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 730.878613][ C1] __x64_sys_clone+0x18b/0x1e0 [ 730.878626][ C1] ? count_memcg_event_mm+0x21/0x260 [ 730.878642][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 730.878663][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 730.878682][ C1] ? do_syscall_64+0xbe/0x3b0 [ 730.878704][ C1] do_syscall_64+0xfa/0x3b0 [ 730.878723][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.878742][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.878757][ C1] ? clear_bhb_loop+0x60/0xb0 [ 730.878773][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.878787][ C1] RIP: 0033:0x7f6eb9f8e929 [ 730.878799][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.878811][ C1] RSP: 002b:00007f6eb7df5fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 730.878826][ C1] RAX: ffffffffffffffda RBX: 00007f6eba1b6080 RCX: 00007f6eb9f8e929 [ 730.878837][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000008a000000 [ 730.878847][ C1] RBP: 00007f6eba010b39 R08: 0000000000000000 R09: 0000000000000000 [ 730.878856][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 730.878866][ C1] R13: 0000000000000001 R14: 00007f6eba1b6080 R15: 00007ffd91570b98 [ 730.878882][ C1] [ 730.880305][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 730.880322][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 730.880343][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 730.880354][ T31] Call Trace: [ 730.880362][ T31] [ 730.880370][ T31] dump_stack_lvl+0x99/0x250 [ 730.880397][ T31] ? __asan_memcpy+0x40/0x70 [ 730.880415][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 730.880438][ T31] ? __pfx__printk+0x10/0x10 [ 730.880468][ T31] panic+0x2db/0x790 [ 730.880496][ T31] ? __pfx_panic+0x10/0x10 [ 730.880518][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 730.880536][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 730.880564][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 730.880586][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 730.880614][ T31] watchdog+0x102d/0x1030 [ 730.880638][ T31] ? watchdog+0x1de/0x1030 [ 730.880667][ T31] kthread+0x70e/0x8a0 [ 730.880688][ T31] ? __pfx_watchdog+0x10/0x10 [ 730.880708][ T31] ? __pfx_kthread+0x10/0x10 [ 730.880728][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 730.880749][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.880770][ T31] ? __pfx_kthread+0x10/0x10 [ 730.880790][ T31] ret_from_fork+0x3f9/0x770 [ 730.880814][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 730.880841][ T31] ? __switch_to_asm+0x39/0x70 [ 730.880857][ T31] ? __switch_to_asm+0x33/0x70 [ 730.880872][ T31] ? __pfx_kthread+0x10/0x10 [ 730.880891][ T31] ret_from_fork_asm+0x1a/0x30 [ 730.880923][ T31] [ 731.490569][ T31] Kernel Offset: disabled [ 731.494893][ T31] Rebooting in 86400 seconds..