last executing test programs: 7m19.192078547s ago: executing program 2 (id=3): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40100) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000000c0)={0x1}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x1bc) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) bind$ax25(r2, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r4 = memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futimesat(r4, 0x0, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 7m17.90252868s ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000680)={0x0, 0x0, "da21d5f9c5233fb7bb6b2f07c34b85a3bf3fe815dc3003f71ca20a5aad350c89c4e29e662b98d3356599be5db942a309e75eb86cb7a9ffdb2ac17e4da2b112f5deb58b2479e7e846e96debefec72a8da91358e5e09e86a0953671a47f066a68fb822823e2ec49044aa835862478e6070dd092b21a08c1096de2c1749de9c168992e48df6a7fd2e25cb10870c6b77ba1d03c5d87ef13868c81474250164efa340d910f5521189c0d184cfef7091ff1e1f92a732780871ea2883469ed02deab38ce95e3d0ed690f507cef60132cb4f32af684cbfb07bc00a7bdb8ea5ab44b81dc3893602e745d438f06c265b8cc8bca39cbf75ee58f013b97027bc8d9ce9c11608", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001680)={r1, 0xe}) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) 7m15.964376924s ago: executing program 2 (id=14): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4]) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x20, 0x81, {{0x1b, 0x4, 0x3, 0x0, 0x6c, 0x64, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x9}, {[@end, @ssrr={0x89, 0x13, 0xc2, [@empty, @local, @multicast2, @multicast1]}, @timestamp_addr={0x44, 0x44, 0xf4, 0x1, 0xd, [{@broadcast, 0xfffffffe}, {@rand_addr=0x64010101, 0x7}, {@rand_addr=0x64010102, 0xf}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@broadcast, 0xf}, {@multicast2, 0x8}, {@empty, 0x9}]}]}}}}}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='gid_map\x00') writev(r6, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000000000)=""/23, &(0x7f00000000c0)=0x17) 7m15.549850467s ago: executing program 2 (id=15): getpid() socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x29bc, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = inotify_init1(0x800) ioctl$int_in(r6, 0x5452, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom$inet6(r5, &(0x7f0000000080)=""/121, 0x79, 0x40010122, 0x0, 0x79) 7m14.012422992s ago: executing program 32 (id=15): getpid() socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x29bc, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = inotify_init1(0x800) ioctl$int_in(r6, 0x5452, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom$inet6(r5, &(0x7f0000000080)=""/121, 0x79, 0x40010122, 0x0, 0x79) 6m21.424819895s ago: executing program 3 (id=104): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x2, 0x1, 0x10000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x2, 0x1, 0x200000000000000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'wg0\x00', {0x2}, 0xce2}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000280)={0x20, r6, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) ioctl$TIOCVHANGUP(r8, 0x5437, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0) 6m16.857726427s ago: executing program 3 (id=115): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000"], 0x48) syz_clone(0xa04c280, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f0000000180)='4\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getsockopt$SO_COOKIE(r0, 0x1, 0x4a, 0x0, &(0x7f0000000200)=0x39) 6m14.396060573s ago: executing program 3 (id=119): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x38, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x38}}, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000001c0)="1a0000000200", 0x6) socket$inet6(0xa, 0x3, 0x26) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x8040600) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x154) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) 6m13.268477073s ago: executing program 3 (id=122): ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port1\x00', 0x0, 0x276a7d747e57ca1c, 0x0, 0x0, 0x0, 0x0, 0x4}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000", 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) syz_usb_disconnect(0xffffffffffffffff) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) 6m10.932594853s ago: executing program 3 (id=127): ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port1\x00', 0x0, 0x276a7d747e57ca1c, 0x0, 0x0, 0x0, 0x0, 0x4}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000", 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) socketpair(0x18, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x1c, r5, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x113000, 0x0) syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_pidfd_open(0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) pidfd_getfd(r7, 0xffffffffffffffff, 0x0) 6m8.526853389s ago: executing program 3 (id=128): ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port1\x00', 0x0, 0x276a7d747e57ca1c, 0x0, 0x0, 0x0, 0x0, 0x4}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000", 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) socketpair(0x18, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x1c, r5, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x113000, 0x0) syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m52.711053014s ago: executing program 33 (id=128): ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port1\x00', 0x0, 0x276a7d747e57ca1c, 0x0, 0x0, 0x0, 0x0, 0x4}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000", 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) socketpair(0x18, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x1c, r5, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x113000, 0x0) syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m5.296607297s ago: executing program 4 (id=461): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = syz_open_dev$sndpcmc(&(0x7f000000c140), 0x3, 0x400000) r2 = syz_open_dev$usbfs(&(0x7f000000c180), 0x4, 0x101002) r3 = syz_open_dev$I2C(&(0x7f000000c1c0), 0x1, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x3, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x400}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}]}}}]}, 0x50}, 0x1, 0x2, 0x0, 0xed9e827024580d94}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c200)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f000000c240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb}}, './file0\x00'}) r8 = memfd_secret(0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r10 = accept4(r9, 0x0, 0x0, 0x0) sendto$l2tp(r10, &(0x7f0000000000)="f4a87c", 0x3, 0x20000843, 0x0, 0x0) recvmmsg$unix(r10, &(0x7f0000008a80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003900)=""/4096, 0x1000}], 0x1}}], 0x1, 0x12021, 0x0) sendmsg$kcm(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="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", 0xffd}], 0x1}, 0x24008010) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000000c280), 0x200, 0x0) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f000000c2c0), 0x100, 0x0) r13 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f000000c300), 0x12b000) r14 = dup(0xffffffffffffffff) pipe2(&(0x7f000000c340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r16 = syz_open_dev$amidi(&(0x7f000000c380), 0x8000000000000000, 0xc0400) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c4c0)=[{{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000005c0)="af10297c0d028571b9a7d90b7c87d0ba7f3120049ad57a2cfde2d6a11889c8a416234cbfa0ac0877795e504863e9cc13c2dd1afab76e5f5b3b1ea9bc59dde7f3036cbcb8fd7bac7259a77ff096bb486e3dca41d5c34b8be03339254d0263f1a47f09780a370500634a0486112aa01d51d2271c21be4c3572d7ebcf38b7a00f123e2a0972dd110cba9a02afdf189f2dd76154d331422299c89aa016106549dff3e45d6f68af45858c6ac3d3e30c967698f8279d3118bd98e34bca492d3d4a8b04fc1133eb87334bc8f255fc48126c7506636e", 0xd2}, {&(0x7f00000004c0)="8f437bf000dc1b86d36b38f28368a9", 0xf}, {&(0x7f00000006c0)="1e20ed9542855b77c82f36fd87efd0e364a43cf491736e2efa3d023375ef62f8f3fbd07821bd684caf65c0f710beedf9f51ed2d3f6e2c512ef84fda4f426d5128cde092f102aa1b0bca092f0ffb98cdc21f2d3315242d34e59f693572dc8ba8ebd34fbcd50965db90ff3bf8c14cab7a269bd4e5d034ef79e5aeffa58583e650295242dee3ac2f33cdc09d81e1a66210ef336cad73f8899aad32a4cbe597446a6e46d00b657607a8c7870ee9538052f24de4df78402c775c5132ad24bf125dae90d8f4a313b0e25e208343cd9687ca1f316608f9c06b70562d47920cd1661109fc62a4105e3ad3f2c0c6c", 0xea}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="b6afaa9f9356e753a0241f", 0xb}, {&(0x7f0000001800)="e91f5e4cf96788886c77feec2d703b76a155f237a71b05657188692fe2bf72458dc6f3755955ac16b1f35c4394cc31577a222de8d9808d7cc85f7be00beee5b63e63c8bb25dc815ecc2a5b4ddfd0ece03e7fb5c9c38bb6950cb166b67249a8cca52868b7dca1bbd81ef9c88ece63665b6a45ae269acc52a734fdea94748d0006f0370ebd76662565719591c36349dbc6603488a91c96cc772f66401ccdccf865b4fe4f7e9f011eb2407823f2d555b5d21101f9266c6163fcae206e97", 0xbc}, {&(0x7f00000018c0)="fb4e349d14702280019db7300c2809eafd59c3499ef4b60bd23cbf9b9cf5fdc60c46254477161b979009bc9d4435c86489ded5007959d78997", 0x39}, {&(0x7f0000001900)="1e56a3144d831cc67f5293d4278d1361ebaf04aaf2c032d4a869ef7776a7bc87261fb68bb41991ed43a5c73a2cce10cdf6076a7acb643c0272c0fdb07cc607333d2c08080fa8e6c6416ab999adf33185927b8016f059370161b29026ba5c066c4778b0b3a348a66f444a43", 0x6b}, {&(0x7f0000001980)="711b0b9f3826adb2d28b27fe0adbb6267cb9555c16ebb063620662aac2f1e13d48d44af78067a1f039a2cc19c690ee7bc129cf", 0x33}], 0x9, &(0x7f00000025c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{&(0x7f0000002740)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000028c0)=[{&(0x7f00000027c0)="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", 0xfb}], 0x1, &(0x7f0000007200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158, 0x82}}, {{&(0x7f0000007380)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000009680)=[{&(0x7f0000007400)="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", 0x1000}, {&(0x7f0000008400)="0b40798764e11f338bd87b2f171a94396af91d04596c4b1d68fd077631732ecae79853eec3292e836870ac7ee406195a467eb41f2f10129501afe117487ffb85aa0b0101b2263809b93af00e904316080571a83bf1dc92fab00b55949820bcbc6bc89819fef4a2ec6a484fcccb45604186e2b237bc183b22bae804b2392dde6f016b8755ea2714f16b4e16e73e8e181fd7b12cfc353e5e2d0e4c813e10449b97ccceb0961a1441", 0xa7}, {&(0x7f00000084c0)="b57b83e0648b1836762fd13687613324dff7854aee4314411e708c39de4d016e452e0994ab1fe5ccb8186e0ee25c9de429599b95c42168c93ab513565cbe0cd340a3c815d8890656e650f45493b0c4c9324e4e75d5ec948500e3208b8a0e07003b6daae8b684f0f1ffe2df70c16feebf4b1f210c9b0e2e8e5bfddba6f53897b92297078325a22d1b502af6f7d5bf4da907fd49ed5d788c1cec29308fa2e821ff4db9ea09d32c93f52845a00a270848f5bfa0ac637ba5db65fef680fe329e0bf092e57a1cc841261e5cef20", 0xcb}, {&(0x7f00000085c0)="001a5a98fd36e399c7699536515fb1d29a32777035644beb82246aeba02b5107c93c44ab095ff6460bc8c3e62cf7942896cb5a56431b2769c6e7e08064f0c36fbc0a0f7c7b43a21c59697dbe1afbe1c443f11591cad5b296576ca4e7eda78d0791cc003621cf6166c06e130322b3ab0153019bb97d34922b53ce1ea479572d92492b0be8", 0x84}, {&(0x7f0000008680)="4e1ce0960510eba73b3bb482e0386274fe39405833903b08691ceaaa296bbe89815edcea1e4983ebc0503c3d9b2c1d357709802dfbc590bf4c8235fce040bcc466929d476925577a873e0c964c4458da76c4b36a54248cf284261a0b548aa7b0df6c0d7c8d26bf3eb2e1c325d6bb419ce59ff9695762cb1b9a9c1267c458a9e7b0d9790c1f184e4ac3f5ad993f9e16902a187b88c44764f5b3827b49bfef31e9f6f783251d11d9340a42ba4bd5ef1f67fbb8b304b5c2bef24534ec5ff27700d793315e00df7406dd2eb70cd6dac1dc8529ff0ba139d7561d9bac47a44ebea844b402dfc18e0e0198f855a8b33ec539ee3818ed6a484281e0ba4dd540abfd18cc5ef9046438b9bb92855dffa68fc82be8d6859310683b974cda5f1aac072b27a5894058b0e46c6f880ad86119b3bd16dd6f4e16f5582d2bdf89a57995d931f13f9e4044364151224ecc1fc3d9c4f61946cabd79ee3bbdb8083f50715be4c119446efbc4978adfaf9afa846188b63c412ca1d06bef5cfde72f2d722ce246e3574fcb74fbf645fe5804b354bfa96f477e4b14cc2aa30316ed0e986dfcaae22cfc8f1d4705a4b853e94d16b2cf3533c8c35d7deb1fc8c62839e17cff015bf7396bc54361b6a984b3f55dfd36c7d1da0f3f41feb18d4e20a6d08bde4912a4d411a5754c929442f2998929b8ce23b7dab30993c7d86cca62b95f0962359a54bd9dbc80fa01dcd3973fd6aa7785a82b84c725819246da84c8297d2a4e8f6c7c21d26b47423f02522a631d5b8fcc74ab76dddebefdf5e43f9e8cfa761ad6d8983b831f7d9edd611a170bd92c338b4032130dc31c936c5fe9af987eb498f72aab9f22b36763ab537eff2764f443f3d351934635187eae54f728c6e818b6e52f8bf474c5c38a7eba8a38dfe9a88069afc80f6418ce584ba1f6bcd5bda486e850a0ea2b0ce4deb21393c95a91754da40449ef3b067253d1b159c945466e7331bd24bfda78a3ca8a68adee8666ecc23f25d81638d651643ccb0d0c50ce90fa0f9e8b2a84f6f01a78bead666ff194808be25243eba1d08ec81b5889578e3cab3417e3a70b9d008a4afe8adc3bee6a4b1c807044dc05b739ae05919655321cde64e49aa3849fb8b3f146b9f9cf07abe25a66473efd5795464ee13c2a8181b808d770c3691f2193c0dcb6734da025f2cbc38a165e757258958c48aa5c99ec937a08ccec302cd9221697d097a26a2b0411989eba74cb0a89edf7bcbbb997733f535d9fdb7dbbecbe58d65f3864974ff2f018fee2490b523511a17312b764be734dfaff89fa00a3b60f9d81e348de248ac34ac214960372d7a157a04f518262d1c5beffe90a0880756e18693c3878df40f3d5b9736001061a73367ac4abd6b6935eef226bbb6d88a1c56033100c645482e4b9b90dd3a8cf0abc451cc1c4547e89027d36c57e3f7abf17936dd3ac73a4a4ee7b694bab6b691aecaa13c4b2151c6b694d7778a9afa14918ef5889448cb32f52a535bfaae2c69d6a413f6760c95be6f4f5ff3a58e373a427db90d4d5b3ab39872c8f4a7673b2e96c2da7182dada98828661747b41af56d597160dfea33436318223450b456ad6c69f01c99c11f9579937e14c08ce0124dc9f04ae61ed6f3030cc70816b85b79e9b43d15fdc55e0e69c8c8b139666888f11273bb8b1e9091f1ff8e2d1296be1d36236e86317bc792bd81eef662364a6bd583f5d6a076b676a5c4991093304021fe23c2109202209096252261ade826c491982ec0b3a4947e36fd0eb731d0d43be1ed6756efe6c909db6a3459a339df8daebdd0d8e51c55c9cb2e06c6250085b2ce90c9ec3618f2e218d5ac9f2926240e33a55558014b1902dfaa8e258eb07f000685e4fd65d9131cad3ff1306043a0d3e01528eea6d7515ddc71d6474225fab3026c42331a2b63ef566e9e0f365613743d336ab783531b17f5a4a8d65b24b9d12f1b5e03f6351c4f21c8fdbdd7d5530e615eb0aa1569c8ca77d4f9c552bde475599baa2c74689f8ffbdb7c8a7235daee3ac66ab0639deb51da2c52df0faed8c01e7d5a1d17240a240bfacb7b5d3e70e134cef406289ba7cba4561fa86b2d41d358cd3fb08f37eaf5ca0364748d4f1cff79d483fb752a511381af2305aab83b5bd6320b4078176208cb30fc97b232748b4b7e6f4a9fce0b54cc252c48efa7abb72f065e1f29687f268f8a2ef0d12e80fa21e6fa0525aef833d5ee8f20002b2d3e826a201a03d801ad61cecdfae1fc3920c667b9f409c92d960066f8fe040813ab902631eab2fb55db5f59a89cc6819fb9cb95d916e08ed008ded1d8eabba2bf2e60e8462f6999708681421c207f0bc602ea1e74e84882e94ba2c7febc67ba9bf179a29e170adec5aebf6cd3341e3631899d352c7e012713d916286ac701e5e8c35a676d83dd1147737940449a9329a445198fdd3a074b676e3d2e2e1c2fb4ecdd4a25ea8dc84830205e226adf354b408f9d481726cf662aed01910b7b2ce8c906b3b6ea80c1d338bbdb49605d6b12412c6e49ed975f09a954075a5d0f2e7050abaeb905a0c66661c9d5bb1b8e7f3912813a24dcfe96e0de25eb289ac120114f7f1ee3f78c08463f8f58f84f3d0927f0bed7b02bd3be985637aa7085fecbb5371a0e2dbea9dbd3d2080034c09c37e396c16960fe170608c521096620ce9c4b346e4a9482102fd270e8de8a710110e0b0f3d4b541487a839b4f311068abd1ff0ccd88cf1cd9c25c9e968a93f85e00088d7c07a19145ee5c3ca12096b4155918ea34f5e06847aa65166948b538a01d145926f6c51ff1d7f9293c1822179fbe4dfbd3617893d470239b89363aeb06f283c24d3cfbcf00f79013a8f558e8bd9d19c19a2a47758b8e6ff626c87e1c7eb006d703cc1e674e1dac2512e82e286f0b44d25faac96705bb692db54fd3d5bb4e9f518479a2c02e3c6d31051ff56386bcc10d6a4e7ad56b3580d5a828509d27113c11c953a1df6cb65959c03e7cfdf9f64482c6f0e3f0a3eb20a12268a70737313f4183997d785d77e6279f2e2d7db043e39bc5c7c780287f862f55ab3756f1fd1d4555544499a7be270546d76dab712d3d1e325df4cf44207c30fc1dff0b49a70a20d23442c325a2eff29ffd8392fc6713b41da2398c444044379bfbc9327a97f9d1b5c9cff649d57a6ef53b209ff342dd43ba0e3df4898a4780aa7e354297aa8550e6f2d560db57596f3e5034f752c18d753cf0da12dadebc3fd215c88c06f4cfa25ecf57c677b3a2490d4e32451e6498ca326a39a1455f65209e532cc9bc99b08aecef87036e5023d86ae37eef046f3a7d9ca9643088766d8e90288ad598d2fc50aab365a0a4d2606ed73a34cbc910da43c57f3e21a040ee15350a9ed9690b3770f110de7a50ac9575a87cc6b636a881eaef3c9e1d3ec3d8affd5a4abcfde95564d6eaa3c516085eab1b7d45f976034c9d63394cd1a2eefeb65e3e26abb4991dfcf6e289c88ddd77b4db6ca3fdd6ffdf252e00f2eb9ff875f8f3d3bd1fcae0fdd41d7ea150934d066541021b97cfc5cb671b4a4cdf251b46634c80ad22b0d3f3d017704f856f0c2697b2bbe7e01496b652d8b50eae2337f6eff9d24993f75b4e0a7dde822001361a5e6069c9dee61edf03983f389f70dcc90c91c286d36333bebec0f7892a793e88a139c06acb88099483ec65825c7392ecac0fa5ce84e1883288b99779642819891583e8114873b194967bf228f02f14c886375657b27bd0e8dd0fe3e78c3f4d6501fd63330ee5aede971bba78e336bada4ac47b518204d6f9056492fdcc5aacf5decff2bdd078bef7c0b250bf0ffb97de07d36b1a6d0ab31515f10418b887fc47bff4db3c20a1f81be4edd9d32cb4ae7e9a1c8274db2e164062beab784f628520152720506d63ad7bc39be4fec9d0197d5b1078580d94ed0b21bc60e4f49e4d218c3aba2b1e4feef2262e0b4094a6eb3c22b4b1c631881fb689861a793351122995ed7c6446fa0a0f6cacb66ac660456eb659299b4476e0f095cd67358174ea4abf48b1627a16407678cdfeec12b5c0bf33206e0301760d597a75c2c65db3cd012afd439c21456ffd6f7894aa5343e4585c2b4c75183c4354f366d3b99fa3d25dd5d56a9b7516149a1a4849852ceca46e0454292cefa79639cb86a3bee6345992452d426b56f23f5396afc9c38542c73a850759c856a3750fa27318f164e15b05b6420736e47ee5f6da952f26b9f876117dc993b4a52bd9690df4cb5423d949242716e339ab83b000309f5cc9b6133b351d6f71dd4d57b81252ad3fa915d22ec498d95672ce11e18a6f5a083186e29c0480ca6165dfb86ceae809b7d4ce721da0178f58af9d316744e5897906182cc70b1c68ab9c2f26f8df2dea4d07fd1467abafb875c16b0a42470cdf19465b9dbb4e973ff5d4134e0a118de91d835c1fdb5771ef074f18982c5f32308371e995a9bcfbfc46d6947d94797a4dfbb4ab8a5d42b9c5f42a5b371c47ec329e72297c6ddeee985b3dfea8d4d35b12d274fe6b7546a7c5bef5b5f93c19253108ff32792105a1eafcc74cdf25c70d2d292deb9ecbdcbe6e18a23c08380c8a959b092178aae13c0c99bab2b467c206bd7dbc66065d770ee0fda19a540a7084c76caf8adeb393e8a368663d827db565c39c292363081905102d42560c4f79c5a26c4ea5acb1369804f4c47d8226f77b7472c1b8822a5bf95b068106d8d451d7c2dce4887cf1b7bc990433ddb371c9029101c8689e4cdd333db919ffdca2bb7b11e917d71791c2bb28108256581663046cc30de4a8bf4788516a14230140303f9929b12a485bfe0c23b639d7374fb5e64da9b7c3fcbf3eaa77618cd19f8d012531b7c215f1f8149ce26139a03c27b11454671fe714c72d26a0fbd6543f1f4da159ffe529bf2aa96615c8c06bc252b68fe7f766b2ff7a4b02e5871e0dbbdd9440a1d77d70d0f727080ae430de7f5c2b725d4e3aadf3d580b6a7a80fd0c74f820b4f42a9a80a7562cb380ded49308dd6f6278553e4e370f8c12b0ebe587dd513652e86226bea9d8e205fd883e5cb1bf1ecdd94d03000b267789f3ad8436279008daa9b2bb92f94a7258c10acace042e145a31600bdd1a018cea0d3afb78db4a2695f5ab8dba3d4694ca41b0770b8eff468babbfeea06dc299b129bdf9338e285bd0d9e4af081ac3f12e9b64acc90ec2939f76df72448e8738d64d2536a3e7b343f5f53c1e38a08dba7551490b3c97fbaec7338b5d67c9ca8cc11a4cc43e28334912e9ac3bda2625e6c1b740e245e50ac36bedd5b0405169c986e65e158982185e61358e1fc5cbc754849bc1c9ca13558e13b558308ce13b0edfc344068fbc7495d10d078b71bd2c41812e4a7b8a59baa95ddc341151e501c278a2dc2e6854ab307ff27b7cd05e812e3bef35b9d7d44e3418f5c71c037c75bfc3901158b1ed7a68688e6b549dae2ef731259ed8daa257fbd0a67013217a6a388232eab01b750c6a8b252a0de716589bc360610323543196505887e1be4bdd97a7ae67114c031b497d50960ab9b3c742d8fd61862b92f5efa30ce57cc1adda59a196abd23a0e1c3ec16dcf6741500a50d9298b006dc087ec54027bb6030673b19606e146d5584facbd58b10cd683e58d0dd93fa24594688a1543c7f6c7ce9ebafd730980f658f90455f7007a3600323bf4ea73c18a84e08d290ca1bdebb9b66eda9d68ebb29a25b8999fd6b7500e3af934e36d57c8facdb9dc530b78d7e48f86413e939e6d7f23c0394c2ed0040c7b732f04a9984393cd99aff66", 0x1000}], 0x5, &(0x7f00000097c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50, 0x4080}}, {{0x0, 0x0, &(0x7f000000ad00)=[{&(0x7f0000009840)="62894f5ce7dd1c6ac12e9153a65d6a92b0e1ce15758e28c7bf9a5565f755bce2cdddfb5853893f7ad350a57b6548144ebe35fdb24cedf671322c56d279de15f21bd2cd3715e1467e294bf8d51a29c1a5a45daae64b803d3ed44805e07e7382efefc5505c2d8aca2ae0042f8d6108632cfffbb5f7d753cfac000d1d0c6b90754393099305f2cce79411fa3226c8e7c7eb885a2f1730370e5a19", 0x99}, {&(0x7f0000009900)="3996e283a13c6943711e809cc9b9658df00b650786ca2aea70424c54a652faea712d71a503e3507baec7292ba5bd48c8db03850cb7b99e0339717d800f21de68bdcc1a6a136e0e493f97d914d94016e46034da9794001031e1868b10d37c1f14fe8f5da32709c8d0c462243fc24f8b9bd4443303e1213d6e5a4543bcadb194e5b5ac53079c9adbf62ee5f52343d1a5f5567178b342c595b66f66cfdbe00fd48a1b96c911a616f8843abcf1751bb9e40c4bd4f487c0e1aac889f11be61acb5c76b36ef099a949711e21d175933772ec97ae054526e1f0c4333534984622fce938fbc932a7c3df38b3", 0xe8}, {&(0x7f0000009a00)="a4ec438f8c24f5cbd9b3d1ae66e9f61b5edaae882caa5708f45b9e6037e58e748f30157f4b422416dc08946194111539b3", 0x31}, {&(0x7f0000009a40)}, {&(0x7f0000009a80)="cadc65237fb2d45bb212aa39b76202e8f33af3929bc4eecce61ef446667aae058f4a1e53b85ef77f0cfb038e9410da7c430ce51a23f92e8cf65ccf3d49c69aef6e586d5dbb8739efb9b97cb3bd209e704d50062805e0534a69eb17c84acd18c489bf49946297d5f634245887c353e23dbd583ec83d814fcf1e5c1f8a2de0089a9dd932", 0x83}, {&(0x7f0000009b40)="b6b11afe78abf97e760aa17c676f9dd9066d094e312fb104faea6d5611103d91a6a65cdc15ac1f02d31d00a07b785fe6ad4998342e8dd8e4ec6be81304dc4917bd74ae6b96c8784e811018f0ddc19184a1314e63d04215096a39e8e6ab8108c3472f7545a9d283a3566cfcad510584abb822cc49d735f5fdbec41406a258f18e1fdc3f19b86c8871fb64afc9d71a1b5605a308b31fc74523f3772b864487978e90d661f719276c2f6276f017a54d6be99606da250f4976cda7bc00e4494f5d9517ae28c0", 0xc4}, {&(0x7f0000009c40)="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", 0x1000}, {&(0x7f000000ac40)="97c0937805042db9674c2d08f3e30e329bb30b129b762a34f80ae96d405c1dd2bbfb5588ecfa8a9cb125c1ce904ded71133f0844dbb4116f6179019af0dfe04c898705300ac725d9b577461e43cf178ec1113a66fe4ec58c598b1b00b1820b167ac1", 0x62}, {&(0x7f000000acc0)="65d60996777ebbd94a8250819b3e60915ed91b4311dd13b2146c0571aef8752449df40fa6ab6688d73150bba96953e5e8a9d809e0c", 0x35}], 0x9, &(0x7f000000ae00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x1}}, {{&(0x7f000000ae40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000bfc0)=[{&(0x7f000000aec0)="ec1e6acac0a2de2ba79d7701c924e36e31b3a4c28b3f73034580bd599b9519732e4512f0879ab114f5dc91f115029392f05b7cfce053c960b551d7b6bb7bb0e466ef1dd45b078add67ad0cbdfc6a60c5f320054ef19e668f8c62579fa1f8978fc770c467ae8067", 0x67}, {&(0x7f000000af40)="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", 0x1000}, {&(0x7f000000bf40)="f789b32b83f9765c62cbd15aa72cd0", 0xf}, {&(0x7f000000bf80)="1aa3cf25a2f4526e25fb83f8b97281861d0b090dbdebef18d0d3fc7e68fc90f8da133d8179bbd2ac40c80b7f", 0x2c}], 0x4, &(0x7f000000c3c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r2, r3]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r4]}}, @rights={{0x20, 0x1, 0x1, [r6, r7, r8, r10]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r11, r12]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r13, r14, 0xffffffffffffffff, r15, r16]}}], 0xc8, 0x40000c0}}], 0x5, 0x20000010) syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) r17 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x22c00) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r17, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r17]) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08810c08"], 0xb) 3m3.424021367s ago: executing program 4 (id=465): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x40100) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000000c0)={0x1}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x1bc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) bind$ax25(r3, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futimesat(r5, 0x0, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m59.918406431s ago: executing program 4 (id=471): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$SNDCTL_DSP_POST(r7, 0x5008, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) utimes(&(0x7f0000000180)='./file0\x00', 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r8, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r9, &(0x7f00000001c0), 0x0}, 0x20) kexec_load(0x80000001, 0x1, &(0x7f0000000940)=[{0x0, 0x0, 0x7, 0x5c}], 0x1) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000540)={0x0, 0x8c7c8f6744f0b74e, 0x8, "d4a911bb11e39d2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xfff1, 0xfff4}, {}, {0x1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m59.365372888s ago: executing program 6 (id=472): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) close(r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2}, 0x6) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x20000000000003e4, &(0x7f0000000000)=[{0x4, 0x0, 0x8, 0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)="03000000c9525283856bda3c3dc41669cb1ba2576c234a0dad57dc6565973117d40a0c39826f72495933bf13a8979b27fc42849864a35fd408b8b492a2f0a9dc8280d20911d4662b58bc4ff57287232eae034ca7ffafc80cec550ba02d5a3b993191346e1b5a18b8ea6aeb1a9644ade3cf3ba7982f575c6778040000e0f919b69b56e60083b94e5d0d8e3b86a54674d7ddb952402978bcae3a86c4b993c0a1196de9f73078df5dd8bf17275ab7636ea2dde6d1da46754b7fc41030d5016d14e146d802", 0xc3) 2m55.845414988s ago: executing program 4 (id=475): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4]) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x20, 0x81, {{0x1b, 0x4, 0x3, 0x0, 0x6c, 0x64, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x9}, {[@end, @ssrr={0x89, 0x13, 0xc2, [@empty, @local, @multicast2, @multicast1]}, @timestamp_addr={0x44, 0x44, 0xf4, 0x1, 0xd, [{@broadcast, 0xfffffffe}, {@rand_addr=0x64010101, 0x7}, {@rand_addr=0x64010102, 0xf}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@broadcast, 0xf}, {@multicast2, 0x8}, {@empty, 0x9}]}]}}}}}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='gid_map\x00') writev(r7, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000000000)=""/23, &(0x7f00000000c0)=0x17) kcmp(0x0, r6, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 2m55.600884396s ago: executing program 6 (id=477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0x2, 0x0, {0x4, 0x65}}) tkill(r1, 0x7) r3 = syz_io_uring_setup(0x5ccd, 0x0, 0x0, &(0x7f0000000400)) io_uring_enter(r3, 0x2def, 0xb80c, 0xe, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000008c0), r5) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r6, &(0x7f00000000c0)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00'}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000840)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0xffffe227, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000100)="51526722f83c356b000000", 0xb}], 0x1}}], 0x1, 0x8800) setsockopt(r6, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) io_setup(0x956, &(0x7f0000000000)=0x0) io_destroy(r7) io_setup(0x54a8, &(0x7f0000000cc0)) connect$qrtr(r4, &(0x7f0000000040), 0xc) socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r4, 0x8919, 0x0) 2m54.836236196s ago: executing program 4 (id=480): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3]) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x20, 0x81, {{0x1b, 0x4, 0x3, 0x0, 0x6c, 0x64, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x9}, {[@end, @ssrr={0x89, 0x13, 0xc2, [@empty, @local, @multicast2, @multicast1]}, @timestamp_addr={0x44, 0x44, 0xf4, 0x1, 0xd, [{@broadcast, 0xfffffffe}, {@rand_addr=0x64010101, 0x7}, {@rand_addr=0x64010102, 0xf}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@broadcast, 0xf}, {@multicast2, 0x8}, {@empty, 0x9}]}]}}}}}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='gid_map\x00') writev(r6, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000000000)=""/23, &(0x7f00000000c0)=0x17) kcmp(0x0, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 2m53.666210547s ago: executing program 4 (id=482): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x2, 0x1, 0x10000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x2, 0x1, 0x200000000000000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'wg0\x00', {0x2}, 0xce2}) r3 = syz_open_dev$dri(0x0, 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000280)={0x20, r7, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) ioctl$TIOCVHANGUP(r9, 0x5437, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0) 2m50.65663155s ago: executing program 6 (id=487): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4ea5, 0x100, @local, 0xfffffffb}}, 0x24) syz_io_uring_setup(0x10a, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x700) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000006, 0x40032, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x280000, 0x0) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 2m45.566625845s ago: executing program 6 (id=491): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4c07, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}}, 0x0) r5 = fsopen(&(0x7f0000000240)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000000)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) 2m43.855405117s ago: executing program 6 (id=494): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000c40)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x3}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffcd, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r4, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 2m38.431835273s ago: executing program 34 (id=482): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x2, 0x1, 0x10000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x2, 0x1, 0x200000000000000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'wg0\x00', {0x2}, 0xce2}) r3 = syz_open_dev$dri(0x0, 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000280)={0x20, r7, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) ioctl$TIOCVHANGUP(r9, 0x5437, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0) 2m38.277789683s ago: executing program 6 (id=499): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpid() ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab00) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', 0x0, 0x8080, 0x0) 2m22.022919274s ago: executing program 35 (id=499): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpid() ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab00) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', 0x0, 0x8080, 0x0) 30.068385679s ago: executing program 0 (id=749): prctl$PR_GET_TSC(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}, 0x2}}, 0x10, 0x0}, 0x20001) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r5, 0x9) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_io_uring_setup(0x5df2, 0x0, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) r6 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 29.096678836s ago: executing program 0 (id=752): ioperm(0x0, 0x6, 0x2da3b9f3) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x4) write$binfmt_script(r1, &(0x7f0000000400), 0xb) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xb, 0x1000000000000000) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, @value=r3}, 0x28) r4 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "a95aac5aff114c7399bbee7221ac006dfe8876dabb52dcf64f7212e11c1550b6064b5fa92637de9e95ca2b4b1454e46750c01b0bf4b7d6791231f1d4528e4a13", 0x13}, 0x48, 0xfffffffffffffffe) keyctl$clear(0x7, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$chown(0x4, r4, 0x0, 0x0) 29.002932697s ago: executing program 0 (id=753): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x160, 0x0, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @broadcast, 0xffffff00, 0x0, 'team0\x00', 'syzkaller1\x00', {}, {}, 0x2, 0x0, 0x42}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'vlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x33}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x20080, 0x110) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dae68da53cf387a81d9fea12a93a6c71cc0881b6b80", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl,\x00']) 28.755707257s ago: executing program 0 (id=755): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x2) fchdir(r2) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000006c0)='.\x00', 0xaa) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x51f001, 0x488) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r4}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="04000000080000000800000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64=0x0, @ANYBLOB="0800000040000000000900d0fd04"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6) socket$kcm(0x29, 0x0, 0x0) 28.320425069s ago: executing program 0 (id=758): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x2, 0x1, 0x10000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x2, 0x1, 0x200000000000000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000280)={0x20, r7, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) ioctl$TIOCVHANGUP(r9, 0x5437, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0) 10.33488409s ago: executing program 1 (id=801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x400000000010, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r1, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) r2 = syz_io_uring_setup(0x10d2, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$unix(r9, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) 8.808362645s ago: executing program 1 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x420, 0x3e8, 0x200, 0x60bd28, 0x25dfdbfc, {0x1, 0x1, 0x20, [0x3ff, 0x80000000, 0x8000, 0x8, 0x3af1, 0x2, 0x2b6, 0x0, 0xa66, 0xfffffffb, 0x0, 0x4, 0x7, 0x7, 0x3, 0xd, 0x6, 0x67a4, 0x4bb1282a, 0x60ee, 0x9, 0x6, 0x6, 0xff, 0xfffff801, 0x8, 0x8, 0x2, 0x825, 0x80, 0x9, 0x10, 0x3, 0x7fff, 0x6, 0x7, 0x1, 0xb52, 0x7, 0x6d1, 0x4, 0x1, 0x3, 0x9, 0xffffffff, 0xd, 0x8000, 0x6ce, 0xdc, 0x81, 0x0, 0x2cd4, 0x3, 0xb, 0x6, 0x8000, 0x5, 0x736, 0x5, 0x1ff, 0x0, 0x7, 0x6, 0xffffffff], [0x7, 0xd, 0x7, 0x17, 0x0, 0x55e67865, 0x4, 0x7, 0x4, 0x1000, 0x1, 0x0, 0x7ff, 0xffffffff, 0xf, 0x401, 0x0, 0x4, 0x6, 0xd6, 0x4, 0x3a, 0xffff, 0x8, 0x0, 0x2, 0x5377, 0xfffffffd, 0x7, 0x7fffffff, 0x8, 0xff, 0x7, 0x8000, 0x7, 0x3, 0x8000, 0x50000, 0x7, 0xb, 0xb4, 0x8000, 0x800, 0x5, 0x7, 0x3, 0x4, 0x56e6d697, 0x4, 0x1ac, 0x6, 0xbe, 0x5, 0xfffffffc, 0xf37d, 0xca, 0x6, 0x7, 0xffff, 0x0, 0x5, 0x0, 0x8, 0x7], [0x1ff, 0x3, 0x5, 0x80, 0x6, 0xa000, 0x8, 0xf, 0x7, 0x2, 0xb, 0x40, 0x2, 0x1000, 0xfa9d, 0x2, 0x9, 0x9, 0x800, 0xfffffff3, 0x1ff, 0x18d5, 0x10001, 0x7ff, 0x400, 0x40000007, 0x0, 0x80, 0x7f, 0x4, 0x3, 0x968, 0x7, 0x5, 0x4, 0x48, 0x80000000, 0x8, 0x17, 0xfffffffa, 0x4, 0xa, 0x8000, 0xd0, 0x20000071, 0xfffffffe, 0x8, 0x3, 0x1, 0x9de, 0x0, 0x200, 0xf, 0x0, 0xc974, 0xfffffff7, 0xfff, 0x2, 0xd6, 0x3, 0x7, 0x11], [0x4, 0x9, 0x9, 0xff, 0xe, 0x1, 0x6, 0x29c, 0x4, 0x8000, 0xffffffff, 0xfffffffd, 0x8, 0xfffffffb, 0x7, 0x2, 0x7, 0x8, 0x7cf4, 0x9a1, 0xb, 0x101, 0x200, 0x5, 0x1000, 0x8001, 0x3ff, 0x6, 0x10001, 0x1, 0x0, 0x6, 0x6, 0x3, 0x2, 0xaa, 0x0, 0x10, 0x0, 0x9, 0xfffffff7, 0x2, 0x3, 0x6, 0x5, 0x0, 0x3, 0x9, 0x1, 0x0, 0x8, 0xcb, 0x80000001, 0x8, 0x5, 0x8, 0x2, 0x7, 0xfffffe53, 0x20000, 0x5, 0x9, 0xfffffc00, 0x4]}}, 0x420}, 0x1, 0x0, 0x0, 0x8010}, 0x40080) 7.540293186s ago: executing program 7 (id=809): r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)="7102b87fd4a29eb711d3d8dd9d30a576adc9f6e273aa268bf88d9b6b401a48d9897f02e252e0882cc55d14a5949d95b3fa8e0fdefbdb9d5f2b2402455bb8ea9669c041e99a804b3a84e5be4329c6ac5ccfd26d65bf13d7dc9ce767be3e7d49acf525dca7523b6bc44d49b40ce43b8cb32004f23c12750711d0858c8d0d41dc8700", 0x81}], 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$inet(r2, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x99f}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e22, 0x0, @private2}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000007d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 7.022931486s ago: executing program 1 (id=810): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x4, 0x2, 0xfffffffe}, 0x9, 0x0, &(0x7f0000000040)={{0x0, 0x8000, 0x1}}, 0x0, 0x0, 0x40}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.574372651s ago: executing program 7 (id=811): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$EVIOCGLED(r1, 0x40284504, &(0x7f0000000000)=""/56) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0xfffffffc, 0x0, 0x8}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r3 = dup(r0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x2c9ab000) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, &(0x7f0000002480)) mlock(&(0x7f000039c000/0x3000)=nil, 0x3000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0xc6, "7161d68d085658a9eafcd7e89d0f0303e0602e263325a2b5d29e157da31b152e85bd5f90e4f3f46b6adc237d0058a4d7327265271daefeaa785eb351472ec4b55d627fccfc36273c54a520a307c002d5b1a289e844e4d06ae1b8dba4ee89aacb48dd44b991d801a2d0088e692bd2fa6e81abf866ff22922da0d41c20607b918dc75d8dd3a4155cfca3f45416a7721b20d6bcb08e35d4d43046090c883c45602487ec7d5a31b983c2bd8281550650937beefd415a680006e7efbf0d7411cf9c869ee5fcebb7ba"}, &(0x7f00000001c0)=0xce) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={r4}, &(0x7f00000002c0)=0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.288424351s ago: executing program 8 (id=813): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x5, "f42a97b96d"}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f00000012c0)={'syztnl2\x00', 0x0, 0x4, 0x2d, 0x1, 0x7, 0x4, @empty, @local, 0x700, 0xe065a3a6e5543040, 0x1ff, 0x5}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x1, 0x70bd2a, 0x21dfdbfb, {0x0, 0x0, 0x0, r2, 0xa102, 0x4148}}, 0x20}, 0x1, 0x0, 0x0, 0x4841}, 0x4040000) socket(0x40000000015, 0x805, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x51b6, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x18) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() 5.528491969s ago: executing program 5 (id=814): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) listen(r1, 0x50) listen(r1, 0x0) 5.340605948s ago: executing program 5 (id=815): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0xf0, 0xe, 0x4000, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.184566565s ago: executing program 5 (id=816): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 5.173746283s ago: executing program 8 (id=817): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[], 0x0, 0x96, 0x0, 0x3, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01f2fd000000000000000c0000000c0000000200000000000000000000040000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x5, &(0x7f00000000c0)) setresgid(0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_BULK(r5, 0x5523, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000340)={r4}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) r7 = epoll_create1(0x0) epoll_pwait(r7, &(0x7f0000000080), 0x0, 0x80000000, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xf}, &(0x7f0000000240)=0xc) ptrace(0x10, 0x0) 4.534391926s ago: executing program 5 (id=818): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) 4.442856975s ago: executing program 8 (id=819): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x500, 0x0, 0x32315258, 0x2, 0x0, [{0x2}, {}, {}, {0x10000000, 0xffff}, {0x0, 0xffffffff}, {0xfffffffe}], 0x0, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911b8000000000004000000000000008400000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0xf}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x5}}]}}]}, 0x38}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffd) accept(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2604002c) 4.29175611s ago: executing program 5 (id=820): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x8, 0x2, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f00000001c0)=0x6, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000041000/0x4000)=nil, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, 0x0, 0x48) 3.759970511s ago: executing program 8 (id=821): prctl$PR_GET_TSC(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}, 0x2}}, 0x10, 0x0}, 0x20001) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r4, 0x9) syz_io_uring_setup(0x5df2, 0x0, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) 3.717701923s ago: executing program 1 (id=822): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x500, 0x0, 0x32315258, 0x2, 0x0, [{0x2}, {}, {}, {0x10000000, 0xffff}, {0x0, 0xffffffff}, {0xfffffffe}], 0x0, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911b8000000000004000000000000008400000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0xf}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x5}}]}}]}, 0x38}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r4 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, 0x0, 0x0) listen(r5, 0xfffffffd) accept(r5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2604002c) 3.044352362s ago: executing program 7 (id=823): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x1, 0x0, 0x0, 'queue1\x00'}) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000500)) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000080)={0x3, 0x1, 0x3, 0x2, 0x5, 0x81, 0x6, 0x152, 0xffffffffffffffff}) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r7, 0x80086303, &(0x7f0000000000)) 2.056641809s ago: executing program 8 (id=824): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x3016c0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000040)=0x1) listen(0xffffffffffffffff, 0x6) io_uring_enter(0xffffffffffffffff, 0x46f6, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0xc0386105) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) socket$inet6_sctp(0xa, 0x1, 0x84) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0], 0x50e) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) get_robust_list(r1, &(0x7f0000000340)=0x0, 0x0) memfd_secret(0x80000) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) r6 = memfd_create(&(0x7f0000000080)='\xdb`\x10\x98[\x00\x00\xa5\xbe\x00\x00\x00\x00\x00\x00\x00\x00?\x90IA\x9e\xfe \x86?\x05y,\xb8\xa0og\xc3\x87\xe1\xc2\xd0\x0eo\f\\\xd1\x973\"\x96l|v7\xf7\x97\x06\xba\xa5\"k\xdd\x8a\xb4\x1c\x05D\xbe:\x9d7W!\x89\xe9\xefW`c\x0fJ{E\xe0\xabHO^N\xfa\xcd.\x01\xa7Pp|\xe8\xbeO\xeb\xf1\xdf[\xa3>S\xa68G\xf0\xbe\x1f\x8df\xb7B\x0f\x8d\xa2!\xda\xd8\xde\xe4\x9fe%{.\xcc*\x9b\x11\x8f\xf5n\x05S\x81\x03\xe5\xdal\x93\x0f[\x93p\x1ecg\x91\x13\xf2T\xf0fp\xbb\xfcYL\x9c\x8f\xf6', 0x0) splice(r5, 0x0, r6, 0x0, 0x5, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) 2.040412206s ago: executing program 1 (id=825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(0x0, 0xd931d3864d39dcca) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000140)='./file0\x00', 0x6000009) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x78d, @void, @value}, 0x94) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x110, 0x4) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000680)='/sys/fs/smackfs/load2\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$can_raw(r6, 0x0, 0x44001) r7 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r7, &(0x7f0000000700)=[{{&(0x7f0000000380)=@sco={0x1f, @none}, 0x80, 0x0, 0x0, &(0x7f0000001140)=""/4096, 0x1000}, 0x4}], 0x1, 0x2120, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000180)=""/135) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 1.990667822s ago: executing program 7 (id=826): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0xf0, 0xe, 0x4000, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.55650418s ago: executing program 8 (id=827): unshare(0x68040200) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4044881) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.522076132s ago: executing program 7 (id=828): syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10}}) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r5, &(0x7f0000001c80)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x9}, {0xfff3, 0x5}, {0xe, 0x2613a1b406814a86}}}, 0x24}}, 0x44804) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 1.338898163s ago: executing program 0 (id=758): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x2, 0x1, 0x10000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x2, 0x1, 0x200000000000000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000280)={0x20, r7, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) ioctl$TIOCVHANGUP(r9, 0x5437, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0) 1.886157ms ago: executing program 1 (id=829): syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10}}) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r5, &(0x7f0000001c80)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x9}, {0xfff3, 0x5}, {0xe, 0x2613a1b406814a86}}}, 0x24}}, 0x44804) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 758.098µs ago: executing program 5 (id=830): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 7 (id=831): syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10}}) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r5, &(0x7f0000001c80)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x9}, {0xfff3, 0x5}, {0xe, 0x2613a1b406814a86}}}, 0x24}}, 0x44804) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) kernel console output (not intermixed with test programs): _sendmsg+0x505/0x830 [ 152.542577][ T6457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.542610][ T6457] ? import_iovec+0x74/0xa0 [ 152.542638][ T6457] ___sys_sendmsg+0x21f/0x2a0 [ 152.542664][ T6457] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.542723][ T6457] ? __fget_files+0x2a/0x420 [ 152.542738][ T6457] ? __fget_files+0x3a0/0x420 [ 152.542765][ T6457] __x64_sys_sendmsg+0x19b/0x260 [ 152.542792][ T6457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.542839][ T6457] ? do_syscall_64+0xba/0x210 [ 152.542866][ T6457] do_syscall_64+0xf6/0x210 [ 152.542890][ T6457] ? clear_bhb_loop+0x60/0xb0 [ 152.542912][ T6457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.542930][ T6457] RIP: 0033:0x7f9fad38e969 [ 152.542953][ T6457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.542968][ T6457] RSP: 002b:00007f9fae138038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.542987][ T6457] RAX: ffffffffffffffda RBX: 00007f9fad5b5fa0 RCX: 00007f9fad38e969 [ 152.543000][ T6457] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 152.543012][ T6457] RBP: 00007f9fae138090 R08: 0000000000000000 R09: 0000000000000000 [ 152.543022][ T6457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.543033][ T6457] R13: 0000000000000000 R14: 00007f9fad5b5fa0 R15: 00007ffe2af73d28 [ 152.543060][ T6457] [ 152.580835][ T5880] usb 1-1: config 0 descriptor?? [ 153.465661][ T6475] 8021q: VLANs not supported on wg0 [ 153.721319][ T5880] usb 1-1: can't set config #0, error -71 [ 153.752430][ T5880] usb 1-1: USB disconnect, device number 3 [ 155.534857][ T30] audit: type=1326 audit(1747854742.161:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6488 comm="syz.5.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 156.252405][ T6498] ptrace attach of ""[6499] was attempted by "./syz-executor exec"[6498] [ 156.709728][ T30] audit: type=1326 audit(1747854742.161:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6488 comm="syz.5.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 157.489038][ T30] audit: type=1326 audit(1747854743.361:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6488 comm="syz.5.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 157.547499][ T30] audit: type=1326 audit(1747854743.361:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6488 comm="syz.5.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 157.622756][ T30] audit: type=1326 audit(1747854743.361:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6488 comm="syz.5.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 157.719657][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'. [ 158.156080][ T30] audit: type=1326 audit(1747854743.361:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6488 comm="syz.5.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 158.205347][ T30] audit: type=1326 audit(1747854743.361:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6488 comm="syz.5.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 158.298786][ T30] audit: type=1326 audit(1747854743.361:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6488 comm="syz.5.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 158.523928][ T30] audit: type=1326 audit(1747854743.361:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6488 comm="syz.5.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 158.650683][ T5879] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 158.676361][ T30] audit: type=1326 audit(1747854743.361:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6488 comm="syz.5.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 158.697669][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.863855][ T30] audit: type=1326 audit(1747854743.361:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6488 comm="syz.5.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 158.901997][ T30] audit: type=1326 audit(1747854743.361:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6488 comm="syz.5.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 159.641870][ T5879] usb 6-1: config 0 has no interfaces? [ 159.661845][ T5879] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 159.680769][ T30] audit: type=1326 audit(1747854743.361:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6488 comm="syz.5.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 159.720561][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.749875][ T5879] usb 6-1: Product: syz [ 159.770400][ T5879] usb 6-1: Manufacturer: syz [ 159.783783][ T5879] usb 6-1: SerialNumber: syz [ 159.819311][ T5879] usb 6-1: config 0 descriptor?? [ 159.922794][ T6507] team0 (unregistering): Port device team_slave_0 removed [ 159.939318][ T6507] team0 (unregistering): Port device team_slave_1 removed [ 160.166778][ T6544] netlink: 'syz.0.118': attribute type 10 has an invalid length. [ 160.191157][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.199572][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.215011][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.222392][ T6544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.230689][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.237890][ T6544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.383309][ T6544] team0: Port device bridge0 added [ 161.433338][ T5877] usb 6-1: USB disconnect, device number 2 [ 161.834298][ T5821] Bluetooth: hci3: command 0x0405 tx timeout [ 162.137780][ T6564] ptrace attach of ""[6565] was attempted by "./syz-executor exec"[6564] [ 162.623942][ T6569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.123'. [ 167.675954][ T6635] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.630872][ T6649] ptrace attach of ""[6650] was attempted by "./syz-executor exec"[6649] [ 171.409042][ T6669] netlink: 72 bytes leftover after parsing attributes in process `syz.1.142'. [ 171.882671][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.893169][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.673254][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 173.673271][ T30] audit: type=1326 audit(1747854760.301:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6704 comm="syz.5.151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x0 [ 174.870429][ T6725] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:2000:0000 with DS=0x1 [ 175.674240][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'. [ 181.472417][ T30] audit: type=1326 audit(1747854768.081:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6785 comm="syz.1.168" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb57d8e969 code=0x0 [ 181.904621][ T6803] netlink: 16 bytes leftover after parsing attributes in process `syz.5.171'. [ 181.921407][ T5839] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 182.103868][ T6809] netlink: 'syz.4.173': attribute type 2 has an invalid length. [ 182.111743][ T6809] netlink: 51 bytes leftover after parsing attributes in process `syz.4.173'. [ 182.132827][ T6809] x_tables: duplicate underflow at hook 3 [ 183.140712][ T5839] usb 1-1: Using ep0 maxpacket: 16 [ 183.846966][ T6813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.174'. [ 186.583559][ T5839] usb 1-1: device descriptor read/all, error -71 [ 186.902463][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 187.527919][ T6832] netlink: 'syz.4.177': attribute type 4 has an invalid length. [ 187.552926][ T6832] netlink: 152 bytes leftover after parsing attributes in process `syz.4.177'. [ 187.680885][ T6832] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 188.128466][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 188.141829][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 188.194825][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 188.202977][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 188.211063][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 189.797980][ T6434] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.831318][ T6865] netlink: 'syz.5.181': attribute type 2 has an invalid length. [ 189.839073][ T6865] netlink: 51 bytes leftover after parsing attributes in process `syz.5.181'. [ 190.312141][ T5821] Bluetooth: hci5: command tx timeout [ 191.649996][ T6874] netlink: 16 bytes leftover after parsing attributes in process `syz.5.184'. [ 192.118514][ T6875] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 192.370694][ T5821] Bluetooth: hci5: command tx timeout [ 192.822555][ T6434] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.344320][ T6894] ptrace attach of ""[6895] was attempted by "./syz-executor exec"[6894] [ 194.573207][ T5821] Bluetooth: hci0: command 0x080f tx timeout [ 194.610860][ T5821] Bluetooth: hci5: command tx timeout [ 194.611515][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.645558][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.543363][ T6434] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.608469][ T6903] ptrace attach of ""[6904] was attempted by "./syz-executor exec"[6903] [ 196.691233][ T5830] Bluetooth: hci5: command tx timeout [ 198.005936][ T6892] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 198.015429][ T6892] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 198.025080][ T6892] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 198.041854][ T6896] 8021q: VLANs not supported on wg0 [ 198.114931][ T6902] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 198.124440][ T6902] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 198.134055][ T6902] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 198.400005][ T6434] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.327641][ T6839] chnl_net:caif_netlink_parms(): no params data found [ 201.316862][ T30] audit: type=1326 audit(1747854787.541:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 201.523922][ T30] audit: type=1326 audit(1747854787.551:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 201.545679][ T30] audit: type=1326 audit(1747854787.551:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 201.573904][ T30] audit: type=1326 audit(1747854787.561:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 201.595704][ T30] audit: type=1326 audit(1747854787.571:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 201.617815][ T30] audit: type=1326 audit(1747854787.571:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 201.644881][ T30] audit: type=1326 audit(1747854787.581:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 201.667673][ T30] audit: type=1326 audit(1747854787.581:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 201.689219][ T30] audit: type=1326 audit(1747854787.591:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 201.710990][ T30] audit: type=1326 audit(1747854787.631:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 203.882364][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.920408][ T6839] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.082955][ T6839] bridge_slave_0: entered allmulticast mode [ 204.177041][ T6957] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 204.187223][ T6957] /dev/nullb0: Can't open blockdev [ 204.207292][ T6957] netlink: 'syz.4.196': attribute type 3 has an invalid length. [ 204.215085][ T6957] netlink: 'syz.4.196': attribute type 1 has an invalid length. [ 204.223703][ T6957] netlink: 191172 bytes leftover after parsing attributes in process `syz.4.196'. [ 205.093378][ T6839] bridge_slave_0: entered promiscuous mode [ 205.226151][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.234662][ T6839] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.242152][ T6839] bridge_slave_1: entered allmulticast mode [ 205.312742][ T6839] bridge_slave_1: entered promiscuous mode [ 205.407938][ T6960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.197'. [ 205.629294][ T6434] bridge_slave_1: left allmulticast mode [ 205.635721][ T6434] bridge_slave_1: left promiscuous mode [ 205.701039][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.280829][ T6434] bridge_slave_0: left allmulticast mode [ 206.286622][ T6434] bridge_slave_0: left promiscuous mode [ 206.311323][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.864765][ T6434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.890239][ T6434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.910544][ T6434] bond0 (unregistering): Released all slaves [ 208.006339][ T6839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.044046][ T6839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.069322][ T7000] 8021q: VLANs not supported on wg0 [ 208.708689][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.5.204'. [ 211.724649][ T6839] team0: Port device team_slave_0 added [ 211.772015][ T6839] team0: Port device team_slave_1 added [ 212.420944][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 212.427248][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 212.434181][ T5825] Bluetooth: hci0: command 0x080f tx timeout [ 213.549370][ T6839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.580684][ T6839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.747275][ T6839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.530339][ T6839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.574816][ T6839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.600815][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.670724][ T6839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.717767][ T6434] hsr_slave_0: left promiscuous mode [ 215.849782][ T7092] netlink: 'syz.1.223': attribute type 2 has an invalid length. [ 215.857664][ T7092] netlink: 51 bytes leftover after parsing attributes in process `syz.1.223'. [ 215.880640][ T7092] x_tables: duplicate underflow at hook 3 [ 217.167794][ T6434] hsr_slave_1: left promiscuous mode [ 217.226819][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.253619][ T6434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.268829][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.289404][ T6434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.370887][ T6434] veth1_macvtap: left promiscuous mode [ 217.450758][ T59] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 217.460692][ T6434] veth0_macvtap: left promiscuous mode [ 218.270971][ T59] usb 2-1: Using ep0 maxpacket: 16 [ 218.296096][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 218.789313][ T59] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 218.829340][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.877066][ T59] usb 2-1: Product: syz [ 218.902419][ T59] usb 2-1: Manufacturer: syz [ 218.908240][ T59] usb 2-1: SerialNumber: syz [ 219.771721][ T59] usb 2-1: config 0 descriptor?? [ 219.783958][ T59] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 219.911505][ T7126] netlink: 'syz.4.231': attribute type 2 has an invalid length. [ 219.919270][ T7126] netlink: 51 bytes leftover after parsing attributes in process `syz.4.231'. [ 219.934345][ T7126] x_tables: duplicate underflow at hook 3 [ 221.685600][ T5877] usb 2-1: USB disconnect, device number 3 [ 222.792938][ T7139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.234'. [ 223.329053][ T6434] team0 (unregistering): Port device team_slave_1 removed [ 223.780175][ T6434] team0 (unregistering): Port device team_slave_0 removed [ 224.132030][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 224.133038][ T30] audit: type=1326 audit(1747854810.751:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7162 comm="syz.1.238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb57d8e969 code=0x0 [ 224.874360][ T7167] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 227.226577][ T6839] hsr_slave_0: entered promiscuous mode [ 227.286365][ T6839] hsr_slave_1: entered promiscuous mode [ 227.340291][ T6839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.370707][ T6839] Cannot create hsr debugfs directory [ 229.437641][ T7206] ptrace attach of ""[7207] was attempted by "./syz-executor exec"[7206] [ 230.649306][ T7204] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 230.660973][ T7204] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 230.671732][ T7204] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 232.266129][ T7225] kAFS: No cell specified [ 233.074716][ T5821] Bluetooth: hci3: command 0x0405 tx timeout [ 233.264180][ T6839] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 233.275629][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'. [ 233.327063][ T6839] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 233.431193][ T6839] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 233.834886][ T6839] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 234.550491][ T7251] 8021q: VLANs not supported on wg0 [ 235.995118][ T6839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.029708][ T6839] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.096022][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.103206][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.291774][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.298927][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.218436][ T30] audit: type=1326 audit(1747854827.721:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7312 comm="syz.5.264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x0 [ 241.450887][ T7315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.263'. [ 242.802244][ T6839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.231972][ T7330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.266'. [ 244.552147][ T7348] netlink: 20 bytes leftover after parsing attributes in process `syz.1.269'. [ 249.118995][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.127828][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.135887][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.659688][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.812722][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.144835][ T7390] netlink: 'syz.0.275': attribute type 10 has an invalid length. [ 251.255838][ T7390] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.271398][ T7390] bond0: (slave team0): Enslaving as an active interface with an up link [ 251.971741][ T55] Bluetooth: hci4: command tx timeout [ 252.324051][ T7398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.278'. [ 254.050780][ T55] Bluetooth: hci4: command tx timeout [ 255.658408][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.664869][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.130680][ T55] Bluetooth: hci4: command tx timeout [ 256.828013][ T7414] netlink: 'syz.4.281': attribute type 3 has an invalid length. [ 256.870722][ T7414] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.281'. [ 257.196666][ T30] audit: type=1326 audit(1747854843.821:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7416 comm="syz.0.282" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x0 [ 257.600054][ T7422] No control pipe specified [ 258.673686][ T55] Bluetooth: hci4: command tx timeout [ 259.508284][ T7440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.285'. [ 260.544547][ T7368] chnl_net:caif_netlink_parms(): no params data found [ 260.909891][ T7462] loop6: detected capacity change from 0 to 524287999 [ 260.925401][ T7462] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.953637][ T1142] bridge_slave_1: left allmulticast mode [ 260.959888][ T1142] bridge_slave_1: left promiscuous mode [ 261.001126][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.022993][ T1142] bridge_slave_0: left allmulticast mode [ 261.030872][ T1142] bridge_slave_0: left promiscuous mode [ 261.052045][ T7468] Invalid logical block size (3) [ 261.058862][ T7462] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.067910][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.088127][ T7462] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.101714][ T7462] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.190844][ T7462] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.198855][ T7462] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.278391][ T7462] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.315510][ T7462] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.380901][ T7462] ldm_validate_partition_table(): Disk read failed. [ 261.404128][ T7462] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.450107][ T7462] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.471067][ T7462] Dev loop6: unable to read RDB block 0 [ 261.627944][ T7462] loop6: unable to read partition table [ 262.326300][ T7479] ptrace attach of ""[7480] was attempted by "./syz-executor exec"[7479] [ 262.628058][ T7462] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 263.700000][ T7482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.290'. [ 263.712724][ T7482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.290'. [ 264.423292][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.579668][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.593154][ T1142] bond0 (unregistering): Released all slaves [ 264.880736][ T1142] hsr_slave_0: left promiscuous mode [ 264.908228][ T1142] hsr_slave_1: left promiscuous mode [ 264.943167][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.958766][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.291771][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 266.079582][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 266.409761][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 267.065239][ T30] audit: type=1326 audit(1747854853.691:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7513 comm="syz.0.301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x0 [ 268.893882][ T7368] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.048112][ T7368] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.091126][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 269.179433][ T7368] bridge_slave_0: entered allmulticast mode [ 270.112597][ T7368] bridge_slave_0: entered promiscuous mode [ 270.122428][ T7368] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.129753][ T7368] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.137114][ T7368] bridge_slave_1: entered allmulticast mode [ 270.145247][ T7368] bridge_slave_1: entered promiscuous mode [ 270.209544][ T7520] netlink: 'syz.5.303': attribute type 4 has an invalid length. [ 270.228994][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 270.247004][ T7520] netlink: 152 bytes leftover after parsing attributes in process `syz.5.303'. [ 270.272566][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 270.284939][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 270.299997][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16384, setting to 1024 [ 270.344535][ T7520] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 270.350251][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.408230][ T7368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.420385][ T9] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 270.462504][ T7368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.468587][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.658105][ T7368] team0: Port device team_slave_0 added [ 270.703317][ T9] usb 2-1: config 0 descriptor?? [ 270.766932][ T7368] team0: Port device team_slave_1 added [ 270.847767][ T9] usb 2-1: can't set config #0, error -71 [ 270.890970][ T9] usb 2-1: USB disconnect, device number 4 [ 271.143049][ T7557] 8021q: VLANs not supported on wg0 [ 271.164180][ T7560] netlink: 'syz.5.308': attribute type 4 has an invalid length. [ 271.184717][ T7560] netlink: 152 bytes leftover after parsing attributes in process `syz.5.308'. [ 271.516916][ T30] audit: type=1326 audit(1747854857.881:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7556 comm="syz.4.310" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcdbf8e969 code=0x0 [ 272.041542][ T7560] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 272.132121][ T7368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.149409][ T7368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.182802][ T7368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.223542][ T7368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.249394][ T7368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.365701][ T7368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.955912][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'. [ 274.073773][ T7368] hsr_slave_0: entered promiscuous mode [ 274.332059][ T7368] hsr_slave_1: entered promiscuous mode [ 274.365738][ T7368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.404224][ T7368] Cannot create hsr debugfs directory [ 276.500652][ T30] audit: type=1326 audit(1747854863.031:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7611 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 276.651952][ T7618] ======================================================= [ 276.651952][ T7618] WARNING: The mand mount option has been deprecated and [ 276.651952][ T7618] and is ignored by this kernel. Remove the mand [ 276.651952][ T7618] option from the mount to silence this warning. [ 276.651952][ T7618] ======================================================= [ 276.687035][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.751998][ T30] audit: type=1326 audit(1747854863.031:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7611 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 276.888483][ T30] audit: type=1326 audit(1747854863.031:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7611 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 276.910200][ T30] audit: type=1326 audit(1747854863.031:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7611 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 276.931461][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.938223][ T30] audit: type=1326 audit(1747854863.041:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7611 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 276.959839][ T30] audit: type=1326 audit(1747854863.041:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7611 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 276.981175][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.015422][ T30] audit: type=1326 audit(1747854863.041:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7611 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 277.081475][ T30] audit: type=1326 audit(1747854863.041:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7611 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 277.147368][ T30] audit: type=1326 audit(1747854863.041:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7611 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 277.150692][ T5880] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 277.207481][ T30] audit: type=1326 audit(1747854863.041:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7611 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 277.415455][ T5880] usb 6-1: Using ep0 maxpacket: 16 [ 277.437663][ T5880] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.448995][ T5880] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.493841][ T5880] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.508775][ T7632] 8021q: VLANs not supported on wg0 [ 277.521688][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.574001][ T5880] usb 6-1: Product: syz [ 277.578517][ T5880] usb 6-1: Manufacturer: syz [ 277.670453][ T5880] usb 6-1: SerialNumber: syz [ 278.960858][ T5880] usb 6-1: 0:2 : does not exist [ 278.986858][ T5880] usb 6-1: USB disconnect, device number 3 [ 279.199408][ T7368] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 279.798325][ T7447] udevd[7447]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.822139][ T7368] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 279.868845][ T7368] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 280.009074][ T7368] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 281.657497][ T7673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.331'. [ 281.704147][ T7675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.332'. [ 281.840040][ T7368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.020747][ T7690] netlink: 'syz.0.334': attribute type 2 has an invalid length. [ 282.028506][ T7690] netlink: 51 bytes leftover after parsing attributes in process `syz.0.334'. [ 282.053029][ T7690] x_tables: duplicate underflow at hook 3 [ 282.886909][ T7368] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.908766][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.915936][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.490371][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.497612][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.544821][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 283.544839][ T30] audit: type=1326 audit(1747854870.171:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7693 comm="syz.0.335" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x0 [ 284.120621][ T5877] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 284.350792][ T5877] usb 6-1: Using ep0 maxpacket: 16 [ 284.369074][ T5877] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.113305][ T5877] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 285.174286][ T5877] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.190394][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.213571][ T5877] usb 6-1: Product: syz [ 285.217936][ T5877] usb 6-1: Manufacturer: syz [ 285.247828][ T5877] usb 6-1: SerialNumber: syz [ 285.571106][ T7368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.589891][ T5877] usb 6-1: 0:2 : does not exist [ 285.972751][ T5877] usb 6-1: cannot find UAC_HEADER [ 286.052444][ T5877] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 286.147026][ T5877] usb 6-1: USB disconnect, device number 4 [ 286.268679][ T7447] udevd[7447]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.087762][ T7368] veth0_vlan: entered promiscuous mode [ 288.099809][ T7368] veth1_vlan: entered promiscuous mode [ 288.129811][ T7368] veth0_macvtap: entered promiscuous mode [ 288.704915][ T7368] veth1_macvtap: entered promiscuous mode [ 290.473567][ T7368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.483841][ T7368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.494702][ T7368] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.503806][ T7368] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.513003][ T7368] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.521967][ T7368] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.722976][ T7756] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 290.895430][ T30] audit: type=1326 audit(1747854877.521:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 290.941208][ T55] Bluetooth: hci0: command 0x080f tx timeout [ 290.969535][ T30] audit: type=1326 audit(1747854877.551:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 290.993991][ T30] audit: type=1326 audit(1747854877.551:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 291.052660][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.104679][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.208018][ T30] audit: type=1326 audit(1747854877.551:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 291.230112][ T30] audit: type=1326 audit(1747854877.551:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 291.251595][ T7771] Zero length message leads to an empty skb [ 291.258688][ T30] audit: type=1326 audit(1747854877.551:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 291.287058][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.304501][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.898274][ T30] audit: type=1326 audit(1747854877.551:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 291.920767][ T30] audit: type=1326 audit(1747854877.551:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 292.059330][ T30] audit: type=1326 audit(1747854877.561:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 292.082090][ T30] audit: type=1326 audit(1747854877.561:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 294.233279][ T7800] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 294.308860][ T7803] netlink: 'syz.1.353': attribute type 4 has an invalid length. [ 294.316699][ T7803] netlink: 152 bytes leftover after parsing attributes in process `syz.1.353'. [ 294.333889][ T7803] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 296.394989][ T55] Bluetooth: hci0: command 0x080f tx timeout [ 297.962792][ T7844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.360'. [ 300.578374][ T7868] capability: warning: `syz.4.365' uses 32-bit capabilities (legacy support in use) [ 300.844266][ T7873] netlink: 'syz.1.366': attribute type 4 has an invalid length. [ 300.858616][ T7873] netlink: 152 bytes leftover after parsing attributes in process `syz.1.366'. [ 300.893923][ T7875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.367'. [ 300.904458][ T5949] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 301.096880][ T5949] usb 5-1: Using ep0 maxpacket: 32 [ 301.166020][ T5949] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 301.243118][ T5949] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 301.286894][ T5949] usb 5-1: config 1 has no interface number 1 [ 301.337159][ T5949] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.393351][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.428040][ T5949] usb 5-1: Product: syz [ 301.463654][ T5949] usb 5-1: Manufacturer: syz [ 301.504779][ T5949] usb 5-1: SerialNumber: syz [ 301.979258][ T7868] ucma_write: process 348 (syz.4.365) changed security contexts after opening file descriptor, this is not allowed. [ 302.813915][ T7873] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 304.357490][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 304.357526][ T30] audit: type=1326 audit(1747854890.961:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7886 comm="syz.0.370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x0 [ 304.928917][ T5949] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 304.943524][ T5949] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 305.150610][ T5949] usb 5-1: 2:1 : sample bitwidth 71 in over sample bytes 3 [ 305.292740][ T30] audit: type=1326 audit(1747854891.651:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7884 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 305.300225][ T5949] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 305.331697][ T30] audit: type=1326 audit(1747854891.651:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7884 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 305.353707][ T30] audit: type=1326 audit(1747854891.651:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7884 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 305.375175][ T30] audit: type=1326 audit(1747854891.661:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7884 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 305.397684][ T30] audit: type=1326 audit(1747854891.661:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7884 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 305.586787][ T30] audit: type=1326 audit(1747854891.661:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7884 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 305.885558][ T5949] usb 5-1: 2:1 : invalid channels 0 [ 306.059521][ T30] audit: type=1326 audit(1747854891.661:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7884 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 306.158602][ T5949] usb 5-1: USB disconnect, device number 4 [ 306.273780][ T30] audit: type=1326 audit(1747854891.661:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7884 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 306.313624][ T7915] udevd[7915]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.328940][ T30] audit: type=1326 audit(1747854891.661:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7884 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 307.378536][ T7925] batadv_slave_1: entered promiscuous mode [ 308.646308][ T7935] batadv_slave_1: left promiscuous mode [ 308.683363][ T7947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.380'. [ 308.713598][ T7948] netlink: 'syz.5.379': attribute type 4 has an invalid length. [ 308.721950][ T7948] netlink: 152 bytes leftover after parsing attributes in process `syz.5.379'. [ 308.732635][ T7948] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 311.241424][ T7955] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 311.624936][ T7962] block nbd5: NBD_DISCONNECT [ 312.850801][ T55] Bluetooth: hci0: command 0x080f tx timeout [ 313.274712][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 313.274765][ T30] audit: type=1326 audit(1747854899.831:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb57d8e969 code=0x7ffc0000 [ 313.670621][ T30] audit: type=1326 audit(1747854899.831:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb57d8e969 code=0x7ffc0000 [ 313.761036][ T30] audit: type=1326 audit(1747854899.831:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fcb57d8e969 code=0x7ffc0000 [ 313.850656][ T30] audit: type=1326 audit(1747854899.831:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb57d8e969 code=0x7ffc0000 [ 314.168705][ T30] audit: type=1326 audit(1747854899.831:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb57d8e969 code=0x7ffc0000 [ 314.457102][ T30] audit: type=1326 audit(1747854899.831:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fcb57d8e969 code=0x7ffc0000 [ 314.642907][ T7996] netlink: 'syz.1.390': attribute type 2 has an invalid length. [ 314.650752][ T7996] netlink: 51 bytes leftover after parsing attributes in process `syz.1.390'. [ 314.671669][ T7996] x_tables: duplicate underflow at hook 3 [ 315.670726][ T30] audit: type=1326 audit(1747854899.831:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb57d8e969 code=0x7ffc0000 [ 316.117256][ T30] audit: type=1326 audit(1747854899.841:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fcb57d8e969 code=0x7ffc0000 [ 316.138933][ T30] audit: type=1326 audit(1747854899.841:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb57d8e969 code=0x7ffc0000 [ 316.227741][ T30] audit: type=1326 audit(1747854899.851:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcb57d8e969 code=0x7ffc0000 [ 316.329665][ T8010] netlink: 'syz.4.393': attribute type 4 has an invalid length. [ 316.402554][ T8010] netlink: 152 bytes leftover after parsing attributes in process `syz.4.393'. [ 316.659280][ T8010] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 317.111193][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.117594][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.218722][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 320.051858][ T8039] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 320.847833][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.399'. [ 321.350817][ T55] Bluetooth: hci0: command 0x080f tx timeout [ 321.403195][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 321.403214][ T30] audit: type=1326 audit(1747854907.901:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8052 comm="syz.6.400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2438d8e969 code=0x0 [ 323.230644][ T5907] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 323.469163][ T5907] usb 7-1: unable to get BOS descriptor or descriptor too short [ 324.060241][ T5907] usb 7-1: not running at top speed; connect to a high speed hub [ 324.084694][ T5907] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 324.161009][ T5907] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 324.300642][ T5907] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.314926][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.817040][ T5907] usb 7-1: Product: syz [ 325.013738][ T5907] usb 7-1: Manufacturer: syz [ 325.018476][ T5907] usb 7-1: SerialNumber: syz [ 325.301710][ T8076] netlink: 20 bytes leftover after parsing attributes in process `syz.6.404'. [ 325.892860][ T5907] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 325.899759][ T5907] cdc_ncm 7-1:1.0: bind() failure [ 326.001357][ T8112] input: syz1 as /devices/virtual/input/input8 [ 326.502579][ T5907] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 326.509512][ T5907] cdc_ncm 7-1:1.1: bind() failure [ 326.571280][ T5907] usb 7-1: USB disconnect, device number 2 [ 326.696906][ T8117] loop6: detected capacity change from 0 to 63 [ 326.737597][ T8116] buffer_io_error: 7 callbacks suppressed [ 326.737615][ T8116] Buffer I/O error on dev loop6, logical block 0, async page read [ 326.811440][ T8116] Buffer I/O error on dev loop6, logical block 1, async page read [ 326.862098][ T8116] Buffer I/O error on dev loop6, logical block 2, async page read [ 326.907757][ T8116] Buffer I/O error on dev loop6, logical block 3, async page read [ 327.078203][ T7915] Buffer I/O error on dev loop6, logical block 0, async page read [ 327.198159][ T7915] Buffer I/O error on dev loop6, logical block 1, async page read [ 327.354715][ T7915] Buffer I/O error on dev loop6, logical block 2, async page read [ 327.475230][ T7915] Buffer I/O error on dev loop6, logical block 3, async page read [ 327.664444][ T7915] Buffer I/O error on dev loop6, logical block 0, async page read [ 327.802659][ T7915] Buffer I/O error on dev loop6, logical block 1, async page read [ 332.192849][ T8167] ptrace attach of ""[8168] was attempted by "./syz-executor exec"[8167] [ 333.655854][ T8187] trusted_key: syz.0.424 sent an empty control message without MSG_MORE. [ 334.829475][ T8191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.320884][ T8234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.435'. [ 339.294128][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.439'. [ 342.331841][ T8288] netlink: 'syz.6.448': attribute type 4 has an invalid length. [ 342.347840][ T8288] netlink: 152 bytes leftover after parsing attributes in process `syz.6.448'. [ 343.393791][ T8288] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 343.960815][ T8309] ptrace attach of ""[8312] was attempted by "./syz-executor exec"[8309] [ 347.241371][ T8335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.455'. [ 347.814509][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 347.918695][ T8333] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 349.252975][ T55] Bluetooth: hci0: command 0x080f tx timeout [ 349.584262][ T8360] program syz.4.461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.652931][ T8363] mkiss: ax0: crc mode is auto. [ 350.180949][ T55] Bluetooth: hci1: unexpected event for opcode 0x080c [ 352.144227][ T8382] netlink: zone id is out of range [ 352.467487][ T8382] netlink: zone id is out of range [ 352.581715][ T8382] netlink: zone id is out of range [ 352.636643][ T8382] netlink: zone id is out of range [ 352.710024][ T8382] netlink: zone id is out of range [ 352.791056][ T8382] netlink: zone id is out of range [ 352.878520][ T8382] netlink: zone id is out of range [ 352.964627][ T8382] netlink: zone id is out of range [ 353.029613][ T8382] netlink: zone id is out of range [ 353.139053][ T8382] netlink: zone id is out of range [ 353.294800][ T30] audit: type=1326 audit(1747854939.921:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8369 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 353.520413][ T30] audit: type=1326 audit(1747854939.951:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8369 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 353.661185][ T30] audit: type=1326 audit(1747854939.951:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8369 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 353.682729][ T30] audit: type=1326 audit(1747854939.951:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8369 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 353.704278][ T30] audit: type=1326 audit(1747854939.951:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8369 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 353.726036][ T30] audit: type=1326 audit(1747854939.951:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8369 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 353.747701][ T30] audit: type=1326 audit(1747854939.951:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8369 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 354.146195][ T8395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.080097][ T30] audit: type=1326 audit(1747854939.951:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8369 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 355.108100][ T30] audit: type=1326 audit(1747854939.951:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8369 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 355.129669][ T30] audit: type=1326 audit(1747854939.951:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8369 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdbf8e969 code=0x7ffc0000 [ 356.635417][ T8412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.473'. [ 356.648399][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.470'. [ 356.684593][ T96] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 359.524127][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 359.524144][ T30] audit: type=1326 audit(1747854946.151:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8424 comm="syz.5.476" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x0 [ 359.748561][ T8441] random: crng reseeded on system resumption [ 361.836300][ T30] audit: type=1326 audit(1747854947.921:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8449 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 361.876946][ T8459] 8021q: VLANs not supported on wg0 [ 362.385247][ T30] audit: type=1326 audit(1747854947.921:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8449 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 362.967423][ T30] audit: type=1326 audit(1747854947.921:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8449 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 363.051501][ T30] audit: type=1326 audit(1747854947.921:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8449 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 363.234149][ T30] audit: type=1326 audit(1747854947.921:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8449 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 363.260149][ T30] audit: type=1326 audit(1747854947.921:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8449 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 363.870083][ T30] audit: type=1326 audit(1747854947.921:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8449 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 364.083703][ T30] audit: type=1326 audit(1747854947.931:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8449 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 364.159123][ T30] audit: type=1326 audit(1747854947.931:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8449 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 364.601574][ T30] audit: type=1326 audit(1747854947.931:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8449 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 364.623889][ T30] audit: type=1326 audit(1747854947.931:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8449 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fad38e969 code=0x7ffc0000 [ 365.338919][ T8485] netlink: 16 bytes leftover after parsing attributes in process `syz.5.489'. [ 370.705774][ T8520] netlink: 'syz.0.490': attribute type 4 has an invalid length. [ 371.103431][ T8515] ptrace attach of ""[8519] was attempted by "./syz-executor exec"[8515] [ 371.921521][ T8520] netlink: 152 bytes leftover after parsing attributes in process `syz.0.490'. [ 372.045437][ T8520] net_ratelimit: 6 callbacks suppressed [ 372.045456][ T8520] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 376.304595][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 376.973841][ T8557] nbd6: detected capacity change from 0 to 4294967296 [ 377.157699][ T30] audit: type=1326 audit(1747854963.781:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8560 comm="syz.5.500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x0 [ 377.406025][ T55] block nbd6: Receive control failed (result -104) [ 378.535513][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.541974][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.971213][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.981224][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.989722][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.998918][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.012541][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.826450][ T8580] chnl_net:caif_netlink_parms(): no params data found [ 381.354800][ T5821] Bluetooth: hci5: command tx timeout [ 381.920871][ T8580] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.840689][ T8631] ptrace attach of ""[8632] was attempted by "./syz-executor exec"[8631] [ 383.033554][ T8580] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.045310][ T8580] bridge_slave_0: entered allmulticast mode [ 383.089026][ T8580] bridge_slave_0: entered promiscuous mode [ 383.460602][ T5821] Bluetooth: hci5: command tx timeout [ 384.145971][ T8629] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 384.155490][ T8629] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 384.165270][ T8629] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 384.189362][ T8580] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.207561][ T8580] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.258076][ T8580] bridge_slave_1: entered allmulticast mode [ 384.296373][ T8580] bridge_slave_1: entered promiscuous mode [ 384.450219][ T8641] netlink: 16 bytes leftover after parsing attributes in process `syz.5.511'. [ 384.531415][ T6434] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.763779][ T8645] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 386.698650][ T5821] Bluetooth: hci5: command tx timeout [ 387.600577][ T6434] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.715129][ T8580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.756411][ T8580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.832858][ T6434] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.328179][ T6434] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.362562][ T8580] team0: Port device team_slave_0 added [ 388.373079][ T8580] team0: Port device team_slave_1 added [ 388.615224][ T8580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.637293][ T8580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.719013][ T8580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.745488][ T8580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.764322][ T8580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.773074][ T5821] Bluetooth: hci5: command tx timeout [ 388.816061][ T8580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.966481][ T8580] hsr_slave_0: entered promiscuous mode [ 388.984160][ T8580] hsr_slave_1: entered promiscuous mode [ 389.006359][ T8580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.017146][ T8580] Cannot create hsr debugfs directory [ 389.289657][ T6434] bridge_slave_1: left allmulticast mode [ 389.299505][ T6434] bridge_slave_1: left promiscuous mode [ 389.309064][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.330355][ T6434] bridge_slave_0: left allmulticast mode [ 389.344250][ T6434] bridge_slave_0: left promiscuous mode [ 389.359067][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.414411][ T5917] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 390.819210][ T6434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.835052][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.847247][ T5917] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 390.851054][ T6434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.857272][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.879611][ T6434] bond0 (unregistering): Released all slaves [ 390.929951][ T5917] usb 2-1: config 0 descriptor?? [ 392.433012][ T5917] pwc: Askey VC010 type 2 USB webcam detected. [ 392.672455][ T5917] pwc: recv_control_msg error -32 req 02 val 2b00 [ 393.008126][ T5917] pwc: recv_control_msg error -71 req 02 val 2700 [ 393.989763][ T5917] pwc: recv_control_msg error -71 req 02 val 2c00 [ 394.013429][ T5917] pwc: recv_control_msg error -71 req 04 val 1000 [ 394.965399][ T5917] pwc: recv_control_msg error -71 req 04 val 1300 [ 394.978599][ T5917] pwc: recv_control_msg error -71 req 04 val 1400 [ 394.985713][ T5917] pwc: recv_control_msg error -71 req 02 val 2000 [ 394.992811][ T5917] pwc: recv_control_msg error -71 req 02 val 2100 [ 394.999672][ T5917] pwc: recv_control_msg error -71 req 04 val 1500 [ 395.006712][ T5917] pwc: recv_control_msg error -71 req 02 val 2500 [ 395.519450][ T5917] pwc: recv_control_msg error -71 req 02 val 2400 [ 395.536392][ T5917] pwc: recv_control_msg error -71 req 02 val 2600 [ 395.560991][ T5917] pwc: recv_control_msg error -71 req 02 val 2900 [ 395.580710][ T5917] pwc: recv_control_msg error -71 req 02 val 2800 [ 395.597976][ T5917] pwc: recv_control_msg error -71 req 04 val 1100 [ 395.628624][ T5917] pwc: recv_control_msg error -71 req 04 val 1200 [ 395.682261][ T5917] pwc: Registered as video103. [ 395.722864][ T5917] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 395.839683][ T5917] usb 2-1: USB disconnect, device number 5 [ 395.909046][ T6434] hsr_slave_0: left promiscuous mode [ 395.987807][ T6434] hsr_slave_1: left promiscuous mode [ 396.006815][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.342596][ T8745] netlink: 100 bytes leftover after parsing attributes in process `syz.1.527'. [ 396.491157][ T6434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.758657][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.822725][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 396.823342][ T6434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.839202][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 396.848409][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 396.857930][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 396.865939][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 397.860723][ T6434] veth1_macvtap: left promiscuous mode [ 397.886479][ T6434] veth0_macvtap: left promiscuous mode [ 398.500198][ T6434] team0 (unregistering): Port device team_slave_1 removed [ 398.563920][ T6434] team0 (unregistering): Port device team_slave_0 removed [ 398.931096][ T5821] Bluetooth: hci1: command tx timeout [ 399.251183][ T8580] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 399.296271][ T8580] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 399.319934][ T8580] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 399.352107][ T8580] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 401.159841][ T5821] Bluetooth: hci1: command tx timeout [ 402.346807][ T8777] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 402.578205][ T5821] Bluetooth: hci0: command 0x080f tx timeout [ 403.318543][ T5821] Bluetooth: hci1: command tx timeout [ 403.470102][ T8580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.279276][ T8580] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.330629][ T5821] Bluetooth: hci1: command tx timeout [ 405.570626][ T5821] Bluetooth: hci0: command 0x080f tx timeout [ 405.577030][ T8801] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 406.604801][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.612008][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.759925][ T8818] Illegal XDP return value 1774248830 on prog (id 142) dev N/A, expect packet loss! [ 407.221220][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.228401][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.402850][ T99] block nbd6: Possible stuck request ffff888024ed7000: control (read@0,4096B). Runtime 30 seconds [ 407.415024][ T8749] chnl_net:caif_netlink_parms(): no params data found [ 407.497755][ T8580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 407.871605][ T5949] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 407.927409][ T8749] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.954155][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.971394][ T8749] bridge_slave_0: entered allmulticast mode [ 407.990656][ T8749] bridge_slave_0: entered promiscuous mode [ 408.019876][ T8749] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.049540][ T8749] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.064660][ T5949] usb 6-1: config 0 has an invalid interface number: 95 but max is 0 [ 408.074088][ T8749] bridge_slave_1: entered allmulticast mode [ 408.080766][ T5949] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.092234][ T8749] bridge_slave_1: entered promiscuous mode [ 408.099402][ T5949] usb 6-1: config 0 has no interface number 0 [ 408.110567][ T5949] usb 6-1: config 0 interface 95 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 408.120319][ T5949] usb 6-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 408.148431][ T5949] usb 6-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 408.164048][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.183339][ T5949] usb 6-1: Product: syz [ 408.189888][ T5949] usb 6-1: Manufacturer: syz [ 408.197222][ T5949] usb 6-1: SerialNumber: syz [ 408.207447][ T8749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.221913][ T5949] usb 6-1: config 0 descriptor?? [ 408.263250][ T8749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.382430][ T8580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.406432][ T8749] team0: Port device team_slave_0 added [ 408.428936][ T8749] team0: Port device team_slave_1 added [ 408.458953][ T8826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.511338][ T8826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.552537][ T5949] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 408.559580][ T5949] usb 6-1: MIDIStreaming interface descriptor not found [ 408.646927][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.670622][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.729090][ T5949] usb 6-1: USB disconnect, device number 5 [ 408.792745][ T8749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.870372][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.889745][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.716170][ T8749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.078536][ T7458] udevd[7458]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.326138][ T8749] hsr_slave_0: entered promiscuous mode [ 411.339833][ T8749] hsr_slave_1: entered promiscuous mode [ 411.346838][ T8749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.030947][ T8749] Cannot create hsr debugfs directory [ 413.260734][ T59] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 413.542325][ T59] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 413.554880][ T59] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 413.580565][ T59] usb 1-1: config 0 has no interface number 0 [ 413.601874][ T59] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 413.648603][ T59] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 413.693343][ T59] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 413.759054][ T59] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 413.785677][ T59] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 413.813822][ T59] usb 1-1: Product: syz [ 413.828393][ T59] usb 1-1: Manufacturer: syz [ 413.897200][ T59] usb 1-1: config 0 descriptor?? [ 413.972094][ T8877] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 414.920571][ T8877] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.549'. [ 414.954131][ T59] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input11 [ 415.991271][ C0] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 416.002529][ T59] usb 1-1: USB disconnect, device number 6 [ 416.469930][ T8904] openvswitch: netlink: Flow key attr not present in new flow. [ 416.638165][ T8904] RDS: rds_bind could not find a transport for fe88::6, load rds_tcp or rds_rdma? [ 416.970118][ T8580] veth0_vlan: entered promiscuous mode [ 417.164032][ T8580] veth1_vlan: entered promiscuous mode [ 418.106676][ T5949] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 418.120091][ T8580] veth0_macvtap: entered promiscuous mode [ 418.142180][ T8749] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 418.175143][ T8580] veth1_macvtap: entered promiscuous mode [ 418.193438][ T8749] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 418.231178][ T8749] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 418.283940][ T5949] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 418.297584][ T8749] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 418.315869][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 418.338487][ T8580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.350690][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 418.367563][ T8580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.380408][ T5949] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 418.407389][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.426304][ T8580] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.441334][ T5949] usb 1-1: Product: syz [ 418.446629][ T8580] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.455692][ T5949] usb 1-1: Manufacturer: syz [ 418.461097][ T5949] usb 1-1: SerialNumber: syz [ 418.465753][ T8580] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.479585][ T5949] usb 1-1: config 0 descriptor?? [ 418.489581][ T8580] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.500242][ T8913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 418.521296][ T5949] option 1-1:0.0: GSM modem (1-port) converter detected [ 418.752332][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.774895][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.867219][ T5942] usb 1-1: USB disconnect, device number 7 [ 418.897358][ T5942] option 1-1:0.0: device disconnected [ 418.919386][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.943080][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.002305][ T8749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.049020][ T8749] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.123048][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.130257][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.155666][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.162986][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.380612][ T5907] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 419.470283][ T8749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 419.581129][ T5907] usb 6-1: Using ep0 maxpacket: 16 [ 419.677773][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.411385][ T5907] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 421.044874][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.060113][ T5907] usb 6-1: config 0 descriptor?? [ 421.795863][ T8961] usb usb8: usbfs: process 8961 (syz.5.559) did not claim interface 0 before use [ 422.080859][ T8969] netlink: 'syz.1.563': attribute type 2 has an invalid length. [ 422.088641][ T8969] netlink: 51 bytes leftover after parsing attributes in process `syz.1.563'. [ 422.103574][ T8969] x_tables: duplicate underflow at hook 3 [ 423.489675][ T8749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.642175][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.7.566'. [ 423.651800][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.7.566'. [ 423.721822][ T8980] netlink: 'syz.7.566': attribute type 14 has an invalid length. [ 423.729610][ T8980] netlink: 'syz.7.566': attribute type 12 has an invalid length. [ 423.830702][ T5942] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 423.990598][ T5942] usb 1-1: Using ep0 maxpacket: 32 [ 424.032251][ T5942] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.064442][ T5942] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 424.093917][ T5839] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 424.115298][ T5942] usb 1-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=d3.fc [ 424.140618][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.160772][ T5942] usb 1-1: Product: syz [ 424.165073][ T5942] usb 1-1: Manufacturer: syz [ 424.195535][ T5942] usb 1-1: SerialNumber: syz [ 424.224754][ T5942] usb 1-1: config 0 descriptor?? [ 424.290939][ T5839] usb 8-1: Using ep0 maxpacket: 16 [ 424.298669][ T5839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.319245][ T5839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.329510][ T5839] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 424.342797][ T5839] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 424.352207][ T5839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.380927][ T5839] usb 8-1: config 0 descriptor?? [ 425.245473][ T5839] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 425.830832][ T5839] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 425.843502][ T5839] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 425.852443][ T5839] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 425.859886][ T5839] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 425.875604][ T8749] veth0_vlan: entered promiscuous mode [ 426.035554][ T5839] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 426.089364][ T5839] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 426.119249][ T8749] veth1_vlan: entered promiscuous mode [ 426.135100][ T5907] usbhid 6-1:0.0: can't add hid device: -32 [ 426.146336][ T5839] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 426.163366][ T5907] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 426.199044][ T5839] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 426.256813][ T5839] microsoft 0003:045E:07DA.0002: unbalanced delimiter at end of report description [ 426.316815][ T5839] microsoft 0003:045E:07DA.0002: parse failed [ 426.356895][ T5839] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 426.368689][ T8749] veth0_macvtap: entered promiscuous mode [ 426.413907][ T24] usb 6-1: USB disconnect, device number 6 [ 426.431054][ T8749] veth1_macvtap: entered promiscuous mode [ 426.444325][ T5839] usb 8-1: USB disconnect, device number 2 [ 426.608721][ T8749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.698232][ T30] audit: type=1326 audit(1747855013.323:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9012 comm="syz.5.570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x0 [ 426.748495][ T8749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.810135][ T8749] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.852533][ T8749] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.871051][ T8749] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.913527][ T8749] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.083139][ T9033] netlink: 'syz.5.574': attribute type 2 has an invalid length. [ 429.092152][ T9033] netlink: 51 bytes leftover after parsing attributes in process `syz.5.574'. [ 429.107736][ T9033] x_tables: duplicate underflow at hook 3 [ 430.413812][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.437359][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.617984][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.650632][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.851516][ T96] usb 1-1: USB disconnect, device number 8 [ 432.015951][ T9054] netlink: 64 bytes leftover after parsing attributes in process `syz.0.579'. [ 432.024981][ T9054] netlink: 64 bytes leftover after parsing attributes in process `syz.0.579'. [ 433.018165][ T9061] [U]  [ 433.021318][ T9061] [U] K{ [ 433.055870][ T9061] [U] t 1ŠFfˊ`GJgo/mC [ 433.097566][ T9061] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 433.180977][ T9061] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 433.196168][ T9061] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 434.100896][ T9061] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 434.155522][ T9061] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 434.168453][ T9061] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 434.180316][ T9061] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 434.324481][ T9061] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 434.334029][ T9061] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 434.349006][ T9061] [U] 22Ʃx?0;3u [ 434.375660][ T9061] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 434.405484][ T9061] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 434.442576][ T9061] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 434.452481][ T9061] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 434.458681][ T9061] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 434.471123][ T9061] [U] ec [ 434.474256][ T9061] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 434.486707][ T9061] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 434.753455][ T9073] overlay: Unknown parameter 'fowner' [ 439.998123][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.004757][ T30] audit: type=1326 audit(1747855026.373:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9093 comm="syz.1.588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb57d8e969 code=0x0 [ 440.026926][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.109056][ T99] block nbd6: Possible stuck request ffff888024ed7000: control (read@0,4096B). Runtime 60 seconds [ 440.203022][ T9097] random: crng reseeded on system resumption [ 443.174297][ T9113] netlink: 'syz.8.591': attribute type 1 has an invalid length. [ 444.349391][ T9121] ptrace attach of ""[9122] was attempted by "./syz-executor exec"[9121] [ 444.786244][ T9123] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 446.018645][ T5821] Bluetooth: hci0: command 0x080f tx timeout [ 447.100044][ T30] audit: type=1326 audit(1747855033.713:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9126 comm="syz.5.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 447.193020][ T30] audit: type=1326 audit(1747855033.713:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9126 comm="syz.5.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 447.220726][ T30] audit: type=1326 audit(1747855033.713:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9126 comm="syz.5.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 447.242128][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.252577][ T30] audit: type=1326 audit(1747855033.713:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9126 comm="syz.5.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 447.274004][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.287557][ T9143] can0: slcan on ptm0. [ 447.854405][ T30] audit: type=1326 audit(1747855033.713:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9126 comm="syz.5.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 447.875807][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.887894][ T30] audit: type=1326 audit(1747855033.723:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9126 comm="syz.5.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 447.909213][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.916491][ T30] audit: type=1326 audit(1747855033.723:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9126 comm="syz.5.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 447.938635][ T30] audit: type=1326 audit(1747855033.723:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9126 comm="syz.5.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 447.960357][ T30] audit: type=1326 audit(1747855033.723:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9126 comm="syz.5.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 447.982068][ T5839] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 448.010009][ T24] IPVS: starting estimator thread 0... [ 448.022314][ T30] audit: type=1326 audit(1747855034.193:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9126 comm="syz.5.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf69b8e969 code=0x7ffc0000 [ 448.118956][ T9145] IPVS: using max 36 ests per chain, 86400 per kthread [ 448.171913][ T9114] can0 (unregistered): slcan off ptm0. [ 448.179479][ T5839] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.191225][ T5839] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 448.200384][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.211383][ T5839] usb 1-1: config 0 descriptor?? [ 448.219755][ T5839] pwc: Askey VC010 type 2 USB webcam detected. [ 449.301431][ T5839] pwc: recv_control_msg error -32 req 02 val 2b00 [ 449.525053][ T5839] pwc: recv_control_msg error -71 req 02 val 2700 [ 449.549501][ T5839] pwc: recv_control_msg error -71 req 02 val 2c00 [ 449.562171][ T9163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.576222][ T9163] bond0: (slave rose0): Enslaving as an active interface with an up link [ 449.590376][ T5839] pwc: recv_control_msg error -71 req 04 val 1000 [ 449.602763][ T5839] pwc: recv_control_msg error -71 req 04 val 1300 [ 449.626047][ T5839] pwc: recv_control_msg error -71 req 04 val 1400 [ 449.646446][ T5839] pwc: recv_control_msg error -71 req 02 val 2000 [ 449.663072][ T5839] pwc: recv_control_msg error -71 req 02 val 2100 [ 449.688374][ T5839] pwc: recv_control_msg error -71 req 04 val 1500 [ 449.707617][ T5839] pwc: recv_control_msg error -71 req 02 val 2500 [ 449.728428][ T5839] pwc: recv_control_msg error -71 req 02 val 2400 [ 449.749281][ T5839] pwc: recv_control_msg error -71 req 02 val 2600 [ 449.771367][ T5839] pwc: recv_control_msg error -71 req 02 val 2900 [ 449.787843][ T5839] pwc: recv_control_msg error -71 req 02 val 2800 [ 449.807264][ T5839] pwc: recv_control_msg error -71 req 04 val 1100 [ 449.836956][ T5839] pwc: recv_control_msg error -71 req 04 val 1200 [ 449.890643][ T5839] pwc: Registered as video103. [ 450.396753][ T5839] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 450.631486][ T5839] usb 1-1: USB disconnect, device number 9 [ 455.059807][ T9206] netlink: 100 bytes leftover after parsing attributes in process `syz.8.618'. [ 455.418821][ T5839] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 455.614505][ T5839] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.651531][ T5839] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 455.733210][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 455.733263][ T30] audit: type=1326 audit(1747855042.293:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9218 comm="syz.8.621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f097798e969 code=0x0 [ 455.760148][ C1] vkms_vblank_simulate: vblank timer overrun [ 455.950699][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.014352][ T5839] usb 1-1: config 0 descriptor?? [ 456.043113][ T5839] pwc: Askey VC010 type 2 USB webcam detected. [ 456.556743][ T5839] pwc: recv_control_msg error -32 req 02 val 2b00 [ 456.720552][ T96] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 456.902851][ T5839] pwc: recv_control_msg error -71 req 02 val 2700 [ 457.011157][ T5839] pwc: recv_control_msg error -71 req 02 val 2c00 [ 457.020348][ T96] usb 8-1: config 0 has an invalid interface number: 32 but max is 0 [ 457.043199][ T96] usb 8-1: config 0 has no interface number 0 [ 457.049841][ T5839] pwc: recv_control_msg error -71 req 04 val 1000 [ 457.057080][ T96] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 457.074628][ T5839] pwc: recv_control_msg error -71 req 04 val 1300 [ 457.090952][ T96] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.099195][ T5839] pwc: recv_control_msg error -71 req 04 val 1400 [ 457.125957][ T5839] pwc: recv_control_msg error -71 req 02 val 2000 [ 457.137467][ T96] usb 8-1: config 0 descriptor?? [ 457.151041][ T5839] pwc: recv_control_msg error -71 req 02 val 2100 [ 457.173816][ T96] cp210x 8-1:0.32: cp210x converter detected [ 457.187070][ T5839] pwc: recv_control_msg error -71 req 04 val 1500 [ 457.194602][ T5839] pwc: recv_control_msg error -71 req 02 val 2500 [ 457.207618][ T5839] pwc: recv_control_msg error -71 req 02 val 2400 [ 457.218825][ T5839] pwc: recv_control_msg error -71 req 02 val 2600 [ 457.236760][ T5839] pwc: recv_control_msg error -71 req 02 val 2900 [ 457.250049][ T5839] pwc: recv_control_msg error -71 req 02 val 2800 [ 457.392057][ T5839] pwc: recv_control_msg error -71 req 04 val 1100 [ 458.107017][ T96] cp210x 8-1:0.32: failed to get vendor val 0x000e size 3: -32 [ 458.131086][ T5839] pwc: recv_control_msg error -71 req 04 val 1200 [ 458.146707][ T96] cp210x 8-1:0.32: GPIO initialisation failed: -19 [ 458.155563][ T5839] pwc: Registered as video103. [ 458.177426][ T9236] overlayfs: missing 'lowerdir' [ 458.192179][ T5839] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 458.209447][ T96] usb 8-1: cp210x converter now attached to ttyUSB0 [ 458.836554][ T5839] usb 1-1: USB disconnect, device number 10 [ 459.407939][ T9255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.656661][ T9261] mkiss: ax0: crc mode is auto. [ 461.340213][ T5878] usb 8-1: USB disconnect, device number 3 [ 461.466415][ T5878] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 461.517027][ T5878] cp210x 8-1:0.32: device disconnected [ 461.787855][ T5918] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 462.658248][ T5918] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.741169][ T5918] usb 9-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 462.982463][ T5918] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.995638][ T96] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 463.032109][ T5918] usb 9-1: config 0 descriptor?? [ 463.344002][ T30] audit: type=1326 audit(1747855049.973:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9273 comm="syz.7.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1fd8e969 code=0x7ffc0000 [ 463.378403][ T30] audit: type=1326 audit(1747855049.973:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9273 comm="syz.7.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1fd8e969 code=0x7ffc0000 [ 463.380674][ T96] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.404623][ T30] audit: type=1326 audit(1747855049.973:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9273 comm="syz.7.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fae1fd8e969 code=0x7ffc0000 [ 463.445793][ T96] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 463.455148][ T96] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.524000][ T96] usb 1-1: config 0 descriptor?? [ 463.535462][ T30] audit: type=1326 audit(1747855049.973:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9273 comm="syz.7.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1fd8e969 code=0x7ffc0000 [ 463.584208][ T96] pwc: Askey VC010 type 2 USB webcam detected. [ 463.641364][ T5918] usb 9-1: USB disconnect, device number 2 [ 463.676221][ T30] audit: type=1326 audit(1747855050.003:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9273 comm="syz.7.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fae1fd8e969 code=0x7ffc0000 [ 463.890764][ T30] audit: type=1326 audit(1747855050.003:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9273 comm="syz.7.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1fd8e969 code=0x7ffc0000 [ 463.997620][ T96] pwc: recv_control_msg error -32 req 02 val 2b00 [ 464.440530][ T30] audit: type=1326 audit(1747855050.003:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9273 comm="syz.7.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fae1fd8e969 code=0x7ffc0000 [ 464.538863][ T30] audit: type=1326 audit(1747855050.063:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9273 comm="syz.7.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1fd8e969 code=0x7ffc0000 [ 464.674014][ T96] pwc: recv_control_msg error -71 req 02 val 2700 [ 465.408994][ T30] audit: type=1326 audit(1747855050.063:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9273 comm="syz.7.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1fd8e969 code=0x7ffc0000 [ 465.434417][ T96] pwc: recv_control_msg error -71 req 02 val 2c00 [ 465.443830][ T96] pwc: recv_control_msg error -71 req 04 val 1000 [ 465.450703][ T96] pwc: recv_control_msg error -71 req 04 val 1300 [ 465.458518][ T96] pwc: recv_control_msg error -71 req 04 val 1400 [ 465.470634][ T96] pwc: recv_control_msg error -71 req 02 val 2000 [ 465.477757][ T96] pwc: recv_control_msg error -71 req 02 val 2100 [ 465.488777][ T96] pwc: recv_control_msg error -71 req 04 val 1500 [ 465.497224][ T96] pwc: recv_control_msg error -71 req 02 val 2500 [ 465.504484][ T96] pwc: recv_control_msg error -71 req 02 val 2400 [ 465.511689][ T96] pwc: recv_control_msg error -71 req 02 val 2600 [ 465.518731][ T96] pwc: recv_control_msg error -71 req 02 val 2900 [ 465.525657][ T96] pwc: recv_control_msg error -71 req 02 val 2800 [ 465.533074][ T96] pwc: recv_control_msg error -71 req 04 val 1100 [ 465.544191][ T96] pwc: recv_control_msg error -71 req 04 val 1200 [ 465.566020][ T96] pwc: Registered as video103. [ 465.580726][ T96] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 465.596286][ T96] usb 1-1: USB disconnect, device number 11 [ 465.632526][ T9309] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 467.746235][ T5878] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 468.051446][ T5878] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 468.085679][ T5878] usb 9-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 468.110710][ T5878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.137991][ T5878] usb 9-1: config 0 descriptor?? [ 468.165131][ T9327] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 468.339975][ T96] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 468.520564][ T96] usb 6-1: Using ep0 maxpacket: 32 [ 469.024360][ T9330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.079313][ T9330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.435975][ T96] usb 6-1: config 0 has an invalid interface number: 204 but max is 0 [ 469.444833][ T96] usb 6-1: config 0 has no interface number 0 [ 469.446823][ T5878] elecom 0003:056E:011C.0003: hidraw0: USB HID vb.1d Device [HID 056e:011c] on usb-dummy_hcd.8-1/input0 [ 469.450970][ T96] usb 6-1: config 0 interface 204 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.474395][ T96] usb 6-1: config 0 interface 204 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.484467][ T96] usb 6-1: config 0 interface 204 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.510338][ T96] usb 6-1: config 0 interface 204 has no altsetting 0 [ 469.548268][ T96] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 469.568924][ T96] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.634141][ T96] usb 6-1: config 0 descriptor?? [ 470.590596][ T9] usb 9-1: USB disconnect, device number 3 [ 470.696013][ T99] block nbd6: Possible stuck request ffff888024ed7000: control (read@0,4096B). Runtime 90 seconds [ 471.094306][ T96] hid (null): unknown global tag 0xd [ 471.836956][ T9353] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 471.851352][ T96] uclogic 0003:28BD:0909.0004: interface is invalid, ignoring [ 473.085763][ T5821] Bluetooth: hci0: command 0x080f tx timeout [ 473.806428][ T24] usb 6-1: USB disconnect, device number 7 [ 475.527029][ T9387] batman_adv: batadv0: Adding interface: dummy0 [ 475.593715][ T9387] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.619071][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.972470][ T9387] batman_adv: batadv0: Interface activated: dummy0 [ 477.204203][ T9393] batadv0: mtu less than device minimum [ 477.252807][ T9393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.265388][ T9393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.277383][ T9393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.289407][ T9393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.301293][ T9393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.313070][ T9393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.324898][ T9393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.336869][ T9393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.348898][ T9393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.777293][ T9401] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 478.216714][ T5821] Bluetooth: hci0: command 0x080f tx timeout [ 486.750722][ T5878] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 487.752308][ T5878] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 488.233797][ T5878] usb 2-1: config 0 has no interface number 0 [ 488.241319][ T5878] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 488.253864][ T5878] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 488.264079][ T5878] usb 2-1: config 0 interface 113 has no altsetting 0 [ 488.279725][ T5878] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 488.289970][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.298246][ T5878] usb 2-1: Product: syz [ 488.302707][ T5878] usb 2-1: Manufacturer: syz [ 488.307344][ T5878] usb 2-1: SerialNumber: syz [ 488.331203][ T5878] usb 2-1: config 0 descriptor?? [ 488.360249][ C0] usb 2-1: NFC: Urb failure (status -71) [ 488.370184][ T5878] usb 2-1: NFC: Unable to get FW version [ 488.378579][ T5878] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -90 [ 489.570546][ T5839] usb 2-1: USB disconnect, device number 6 [ 490.088481][ T9517] netlink: 'syz.8.704': attribute type 21 has an invalid length. [ 490.096998][ T9517] IPv6: NLM_F_CREATE should be specified when creating new route [ 492.340376][ T9522] bridge_slave_1: left allmulticast mode [ 492.356981][ T9522] bridge_slave_1: left promiscuous mode [ 492.366413][ T9522] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.078053][ T9571] dlm: no local IP address has been set [ 495.230120][ T9571] dlm: cannot start dlm midcomms -107 [ 496.787936][ T9589] ptrace attach of ""[9592] was attempted by "./syz-executor exec"[9589] [ 498.417890][ T9604] mkiss: ax0: crc mode is auto. [ 499.544524][ T24] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 499.733976][ T24] usb 9-1: device descriptor read/64, error -71 [ 499.970667][ T24] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 500.528223][ T24] usb 9-1: device descriptor read/64, error -71 [ 500.755124][ T24] usb usb9-port1: attempt power cycle [ 500.773043][ T99] block nbd6: Possible stuck request ffff888024ed7000: control (read@0,4096B). Runtime 120 seconds [ 501.130789][ T24] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 501.163948][ T24] usb 9-1: device descriptor read/8, error -71 [ 501.510745][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.520666][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.637052][ T24] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 502.248800][ T9640] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 502.634335][ T24] usb 9-1: device descriptor read/8, error -71 [ 502.790632][ T24] usb usb9-port1: unable to enumerate USB device [ 502.916693][ T30] audit: type=1804 audit(1747855089.513:207): pid=9656 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.739" name="/newroot/151/file0" dev="tmpfs" ino=822 res=1 errno=0 [ 503.378138][ T9649] ptrace attach of ""[9652] was attempted by "./syz-executor exec"[9649] [ 503.691540][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 503.730847][ T55] Bluetooth: hci0: command 0x080f tx timeout [ 504.118434][ T9666] netlink: 40 bytes leftover after parsing attributes in process `syz.8.745'. [ 504.130985][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 504.312044][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.324826][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 504.371961][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.432010][ T24] usb 6-1: config 0 descriptor?? [ 504.444767][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 504.874341][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 505.610582][ T24] pwc: recv_control_msg error -71 req 02 val 2700 [ 505.626967][ T9690] 9pnet_fd: Insufficient options for proto=fd [ 505.642998][ T24] pwc: recv_control_msg error -71 req 02 val 2c00 [ 505.655138][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 505.663203][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 505.670234][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 505.678187][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 505.685503][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 505.695740][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 505.772081][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 505.791141][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 505.820015][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 505.837916][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 505.855824][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 505.864678][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 505.881215][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 505.950245][ T24] pwc: Registered as video103. [ 505.966750][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16 [ 505.996288][ T9695] netlink: 56 bytes leftover after parsing attributes in process `syz.7.756'. [ 506.031345][ T24] usb 6-1: USB disconnect, device number 8 [ 506.299497][ T6037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.463608][ T6037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.722902][ T6037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.914219][ T6037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.999087][ T9718] netlink: 'syz.8.763': attribute type 4 has an invalid length. [ 508.006950][ T9718] netlink: 152 bytes leftover after parsing attributes in process `syz.8.763'. [ 508.081293][ T9718] net_ratelimit: 10 callbacks suppressed [ 508.081313][ T9718] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 508.163057][ T9724] FAULT_INJECTION: forcing a failure. [ 508.163057][ T9724] name failslab, interval 1, probability 0, space 0, times 0 [ 508.175786][ T9724] CPU: 1 UID: 0 PID: 9724 Comm: syz.5.766 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 508.175810][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 508.175829][ T9724] Call Trace: [ 508.175836][ T9724] [ 508.175847][ T9724] dump_stack_lvl+0x189/0x250 [ 508.175888][ T9724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.175913][ T9724] ? __pfx__printk+0x10/0x10 [ 508.175956][ T9724] should_fail_ex+0x414/0x560 [ 508.175981][ T9724] should_failslab+0xa8/0x100 [ 508.176001][ T9724] kmem_cache_alloc_noprof+0x73/0x3c0 [ 508.176028][ T9724] ? dst_alloc+0x105/0x170 [ 508.176053][ T9724] ? kernel_text_address+0xa5/0xe0 [ 508.176081][ T9724] dst_alloc+0x105/0x170 [ 508.176116][ T9724] ip_route_input_rcu+0x1ed5/0x2ff0 [ 508.176175][ T9724] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 508.176200][ T9724] ? inet_ehashfn+0x8d/0x210 [ 508.176257][ T9724] ? ip_route_input_noref+0x98/0x250 [ 508.176286][ T9724] ip_route_input_noref+0x167/0x250 [ 508.176318][ T9724] ? __pfx_ip_route_input_noref+0x10/0x10 [ 508.176352][ T9724] ? tcp_v4_early_demux+0x4e1/0x9d0 [ 508.176374][ T9724] ? tcp_v4_early_demux+0x5ec/0x9d0 [ 508.176406][ T9724] ip_rcv_finish_core+0x5af/0x1c00 [ 508.176441][ T9724] ip_rcv_finish+0x14c/0x2f0 [ 508.176466][ T9724] NF_HOOK+0x309/0x3a0 [ 508.176489][ T9724] ? __pfx_ip_rcv_finish+0x10/0x10 [ 508.176509][ T9724] ? NF_HOOK+0x9a/0x3a0 [ 508.176528][ T9724] ? __pfx_NF_HOOK+0x10/0x10 [ 508.176546][ T9724] ? ip_rcv_core+0x7f7/0xd00 [ 508.176569][ T9724] ? __pfx_ip_rcv_finish+0x10/0x10 [ 508.176601][ T9724] ? __pfx_ip_rcv+0x10/0x10 [ 508.176620][ T9724] __netif_receive_skb+0x143/0x380 [ 508.176648][ T9724] ? netif_receive_skb+0x115/0x790 [ 508.176667][ T9724] netif_receive_skb+0x1cb/0x790 [ 508.176686][ T9724] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 508.176719][ T9724] ? __pfx_netif_receive_skb+0x10/0x10 [ 508.176744][ T9724] ? tun_rx_batched+0x160/0x730 [ 508.176777][ T9724] tun_rx_batched+0x1b9/0x730 [ 508.176813][ T9724] ? __pfx_tun_rx_batched+0x10/0x10 [ 508.176846][ T9724] ? tun_get_user+0x2444/0x3c20 [ 508.176891][ T9724] ? tun_get_user+0x2444/0x3c20 [ 508.176920][ T9724] ? tun_get_user+0x2444/0x3c20 [ 508.176948][ T9724] tun_get_user+0x2879/0x3c20 [ 508.176982][ T9724] ? tun_get_user+0x687/0x3c20 [ 508.177027][ T9724] ? __pfx_tun_get_user+0x10/0x10 [ 508.177067][ T9724] ? __lock_acquire+0xaac/0xd20 [ 508.177099][ T9724] ? ref_tracker_alloc+0x318/0x460 [ 508.177125][ T9724] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 508.177154][ T9724] ? tun_get+0x1c/0x2f0 [ 508.177189][ T9724] ? tun_get+0x1c/0x2f0 [ 508.177217][ T9724] ? tun_get+0x1c/0x2f0 [ 508.177251][ T9724] tun_chr_write_iter+0x113/0x200 [ 508.177296][ T9724] vfs_write+0x54b/0xa90 [ 508.177327][ T9724] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 508.177368][ T9724] ? __pfx_vfs_write+0x10/0x10 [ 508.177404][ T9724] ? __fget_files+0x2a/0x420 [ 508.177430][ T9724] ksys_write+0x145/0x250 [ 508.177453][ T9724] ? rcu_is_watching+0x15/0xb0 [ 508.177480][ T9724] ? __pfx_ksys_write+0x10/0x10 [ 508.177508][ T9724] ? do_syscall_64+0xba/0x210 [ 508.177536][ T9724] do_syscall_64+0xf6/0x210 [ 508.177560][ T9724] ? clear_bhb_loop+0x60/0xb0 [ 508.177583][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.177601][ T9724] RIP: 0033:0x7fcf69b8d41f [ 508.177617][ T9724] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 508.177633][ T9724] RSP: 002b:00007fcf6aa94000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 508.177652][ T9724] RAX: ffffffffffffffda RBX: 00007fcf69db5fa0 RCX: 00007fcf69b8d41f [ 508.177666][ T9724] RDX: 0000000000000042 RSI: 0000200000000000 RDI: 00000000000000c8 [ 508.177677][ T9724] RBP: 00007fcf6aa94090 R08: 0000000000000000 R09: 0000000000000000 [ 508.177689][ T9724] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000001 [ 508.177699][ T9724] R13: 0000000000000000 R14: 00007fcf69db5fa0 R15: 00007ffc85009598 [ 508.177729][ T9724] [ 508.677109][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 508.708860][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 508.721024][ T6037] bridge_slave_1: left allmulticast mode [ 508.721032][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 508.726694][ T6037] bridge_slave_1: left promiscuous mode [ 508.740083][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.755670][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 508.764666][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 508.819515][ T6037] bridge_slave_0: left allmulticast mode [ 508.826072][ T6037] bridge_slave_0: left promiscuous mode [ 508.834473][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.044313][ T9733] netlink: 108 bytes leftover after parsing attributes in process `syz.5.770'. [ 509.341475][ T6037] team0: Port device bridge0 removed [ 509.489471][ T6037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.500179][ T6037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.514625][ T6037] bond0 (unregistering): (slave team0): Releasing backup interface [ 509.530140][ T6037] bond0 (unregistering): Released all slaves [ 509.547411][ T9732] netlink: 64 bytes leftover after parsing attributes in process `syz.7.769'. [ 509.556716][ T9732] netlink: 64 bytes leftover after parsing attributes in process `syz.7.769'. [ 510.812696][ T9747] QAT: Stopping all acceleration devices. [ 510.860297][ T5821] Bluetooth: hci2: command tx timeout [ 510.932233][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.7.774'. [ 511.243500][ T9747] macvtap1: entered promiscuous mode [ 511.249047][ T9747] vlan0: entered promiscuous mode [ 511.259373][ T9747] macvtap1: entered allmulticast mode [ 511.264977][ T9747] vlan0: entered allmulticast mode [ 511.270157][ T9747] veth0_vlan: entered allmulticast mode [ 512.858741][ T9727] chnl_net:caif_netlink_parms(): no params data found [ 512.934132][ T5821] Bluetooth: hci2: command tx timeout [ 515.120590][ T5821] Bluetooth: hci2: command tx timeout [ 515.587983][ T9801] netlink: 100 bytes leftover after parsing attributes in process `syz.7.785'. [ 515.871591][ T9796] veth3: entered promiscuous mode [ 515.922510][ T6037] hsr_slave_0: left promiscuous mode [ 515.939102][ T6037] hsr_slave_1: left promiscuous mode [ 515.962332][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.992209][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.041472][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.175758][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.207882][ T6037] veth1_macvtap: left promiscuous mode [ 516.219604][ T6037] veth0_macvtap: left promiscuous mode [ 516.238078][ T6037] veth1_vlan: left promiscuous mode [ 516.248465][ T6037] veth0_vlan: left promiscuous mode [ 517.170680][ T5821] Bluetooth: hci2: command tx timeout [ 517.395463][ T6037] team0 (unregistering): Port device team_slave_1 removed [ 517.432779][ T6037] team0 (unregistering): Port device team_slave_0 removed [ 517.781709][ T9800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.789544][ T9800] IPv6: NLM_F_CREATE should be set when creating new route [ 517.796937][ T9800] IPv6: NLM_F_CREATE should be set when creating new route [ 517.805418][ T9802] netlink: 40 bytes leftover after parsing attributes in process `syz.8.787'. [ 517.814948][ T9815] tipc: Started in network mode [ 517.820712][ T9815] tipc: Node identity ac14140f, cluster identity 4711 [ 517.831940][ T9815] tipc: New replicast peer: 255.255.255.255 [ 517.839355][ T9815] tipc: Enabled bearer , priority 10 [ 518.284247][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 518.583782][ T9727] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.590727][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 518.611278][ T9727] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.611401][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 518.618580][ T9727] bridge_slave_0: entered allmulticast mode [ 518.659984][ T24] usb 9-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 518.673930][ T9727] bridge_slave_0: entered promiscuous mode [ 518.683417][ T24] usb 9-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 518.711598][ T9727] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.720600][ T24] usb 9-1: Product: syz [ 518.725293][ T9727] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.728978][ T24] usb 9-1: Manufacturer: syz [ 518.736950][ T9727] bridge_slave_1: entered allmulticast mode [ 518.737050][ T24] usb 9-1: SerialNumber: syz [ 518.746318][ T9727] bridge_slave_1: entered promiscuous mode [ 518.807664][ T9727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.832750][ T9727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.900258][ T9727] team0: Port device team_slave_0 added [ 518.909631][ T9727] team0: Port device team_slave_1 added [ 518.951692][ T59] tipc: Node number set to 2886997007 [ 518.970016][ T9727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.974705][ T24] usb 9-1: Invalid connection information received from device [ 518.985247][ T9727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.013406][ T9727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.035390][ T9727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.052579][ T9727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.094565][ T9727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.318607][ T9852] netlink: 'syz.1.798': attribute type 2 has an invalid length. [ 523.326588][ T9852] netlink: 51 bytes leftover after parsing attributes in process `syz.1.798'. [ 523.349449][ T9852] x_tables: duplicate underflow at hook 3 [ 524.174242][ T9840] bond0: entered promiscuous mode [ 524.179430][ T9840] bond_slave_0: entered promiscuous mode [ 524.203656][ T9840] bond_slave_1: entered promiscuous mode [ 524.674129][ T9727] hsr_slave_0: entered promiscuous mode [ 524.688244][ T9727] hsr_slave_1: entered promiscuous mode [ 524.695744][ T9727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.704672][ T9727] Cannot create hsr debugfs directory [ 524.726924][ T5878] usb 9-1: USB disconnect, device number 8 [ 524.770596][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 527.150312][ T5918] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 527.310402][ T5918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.331905][ T5918] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 527.373869][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.404341][ T5918] usb 6-1: config 0 descriptor?? [ 527.423411][ T5918] pwc: Askey VC010 type 2 USB webcam detected. [ 527.452864][ T9727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 527.466453][ T9727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 527.478584][ T9727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 527.491287][ T9727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 527.646718][ T9727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.671523][ T9727] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.689630][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.696848][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.716789][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.724100][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.830295][ T5918] pwc: recv_control_msg error -32 req 02 val 2b00 [ 528.022245][ T5918] pwc: recv_control_msg error -71 req 02 val 2700 [ 528.045612][ T5918] pwc: recv_control_msg error -71 req 02 val 2c00 [ 528.074808][ T5918] pwc: recv_control_msg error -71 req 04 val 1000 [ 528.093653][ T5918] pwc: recv_control_msg error -71 req 04 val 1300 [ 528.112713][ T5918] pwc: recv_control_msg error -71 req 04 val 1400 [ 528.137720][ T5918] pwc: recv_control_msg error -71 req 02 val 2000 [ 528.160099][ T5918] pwc: recv_control_msg error -71 req 02 val 2100 [ 528.196419][ T5918] pwc: recv_control_msg error -71 req 04 val 1500 [ 528.203886][ T5918] pwc: recv_control_msg error -71 req 02 val 2500 [ 528.211611][ T5918] pwc: recv_control_msg error -71 req 02 val 2400 [ 528.226637][ T5918] pwc: recv_control_msg error -71 req 02 val 2600 [ 528.246611][ T5918] pwc: recv_control_msg error -71 req 02 val 2900 [ 528.261779][ T5918] pwc: recv_control_msg error -71 req 02 val 2800 [ 528.278991][ T5918] pwc: recv_control_msg error -71 req 04 val 1100 [ 528.303218][ T5918] pwc: recv_control_msg error -71 req 04 val 1200 [ 528.325402][ T9727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.333836][ T5918] pwc: Registered as video103. [ 528.365975][ T5918] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 528.425717][ T5918] usb 6-1: USB disconnect, device number 9 [ 529.048568][ T9727] veth0_vlan: entered promiscuous mode [ 529.110975][ T9727] veth1_vlan: entered promiscuous mode [ 529.248373][ T9727] veth0_macvtap: entered promiscuous mode [ 529.275672][ T9727] veth1_macvtap: entered promiscuous mode [ 529.296836][ T9727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.328589][ T9727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.370409][ T9727] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.384230][ T9727] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.400713][ T9727] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.412909][ T9727] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.534837][ T9917] netlink: 100 bytes leftover after parsing attributes in process `syz.8.817'. [ 530.044346][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.073011][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.164188][ T6037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.175953][ T6037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.851381][ T99] block nbd6: Possible stuck request ffff888024ed7000: control (read@0,4096B). Runtime 150 seconds [ 534.236667][ T6037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.454287][ T6037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.589384][ T6037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.291678][ T31] INFO: task syz.6.499:8557 blocked for more than 145 seconds. [ 535.320302][ T31] Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 535.345845][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.396000][ T31] task:syz.6.499 state:D stack:26952 pid:8557 tgid:8553 ppid:7368 task_flags:0x400140 flags:0x00004006 [ 535.507504][ T31] Call Trace: [ 535.520508][ T31] [ 535.523576][ T31] __schedule+0x168f/0x4c70 [ 535.528153][ T31] ? schedule+0x165/0x360 [ 535.540460][ T31] ? __pfx___schedule+0x10/0x10 [ 535.545374][ T31] ? schedule+0x91/0x360 [ 535.549653][ T31] schedule+0x165/0x360 [ 535.588878][ T31] schedule_preempt_disabled+0x13/0x30 [ 535.600480][ T31] __mutex_lock+0x724/0xe80 [ 535.605024][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 535.610246][ T31] ? __mutex_lock+0x51b/0xe80 [ 535.630494][ T31] ? bdev_release+0x1a9/0x650 [ 535.635326][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 535.640372][ T31] ? __asan_memset+0x22/0x50 [ 535.660487][ T31] ? __pfx___fsnotify_parent+0x10/0x10 [ 535.666081][ T31] ? do_raw_spin_lock+0x121/0x290 [ 535.683977][ T31] bdev_release+0x1a9/0x650 [ 535.688542][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 535.710507][ T31] blkdev_release+0x15/0x20 [ 535.715079][ T31] __fput+0x449/0xa70 [ 535.719123][ T31] task_work_run+0x1d4/0x260 [ 535.740473][ T31] ? __pfx_task_work_run+0x10/0x10 [ 535.745642][ T31] get_signal+0x11c5/0x1310 [ 535.750212][ T31] arch_do_signal_or_restart+0x95/0x780 [ 535.770758][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 535.776966][ T31] ? __file_ref_put+0xd5/0x130 [ 535.783872][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 535.789810][ T31] syscall_exit_to_user_mode+0x8b/0x120 [ 535.796786][ T31] do_syscall_64+0x103/0x210 [ 535.801695][ T31] ? clear_bhb_loop+0x60/0xb0 [ 535.806413][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.813386][ T31] RIP: 0033:0x7f2438d8e969 [ 535.817859][ T31] RSP: 002b:00007f2439c2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.826732][ T31] RAX: 0000000000000000 RBX: 00007f2438fb6080 RCX: 00007f2438d8e969 [ 535.835038][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 535.843516][ T31] RBP: 00007f2438e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 535.851567][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.859553][ T31] R13: 0000000000000001 R14: 00007f2438fb6080 R15: 00007fff6ccd1de8 [ 535.867734][ T31] [ 535.870901][ T31] [ 535.870901][ T31] Showing all locks held in the system: [ 535.950678][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 535.956007][ T31] 1 lock held by khungtaskd/31: [ 535.972068][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 535.998174][ T31] 3 locks held by kworker/u8:7/3460: [ 536.014442][ T31] #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 536.053080][ T31] #1: ffffc9000baa7c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 536.064185][ T31] #2: ffffffff8f2e8588 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 536.073250][ T31] 2 locks held by getty/5582: [ 536.077934][ T31] #0: ffff8880302de0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 536.087772][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 536.097965][ T31] 2 locks held by kworker/1:3/5839: [ 536.103696][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 536.114767][ T31] #1: ffffc9000476fc60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 536.125127][ T31] 7 locks held by kworker/u8:10/6037: [ 536.130561][ T31] #0: ffff88801aef3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 536.141510][ T31] #1: ffffc90004ba7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 536.155413][ T31] #2: ffffffff8f2dba50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 536.164931][ T31] #3: ffff88805fcc50e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 536.175219][ T31] #4: ffff88805fcc1250 (&devlink->lock_key#11){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 536.186257][ T31] #5: ffffffff8f2e8588 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xdb/0x670 [ 536.195272][ T31] #6: ffffffff8df439b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 536.207214][ T31] 1 lock held by udevd/7915: [ 536.211985][ T31] #0: ffff888024c8f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 536.221416][ T31] 1 lock held by syz.6.499/8557: [ 536.226366][ T31] #0: ffff888024c8f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 536.236095][ T31] 2 locks held by syz.8.827/9945: [ 536.241175][ T31] #0: ffffffff8f2dba50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 536.250738][ T31] #1: ffffffff8f2e8588 (rtnl_mutex){+.+.}-{4:4}, at: mpls_net_exit+0x79/0x270 [ 536.259751][ T31] 4 locks held by syz.1.829/9967: [ 536.264825][ T31] #0: ffff888032178d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 536.274948][ T31] #1: ffff888032178078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 536.284861][ T31] #2: ffffffff8f44dfc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 536.294994][ T31] #3: ffff888027d52338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 536.305536][ T31] 1 lock held by syz.7.831/9966: [ 536.310536][ T31] #0: ffffffff8df439b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 536.321537][ T31] [ 536.350121][ T6037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.360988][ T31] ============================================= [ 536.360988][ T31] [ 536.369430][ T31] NMI backtrace for cpu 1 [ 536.369448][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 536.369493][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.369503][ T31] Call Trace: [ 536.369510][ T31] [ 536.369517][ T31] dump_stack_lvl+0x189/0x250 [ 536.369543][ T31] ? __wake_up_klogd+0xd9/0x110 [ 536.369566][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.369588][ T31] ? __pfx__printk+0x10/0x10 [ 536.369626][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 536.369648][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 536.369663][ T31] ? _printk+0xcf/0x120 [ 536.369692][ T31] ? __pfx__printk+0x10/0x10 [ 536.369720][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 536.369739][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 536.369760][ T31] watchdog+0xfee/0x1030 [ 536.369782][ T31] ? watchdog+0x1de/0x1030 [ 536.369810][ T31] kthread+0x711/0x8a0 [ 536.369833][ T31] ? __pfx_watchdog+0x10/0x10 [ 536.369853][ T31] ? __pfx_kthread+0x10/0x10 [ 536.369873][ T31] ? __pfx_kthread+0x10/0x10 [ 536.369892][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.369910][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.369930][ T31] ? __pfx_kthread+0x10/0x10 [ 536.369948][ T31] ret_from_fork+0x4b/0x80 [ 536.369964][ T31] ? __pfx_kthread+0x10/0x10 [ 536.369983][ T31] ret_from_fork_asm+0x1a/0x30 [ 536.370022][ T31] [ 536.370028][ T31] Sending NMI from CPU 1 to CPUs 0: [ 536.518598][ C0] NMI backtrace for cpu 0 [ 536.518614][ C0] CPU: 0 UID: 0 PID: 9966 Comm: syz.7.831 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 536.518632][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.518642][ C0] RIP: 0010:__lock_acquire+0x859/0xd20 [ 536.518666][ C0] Code: f0 41 89 cd 41 c1 c5 13 29 ce 41 31 f5 01 c1 44 29 e8 44 01 e9 41 c1 c5 04 41 31 c5 49 c1 e5 20 49 09 cd 83 3d bb ed df 0d 00 <0f> 85 3e 02 00 00 48 83 7c 24 10 00 0f 84 c4 01 00 00 41 8b 47 f8 [ 536.518679][ C0] RSP: 0018:ffffc9000463f3d8 EFLAGS: 00000046 [ 536.518692][ C0] RAX: 0000000086db7919 RBX: 0000000000000000 RCX: 00000000fe09d4ff [ 536.518702][ C0] RDX: 00000000105209fd RSI: 000000005a44979c RDI: ffff888033d19e00 [ 536.518712][ C0] RBP: ffff888033d1a8f0 R08: 0000000000000000 R09: 0000000000000000 [ 536.518721][ C0] R10: 0000000000000000 R11: ffffffff8171ca05 R12: 0000000000004008 [ 536.518731][ C0] R13: 0ac0d5affe09d4ff R14: 0000000000004008 R15: ffff888033d1a8f0 [ 536.518741][ C0] FS: 0000000000000000(0000) GS:ffff8881260f6000(0000) knlGS:0000000000000000 [ 536.518753][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.518763][ C0] CR2: 000055d546381000 CR3: 000000003194c000 CR4: 00000000003526f0 [ 536.518775][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 536.518784][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 536.518793][ C0] Call Trace: [ 536.518798][ C0] [ 536.518807][ C0] ? unwind_next_frame+0xa5/0x2390 [ 536.518824][ C0] lock_acquire+0x120/0x360 [ 536.518841][ C0] ? unwind_next_frame+0xa5/0x2390 [ 536.518861][ C0] ? unwind_next_frame+0xa5/0x2390 [ 536.518876][ C0] ? arch_stack_walk+0xe4/0x150 [ 536.518893][ C0] ? unwind_next_frame+0xa5/0x2390 [ 536.518908][ C0] unwind_next_frame+0xc2/0x2390 [ 536.518923][ C0] ? unwind_next_frame+0xa5/0x2390 [ 536.518941][ C0] ? unwind_next_frame+0xa5/0x2390 [ 536.518956][ C0] ? __unwind_start+0xf8/0x760 [ 536.518974][ C0] __unwind_start+0x5b9/0x760 [ 536.518992][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 536.519007][ C0] arch_stack_walk+0xe4/0x150 [ 536.519032][ C0] ? arch_stack_walk+0xe4/0x150 [ 536.519051][ C0] stack_trace_save+0x9c/0xe0 [ 536.519064][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 536.519083][ C0] save_stack+0xf7/0x1f0 [ 536.519104][ C0] ? __pfx_save_stack+0x10/0x10 [ 536.519129][ C0] ? page_ext_put+0x97/0xc0 [ 536.519152][ C0] __reset_page_owner+0x71/0x1f0 [ 536.519173][ C0] __free_frozen_pages+0xb05/0xcd0 [ 536.519191][ C0] vfree+0x1a6/0x330 [ 536.519205][ C0] ? __pfx_kcov_close+0x10/0x10 [ 536.519221][ C0] kcov_close+0x28/0x50 [ 536.519236][ C0] __fput+0x449/0xa70 [ 536.519256][ C0] task_work_run+0x1d4/0x260 [ 536.519276][ C0] ? __pfx_task_work_run+0x10/0x10 [ 536.519294][ C0] ? kmem_cache_free+0x192/0x3f0 [ 536.519317][ C0] do_exit+0x8d6/0x2550 [ 536.519337][ C0] ? do_raw_spin_lock+0x121/0x290 [ 536.519352][ C0] ? __pfx_do_exit+0x10/0x10 [ 536.519368][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 536.519407][ C0] do_group_exit+0x21c/0x2d0 [ 536.519425][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.519444][ C0] get_signal+0x125e/0x1310 [ 536.519476][ C0] arch_do_signal_or_restart+0x95/0x780 [ 536.519511][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 536.519537][ C0] ? local_irq_enable_exit_to_user+0x5/0x10 [ 536.519559][ C0] syscall_exit_to_user_mode+0x8b/0x120 [ 536.519577][ C0] do_syscall_64+0x103/0x210 [ 536.519595][ C0] ? clear_bhb_loop+0x60/0xb0 [ 536.519612][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.519625][ C0] RIP: 0033:0x7fae1fd8e969 [ 536.519636][ C0] Code: Unable to access opcode bytes at 0x7fae1fd8e93f. [ 536.519644][ C0] RSP: 002b:00007fae20c27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.519658][ C0] RAX: 0000000000000104 RBX: 00007fae1ffb6080 RCX: 00007fae1fd8e969 [ 536.519668][ C0] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000d [ 536.519677][ C0] RBP: 00007fae1fe10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 536.519685][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.519694][ C0] R13: 0000000000000000 R14: 00007fae1ffb6080 R15: 00007fff3f321948 [ 536.519710][ C0] [ 536.931914][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.976712][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 536.983619][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 536.995437][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 537.005491][ T31] Call Trace: [ 537.008765][ T31] [ 537.011697][ T31] dump_stack_lvl+0x99/0x250 [ 537.016398][ T31] ? __asan_memcpy+0x40/0x70 [ 537.021005][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.026214][ T31] ? __pfx__printk+0x10/0x10 [ 537.030836][ T31] panic+0x2db/0x790 [ 537.034746][ T31] ? __pfx_panic+0x10/0x10 [ 537.039167][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 537.044546][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 537.049914][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 537.056069][ T31] watchdog+0x102d/0x1030 [ 537.060407][ T31] ? watchdog+0x1de/0x1030 [ 537.064841][ T31] kthread+0x711/0x8a0 [ 537.068917][ T31] ? __pfx_watchdog+0x10/0x10 [ 537.073598][ T31] ? __pfx_kthread+0x10/0x10 [ 537.078207][ T31] ? __pfx_kthread+0x10/0x10 [ 537.082802][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 537.088004][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.093210][ T31] ? __pfx_kthread+0x10/0x10 [ 537.097798][ T31] ret_from_fork+0x4b/0x80 [ 537.102212][ T31] ? __pfx_kthread+0x10/0x10 [ 537.106815][ T31] ret_from_fork_asm+0x1a/0x30 [ 537.111624][ T31] [ 537.115048][ T31] Kernel Offset: disabled [ 537.119389][ T31] Rebooting in 86400 seconds..