last executing test programs: 2m40.127620918s ago: executing program 1 (id=132): r0 = socket$kcm(0x21, 0x2, 0x2) timer_create(0x3, 0x0, &(0x7f0000044000)) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() socket$can_raw(0x1d, 0x3, 0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rtc(0xffffff9c, 0x0, 0x0, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020400) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x3f, 0x80}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e516"}) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x5, @vbi={0x7, 0x4, 0x7, 0x32314d59, [0x40, 0xf8cf], [0x5, 0xffffffb0], 0x1}}) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 2m36.595754732s ago: executing program 1 (id=140): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r0, 0x4c, 0xfffffffffffffffe}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0)=0xcb4f, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x23, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r4 = socket(0x11, 0x3, 0x0) unshare(0x100) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @empty=0xcf050000}}) ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, &(0x7f0000000040)) 2m30.821297698s ago: executing program 1 (id=155): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) iopl(0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$vcsu(&(0x7f0000000200), 0x90a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x51, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x400c0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, 0x0) dup3(r1, r1, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socket(0x6, 0x3, 0x7) futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) sendmsg$nl_generic(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r5) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r5) 2m29.602303459s ago: executing program 1 (id=160): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = syz_io_uring_setup(0x516c, &(0x7f0000000280)={0x0, 0xffffffff}, &(0x7f0000c57000), 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000003c0)=@attr_other={0x0, 0x9c81, 0x5, &(0x7f0000000240)=0x3}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="9fd21088fd9a4b041a3cb3bd62ce502948af292a31c5b1a57a2b81849a24dde8bd521c441555211ca2756aa90fe6ec24fe039a39ead791ec52c17a0efdc90fde"], 0x24}, 0x1, 0x0, 0x0, 0x240080a0}, 0x4c010) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x44) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10) madvise(&(0x7f0000336000/0x1000)=nil, 0x1000, 0x17) r6 = io_uring_setup(0x1293, &(0x7f0000000400)={0x0, 0x631d, 0x1000, 0x3, 0x2dc}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002700)={0x1, 0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x0}, 0x20) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = open_tree(r4, &(0x7f0000000100)='\x00', 0x89901) fchdir(0xffffffffffffffff) close(r8) stat(&(0x7f0000000040)='./file0/../file0/file0\x00', &(0x7f0000000300)) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2m27.299598816s ago: executing program 1 (id=164): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) userfaultfd(0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x1, 0x2}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0xab}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000376000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) getresuid(0x0, 0x0, &(0x7f0000000300)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40), 0x0, 0x24048880) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x8000000) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) clock_settime(0xa, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0x7}) 2m26.704665119s ago: executing program 1 (id=169): sched_setscheduler(0x0, 0x1, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000300)=""/168, 0xa8}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) 2m26.136600946s ago: executing program 32 (id=169): sched_setscheduler(0x0, 0x1, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000300)=""/168, 0xa8}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) 19.469920954s ago: executing program 4 (id=572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x35) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x700, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x60, 0x5, 0x0, 0x469a}]}) 18.065179022s ago: executing program 4 (id=577): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x4}]}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f6400940005006850d1b4000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) chdir(0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000040)={0x0, 0x3, 0xbffc, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)=0xffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x200142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x4b0}}, 0x0) r8 = dup(r6) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x801) socket$inet6(0xa, 0x806, 0x0) 15.035970388s ago: executing program 3 (id=583): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe62, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x22, 0x0}, 0x448c0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f0000000040)=[{r3, 0x8000}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6_sctp(0xa, 0x5, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) 13.980871496s ago: executing program 4 (id=585): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) write$eventfd(r1, &(0x7f0000000080)=0x1, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockname(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x20) mkdir(&(0x7f0000000040)='./file0\x00', 0x110) openat(r3, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r3, &(0x7f00000004c0)='./file0\x00', 0x5) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/xfrm_stat\x00') pread64(r4, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="3daa000074009a900e58c9a8a800000088b6b4000000000000000e09e3653c913d523115d348e06d6790f5166b6857de57222194f2e128525cf0c371ebe7160d6d4f9bdc33ade17589d751765417027c359511f68374b523e020e5ff8c83f674742c27ed44a2417d41b3b8b13cec0a5f1215a9ce8b28e101218bed37bae8778ebedb65e0ad4830abd7e1ecf96d77389baa80aacb90d78ad588b5f751de1c9d5d3338fa6dfa96e4"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$netlink(0x10, 0x3, 0x15) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x1, 0x2}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) dup3(r6, r7, 0x0) 13.966893832s ago: executing program 3 (id=586): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x2006, @private0={0xfc, 0x0, '\x00', 0x4}, 0x9}]}, &(0x7f00000002c0)=0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000003780)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/81, 0x51}], 0x1}, 0x120c0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x1, 0x800c, 0x5, 0x7, 0x81, 0x9, 0xe, r3}, &(0x7f0000000240)=0x20) 12.439782351s ago: executing program 2 (id=589): socket$inet_udp(0x2, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000060000000600000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x66) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x12, &(0x7f0000000400)=ANY=[@ANYBLOB="180000005af20000000000000600000018190000fde8cbb341dd4842c5714d761b04dbb52eb770da29bcd4a687a114c46bf0f5f09c8edc9f68fb7da2b8f165e0ff82a7cd895dc7040048340888051af8e5cecd2887be7fb57b7dff", @ANYRES32=r4, @ANYBLOB="00000000000000008500000073000000850000001100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000b568fcfffcffffff8510000002000000c5150600100000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x1, 0x0, &(0x7f0000000300)=[{0x1, 0x3, 0x6, 0xc}], 0x10, 0x5, @void, @value}, 0x94) r5 = semget$private(0x0, 0x5, 0x0) semtimedop(r5, &(0x7f0000000100)=[{0x1, 0x1, 0x1800}, {0x1, 0xe200}], 0x2, 0x0) semctl$GETVAL(r5, 0x0, 0xc, 0x0) 12.395839538s ago: executing program 3 (id=590): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x61) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000080)={r6, 0x2, 0x0, 0x0, 0x3, [0x0], [0x800000, 0x0, 0xffffffff], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7], [0x2b8], [0x0, 0x9]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f00000004c0), &(0x7f0000000540)=r3}, 0x20) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x260102, 0x100) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0xca}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={0x0, 0xffffffffffffff2b, r9, 0x0}) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f00000000c0)=0x0) mlock2(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0) r12 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r12, 0x0, 0x0) syz_usb_control_io$hid(r12, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="4015de"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r12, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="088340"], 0x0, 0x0, 0x0, 0x0}) move_pages(r11, 0x8, &(0x7f0000000180)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f00000001c0)=[0x9, 0x3, 0x4, 0x6e, 0x0, 0x10, 0x5, 0x401], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) write(r1, &(0x7f0000000240)="7cd869770744cbb03f9d17054815e580c74f180742acc17bd5530a6e17b0d78c7ee460dd1064822a374dfa788d31cfc65c1719679c894cd3776952e75784f1387cee2042a64911d66323dddfb57008072754266b5564c6539ce216c320ef802d6f99fce402b409ad597b076cc8cf887f6028ed3000c5debdcdd35311445fe8dede8751e97eebdd0b1a0655c2674e4658a8103778ec7128b3cfce7f83f2eaf7193c82cc4a69977d224006bae056a7e566803a03436648a8a3c035eb373abc76e2cf96bc4156613180ea512730f8f3a63f", 0xd0) ioctl$DRM_IOCTL_MODE_GETFB(r13, 0xc01c64ad, &(0x7f0000000000)={r10}) mmap$binder(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x11, r13, 0x100000000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) 10.551814103s ago: executing program 2 (id=592): r0 = fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x8, 0x8, 0xffffffaa, 0x29, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x64, 0x0, 0x0, 0x2f, 0x0, @multicast1, @loopback}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x1, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x14318}, [@IFLA_GROUP={0x8, 0x1b, 0xbe8}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) r8 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000740)={0x0, 0xb2, "5cce97ed271707d23b2c0d76d2185716a4ab23c42606dffe1949bda4da39edf4297bad24c4bae37d901640297d9cbd41837127197ef5d937ee162d9f9ea0f9dd3f683b853583d7f05ba032511977564ec25daae5c70d0559afcd218ae7ea0692ef83024534a467f7ffb1accf678906acb5e8bd942f99dd60bca7d7458f1c12b2962176f4e831069eb4ca1fe51221f406239ba1e6641f2eebc293081bfab734b3b6d0ef30d0eae29330444ee0f82de87d1108"}, &(0x7f0000000800)=0xba) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000840)={r9, @in6={{0xa, 0x4e21, 0x9, @mcast1, 0xfe}}}, &(0x7f0000000900)=0x84) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x10, 0x8020, 0x8, 0x4, {{0x7, 0x4, 0x3, 0x2a, 0x1c, 0x67, 0x0, 0x3, 0x2f, 0x0, @empty, @private=0xa010100, {[@end, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'tunl0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x10, 0x0, 0x7, 0x8, {{0x2d, 0x4, 0x2, 0x0, 0xb4, 0x68, 0x0, 0x9b, 0x2f, 0x0, @empty, @private=0xa010100, {[@timestamp={0x44, 0xc, 0x4a, 0x0, 0x6, [0x100, 0x4]}, @timestamp_prespec={0x44, 0x54, 0x2b, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@multicast1, 0x8}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010100, 0x1}, {@loopback, 0x3}, {@private=0xa010102, 0x10}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x65}, {@local, 0xfff}, {@private=0xa010102, 0x4}]}, @timestamp_prespec={0x44, 0x14, 0xcd, 0x3, 0x1, [{@multicast1, 0xfb}, {@remote, 0x2b}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x27, 0x0, [{0x1, 0x3, '2'}, {0x5, 0x5, "ae02b5"}, {0x6, 0xb, "e049aa2488f2f5e4ff"}, {0x6, 0xe, "1efd38ce203065c683950c75"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x20, 0x80, 0x6, 0x1, {{0x27, 0x4, 0x3, 0x4, 0x9c, 0x66, 0x0, 0x7, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x27}, {[@timestamp_prespec={0x44, 0x14, 0xea, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x21}, 0x5ab}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x6}]}, @rr={0x7, 0x13, 0x85, [@multicast1, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x27}]}, @ssrr={0x89, 0xb, 0xb6, [@empty, @remote]}, @timestamp_prespec={0x44, 0x54, 0x28, 0x3, 0x3, [{@private=0xa010101, 0xfffffff8}, {@broadcast, 0x4}, {@private=0xa010101, 0xa}, {@multicast1, 0xfffffc00}, {@multicast2, 0xfffffff6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@broadcast, 0x1}, {@empty, 0x3}, {@loopback, 0x6}, {@multicast2, 0xd88}]}, @noop]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000600)={@initdev, 0x0}, &(0x7f0000000640)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b80)={0x1160, r2, 0xb00, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1010, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "88be94f39832aa758ce42edaba06713ca5f77ba8faf09a499c69991b7f7182c9a793fc4a851d617b4fe6e7c97794ff99865278ce705e7b649559689d74ca413b4908d7370e06f231b3693218a61b97d61254bc5c308695c2735db404cd172553d86c530f86576335a79bda90b9754e5eeb33b358de85d422c6b4e2de43b86fcaf5912f4a473cee81e6ab5ee120b08834f5a5bf718bf749d2675ac1899d723b0aa66debd8af8774000420834816fbf4e22956226b01722c1e2464a6734fe35b24edf29651fa0892eccdb779fc9499dbc3916ba39f712a207f393abce9876f5e7bdd121b629abf735e6c61867f47981ab27cc9c2e73f9b42aba73f31051e61ef4546b63d3c3aa53806c6498ecc245bed7b8ec6cadeac0b3c6e013e969c3111388ab0416605cd00b92dcc6b0f254ded4d34d62f417540f42d6d03ddf9a09de97c9b45265821fe7464d13f8b1b30dbcb415150db19179e9c7731b7c42f5bee2ee66eb73a5cc15e97b87935b5207aadfd0d158368a81e620bbf870cb6a806d8e6a34650b3470ad838e547e6221542e35606029b39b81f2147305fc020e348c7b922af9a825c6542f9da1aa17563ff97cfeecbf1e5353dc59ec7b14bc6c96dab129c62d91442fceb14755ec19fbf03c6cf4cceb20759ae20ce114e77b82d860d88344ab0e90042a8218db07289284fb05da5bf1c64ef1591417d74f70ee9c8796315ac56352294e99f57e00c95d4a788c0107efa68f6237c9f715d6c1ee7ce03a573f94f9895803a24e6472caae200f89470cb0cad32d90e42d7706e28dd1d6cb51b66dac3dbe365da6e4252a7188e2622fef6c3d912ea1dc631a5103657c637a6c5ca10e4cfb24948120415e59ee9625f6a8b6632e257b1f8e054e2cfd0a0ec30c6b5a880b32d3cc4870e6df480209ad7802998c981b868549c7aa14fbf8a0d24924f0b7270c6251378e4c9f2398a645f8f350456df8cecd7bb4e78557a3016bd22c63744f5bc9529d36f4c255683e2fa7188958c6c2182c0373c13a47d03bc359a4260e151a0ea0e4ff8fad5994e3696bc2aef6f5b8b3af1f4f50b3312c6c1eb684b2d083c9e9c064282957a5600c36e453e0378a0230716bd7c45b309238ae3e4fd7090b9f12c0f8b3e15e61b7b67df680564f23807ab5aa42082e8946a70570f4ddd2810cc9981a044d2f5a825b5866798309daa1b7fa886168184ac36ef156744ac00154c9056cdf8ee9e037c2125225390dbc37cbd86b71342ac81cffa9bea1bcdcd38b0576b26adc0f2f51e8d3a649de4eaf5f32269328beb67951e091772c550f0eb802ccc25db06bc7f9a554e76e22b248a0e639c442fa8f94e27b84bcd476f61183d24a550f10398d0282e24d2a62fe06358c754b0df26f52c2f698640c23bdd96445967071d5e29e7605ac238357c180072e81a6e0f19dd1e6107584557ad4cd59d85140c966a6f32aa96b0b759316345023c64b78e485fe802135fd01e5245758c387d757f1b05b6d0f3d7b29604c93ed9c03e5e03f7436c28049c2918ee6535e029380b16a9ab3844c815172cb1cd3da10e16f69853bcbd2288ca33bdcd523294bad78992ac552b35f7ff9361aca32492ec01b43916d66d0621941f71ec265bfda1a4cde4be25ac7a646a66f7c800a647f22fdc94d69e0f62d4a8a03f60c0ce5bce90ac853204f5bb40080e369e63db08475e7236125e82b6411b1987c7fad7d45775a05a1547e3b08723d6347a52b8c93605fa33c1d438bc58f5d97b26e30d9f1d4e621ed4a615c706e9afd88bbd96ff98f5e2a96c1eb3f485ec1243a8ecdf258660ff3802536783c0978d49ae8cd9c275416385ebe49f4967b877ef9e261fdb2b0fd304b39fe2cbfc84e766abbf67f74d6fb98923980873058d1a1278566a29e80f3658d89092a2bec1c7198849f16fd21d2d164abc71f93031604434ee6cdaa751988b12a9bd8191ce0936366e7539aa7853cf45b579b619dcfd04f2669550a17840c91f3252d5e68a998464242e075845c450cd528f1cd273b8441fd9cd3fc89374ae8a7fc3c5e83b40d0dd0adb4e0454a62d09de3be5d1a84cba37b3b06b5f145761d415daa4dc636faa628a77945a0e89e2079717dd4b723fa401b20210355cb3ba25b6f3c5f6bc92be661cd730084fd94e8669c41fde79af00c9763dc3cbbed1e965ecb90943fccf3d6832fb42c2ca90a731507b20ce8edefdaac6cafe67c632661dbc0dce6e3a5fa6cf017fe62fdceff9f9dfce4b513c4623444103c05f558d18b20af963353ec2962b79c85243561f4f36f7f299fa041974665ee77684dfb398857d6607aae88b92a87af1a83e5fdfe0eafbacd0e162ec5c7cabfbaeb61ff76fd4fc856d8dcb7301cd3140558eff7b370d8b5a56720fa388e99a04573f635c6efb05975831e99f6a115c7adc56bf2bc86b47a14c901cf90e220f9e96258de75283351432e46509f85e5b469c6c134d6e37421cfc38fbd55bd0be88183928f34708b3127b48b26908a4a7f9f54011f189583519c76e97fcf27e3477a5c0b4d40b527b250527ecaf4d63a47f85213ef4e348e8a3fa245c8496383f0753b86325a6ee14010344a5c2584f6390000361f9f43b567865c447b5858adda09c3592fac4a00fa6d4350015d1e1da419cb642fefa3666ff7f4f47826b830a9e4eb3438f21a29e7ab331884dc8013f205cb7e7649f7d25c7cec021d829b9c7551cb811639380ccc6a854c9c9971be4a2491d70a81b08dd6f8bfaa7deeb57385a2865c55854c89f2e191839292cd1da0ad7756d7aa62a6cffc789922ed4597d36222dee4a3d7228c9321b99532f7d9848490e795c2c08fdeb2d0ee269fc5ef3ace714addd6ca08a170286d27f3a80ffc5e15efe78c09a98d0e4ee01f688e171e7c288b4c07b081bfa0102ae68d9fd5a837cfa67e2deea8e61f6ad73a7e6011310de99789fc9f9238c7f5e9406e721afd4626241462c3d05f24d758349c40b5273c55db61b1fab2e1c6f2256051ca1610ea9eb0fe1802d642f854ee400de481f9d0c5a882b63e6ef6f437c1f85ea9d7f4d611943ebc0721dbe48410f85f88ecb3d8723ea4e825b8af435081fc7a82a38ae85f9a80b5d724e1817e59bec0dd91fa4029eab895b260140a5cabd3e0964208b9e7f84148e4bba39291d31ae8f8ab8508fb6290600239074a9b01425d64e4a2675810ccf35391ef8aa9407f6d0da7946ff6806e831298d6a79f881e3372d9f493ae78fe4eaf8fae189122a5b69d485570545ba6c74c531f002ce8e6b07e55b4d3e81b37c2bc3aa688a1efcbc8ae89cf0a809e1ba6514ffc0465cb76c054247af7df1e6e7d70b151fc57b34efd7a5aac80d8a55894ee04f813bffde8bee6c0447b3d74e407354c4f58a071e4984501907ce5dc01b34fc52695672fd316483c7a4bf4b4f6b744b89ea939f00b6bd2aa5d206c43fe9dad5732002ed0467d55b1fcb41e81cde8ad8d4efb87cbea55186cbd4e417f36cab6d19224d18fb6dcee81abb5b449ca6bfc1258190ed4c28c214036f3fe10ea5b72cc66d6ab16af9afceab1508761ac88325ea5f34ca883dde9ea467df86e59f4f02ffc64d735d9f11b47dc264701121f00f99196521d66d3b7087c7ae003fe3ad892613f9c33c562c43df5ccc73bf6196e0c4f97995fd63c5851c7e7b2dccf1ee538cdc8324712b3a2331e5fe22660ec263002ccf28c5b3cbf9ee2fc42ace5387622218a697fa6e70d66b8b270b031523e6b034703cf5676c6054c7d06897c9498f4fc6f8386ff847ded4950136409f06c25d4916ca19e4337794a63d38eb186597d7094927a6e7d76dfe0734480a6b27e0c8c1968637c87227cfe528f7033c89b8f444120f82da46b39474c0f3f8749a109c9f713218dab5ed862716e370008caf3069fdb07336c64162648983cccf18d5eb0faf793763887a0c3338f2c59d240d19206754913068174c2960889243129e1a16ace8606b7930597f6010f96d48f2503fe3225fe0d25cfb25473215ce2f67c24f302b72cbe0e5946e13f579bf8527556da98ebad4b10fac910088fd012a0c4c36718b1a4106b36a314e050a983850cd7925510cfce06a422916530fb84b8243ac2ad0f26343f62d70d1e17777da54d6b303fea8fd4dc8ae924883e5c38df3f7d9e4f4f5fae1e3ce7c9fe2f0a6b30583a4a5cd371f277a271197241fc3247ab79c847d177d8d81360c918ad1584c776103c074112635776f83bc773877914dad7e4b3159072b60ba63d2810f2c70ed79f3116f647d5d7d924573654fe44c169ac408fd6630616b146828c86ca6a58cf6eefdb4e10cbfa7464d1b55d04f75f9fdd29d25f9e3b634ec314153f43db02cc1682ea7552e5494ecb4c4fdb6b92e6e73e12c2f4b21f4d5cc3a0655d8cdfaf6d52c019b24219a8cfb9ce52ebefce56f86893732cc997255778b18e6284d0329d399aacf2b2cf58475cea15f27fba7d169329afcbf476c6732f0295537bc4272953c7066261fa72253fae491420e589e4d504800616d83694729bf1575d31619d07bfe551f2f1e13c8cd9e06f1b209b33152cc6b81031815aaeb3c6677a72547925d347feb8854f80d5d17959ff43efdacd140b6dc7e87893f3feb53418106e013a6b6bb29a0e6fff6bc99122015efce3690bd2a5497f4f123cf7e5e7eb47c2420e3ecaee43e9e5f7249b0323494866d4d8c74357c53348e8d6f451f9259086a3d10e11fff40974aa9ac2439c78f4d4ccc329a47810b1cdabc029834fe43695fd770919f661263573a55bed225f0a2e60585a538ffad9ba6bf338faacbe30aff90eedec96235b0bf7fd714aa293beb1d4080820a3ba55c4e04d6de9bcd6fedf7104d55fadc91a4688d79223e23662404c2c667e23207053c9166f05d50c736ad0cf7de02d5137d2ffb47b2bd16a0e063504207189726e2884416d3a99e2903d62c56a4d868616d5a3ec03e4b1fc32968f3bd2e27e22f7e8269de3f8f0c7a4915b0afd0e8b42947351b88c3d016ce74febaf79aacb60b83b57c969e89b8d41a7272dc5ef54a7b121c03bbf39e21a22e33c1a460042c72bfd56b04d3828b810be7710e01865bb2cba41249e67d9723a7b6e889413a272aa152ad7c2e3466387cc73fdda1fec4df88ae202f68e7194a590324df6ef7d0c77d77bf631e2a79ca7d99d403398644be55e2f4db895ffa41dc08d12d13d7ad19699cf0c02b08e8d967ac866f28d8398f394803c8d39454fcdd61d83d7ca01bd16770a393cffb0b1e5cfa30c3628c03cc9400d97694ae593637bc374329aa9c4869f4bb142dda0a19cab4fdfa1133458caa5756e676faa546fa6c08c7536320d4c99f4a681676086136bea5642355478a52d17c4d6f819e64199765f9b0325637938e5fdb9d38a42de74479b84dbadbd41e4b821a9c903cc2884cc43e47dff86290bc073f216b4546e9c191f5234c8c806acd3383997277ca7eb8b9b2c5de04e23b0ae3fe9d27fe9d03bb5c9f446bda0d29970e478e4f495606b258fd08f596b9d1ab7d9e8de79b956e79e6108e53356f27f0c0709553bfff38ca254838b6da794de25139fa1bb902ab1918b24d13184464134915faf397362633de21b6aae35569f64b9bfdd2d8bd5cb4d16adce3b27f28a1c56166f4ecae04627fd6fb613a9f735334682160926435c7aa150d8cdf4c08e8cbcfbf5615f5370a347f054dd8a1dbae2e35814369933e0bba5dc12ff4c43d57196da739dc2c65f8850c46565d4cc6e3386caac049d412258f44fc8546d4668ed51198b3d98591378681d1e4e1bd5c"}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x58}]}, @ETHTOOL_A_FEATURES_WANTED={0x88, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x82, 0x5, "bf1d067c0b02d4ac7213a6ecc0df2f67899a79074b185793a6cfb3f5739bbeb2f74bfb765dc2a52dacd0472364c8788fb7f25270a8d5d466713daf89cac82f1e4714bac5f54492f593f221d4cbe7aad927cf9468a61d5f2b37b7913e61b993a359ec743db996128f7749612b13fe651180207b896c038a25b483161c31c0"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1160}, 0x1, 0x0, 0x0, 0x1}, 0x4000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) 9.547998728s ago: executing program 2 (id=594): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000000, 0xffffffffffffffc7, 0x0, &(0x7f0000000180)="93", 0x0}, 0x50) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) write$uinput_user_dev(r3, &(0x7f0000000100)={'syz1\x00', {0x0, 0x0, 0x0, 0x10}, 0x7, [0x0, 0x0, 0x8000000, 0x0, 0x40000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xddc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xcc11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffff48, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffb, 0x0, 0x1ff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000200), &(0x7f00000003c0)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000080), &(0x7f00000000c0)=r7}, 0x20) readv(r3, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c01000010000100000000000500000000000000", @ANYRES32=0x0, @ANYBLOB="807ffffffe88000014000300766c616e3100000000000000000000000800040007000000e0001680dc00018014000b"], 0x11c}}, 0x0) 9.330489165s ago: executing program 5 (id=595): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00I\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mlockall(0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.779944189s ago: executing program 2 (id=597): r0 = socket(0x22, 0x2, 0x3) recvfrom$phonet(r0, 0x0, 0x0, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() setrlimit(0x8, &(0x7f0000000340)={0x6, 0x5205}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x101d0) 8.030865764s ago: executing program 5 (id=599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) set_mempolicy(0x3, 0x0, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETA(r5, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x0, "0b77380a49fed5c1"}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmmsg$sock(r7, &(0x7f000000af80)=[{{0x0, 0x0, &(0x7f0000000740)}}], 0x1, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000180), 0x5141, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000000500000500008064850400", @ANYRES32, @ANYBLOB="000059e66d53fb5376dd267e026b620000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000300"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) mincore(&(0x7f000082a000/0x3000)=nil, 0x3000, &(0x7f00000002c0)=""/87) 7.143930989s ago: executing program 3 (id=600): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0xf00, &(0x7f0000000780)}, 0x0) 6.279495718s ago: executing program 5 (id=601): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x4, "d2c4924f5689213dc64c3b6e6ff82a75e5318fca4288c20600000072020bcd2c"}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async, rerun: 32) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r3 = creat(0x0, 0x4) (async) syz_clone3(&(0x7f0000000440)={0x40804c00, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x34}, &(0x7f0000000200)=""/173, 0xad, &(0x7f00000002c0)=""/94, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x7}, 0x58) syz_open_dev$sndctrl(0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x3) (async) fadvise64(r4, 0x80000000, 0xf8d, 0x3) (async) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 64) socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)) fcntl$lock(r3, 0x4, &(0x7f00000003c0)={0x0, 0x2, 0x3, 0xffffffffffff0000, r5}) (async, rerun: 64) futex(&(0x7f00000004c0)=0x1, 0x8, 0x1, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000580)=0x2, 0x2) (rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) (async, rerun: 32) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$DMA_BUF_SET_NAME_A(r8, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r8, 0xc0086202, &(0x7f0000000540)=0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0005000000000000000000000000000800"/28], 0x50) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 6.246508622s ago: executing program 4 (id=602): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x2b8, 0x25c, 0x0, 0x7, 0x390, 0x3a8, 0x3a8, 0x390, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x260, 0x2c8, 0xa010000, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {0xff}, 'bridge_slave_1\x00', {0xff}, 0x13}}, @common=@inet=@hashlimit2={{0x150}, {'macvlan1\x00', {0x8, 0x200, 0x2, 0xfffffffd, 0x7, 0x3, 0x5, 0x40, 0x80}, {0x95}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x14, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.059848019s ago: executing program 5 (id=604): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@setlink={0x3c, 0x13, 0x100, 0x3000000, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'lo\x00'}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f00000001c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r2}, 0x18) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000be85da30fd99037fc179a700a342018b28ba1d1d9ddb001700"/79, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000100000000000000"], 0xb8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a31070000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000170a030c0000000000000000020000000900010073797a30000000000900020073797a2bad"], 0x2c}}, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='qnx4\x00', 0x0, 0x0) 5.865593957s ago: executing program 4 (id=605): r0 = syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109025f0003010380f40904000000010100000a24010f0003020102090401000001020000180401"], 0x0) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) r2 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x20, 0x8b, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x3, 0x6, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xb, 0x4, 0x9}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x250, 0x7, 0x1, 0x5, 0x27ff9a07a32a8076, 0x6}, 0x10, &(0x7f0000000600)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x82, 0x3, 0xf7, 0x1, 0x6}]}, 0x2, [{0xc4, &(0x7f0000000640)=@string={0xc4, 0x3, "89aecfc63fd76eea34a094940debccdcf6ea58fde61eb71281d2289a8115785f81083c66bc8c8e9c92bfb8ebe0abca5c00d7f6082953e7ee953391bc74e5834d76cb2579803bbe90ff697356f368e29bf42bdba61d78e30d49739f4304a02a67a832045f0546e864787316a03a1e27ce08236c161b175c4800a43c4b31e46186a58411b3b5c8d5c705881ff7949f1848d1bf3b8ed07104f33dec51ba97f6dce7772ad223e7f3748e42b40f28ebaa479d15f1bc752e9696533fa09120d38cddfcd983"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4}}]}) syz_usb_ep_write(r2, 0x1, 0xde, &(0x7f00000008c0)="a9f9c48f5ccab257dfef9184cbad8fe0de0dbc5ad328b2e3a91f3ab02689fcb1084851543185c462d98923f677c1d0655ebd8c1393b8134c1d359a012b6cb7fefb170be4c647cb7d64f611685cc39672bb8e19b6caa7c3dd218b0dd47df68cc5e3d652c77ee600d9c5ebc0616856ed26c5c57ab06e5726e0c0793f05f85527968b7f844052e6ff8195d6bb5a1e99b50846d356f948604734decd5f3a5888f413a53a3ed92ce40ea0e896e02c1e8ddcce1925a21a19ed760db2c39e59ccf42c42f31f7dadcd4ffe8bd42b62ba66dc64c4cfee6885d1593fbdec789f662117") r3 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2279, &(0x7f0000000800)={0x53, 0x0, 0x0, 0x1, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}) syz_usb_disconnect(r1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=ANY=[@ANYBLOB="1801000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="4000000001100000d40012800c0001006d6163766c616e00c400028008000700010000000600020000000000060002000100000008000100020000000800030001000000580005800a0004000180c200000e00000a00040000000000000000000a000400aaaaaaaaaaaa00000a000400ffffffffffff00000a000400aaaaaaaaaabb00000a00040000000000000000000a0004000180c200000100000600020000000000280005800a000400aaaaaaaaaabb00000a"], 0x118}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000540)=[{0x25, 0x0, 0x1, 0x2}, {0x0, 0x2}, {0x6, 0x8, 0x80, 0x2}]}) r12 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x0, 0x26, 0xd5, 0x18, 0x8}}]}}]}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r13 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r14 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r15, r16, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r14, 0x567, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE(r13, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) readv(r13, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) syz_usb_control_io(r3, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r11, @ANYRESHEX=r3], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r12, &(0x7f0000000000)={0x57, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4.928674687s ago: executing program 0 (id=606): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) iopl(0x3) syslog(0x2, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000340)=@overlay={0xb, 0x1, 0x4, 0x100, 0x81, {}, {0x5, 0x2, 0x3, 0x40, 0x9, 0x9, "c24d93f1"}, 0x3, 0x3, {}, 0x40, 0x0, r1}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000001100)=0x1, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @local, 0x6e21, 0x0, 'none\x00', 0x0, 0x0, 0xfffffff8}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r3 = io_uring_setup(0x4d57, &(0x7f0000000200)={0x0, 0xcb9c, 0x8, 0x1, 0x143}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141843, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000400)={r6, 0x2, 0x10, 0x5, 0x0, 0x0, 0xdb7}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0xee00) mount$cgroup(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000005c0)={[], [{@euid_gt={'euid>', r7}}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f00000001c0)={&(0x7f0000000180)={&(0x7f0000000100)="ffa7", 0x2, 0x1, 0x1}}, 0x1) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000009000000080000000200000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0, @ANYRES16=0x0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xe, &(0x7f0000000080)=ANY=[@ANYRESDEC=r8, @ANYRES32=r9, @ANYRES32=0x0, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000, @void, @value}, 0x94) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200081, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000300)={0xc}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), r11) 4.643975716s ago: executing program 5 (id=607): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x34, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x34}}, 0x0) 4.642770164s ago: executing program 0 (id=608): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe62, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x22, 0x0}, 0x448c0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f0000000040)=[{r3, 0x8000}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000580)={0x0, 0xa419, 0x400, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) 4.43724885s ago: executing program 5 (id=609): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1df}}, 0x80, 0x0}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000016c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x20, 0x5c, 0x64, 0x0, 0x6, 0x11, 0x0, @empty, @multicast1}, {0x4e23, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "af3741495c2d489bb44aa0626ca7895e9409a659b4ef94e6", "0e510dd776982e11562021340b296972dfd04230653f5cb2eeb0bcdefce2b91c"}}}}}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x4078, 0x301141) socket$inet_udplite(0x2, 0x2, 0x88) io_uring_setup(0x23ea, &(0x7f00000001c0)={0x0, 0xb1d4, 0x400, 0x2, 0x200019f}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0xbb8, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3.481192895s ago: executing program 0 (id=610): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0x401070cd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004800)=@newtfilter={0x888, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x858, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x43}, @TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0x0, 0x5, 0xbf1f, {0x9, 0x2, 0x9275, 0x6, 0xff, 0x4}, {0x3, 0x2, 0x6, 0x7, 0x3, 0xd52}, 0x42, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0xc0f, 0x32, 0x6, 0x4800, 0x9, 0x8, 0x800, 0x0, 0xd14, 0x9, 0x800, 0x40, 0xffffb33a, 0xa2e, 0x1, 0x9, 0x8, 0x81d, 0x0, 0x5, 0x401, 0xc000000, 0x76, 0x6, 0xff, 0xc54, 0xbd9e, 0x1ff, 0x80, 0x101, 0x0, 0x6, 0xf5, 0x7fff, 0x1, 0x9, 0x5, 0x1, 0x2, 0x3, 0x7fff, 0xfffffffa, 0xfffffffd, 0x7, 0x6cb27561, 0x8, 0x4, 0x9, 0x10, 0x1, 0xd, 0x10, 0xd, 0x0, 0x0, 0x7, 0xfffffffa, 0x4, 0x2, 0x0, 0x1, 0xd3, 0x3, 0x0, 0x7, 0x0, 0x1, 0x80000001, 0x2, 0xb, 0x8, 0x3, 0x7f, 0x6a, 0x0, 0x7fff, 0x5eca, 0x0, 0x9, 0x3, 0x2, 0x8, 0x14a, 0x9, 0x40, 0x3ff, 0x29848849, 0x2, 0x4, 0x51ae6f36, 0x10001, 0x52e20fef, 0x7, 0x7fffffff, 0x6, 0x2, 0x107, 0xffffff95, 0x7, 0x7, 0x5, 0xc4, 0x3, 0xfff, 0x81, 0x1, 0x4, 0x1, 0x400, 0x5, 0x3, 0x61e6134f, 0x1, 0x2, 0x3, 0x8001, 0x81, 0x9, 0xdc1, 0x3, 0x5, 0x1, 0x247, 0x6, 0x0, 0xac95, 0x10001, 0x6, 0x9, 0x8, 0x3, 0x200, 0x6, 0x1, 0x80000001, 0x8000, 0xa, 0x9, 0x6, 0x9, 0xe, 0x1cc, 0x5, 0x3, 0x6, 0x3, 0x351, 0x7, 0x9, 0xffffffff, 0x1000, 0x80000001, 0x10000, 0xfffffff6, 0x7fffffff, 0x7, 0x2, 0x2, 0x1, 0x36c9, 0x0, 0x3, 0x4, 0x1, 0x5, 0x5400dac1, 0x20, 0x8, 0xc00, 0xd5, 0x200, 0xffffffeb, 0x1, 0x46, 0x9, 0x3ff, 0xfffffffb, 0x1, 0x7ff, 0xc, 0xbde, 0x2, 0x3, 0x82ed, 0x5, 0xaeea, 0x4, 0x401, 0x4, 0xd, 0x190, 0x6, 0x2, 0x80000000, 0x5, 0x7ff, 0x2, 0x100, 0x9, 0x1, 0x8, 0x6, 0x80000001, 0xd, 0x101, 0x7, 0x9, 0x8, 0x3, 0x1, 0x1ff, 0x7fff, 0x2, 0x1000, 0x2, 0x4, 0x10001, 0x3, 0x6, 0x2, 0x3, 0x100, 0x9, 0xd0, 0x7, 0x7fff, 0x6, 0xa, 0x9, 0x4, 0x7fff, 0x5, 0x6, 0x467, 0x7, 0x80000001, 0x5, 0x25, 0x2, 0x2, 0x3, 0x80000001, 0xabca, 0x1000, 0x400, 0x100, 0x6, 0x3a, 0x401, 0x9, 0x7f, 0x7fff, 0x10, 0x100000, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10000, 0x7, 0x0, 0x5, 0x9b, 0x3, 0x8, 0x3, 0x6, 0x0, 0x7, 0x3, 0x1, 0x700000, 0x2, 0x9, 0x50, 0x6, 0x5, 0x4, 0x5, 0x4, 0x2, 0x6e8b, 0x6, 0x7f, 0x6, 0xffff0de7, 0x13, 0x1, 0x0, 0xf2, 0x0, 0x2ccb, 0xc52d, 0x80, 0xffffffff, 0x9, 0xfffff135, 0x1, 0x4, 0x10, 0xffffffff, 0x2, 0xb, 0x4, 0x1, 0x45513df0, 0x3, 0x1, 0x0, 0xfffffffb, 0x1, 0x8, 0x8, 0x0, 0x2, 0x8000, 0x689, 0x877, 0xf701, 0x4, 0x4545, 0x400, 0x9, 0x82a, 0x5, 0x6b036464, 0x6, 0x9, 0x8, 0x1, 0x0, 0x80, 0x5, 0x1, 0x8, 0x7256, 0x5ae5, 0x200, 0xa, 0x2, 0x8001, 0x3, 0x0, 0x8, 0x95, 0x0, 0x7, 0x4, 0x1, 0x7, 0x3, 0x4, 0x3, 0x0, 0xffff, 0x10, 0x6, 0x7, 0x8, 0x9, 0x3, 0x2, 0x6, 0x1, 0xa, 0x3ff, 0x8, 0x3ea, 0x0, 0x0, 0xd04, 0x3, 0x6, 0x72, 0x94ff, 0x2b, 0x7, 0x6, 0x5, 0x1, 0x9, 0x8, 0xfe7a, 0x2, 0x3ff, 0x81, 0x1, 0x5, 0x2, 0x7f, 0xa, 0x2, 0x9, 0x6, 0x4, 0x3, 0x7fff, 0x80000001, 0xdad, 0x2, 0xd, 0x5, 0x3, 0x8, 0x7, 0x8, 0x85fe, 0x4, 0xb06, 0x8, 0x6, 0xde, 0x101, 0x7ac5, 0x1000, 0x3, 0x1, 0x5, 0xa, 0x40, 0x9, 0xd, 0x8, 0x9, 0x4, 0x10000, 0x0, 0x8001, 0x6, 0x0, 0x9, 0xfffffffa, 0xff, 0x7, 0x2, 0x7, 0x6, 0x81, 0x8001, 0x1, 0x8, 0x2559, 0x9, 0x13, 0x2, 0x8, 0x1, 0x2, 0x1, 0x80000000, 0xffffffff, 0xcf, 0x4, 0x2, 0x80000001, 0x8, 0x80, 0x2, 0x9, 0xdb, 0x6892, 0xaf, 0xffff5b60, 0x3, 0x7, 0x200, 0x8, 0x47, 0x5, 0xe2d6, 0x4, 0xfffffe00, 0xe8f8, 0x8, 0xe22, 0x396d, 0x3, 0x6, 0x6, 0x1, 0x5, 0x2, 0x59e8cc54, 0x9, 0x2, 0x626b23fd, 0x4, 0x40, 0xfffffff4, 0x7, 0x1, 0x20, 0x2, 0x8d4898f, 0x5, 0xff, 0x4, 0x0, 0x7fff, 0x4f3, 0x80, 0x1, 0x0, 0x9, 0x3, 0x4, 0x0, 0x9, 0xd, 0x3, 0xd, 0x1, 0x1]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x8080}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'vcan0\x00'}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f0000000240)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x70}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="03aa436daa7f7394a1bccd8e31ccf3e3fda7da7bbb72371318f1e0fca53330153a6904fe69e5dfdbcd66c336c7309c36f40845750dbd7999e653d0bbb53e599b10d7d9e8714bac942b6f", 0x4a}, {&(0x7f0000000440)="2b575bc33fe38aa9fb130616f6cb9111df750726601a3d55b119c7643f4b2352c323454403a7d2e37f91049459f877c306d5495df84c332a864136dc38", 0x3d}, {&(0x7f0000000480)="63cbbc3473fbc5d06efd95de4516efb50bfa46a5497b52dfd24e238853e561c8acd0f3ef700017c5e2110e009bf85e2a936a140541aecfb1b35a859adb0d2b83304491259ab07b4203538e463b003c56a81b43656c112e7c284afcc9d9c552b335468284b98214524816c817a01901b74ab2e747f01d94ef1a5257186cd273bbe40a8d8dab0ec41707c982e8eb121580ddebf90faf03f78d674b3719e5148cd6df0e2b32e9757cb8ecc110f32e4bfa76bb4062ef1d8b97fbd4e46344cc83e7563c8651493bc0bc9bac50b19a9e0d9a8094812885471ceee01fad7d9724", 0xdd}, {&(0x7f0000001580)="79d7976c297e1a64cf40199acddc0f3a997f34a53ebcc4f98b2224d5e3f12f03834d928b37ca11b17194b964c5b1f404c9a32b6da05c9eaac893b89f46b0429b354cae6d2bcfe3299d6ca53bea0744c28c7a94e44e9cd38f23008ea6430ce9b2f516bc1decbb95840781acd8822145b437ef4dbf6a005ad106e902e6ac0a1c72145497625c602901cc8fb404f7d8881ad049395ebfdc77b9efd99bf6ae2765ec0db8036809686cb5d8c6ce5fbc5785a5623d2e90bb07ed50156a74e12afe11c416201c8c64b0acbffc667bcd4fc62b1a0ab6b8cfa79bef211ee97fc6edf3bb57b28b71c36037c62ada0b65668286954e6c878afc8ca96b3b0f40f16e682d3f6674787ed060c3d8601833c66f782153313f8e11017027e70044aa0e805e04a33fd6cf733ceab3c98172250878a59ea76e5c1e5e69641f3c5d5d05bf292f0eef1f5b25666b512a059abecfaaae6ad7c122113c720f886925954364d0e5870e5907e6d2be988c217f52212795e89fbbcff0883e73b46a1fe61bc53d5de51a8dffa87ff324c0ba30d1c9cf9bc748fc9cc0276c5bf9e1ddae3ffb4ff01808e958a135eac438a95ed6a259cbfed937ef0c52f95622bd4517d81a1f0f5e60aa6ce8dab6eaf462c940364af0a4a3b0afe26654bae05a85899e922dd50af8305593a27a61618c3a7151bcee3738e6011fdfefaa060a99d361e1f427e17d3224d138f5427a59f914360a50c172059229dd817eae1d516d882dd357503fac4f4cac8304f832406ac1fb76ede0d4c2549e3ccb597b5f7f38bf91c782af9e65d56ad4fb8df5e3f4ad689a2a20bbe8ad0fa05e36c98f84a084aaae883f0a25473c66ce5c68e63bf9a9a99c8da2cef4d55dff9dc19748f3861a77fc54501a0b7446fd78dacfbe533d1bc9aa7f7cd158b07fa223960f92c94bab61c41c58db995c873a0df83f38f5741bc825b1c0d8dd68f52c020f2e1b2daf7fa987453166c65a59a51c44d8bf470f1340a900ac5d21a1bc36e3ccb29c11a537b3ccca9b0850daa78a5dbafed9690e78bce2e9c894f964befc272d1cbc4baa9aeafa4ec976de10d4ddaf4745dbb8be0e02dcca4da900a84b92e029be9ba4b78889cf3ef8a1d6dc797453db9342c43d6efaedde80174ca6271d9c73af1e02e9f9396996650effbe411b8c3086b02debf1fb1fc98ead8aaaca3cec5b91dc626b7faaf444965bca299f7d088b763003fd1e550b7260a023580eabdff0af9a26ca0baa1ac475a3129fe3dd5da265d71ec2fa5762b01ed28c317dbea317813d1a729c852ecabcd92e5e6fa8d131862feeeeb216b2ee22f299690636a4e5ba624a32e72a508fd6551b4138dab410693501ff6e1735a8c48487eef04245d713c8488682c7aac9e7c8225fffa15171cb5a1c05c9f76dfd9b64d8eba2ef87fa7a2646c4085a9a9029c3e4ea7dc6e67fcf51a60fe34349d1f02241dce90bcdbc993e32db7b5319b5e56db95e09f5ffc8047585991a52ca0688e9457a8d2956ba304d221fc2f799800b562145d67cb03eed107f8f246a8b25849d47e6bf60fb7bda8cbbc7be53dd14f0702abcce9c75e29d0c355b80b5b5440508605c537cff8639938171864c2962c2a04d73a5ba2fe3e8e2da908b062107a44a65673e20a8b61ec55656818c1fe560bc37629b52ba300d6531c8da37b04e85a5873efecddf9bc10bcf7298619ef2f9473ad6d0d5920dccf55cf3db83b8f35dcb2b7840d69c4b595cbc1c776b6c86c2d0f8cdeb681c1495670663502d47269b4078a2012238600494a6c7668e14c6d835c16025b0e8c633709a618c2d0b5b69062bd9167fd6149afd0025b96a887b37b67d9b82064fa57be14e451b2554c612070e7695edc1b165161abd4ce61c650fd8c3ed05ebe35494995c9bdca5e0611405bae041fdaacdfa38bb197a1eb9549c62ae1bc36fa74156934bc9c99b1e2abef118764fafc5347e42c4bee54ff4ade5dce5dad0a65892c8fed0f06b732aa97a0f467490412ddf02ebcbd3caf59c8716a408a682ca502f674bb04852a155ae92ea66029e88ad4c0c6fd0b172ce7b46aa50ce26bc065955cbc408eec8a3d3fe931da04881afc642a7f2bf679ef6472d966f6b0e559d780222771fb774da1c8a584f01758c8f809e51b0daa3e97ef70300ca9ee84bd354be8ff28258de197d36b9729ec896ca95a2297da2818cddbce2b1854764b3cb90404a9cfd6f3cee134dffbfa46dddc7de636ec467d00dc6ef3c8f35660d17e65e8d0b821be4b4bae3b8cae7c465dd8ce55d7ada5e64f576350a25f8ef37a7287d791ea0489f5dc3f0aa77dd3f9727902b417f896ec61de35003977750216c4e78c9a904dbde10b0567c962b577303266189e0eb1d93e704f336ff9b551cf1417f1bef827aef3e561a21255d8ac8077e452bbb22136e9c2fb5461ebca7359e136b4a5842ca50662713814f0aac21a3bb8c92e84d368e3bf106969ee0904503b193ae2482834b6dc0fdec78fcd7a92ffe5396c779cea04394bf7c468fb19dc847c08d048378b4da99cc7da887089cb62a6f15c95f651bb97c0b767ef3486f9e29d7629785707e0544d01aaedcfe873a5016e99d07b874daa874d61df88c90d6fadb74cb7527b7fe55ec8a7c07d8682f50476222b24a8173c980bcee8b47ea15c55318ce153beb9200d29f1051d106b77d3c18761fc6010ae53f2760f579c19e7736a722cecf89ec71a9630ba5eee60e2effdedfc4c127c52d1665555a195c5ee67bf5233c86f938c865073bba7b961a9c0e7a53ab9cf40ef8aab683d3784d38afbf9cbe07ecdd09bb5a73373733f6e56447e98c1c00b0a05ad5f95d34e47dc8fb4e5590b93da102669a80a6e555208631909699f0564e400a47139080a35a747f2dbae277c2204198425167ad924f267593ccfcd434ea8356e077cd77aec5a30f803adad24e2dbf8d7b9f941e3cca1e646c7f5457ec0f744c72678a19eb5425b2523961bcbe2d4ef633cd251f6e191f57992d24a5181135f558ed541af0233c830fd755a50b289bf0ff3a2e8d53deb4ab687c967097c8c84fe3832457b585d148be87b4738e03f01d333fe6056356897cdaa46b899fdd4fdbad399971b206cc6dbb0b60fba876e2a9e5e04d19c0f6e84444f6cf81a07c706ed28a002af222bf97162c1b9c4af9b8fea22294c36ba0de64f03f262ccd09c05abff1eb88589f445d2ef0ed68fb1161f7d76c24b4a7e8a42a852e41ae4d24a6f59c9a1cfb024761064c801814df94a45b2b6c711a49aad8baabe9ddf5e65e4ff7de600e0ee3316391c0ec0fc7259b1296d72f827a9952802fa169871061891ec523197f2464407bb1139001d8a35acf7238ea6461c31a52794919b22f5d01c10e737a5dd6bd3660dfe49db09c5af3ab027201755db7a64dab98d937bbc0c5a4a6677e2d76fcf1088c0dff0106ef9c0d9969915f22dfefd5e8325b8e6de869ab65f351387396395165f0a61a93419d323c652a4071dae25614d0debeaa7d1b3f6365d36b9403d5bc3c5d120b0b6c337d420de2dbd231aaa0fbaf8d4ce19d55dff82603170d850917150b120df5b6b97b6abdca97da6e67cd443b0eb5af90c03e775c2cc63e1006cf1f1fa86ac8a886ed0bfdd75597921ce36f80a02bb509ee8d4f12af3fea688159985769f0cad3f01aa96b16974104c896ab7b4c081078c6f6e790346367f8614ece853222c5b163efb946c9ffd544ea710b47ac815726e3651686c96b07bb379a7f342c91754f9e9a0360da27ef26e3abf4ace072e587de498b79407923225ab5cee572ab85e880521f46fb9c6a401a56740c6257ee1664e87f01f3ab4a7604a2282193174d9a375fdf321970a68db690eb92144c32a576928b29ba453194166565ec2583c9d2180c3f9d9361bf73b88124b8f383a2d3358260c6323a915703f35e836401dae48e7212380c087a640e86f2b9779cacd2059528a3573c4ae03bd589509c095d2572692457a9468634f94b1415ef290b4419f4bf96fd0248ba51b4f99c9b3c76aec2ec2f71a672ab8a47e549d77d96bdd3944ad99b579ef0e14926c49c68b50321d9bdce54b4e90b4f9c8bd3fdc7e06fe958588b5462c4011ca5f1bd8b60c160eccb3f9183f7e4b5b193f24568112177d39f9679646ee80a218a756be0bba89880997521bafcbb1276a38a57376d820c0f07467539c51f01aabbcc69050d3afa49e5d6216a65546e64c87dec42d4c3744f5b46d3598ff02edded95758843b1a6255079058d9e18fcd7e2c1fe3e23e1438e76bf73bdcb0a5db07b458f24bafa733fe1cfecf125551a802deb25ba11d1e94390f3666470809fb4b6747698d30bdd490441fa53e4c8162c364fa5670e46867964d5cef7c33e4a5cf135a82621fa963fc15c02a272cf33f35b4d6486e87ddacb8eba123389b4f8b4a15cf15ce4724c774efe08a333310d58ae8e61d2511745c35f501afb1af2f9121ebbab7b688f89f5d6635663aafa571eff15715db715ca4e791b5141c3e24c360a2b49af58dbf567ed49018ffcb0edd3b735f0b8e8cb205e778105561e63b374c47110895a32346fffc08c3f389a63ec1cc71416866561deaffc5cebd66c10a6ff48b118d3491313e95fa6ad807e161189e14255fa2838846fdcf34606c23a578db0a771e9a9c9c3e096056e5a354a7806ef51f17ba910d72761d0df9c70cb1e23560cb9d15e6c21a36f257fd4170d5545a1068be406b154dc906bb598165c2d929c3bcbead7189f85a472625982b103de15ed9caac3cecbc1222235dc032736e6bad0c987c361683ea1f31f3c0418063b931669f99145520c77a25fe07d11482d37defddcaf3db72d83a8c341a127f35d32d19aa474d4a2ea96fa5365f2b5a8d2f9b20d9a2ec48d3ba98df8b46e6c931c5403c64516af89b2c7e5582eec9137f97bd1586eecedf91c45d5b93f2ab24fff976fd76ac91c8cc88a15ef043ab609ddda5374d7e7522d1d407f54cf8b1ea49844b1c33a4b1db2aa63c315968b9fa086f5c2fefe93a9d2f99196ef011838dde2e4e815f4f6b8d00a56d0cb8d5be0064470f45f2c76f2f6ad49cc36340bd5949c0f98e17d46adc86777c9b56f03f4fbebba294a3d8a2c01cee21d0acd95ed3fef90da5fac2e658f5ef9623d6cb6332d486d39a8971d03af9aad13478af68455220c74e19a7107f25ba405639fdbb8ce7ab22cea75d7db4a9307ca8727f7aa4797d39eec446328a18dfb7b6b028cfe18280659f2943ab395feed386d2399e610f5377f9b8a74fa52474ddc16acac230eef0db1e839928efe88ba6b18893b4540c55b4e2270b3b04d4a3640f0ac393cd10bab12d767f3bff3f01eeebfea5b58b61f4f380a89a236cc496f8143361bc229d0e1f40a9f2fb30bfcabf2c0c5845e57d677aeabca1ef12154fee7b552b48cfd4ff26e42482866b79196960865f147fdcd58867ac58e54a1f20a34a2a344b1d4dd4e276c2a905997270d24493386147edd2d102473750f9cddc12823cc08ec7aef9701c40876f246256467bc73b62e3a1d9a5eb551a8f52a116b8db0b75615a7ab2fc645400793ab628124da7aad30fd70813d11f0262bb7daffbd639d84243ce4d39f88c45c02ae46ff5dd4eeb48fdd2e16a304b6630675b7202214704bd0cccac500075eecdc38f33b6c181ac5b25ea20576aa797fe49b752b1a4b959b837377a3592ad1ad6bddd0f2fa8292d42c9a03dc45b74b3b96aa89eb7253b29f042bafd15cd2394d2f7175d66835b2a3afde7dd3a739214eb866d2e10421ac57bb57d2a7d01c97b7170e", 0x1000}], 0x4, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x68}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000680)="0d47c6b2f5e65c8cba93d8571faa5cd1a0316daff9407cc5e6caf837b0ad221acb43c5544454b1c3312839a58ae8092178cd1a82da0ff6dfc24b15d0d29a6b8633b3a62d2651313c3003caf22b8939010e2b220192b8488fa52237c371804a848b833840d24329fb1b039de73ebce58ae54ab57096e71ea87a603e7ab654c2a413d2272704ae748f60229e30c9dc9ea0b8c115fe9c1dc6bdd459fcf190f898560d6b1fe41f1bc77ab26d736932", 0xad}, {&(0x7f0000000740)="f10dfa723417de0e9ea2f6759dec9957b472d38c07deb77351b48890990abc7a761078dfc0e104ba0c94e14fa9878b8bc2c8c8dab9a4414254ba01df78906f0798243c3d3a371d5d91043323503301171edc520560d2d5d762764c65c8d67abd025563dd69c05e9b3b343c127feb307257ccdc0980fad43bd258655705106426175c7e0a13f11f6708ec7a77053412a615a85b9ff01d94c2e621f63746d72661c0905af1330c2386aadf56cd8635c0f5bef1ccc226311e6625de3dbcc98910b9315e818c331485daa09a0e670077c7b4bbd18e", 0xd3}, {&(0x7f0000000840)="1a7e20a086f23f4f696336", 0xb}, {&(0x7f0000000880)="3602cd06010a4ea2219245c5ff3e01017b691e1153f5cac09ef222abea004d89e910bdf6e25c3f47877f4daaf36b2750a5ae4e9bc2bb1faafbe18eaf55b97411e083bf32e799af854681c901b8e8f5882bd246e3744977a6a71839e7c8cabb7605c6cbad9d97d13773ddea6ff363dc71b4903a22374fb226b7cc94edc26f2cf3b7dac2a040ff961d17158e1311d5d1c9ffc3357a5ac3761cf053917ef2641760b345", 0xa2}, {&(0x7f0000002580)="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", 0xfff}, {0x0}], 0x6, 0x0, 0xc0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{0x0}, {&(0x7f0000000e40)="b7185ea00cfb3f9c28b3332de8d3c61aa885cab13d467cd5ae3c4c927db04e6b9ae0708f5cdfd25b203e52c30c9ef5aba685e62be77afe4d28021b90b6f95962ed023b86454f590959f02d82dfbf11b6dfebdde4aa296b5246f0ed1a9c0c1d7ea8a90f66e9083716d6a60d46a6988d8945820b1214585303d13a33ba407f532f3f2d9ec3538fec2de6dbfd46332efd86b53548bcd76042f150adc057bee17461903340d355a63b25c72c9595a39e4564fa20c60b6425e27e2d77915951db977b1c0e172c8f723bb70e96067d119c8ece9e8ddc0ae745bb312683d77b00016d4d18a9f6f2662219582733a873dc6df8bd25ff90f8", 0xf4}], 0x2, &(0x7f0000000f80)}}, {{&(0x7f0000001000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001480)=[{&(0x7f0000001040)="5bf63fd12d", 0x5}, {&(0x7f0000001080)="3fb91964993c8fccd3024993843cebdc7c27aca8e63add3343a4b9c58b", 0x1d}, {&(0x7f0000003580)="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", 0x7c0}, {&(0x7f0000001340)="769325c9e136e9dd76ae1af8ce03f7373beaefe6403483862a0ae297471b5a49aa249b368bf7fb168051f445c0c3ca3deba751fc843e211849579628ce7404d453b44230f887a5ad4195f1dfa2a7fcc7c2b1d1c6a022f087e8e88b9d8cb1749c1e54b5d854f530016fbbec88325804772a27574aa5414796e4f21e1482ded4b65edb2dc9fdfc7d8d02d72c4ec0", 0x8d}, {&(0x7f0000001400)="5d314d33c054a844c6a477d44d40f6ed34e39ce914c4", 0x16}, {&(0x7f0000001440)="81e4bd4416e24f69c90573837f011ba6ec7983dfa71cc6af2e6c662f71165a0b18b5faf463797d0d", 0x28}], 0x6}}], 0x5, 0x1) close_range(r0, r0, 0x0) 3.451374717s ago: executing program 3 (id=611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_HYPERV_SEND_IPI(r2, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_CLOCK(r1, 0x4048aec9, &(0x7f0000000040)={0x0, 0x0, 0x80000000, 0x9, 0x1000000040004}) (async) ioctl$KVM_SET_CLOCK(r1, 0x4048aec9, &(0x7f0000000040)={0x0, 0x0, 0x80000000, 0x9, 0x1000000040004}) pread64(r2, &(0x7f0000000100)=""/146, 0x92, 0x401) 2.633151451s ago: executing program 0 (id=612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) set_mempolicy(0x3, 0x0, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETA(r5, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x0, "0b77380a49fed5c1"}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmmsg$sock(r7, &(0x7f000000af80)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x1, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000180), 0x5141, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000000500000500008064850400", @ANYRES32, @ANYBLOB="000059e66d53fb5376dd267e026b620000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000300"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) mincore(&(0x7f000082a000/0x3000)=nil, 0x3000, &(0x7f00000002c0)=""/87) 802.708382ms ago: executing program 0 (id=613): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) iopl(0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$vcsu(&(0x7f0000000200), 0x90a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x51, 0x0, 0x1, 0x0, 0x0, 0x2000c800}, 0x400c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup3(r1, r1, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) socket(0x6, 0x3, 0x7) futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) sendmsg$nl_generic(r0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r4) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r4) 748.340423ms ago: executing program 2 (id=614): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) getpid() openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="33fafdffffff030000800700000008000300", @ANYRES32=r4, @ANYBLOB="1400040063610900000000000000000000000000080005000600"], 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0x27, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @random="fa6936a6ddabdc50"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) accept4(r7, 0x0, 0x0, 0x0) dup3(r6, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x3c, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000005) socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3f2}, [], {0x14, 0x3ea}}, 0x28}}, 0x0) 667.838476ms ago: executing program 3 (id=615): semget(0x2, 0x0, 0x150) semget(0x0, 0x2, 0x230) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x8001, 0x9135, {0xffffffffffffffff}, {0xee01}, 0x7ff, 0x6a}) getegid() fsopen(&(0x7f00000002c0)='configfs\x00', 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) fsopen(0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x520, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x178, 0xc, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "fc6b061134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x8}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "08db"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) r6 = dup(r5) read$FUSE(r6, &(0x7f000001aa80)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x6) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0700000000000000000002000000080002000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000100000000000000ae9872b996c0a5c7bdcbf8661a3af46c78b07122145a4a03326b68b209925010a5281a2c95ec9ff3b51f02a0d3a3f214b8a05b5d0ec07cd18d4d86147a1c0470059e7768ac4eae329acdf44f6766e4744a57032f8d000a46"], 0x30}}, 0x0) 193.482951ms ago: executing program 4 (id=616): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f00000000c0)={0x3}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$smackfs_cipso(0xffffff9c, &(0x7f0000000640)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000014e, &(0x7f0000000300)=ANY=[@ANYBLOB='3\x00', @ANYBLOB="ead51819b1a868f0f8a9d85fc53470031b685c8048abb8633af0c19e059b0970acd9ff7169a6d5b96413ce4980bf5f77e5e820fa959b4d03dab8d3bdb298656cad8416c8def921ced413eebabf6acbafc3b7967750531a8757da3b32e018c0b531b208d1d0c90a5e46696cdfe21959d94970c70014c29f48e98c95630377392f56e0d0b24d0573932e45910b68ea93708c7ce374885ac3dbb3a30b361b1dfe9b427d54edc45ea9704df74d4a5b1c8aa85543fed3d1e6dc3b76d4699933bb11add5b031a417717ddad614629fe658139a59b343dc9d9d94b29ff5cb971a4a6961ed6555a2", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8000000, 0x0, 0x2, 0x1, 0xfffc, 0x2000}, 0x20) fsopen(&(0x7f00000000c0)='affs\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) io_uring_setup(0x314a, &(0x7f00000010c0)={0x0, 0x8b4f, 0x10, 0x3, 0x218}) 56.48815ms ago: executing program 2 (id=617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioperm(0x0, 0x1d, 0xfffffffffffffffd) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x100000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) r3 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000440)={0x1, r3}) r4 = timerfd_create(0x0, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x1ffffe, 0x10100, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c000000020605000000080000000000000000000c00078008001240000600000500010006000000050005000a00000005000400000000000900020073797a300000000015000300686173683a69702c706f7274"], 0x5c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf250a0000000c0099004e0600002600000011000a0077be86f44782b230c3217dab13000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004840}, 0x478591f2c3b6bdbe) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBSENT(r10, 0x4b49, &(0x7f0000000140)={0x0, "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"}) r11 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES8=r9], 0x0) syz_usb_control_io$printer(r11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000180)={0xfbfb, 0x7}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x2) 0s ago: executing program 0 (id=618): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe80"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x40}, 0x5}}, 0x80, 0x0, 0x0, 0x0, 0x14}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x7}, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000180)={0x30}, 0x30) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x574, 0x0, 0x3, 0xd59f7f, 0x8, 0x5, 0xb, 0x8, 0x9, 0x722, 0xe72, 0x7, 0x8, 0x1, 0x10, {0xffff945a, 0x1}, 0x3, 0xed}}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b50901000000000026000000f9ffffff180100002020702500000000002020207b9af8ff00000000bda9f9ff0000000037010000f8ffffffb702000008000000b70300000000000004000000060000002d93000000000000b5030000000000008500000076000000b7000000000000009500000000000000a04126da9effd91c3fd0b779da25f06f7e1fbb7bb3ffe6a29432bed59f6ef8b9e46a87b0010d64468c2c5183b01fc3cf1f409f5676f64f72259fa7ee5971409f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): ew IBSS network, BSSID 50:50:50:50:50:50 [ 74.405966][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.417027][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.427363][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.437874][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.448811][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.459339][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.470347][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.480294][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.491001][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.501094][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.511691][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.521619][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.533889][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.547859][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.561280][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.570846][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.580066][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.589285][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.600850][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.616553][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.629447][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.646181][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.656477][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.667106][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.677098][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.688293][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.707999][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.711777][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.770937][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.784297][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.794683][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.806001][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.816183][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.826938][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.837078][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.853149][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.865494][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.896369][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.914497][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.923240][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.932865][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.988442][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.019572][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.028291][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.043463][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.104890][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.122394][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.194908][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.209063][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.222134][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.244235][ T5832] Bluetooth: hci1: command tx timeout [ 75.249793][ T5830] Bluetooth: hci4: command tx timeout [ 75.254498][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.305944][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.326181][ T5832] Bluetooth: hci3: command tx timeout [ 75.331689][ T5832] Bluetooth: hci0: command tx timeout [ 75.337320][ T5830] Bluetooth: hci2: command tx timeout [ 75.373675][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.448694][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.457177][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.483270][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.508155][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.584887][ T5915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 75.595122][ T5917] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.664165][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 75.880525][ T5921] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 75.954590][ T5872] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.202330][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 76.266574][ T5872] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 76.289520][ T5874] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.350926][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.425061][ T5872] usb 2-1: Product: syz [ 76.429280][ T5872] usb 2-1: Manufacturer: syz [ 76.484152][ T5872] usb 2-1: SerialNumber: syz [ 76.500545][ T5874] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 76.512692][ T5872] usb 2-1: config 0 descriptor?? [ 76.539031][ T5874] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 76.564532][ T5874] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 76.574831][ T5932] Cannot find add_set index 0 as target [ 76.586230][ T5872] usb 2-1: selecting invalid altsetting 3 [ 76.614723][ T5874] usb 4-1: config 0 interface 0 has no altsetting 0 [ 76.621462][ T5872] comedi comedi0: could not set alternate setting 3 in high speed [ 76.646182][ T5874] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 76.651583][ T5872] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 76.684385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.727136][ T5874] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 76.730980][ T5939] ======================================================= [ 76.730980][ T5939] WARNING: The mand mount option has been deprecated and [ 76.730980][ T5939] and is ignored by this kernel. Remove the mand [ 76.730980][ T5939] option from the mount to silence this warning. [ 76.730980][ T5939] ======================================================= [ 76.757355][ T5874] usb 4-1: config 0 interface 0 has no altsetting 0 [ 76.781375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.897255][ T5874] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 76.918325][ T5872] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 76.922137][ T5874] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 76.944879][ T5941] overlayfs: missing 'lowerdir' [ 76.960765][ T5874] usb 4-1: config 0 interface 0 has no altsetting 0 [ 76.967879][ T5872] usb 2-1: USB disconnect, device number 2 [ 76.979428][ T5874] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 77.151694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.197688][ T5874] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 77.318328][ T5874] usb 4-1: config 0 interface 0 has no altsetting 0 [ 77.325265][ T54] Bluetooth: hci4: command tx timeout [ 77.325306][ T54] Bluetooth: hci1: command tx timeout [ 77.356449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.386074][ T5874] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 77.396571][ T5874] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 77.408191][ T5832] Bluetooth: hci0: command tx timeout [ 77.414510][ T5832] Bluetooth: hci2: command tx timeout [ 77.422171][ T5832] Bluetooth: hci3: command tx timeout [ 77.434412][ T5874] usb 4-1: config 0 interface 0 has no altsetting 0 [ 77.442306][ T5874] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 77.453373][ T5874] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 77.466256][ T5874] usb 4-1: config 0 interface 0 has no altsetting 0 [ 77.488549][ T5874] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 77.523371][ T5874] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 77.554315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.641310][ T5874] usb 4-1: config 0 interface 0 has no altsetting 0 [ 77.663615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.762828][ T5874] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 77.900643][ T5874] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.025021][ T5874] usb 4-1: config 0 interface 0 has no altsetting 0 [ 78.121550][ T5874] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 78.203170][ T5874] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 78.262771][ T5874] usb 4-1: Product: syz [ 78.274426][ T5874] usb 4-1: Manufacturer: syz [ 78.500744][ T5874] usb 4-1: SerialNumber: syz [ 78.516937][ T5874] usb 4-1: config 0 descriptor?? [ 78.532370][ T5874] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 79.478537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 79.532836][ T5904] usb 4-1: USB disconnect, device number 2 [ 79.557972][ T5904] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 79.678003][ T5875] hid (null): report_id 61463 is invalid [ 79.701756][ T5875] hid (null): report_id 64414 is invalid [ 79.738708][ T5875] hid (null): report_id 63888 is invalid [ 79.792237][ T5875] hid-generic FFF3:7D5C10B2:0009.0001: unexpected long global item [ 79.933618][ T5875] hid-generic FFF3:7D5C10B2:0009.0001: probe with driver hid-generic failed with error -22 [ 80.122200][ T5904] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 80.388069][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 80.435060][ T5904] usb 4-1: unable to get BOS descriptor or descriptor too short [ 80.464778][ T5904] usb 4-1: config 6 has an invalid interface number: 39 but max is 0 [ 80.480676][ T5904] usb 4-1: config 6 has no interface number 0 [ 80.489329][ T5904] usb 4-1: config 6 interface 39 has no altsetting 0 [ 80.499135][ T5904] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=e7.d7 [ 80.509059][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.541286][ T5904] usb 4-1: Product: syz [ 80.582560][ T5904] usb 4-1: Manufacturer: syz [ 80.592903][ T5904] usb 4-1: SerialNumber: syz [ 81.684580][ T5982] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 81.684580][ T5982] The task syz.2.21 (5982) triggered the difference, watch for misbehavior. [ 82.547632][ T5982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21'. [ 82.660729][ T5904] usbserial_generic 4-1:6.39: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 82.664120][ T5982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'. [ 82.686366][ T5904] usbserial_generic 4-1:6.39: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 82.698291][ T5904] usbserial_generic 4-1:6.39: device has no bulk endpoints [ 82.710212][ T5904] safe_serial 4-1:6.39: safe_serial converter detected [ 82.718247][ T5904] safe_serial 4-1:6.39: probe with driver safe_serial failed with error -22 [ 82.774157][ T5904] usb 4-1: USB disconnect, device number 3 [ 83.104764][ T5875] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 83.996401][ T5875] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 84.007101][ T5875] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 84.044104][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.097013][ T5875] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 84.100731][ T6001] bridge_slave_0: left allmulticast mode [ 84.159715][ T6001] bridge_slave_0: left promiscuous mode [ 84.261088][ T6005] bad cache= option: no%e [ 84.261088][ T6005] [ 84.268132][ T6005] CIFS: VFS: bad cache= option: no%e [ 84.318135][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.524552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.731376][ T6001] bridge_slave_1: left allmulticast mode [ 84.805954][ T6001] bridge_slave_1: left promiscuous mode [ 84.811730][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.993459][ T6001] bond0: (slave bond_slave_0): Releasing backup interface [ 85.049254][ T6001] bond0: (slave bond_slave_1): Releasing backup interface [ 85.246509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.650719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 86.166324][ T6001] team0: Port device team_slave_0 removed [ 86.187601][ T5875] usb 5-1: USB disconnect, device number 2 [ 86.228869][ T6001] team0: Port device team_slave_1 removed [ 86.318085][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 86.387203][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.401335][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.413036][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.420788][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.450304][ T6006] team0: Mode changed to "loadbalance" [ 86.852278][ T6010] vlan0: entered promiscuous mode [ 87.073185][ T6022] process 'syz.4.34' launched './file0' with NULL argv: empty string added [ 87.186150][ T838] cfg80211: failed to load regulatory.db [ 87.251961][ T6010] team0: Port device vlan0 added [ 87.367944][ T6035] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.468069][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 88.170711][ T6007] team0 (unregistering): Port device vlan0 removed [ 88.241981][ T6034] netlink: 96 bytes leftover after parsing attributes in process `syz.1.36'. [ 88.551690][ T51] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.938070][ T6064] random: crng reseeded on system resumption [ 89.505923][ T51] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 89.521419][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.734991][ T51] usb 3-1: config 0 descriptor?? [ 89.908343][ T51] cp210x 3-1:0.0: cp210x converter detected [ 90.218270][ T51] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 90.249998][ T51] usb 3-1: cp210x converter now attached to ttyUSB0 [ 90.289340][ T6076] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.322143][ T6078] netlink: 'syz.0.48': attribute type 5 has an invalid length. [ 90.334947][ T6078] : entered promiscuous mode [ 90.455643][ T6076] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 90.528934][ T838] usb 3-1: USB disconnect, device number 2 [ 90.544172][ T6080] IPVS: set_ctl: invalid protocol: 30 172.20.20.187:20001 [ 90.680979][ T838] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 91.711238][ T119] IPVS: starting estimator thread 0... [ 91.891354][ T838] cp210x 3-1:0.0: device disconnected [ 91.966783][ T6092] IPVS: using max 20 ests per chain, 48000 per kthread [ 93.390225][ T6111] capability: warning: `syz.1.58' uses deprecated v2 capabilities in a way that may be insecure [ 93.410359][ T6113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.57'. [ 94.094024][ T838] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.428781][ T6126] random: crng reseeded on system resumption [ 95.144304][ T838] usb 4-1: Using ep0 maxpacket: 32 [ 95.204008][ T838] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 95.319066][ T838] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 95.328437][ T838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.338252][ T838] usb 4-1: Product: syz [ 95.342698][ T838] usb 4-1: Manufacturer: syz [ 95.352057][ T838] usb 4-1: SerialNumber: syz [ 95.471267][ T838] usb 4-1: config 0 descriptor?? [ 95.521330][ T6118] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.537998][ T838] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 95.587605][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.61'. [ 95.587711][ T6138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.61'. [ 95.778517][ T6118] hugetlbfs: Unknown parameter '' [ 95.783838][ T6141] hugetlbfs: Unknown parameter '' [ 95.879351][ T838] usb 4-1: USB disconnect, device number 4 [ 96.175627][ T6148] udevd[6148]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.758149][ T6170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.69'. [ 99.337432][ T6187] random: crng reseeded on system resumption [ 102.445242][ T6205] Zero length message leads to an empty skb [ 102.574289][ T6208] tmpfs: Bad value for 'mpol' [ 102.871011][ T29] audit: type=1326 audit(1738460651.012:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6214 comm="syz.3.81" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95ef98cda9 code=0x0 [ 103.115773][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 103.263677][ T6220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.81'. [ 104.213338][ T6231] random: crng reseeded on system resumption [ 105.204071][ T119] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.565535][ T119] usb 4-1: Using ep0 maxpacket: 16 [ 105.598588][ T119] usb 4-1: config 4 has an invalid interface number: 98 but max is 0 [ 105.654026][ T119] usb 4-1: config 4 has no interface number 0 [ 105.660546][ T119] usb 4-1: config 4 interface 98 has no altsetting 0 [ 105.670938][ T119] usb 4-1: New USB device found, idVendor=093a, idProduct=262a, bcdDevice=2e.17 [ 105.670967][ T119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.670986][ T119] usb 4-1: Product: syz [ 105.671000][ T119] usb 4-1: Manufacturer: syz [ 105.671014][ T119] usb 4-1: SerialNumber: syz [ 105.675723][ T119] gspca_main: gspca_pac7302-2.14.0 probing 093a:262a [ 106.342004][ T119] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 106.342056][ T119] gspca_pac7302 4-1:4.98: probe with driver gspca_pac7302 failed with error -110 [ 108.319640][ T5904] usb 4-1: USB disconnect, device number 5 [ 108.664206][ T6279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.164563][ T5875] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.281708][ T6288] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 109.345117][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.98'. [ 109.348431][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.433361][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.453670][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.470134][ T5872] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.499629][ T5875] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.514213][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.533830][ T5875] usb 3-1: config 0 descriptor?? [ 109.634587][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 109.685632][ T5872] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.744096][ T51] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 109.770250][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 109.790347][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.809079][ T5872] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 109.821715][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.865983][ T5872] usb 2-1: Product: syz [ 109.878013][ T5872] usb 2-1: Manufacturer: syz [ 109.890893][ T5872] usb 2-1: SerialNumber: syz [ 109.928234][ T51] usb 5-1: device descriptor read/64, error -71 [ 109.983048][ T6300] input: syz1 as /devices/virtual/input/input6 [ 110.583293][ T5872] usb 2-1: config 0 descriptor?? [ 110.774198][ T5872] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 110.808100][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 110.826587][ T5875] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 110.855554][ T5875] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 110.924146][ T51] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 110.929880][ T5875] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 111.077027][ T5875] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 111.116884][ T51] usb 5-1: device descriptor read/64, error -71 [ 111.197093][ T5904] usb 3-1: USB disconnect, device number 3 [ 111.270691][ T51] usb usb5-port1: attempt power cycle [ 111.437830][ T838] usb 2-1: USB disconnect, device number 3 [ 111.594624][ T6311] netlink: 'syz.1.102': attribute type 1 has an invalid length. [ 111.638165][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 111.664738][ T51] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 111.747215][ T51] usb 5-1: device descriptor read/8, error -71 [ 112.040602][ T51] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 112.116221][ T51] usb 5-1: device descriptor read/8, error -71 [ 113.044214][ T51] usb usb5-port1: unable to enumerate USB device [ 114.565998][ T6354] FAULT_INJECTION: forcing a failure. [ 114.565998][ T6354] name failslab, interval 1, probability 0, space 0, times 0 [ 114.634186][ T6354] CPU: 0 UID: 0 PID: 6354 Comm: syz.3.112 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 114.634212][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 114.634226][ T6354] Call Trace: [ 114.634232][ T6354] [ 114.634249][ T6354] dump_stack_lvl+0x241/0x360 [ 114.634290][ T6354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.634314][ T6354] ? __pfx__printk+0x10/0x10 [ 114.634345][ T6354] ? fs_reclaim_acquire+0x93/0x130 [ 114.634369][ T6354] ? __pfx___might_resched+0x10/0x10 [ 114.634392][ T6354] should_fail_ex+0x40a/0x550 [ 114.634414][ T6354] should_failslab+0xac/0x100 [ 114.634436][ T6354] __kmalloc_noprof+0xdd/0x4c0 [ 114.634455][ T6354] ? tomoyo_encode+0x26f/0x540 [ 114.634483][ T6354] tomoyo_encode+0x26f/0x540 [ 114.634507][ T6354] tomoyo_realpath_from_path+0x59e/0x5e0 [ 114.634541][ T6354] tomoyo_path_number_perm+0x236/0x860 [ 114.634561][ T6354] ? __lock_acquire+0x1397/0x2100 [ 114.634583][ T6354] ? tomoyo_path_number_perm+0x206/0x860 [ 114.634606][ T6354] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 114.634665][ T6354] ? __fget_files+0x2a/0x410 [ 114.634688][ T6354] ? __fget_files+0x2a/0x410 [ 114.634713][ T6354] security_file_ioctl+0xc6/0x2a0 [ 114.634737][ T6354] __se_sys_ioctl+0x46/0x170 [ 114.634763][ T6354] do_syscall_64+0xf3/0x230 [ 114.634783][ T6354] ? clear_bhb_loop+0x35/0x90 [ 114.634807][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.634827][ T6354] RIP: 0033:0x7f95ef98cda9 [ 114.634847][ T6354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.634860][ T6354] RSP: 002b:00007f95f071a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.634879][ T6354] RAX: ffffffffffffffda RBX: 00007f95efba5fa0 RCX: 00007f95ef98cda9 [ 114.634890][ T6354] RDX: 0000000020000040 RSI: 00000000c008561b RDI: 0000000000000003 [ 114.634901][ T6354] RBP: 00007f95f071a090 R08: 0000000000000000 R09: 0000000000000000 [ 114.634911][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.634920][ T6354] R13: 0000000000000000 R14: 00007f95efba5fa0 R15: 00007fff70f39178 [ 114.634947][ T6354] [ 114.634962][ T6354] ERROR: Out of memory at tomoyo_realpath_from_path. [ 115.136414][ T6356] bond1: entered promiscuous mode [ 115.149538][ T6356] bond1: entered allmulticast mode [ 115.155209][ T6356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.225548][ T6356] bond1 (unregistering): Released all slaves [ 118.301664][ T6400] netlink: 32 bytes leftover after parsing attributes in process `syz.1.125'. [ 118.334140][ T5872] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.525483][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.552566][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.579737][ T5872] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 118.600974][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.096145][ T5872] usb 4-1: config 0 descriptor?? [ 119.260683][ T6416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.128'. [ 119.319809][ T6394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.410544][ T6394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.537925][ T5872] usbhid 4-1:0.0: can't add hid device: -71 [ 121.644307][ T5872] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 121.673717][ T5872] usb 4-1: USB disconnect, device number 6 [ 123.059541][ T6443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.133'. [ 123.450546][ T6454] warning: `syz.3.136' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 124.609114][ T6461] FAULT_INJECTION: forcing a failure. [ 124.609114][ T6461] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 124.667711][ T6461] CPU: 0 UID: 0 PID: 6461 Comm: syz.3.138 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 124.667737][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 124.667747][ T6461] Call Trace: [ 124.667753][ T6461] [ 124.667760][ T6461] dump_stack_lvl+0x241/0x360 [ 124.667792][ T6461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.667816][ T6461] ? __pfx__printk+0x10/0x10 [ 124.667845][ T6461] ? snprintf+0xda/0x120 [ 124.667864][ T6461] should_fail_ex+0x40a/0x550 [ 124.667887][ T6461] _copy_to_user+0x31/0xb0 [ 124.667906][ T6461] simple_read_from_buffer+0xca/0x150 [ 124.667936][ T6461] proc_fail_nth_read+0x1e9/0x250 [ 124.667958][ T6461] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.667980][ T6461] ? rw_verify_area+0x243/0x630 [ 124.668002][ T6461] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.668023][ T6461] vfs_read+0x1f8/0xb40 [ 124.668047][ T6461] ? fdget_pos+0x254/0x320 [ 124.668068][ T6461] ? __pfx___mutex_lock+0x10/0x10 [ 124.668089][ T6461] ? __pfx_vfs_read+0x10/0x10 [ 124.668109][ T6461] ? rcu_read_lock_sched_held+0x8d/0x130 [ 124.668136][ T6461] ? __fget_files+0x2a/0x410 [ 124.668157][ T6461] ? __fget_files+0x395/0x410 [ 124.668176][ T6461] ? __fget_files+0x2a/0x410 [ 124.668204][ T6461] ksys_read+0x18f/0x2b0 [ 124.668229][ T6461] ? __pfx_ksys_read+0x10/0x10 [ 124.668253][ T6461] ? do_syscall_64+0x100/0x230 [ 124.668276][ T6461] ? do_syscall_64+0xb6/0x230 [ 124.668298][ T6461] do_syscall_64+0xf3/0x230 [ 124.668318][ T6461] ? clear_bhb_loop+0x35/0x90 [ 124.668342][ T6461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.668362][ T6461] RIP: 0033:0x7f95ef98b7bc [ 124.668377][ T6461] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 124.668390][ T6461] RSP: 002b:00007f95f071a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.668416][ T6461] RAX: ffffffffffffffda RBX: 00007f95efba5fa0 RCX: 00007f95ef98b7bc [ 124.668429][ T6461] RDX: 000000000000000f RSI: 00007f95f071a0a0 RDI: 000000000000000c [ 124.668439][ T6461] RBP: 00007f95f071a090 R08: 0000000000000000 R09: 0000000000000000 [ 124.668449][ T6461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.668458][ T6461] R13: 0000000000000000 R14: 00007f95efba5fa0 R15: 00007fff70f39178 [ 124.668485][ T6461] [ 125.180961][ T5872] IPVS: starting estimator thread 0... [ 125.300841][ T6473] IPVS: using max 20 ests per chain, 48000 per kthread [ 125.739593][ T6475] fuse: Bad value for 'group_id' [ 125.749981][ T6475] fuse: Bad value for 'group_id' [ 128.364528][ T6500] syz.4.152 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 128.419390][ T6502] [U] [ 128.422401][ T6502] [U] [ 128.425134][ T6502] [U] [ 128.427882][ T6502] [U] [ 128.449528][ T6502] [U] [ 128.452291][ T6502] [U] [ 128.455007][ T6502] [U] [ 128.457729][ T6502] [U] [ 128.479211][ T6502] [U] [ 128.482047][ T6502] [U] [ 128.484756][ T6502] [U] [ 128.487474][ T6502] [U] [ 128.624948][ T6502] [U] [ 128.627713][ T6502] [U] [ 128.630429][ T6502] [U] [ 128.633139][ T6502] [U] [ 129.454809][ T5873] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.882729][ T6502] [U] [ 129.885484][ T6502] [U] [ 129.888205][ T6502] [U] [ 129.890921][ T6502] [U] [ 129.939577][ T6502] [U] [ 129.942335][ T6502] [U] [ 129.945026][ T6502] [U] [ 129.947701][ T6502] [U] [ 129.985369][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.154'. [ 130.001493][ T6502] [U] [ 130.004243][ T6502] [U] [ 130.006958][ T6502] [U] [ 130.009675][ T6502] [U] [ 130.036292][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 130.051072][ T6511] mmap: syz.4.154 (6511) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 130.074047][ T6502] [U] [ 130.076806][ T6502] [U] [ 130.079517][ T6502] [U] [ 130.082223][ T6502] [U] [ 130.187866][ T6502] [U] [ 130.190625][ T6502] [U] [ 130.193311][ T6502] [U] [ 130.195998][ T6502] [U] [ 130.302641][ T6502] [U] [ 130.305427][ T6502] [U] [ 130.308141][ T6502] [U] [ 130.310861][ T6502] [U] [ 130.443479][ T6502] [U] [ 130.443486][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.446293][ T6502] [U] [ 130.446346][ T6502] [U] [ 130.446374][ T6502] [U] [ 130.463085][ T6502] [U] [ 130.468383][ T6502] [U] [ 130.471095][ T6502] [U] [ 130.473794][ T6502] [U] [ 130.593055][ T6502] [U] [ 130.595814][ T6502] [U] [ 130.598563][ T6502] [U] [ 130.601262][ T6502] [U] [ 130.666445][ T5873] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 130.675129][ T6502] [U] [ 130.678265][ T6502] [U] [ 130.680949][ T6502] [U] [ 130.683627][ T6502] [U] [ 130.732958][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.745039][ T6502] [U] [ 130.747789][ T6502] [U] [ 130.750519][ T6502] [U] [ 130.753238][ T6502] [U] [ 130.775001][ T5873] usb 1-1: config 0 descriptor?? [ 130.800375][ T6502] [U] [ 130.803121][ T6502] [U] [ 130.805834][ T6502] [U] [ 130.808557][ T6502] [U] [ 130.819326][ T6526] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 130.854107][ T6502] [U] [ 130.856859][ T6502] [U] [ 130.859564][ T6502] [U] [ 130.862260][ T6502] [U] [ 130.873852][ T6526] PKCS7: Only support pkcs7_signedData type [ 130.880113][ T6502] [U] [ 130.882834][ T6502] [U] [ 130.885548][ T6502] [U] [ 130.888253][ T6502] [U] [ 130.977830][ T6502] [U] [ 130.980589][ T6502] [U] [ 130.983307][ T6502] [U] [ 130.986016][ T6502] [U] [ 130.996457][ T6502] [U] [ 130.999206][ T6502] [U] [ 131.001912][ T6502] [U] [ 131.004618][ T6502] [U] [ 131.023509][ T6502] [U] [ 131.026271][ T6502] [U] [ 131.028987][ T6502] [U] [ 131.031688][ T6502] [U] [ 131.059748][ T6502] [U] [ 131.062498][ T6502] [U] [ 131.065207][ T6502] [U] [ 131.067911][ T6502] [U] [ 131.122302][ T6502] [U] [ 131.125053][ T6502] [U] [ 131.127755][ T6502] [U] [ 131.130461][ T6502] [U] [ 131.144826][ T6502] [U] [ 131.147588][ T6502] [U] [ 131.150308][ T6502] [U] [ 131.153024][ T6502] [U] [ 131.156034][ T6502] [U] [ 131.158753][ T6502] [U] [ 131.161460][ T6502] [U] [ 131.164173][ T6502] [U] [ 131.167100][ T6502] [U] [ 131.169817][ T6502] [U] [ 131.172521][ T6502] [U] [ 131.175234][ T6502] [U] [ 131.185886][ T5875] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 131.200247][ T6502] [U] [ 131.202990][ T6502] [U] [ 131.205705][ T6502] [U] [ 131.208415][ T6502] [U] [ 131.225631][ T6502] [U] [ 131.228376][ T6502] [U] [ 131.231092][ T6502] [U] [ 131.233788][ T6502] [U] [ 131.496852][ T6537] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 131.504120][ T6537] overlayfs: failed to set xattr on upper [ 131.509948][ T6537] overlayfs: ...falling back to redirect_dir=nofollow. [ 131.516881][ T6537] overlayfs: ...falling back to index=off. [ 131.522743][ T6537] overlayfs: ...falling back to uuid=null. [ 131.602508][ T6502] [U] [ 131.605323][ T6502] [U] [ 131.608029][ T6502] [U] [ 131.610725][ T6502] [U] [ 132.200226][ T6502] [U] [ 132.202969][ T6502] [U] [ 132.205675][ T6502] [U] [ 132.208375][ T6502] [U] [ 132.554803][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 132.627885][ T5875] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 133.040746][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.150047][ T5873] usbhid 1-1:0.0: can't add hid device: -71 [ 133.157330][ T5875] usb 5-1: config 0 descriptor?? [ 133.174993][ T6502] [U] [ 133.178968][ T5873] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 133.211656][ T5875] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 133.246917][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.294302][ T5873] usb 1-1: USB disconnect, device number 2 [ 133.386342][ T5875] gspca_vc032x: reg_r err -71 [ 133.391100][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.430159][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.487568][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.492964][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.577717][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.592115][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.603193][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.607688][ T6552] netlink: 'syz.2.167': attribute type 21 has an invalid length. [ 133.630028][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.663356][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.686323][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.691687][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.742465][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.749405][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.755384][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.760759][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.779922][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.813327][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.848737][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.863295][ T5875] gspca_vc032x: Unknown sensor... [ 133.887018][ T5875] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 133.921350][ T5875] usb 5-1: USB disconnect, device number 7 [ 133.932847][ T1790] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.212119][ T1790] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.854024][ T5875] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 135.051421][ T5875] usb 5-1: config 0 has an invalid interface number: 100 but max is 0 [ 135.430618][ T5875] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 135.439363][ T1790] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.444416][ T5875] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 135.463996][ T5875] usb 5-1: config 0 has no interface number 0 [ 135.470118][ T5875] usb 5-1: config 0 has no interface number 1 [ 135.476518][ T5875] usb 5-1: config 0 interface 100 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 135.489804][ T5875] usb 5-1: config 0 interface 100 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 135.503001][ T5875] usb 5-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 135.538797][ T5875] usb 5-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 135.590108][ T5875] usb 5-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 135.684147][ T5875] usb 5-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 135.730645][ T5875] usb 5-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 135.760419][ T6582] netlink: 16 bytes leftover after parsing attributes in process `syz.2.174'. [ 135.784022][ T5875] usb 5-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 135.807223][ T1790] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.827312][ T5875] usb 5-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 135.860851][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.870703][ T5875] usb 5-1: config 0 interface 66 has no altsetting 0 [ 135.871141][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.886384][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.886414][ T6582] gretap0: entered promiscuous mode [ 135.904844][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.913647][ T5875] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=3c.ad [ 135.923597][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 135.931681][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.931681][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.931706][ T5875] usb 5-1: Product: syz [ 135.977158][ T6582] gretap0: left promiscuous mode [ 135.992481][ T5875] usb 5-1: Manufacturer: syz [ 135.997664][ T5875] usb 5-1: SerialNumber: syz [ 136.035573][ T5875] usb 5-1: config 0 descriptor?? [ 136.054567][ T5875] port100 5-1:0.100: NFC: Could not find bulk-in or bulk-out endpoint [ 136.069343][ C0] port100 5-1:0.66: NFC: Urb failure (status -71) [ 136.089287][ C0] port100 5-1:0.66: NFC: Urb failure (status -71) [ 136.112294][ T5875] port100 5-1:0.66: NFC: Could not get supported command types [ 136.336790][ T6573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.384635][ T6573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.520274][ T6573] vlan2: entered allmulticast mode [ 136.687292][ T119] usb 5-1: USB disconnect, device number 8 [ 136.717996][ T1790] bridge_slave_1: left allmulticast mode [ 136.736722][ T1790] bridge_slave_1: left promiscuous mode [ 136.789021][ T1790] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.027494][ T1790] bridge_slave_0: left allmulticast mode [ 137.033524][ T1790] bridge_slave_0: left promiscuous mode [ 137.054716][ T1790] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.741789][ T6606] ptrace attach of "./syz-executor exec"[5825] was attempted by " [ 138.009006][ T5875] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 138.124095][ T5832] Bluetooth: hci1: command tx timeout [ 138.453185][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.474022][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 26989, setting to 64 [ 138.492410][ T5875] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 138.503305][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.524128][ T5875] usb 1-1: Product: syz [ 138.528300][ T5875] usb 1-1: Manufacturer: syz [ 138.552525][ T5875] usb 1-1: SerialNumber: syz [ 138.573079][ T5875] usb 1-1: config 0 descriptor?? [ 138.592723][ T6603] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.920068][ T5875] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 139.238493][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 139.245958][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 139.253302][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 139.260683][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 139.268025][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 139.275368][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 139.282688][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 139.293008][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 139.293156][ T5182] usb 1-1: control msg error: -71 [ 139.293202][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 139.293244][ C1] usb 1-1: pegasus_irq - usb_submit_urb failed with result -1 [ 139.318895][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 139.319100][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 139.319292][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 139.319481][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 139.319677][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 139.319732][ T5182] usb 1-1: control msg error: -71 [ 139.319877][ C0] usb 1-1: pegasus_irq - urb shutting down with status: -2 [ 139.345191][ T5875] usb 1-1: USB disconnect, device number 3 [ 140.028828][ T1790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.040544][ T1790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.051437][ T1790] bond0 (unregistering): Released all slaves [ 140.144183][ T51] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 140.213777][ T5832] Bluetooth: hci1: command tx timeout [ 140.304171][ T51] usb 5-1: Using ep0 maxpacket: 16 [ 140.312443][ T51] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 140.342092][ T51] usb 5-1: can't read configurations, error -61 [ 140.540762][ T51] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 140.557562][ T6584] chnl_net:caif_netlink_parms(): no params data found [ 140.813861][ T51] usb 5-1: Using ep0 maxpacket: 16 [ 140.847386][ T51] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 140.871874][ T51] usb 5-1: can't read configurations, error -61 [ 140.881429][ T51] usb usb5-port1: attempt power cycle [ 141.257215][ T51] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 141.369410][ T51] usb 5-1: Using ep0 maxpacket: 16 [ 141.485851][ T51] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 141.515276][ T1790] hsr_slave_0: left promiscuous mode [ 141.536707][ T51] usb 5-1: can't read configurations, error -61 [ 141.550941][ T1790] hsr_slave_1: left promiscuous mode [ 141.572102][ T1790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.610864][ T1790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.650770][ T1790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.668594][ T1790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.713334][ T1790] veth1_macvtap: left promiscuous mode [ 141.800708][ T51] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 141.809025][ T1790] veth0_macvtap: left promiscuous mode [ 141.834439][ T1790] veth1_vlan: left promiscuous mode [ 141.840032][ T1790] veth0_vlan: left promiscuous mode [ 141.857596][ T51] usb 5-1: Using ep0 maxpacket: 16 [ 141.865734][ T51] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 141.889879][ T51] usb 5-1: can't read configurations, error -61 [ 141.914316][ T51] usb usb5-port1: unable to enumerate USB device [ 142.285698][ T5832] Bluetooth: hci1: command tx timeout [ 143.210714][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 144.941863][ T5832] Bluetooth: hci1: command tx timeout [ 145.613522][ T1790] team0 (unregistering): Port device team_slave_1 removed [ 145.709843][ T1790] team0 (unregistering): Port device team_slave_0 removed [ 146.959760][ T6706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.204'. [ 146.960962][ T6584] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.161979][ T6706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.204'. [ 147.186451][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.222543][ T6584] bridge_slave_0: entered allmulticast mode [ 147.259035][ T6584] bridge_slave_0: entered promiscuous mode [ 147.304976][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.313166][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.320514][ T6584] bridge_slave_1: entered allmulticast mode [ 147.328027][ T6584] bridge_slave_1: entered promiscuous mode [ 147.548938][ T6584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.844778][ T6584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.612864][ T6584] team0: Port device team_slave_0 added [ 148.643159][ T6584] team0: Port device team_slave_1 added [ 149.049188][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.082442][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.144013][ T6584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.182140][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.223410][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.249347][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.311232][ T6584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.071624][ T6584] hsr_slave_0: entered promiscuous mode [ 150.081625][ T6743] Illegal XDP return value 4294967294 on prog (id 70) dev N/A, expect packet loss! [ 150.114753][ T6584] hsr_slave_1: entered promiscuous mode [ 150.120947][ T6584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.161864][ T6584] Cannot create hsr debugfs directory [ 150.386508][ T6750] netlink: 33 bytes leftover after parsing attributes in process `syz.2.214'. [ 150.658336][ T6764] openvswitch: netlink: Key 15 has unexpected len 454 expected 4 [ 150.669064][ T6763] netlink: 100 bytes leftover after parsing attributes in process `syz.4.216'. [ 150.891815][ T6584] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.940679][ T6584] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.983735][ T6584] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.018237][ T6584] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 151.242811][ T6584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.728258][ T6584] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.748550][ T6774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.217'. [ 151.769541][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.776741][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.805563][ T6774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.217'. [ 151.829378][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.836542][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.248033][ T6584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.518280][ T6788] random: crng reseeded on system resumption [ 154.594108][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 155.283443][ T6584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.316999][ T6814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.225'. [ 155.641940][ T6820] fuse: Bad value for 'user_id' [ 155.708344][ T6820] fuse: Bad value for 'user_id' [ 155.834462][ T6831] 9pnet_fd: Insufficient options for proto=fd [ 156.056305][ T6584] veth0_vlan: entered promiscuous mode [ 156.199567][ T6584] veth1_vlan: entered promiscuous mode [ 156.810173][ T6584] veth0_macvtap: entered promiscuous mode [ 156.868637][ T6584] veth1_macvtap: entered promiscuous mode [ 156.948461][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.134144][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.155529][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.494862][ T6856] random: crng reseeded on system resumption [ 158.420020][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.656199][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.687931][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.722977][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.740284][ T6866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.232'. [ 158.778906][ T6866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.232'. [ 158.900435][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.963249][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.010922][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.040545][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.055225][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.072195][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.085334][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.634529][ T6868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.235'. [ 159.677366][ T6584] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.694488][ T6584] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.703284][ T6584] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.714315][ T6584] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.900035][ T6880] 9pnet_fd: Insufficient options for proto=fd [ 159.959046][ T29] audit: type=1326 audit(1738460708.102:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d058cda9 code=0x7ffc0000 [ 160.032506][ T6882] loop0: detected capacity change from 0 to 7 [ 160.040361][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.044084][ T29] audit: type=1326 audit(1738460708.122:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06d058cda9 code=0x7ffc0000 [ 160.070232][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.118746][ T6882] Dev loop0: unable to read RDB block 7 [ 160.161555][ T6882] loop0: unable to read partition table [ 160.174609][ T6882] loop0: partition table beyond EOD, truncated [ 160.181532][ T29] audit: type=1326 audit(1738460708.122:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d058cda9 code=0x7ffc0000 [ 160.185581][ T1790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.236305][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 160.254408][ T1790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.266285][ T6882] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 160.266285][ T6882] ) failed (rc=-5) [ 160.317182][ T29] audit: type=1326 audit(1738460708.122:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f06d058cda9 code=0x7ffc0000 [ 160.564107][ T29] audit: type=1326 audit(1738460708.152:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d058cda9 code=0x7ffc0000 [ 160.585541][ T5874] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 160.712427][ T29] audit: type=1326 audit(1738460708.152:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d058cda9 code=0x7ffc0000 [ 160.934204][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 160.946408][ T5874] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.950522][ T6900] capability: warning: `syz.3.244' uses 32-bit capabilities (legacy support in use) [ 161.156444][ T5874] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.196462][ T29] audit: type=1326 audit(1738460708.172:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06d058cda9 code=0x7ffc0000 [ 161.249592][ T5874] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.280355][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.293953][ T29] audit: type=1326 audit(1738460708.472:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d058cda9 code=0x7ffc0000 [ 161.337134][ T5874] usb 3-1: Product: syz [ 161.360995][ T5874] usb 3-1: Manufacturer: syz [ 161.417887][ T5874] usb 3-1: SerialNumber: syz [ 161.500875][ T29] audit: type=1326 audit(1738460708.472:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d058cda9 code=0x7ffc0000 [ 161.833047][ T5874] usb 3-1: 0:2 : does not exist [ 161.904528][ T5874] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 162.172299][ T5874] usb 3-1: USB disconnect, device number 4 [ 162.226217][ T6915] netlink: 'syz.0.245': attribute type 4 has an invalid length. [ 162.429763][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.481583][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.247'. [ 162.506883][ T6925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.247'. [ 164.545491][ T51] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 165.067988][ T51] usb 4-1: unable to get BOS descriptor or descriptor too short [ 165.201224][ T51] usb 4-1: config 148 has an invalid interface number: 130 but max is 0 [ 165.234187][ T51] usb 4-1: config 148 has no interface number 0 [ 165.249439][ T51] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=16.f8 [ 165.281159][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.317938][ T51] usb 4-1: Product: syz [ 165.322178][ T51] usb 4-1: Manufacturer: syz [ 165.342187][ T51] usb 4-1: SerialNumber: syz [ 166.071278][ T6971] 9pnet_fd: Insufficient options for proto=fd [ 168.245313][ T51] usb 4-1: USB disconnect, device number 7 [ 168.500632][ T6993] 9pnet: Could not find request transport: fd [ 171.173995][ T119] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 171.536687][ T119] usb 6-1: config 0 has an invalid interface number: 100 but max is 0 [ 171.552433][ T119] usb 6-1: config 0 has an invalid interface number: 66 but max is 0 [ 171.574649][ T119] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 172.196645][ T119] usb 6-1: config 0 has no interface number 0 [ 172.224385][ T119] usb 6-1: config 0 has no interface number 1 [ 172.230563][ T119] usb 6-1: config 0 interface 100 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 172.279321][ T119] usb 6-1: config 0 interface 100 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 172.340517][ T119] usb 6-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 172.403251][ T119] usb 6-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 172.451787][ T119] usb 6-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 172.492417][ T119] usb 6-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 172.531597][ T119] usb 6-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 172.583361][ T119] usb 6-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 172.629779][ T119] usb 6-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 172.648229][ T119] usb 6-1: config 0 interface 66 has no altsetting 0 [ 172.659759][ T119] usb 6-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=3c.ad [ 172.682511][ T119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.707665][ T119] usb 6-1: Product: syz [ 172.721514][ T119] usb 6-1: Manufacturer: syz [ 172.736540][ T119] usb 6-1: SerialNumber: syz [ 172.752982][ T119] usb 6-1: config 0 descriptor?? [ 172.767988][ T119] port100 6-1:0.100: NFC: Could not find bulk-in or bulk-out endpoint [ 172.786430][ C0] port100 6-1:0.66: NFC: Urb failure (status -71) [ 172.792940][ C0] port100 6-1:0.66: NFC: Urb failure (status -71) [ 172.815103][ T119] port100 6-1:0.66: NFC: Could not get supported command types [ 172.934174][ T5873] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 172.972361][ T7021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.990612][ T7021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.016670][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.272'. [ 173.078754][ T7021] vlan2: entered allmulticast mode [ 173.124098][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 173.146739][ T5873] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.158434][ T5874] usb 6-1: USB disconnect, device number 2 [ 173.172563][ T5873] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.219271][ T5873] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.237449][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.322985][ T5873] usb 3-1: Product: syz [ 173.356079][ T5873] usb 3-1: Manufacturer: syz [ 173.414250][ T5873] usb 3-1: SerialNumber: syz [ 173.750975][ T7058] overlayfs: overlapping lowerdir path [ 173.977560][ T5873] usb 3-1: cannot find UAC_HEADER [ 174.070171][ T5873] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 174.113129][ T5873] usb 3-1: USB disconnect, device number 5 [ 174.664016][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.230336][ T7098] FAULT_INJECTION: forcing a failure. [ 175.230336][ T7098] name failslab, interval 1, probability 0, space 0, times 0 [ 175.243506][ T7098] CPU: 0 UID: 0 PID: 7098 Comm: syz.5.284 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 175.243529][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 175.243539][ T7098] Call Trace: [ 175.243545][ T7098] [ 175.243552][ T7098] dump_stack_lvl+0x241/0x360 [ 175.243584][ T7098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.243608][ T7098] ? __pfx__printk+0x10/0x10 [ 175.243633][ T7098] ? __kmalloc_noprof+0xb5/0x4c0 [ 175.243655][ T7098] ? __pfx___might_resched+0x10/0x10 [ 175.243677][ T7098] should_fail_ex+0x40a/0x550 [ 175.243701][ T7098] should_failslab+0xac/0x100 [ 175.243722][ T7098] __kmalloc_noprof+0xdd/0x4c0 [ 175.243741][ T7098] ? security_sk_alloc+0x53/0x360 [ 175.243759][ T7098] ? rcu_is_watching+0x15/0xb0 [ 175.243786][ T7098] security_sk_alloc+0x53/0x360 [ 175.243809][ T7098] sk_prot_alloc+0xfa/0x210 [ 175.243835][ T7098] sk_alloc+0x38/0x370 [ 175.243863][ T7098] inet_create+0x648/0xea0 [ 175.243879][ T7098] ? inet_create+0x94/0xea0 [ 175.243898][ T7098] __sock_create+0x4c0/0xa30 [ 175.243933][ T7098] mptcp_subflow_create_socket+0x132/0xdf0 [ 175.243967][ T7098] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 175.243999][ T7098] __mptcp_nmpc_sk+0x178/0x800 [ 175.244019][ T7098] ? irqentry_exit+0x63/0x90 [ 175.244042][ T7098] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 175.244074][ T7098] mptcp_connect+0x71/0xb20 [ 175.244091][ T7098] ? preempt_schedule+0xe1/0xf0 [ 175.244112][ T7098] __inet_stream_connect+0x262/0xf30 [ 175.244139][ T7098] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.244162][ T7098] ? preempt_schedule_thunk+0x1a/0x30 [ 175.244184][ T7098] ? mark_lock+0x9a/0x360 [ 175.244205][ T7098] ? __pfx___inet_stream_connect+0x10/0x10 [ 175.244227][ T7098] ? __local_bh_enable_ip+0x179/0x200 [ 175.244252][ T7098] ? inet_stream_connect+0x50/0xa0 [ 175.244274][ T7098] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 175.244308][ T7098] inet_stream_connect+0x65/0xa0 [ 175.244335][ T7098] __sys_connect+0x288/0x2d0 [ 175.244359][ T7098] ? __pfx___sys_connect+0x10/0x10 [ 175.244402][ T7098] __x64_sys_connect+0x7a/0x90 [ 175.244425][ T7098] do_syscall_64+0xf3/0x230 [ 175.244445][ T7098] ? clear_bhb_loop+0x35/0x90 [ 175.244469][ T7098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.244489][ T7098] RIP: 0033:0x7f8477d8cda9 [ 175.244504][ T7098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.244517][ T7098] RSP: 002b:00007f8478be4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 175.244534][ T7098] RAX: ffffffffffffffda RBX: 00007f8477fa6160 RCX: 00007f8477d8cda9 [ 175.244546][ T7098] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000009 [ 175.244556][ T7098] RBP: 00007f8478be4090 R08: 0000000000000000 R09: 0000000000000000 [ 175.244566][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.244576][ T7098] R13: 0000000000000000 R14: 00007f8477fa6160 R15: 00007ffc61e0e7e8 [ 175.244603][ T7098] [ 175.535572][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.543434][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.284'. [ 175.552357][ T7096] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 176.625058][ T51] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 176.940529][ T51] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1023 [ 177.037181][ T7125] program syz.5.290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.061740][ T7125] ntfs3(nullb0): Primary boot signature is not NTFS. [ 177.069580][ T7125] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 177.693910][ T51] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.731085][ T51] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 0 [ 177.763973][ T51] usb 3-1: config 1 interface 0 has no altsetting 0 [ 177.812758][ T7127] netlink: 200 bytes leftover after parsing attributes in process `syz.4.291'. [ 179.176645][ T7144] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 179.642091][ T51] usb 3-1: string descriptor 0 read error: -71 [ 179.874414][ T51] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 179.892925][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.089378][ T51] usb 3-1: can't set config #1, error -71 [ 180.138897][ T51] usb 3-1: USB disconnect, device number 6 [ 180.264478][ T7158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.297'. [ 180.274969][ T7158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.297'. [ 180.287178][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.5.298'. [ 182.096314][ T7181] Bluetooth: MGMT ver 1.23 [ 183.174529][ T119] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 183.453776][ T119] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 183.493326][ T7212] fuse: Bad value for 'fd' [ 183.510190][ T119] usb 3-1: config 4 has no interface number 0 [ 183.532647][ T119] usb 3-1: config 4 interface 44 altsetting 0 endpoint 0x7 has invalid maxpacket 104, setting to 64 [ 183.649660][ T7206] netlink: 32 bytes leftover after parsing attributes in process `syz.5.309'. [ 183.679726][ T119] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice=80.20 [ 183.692092][ T119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.723996][ T119] usb 3-1: Product: syz [ 183.728232][ T119] usb 3-1: Manufacturer: syz [ 183.750506][ T119] usb 3-1: SerialNumber: syz [ 183.826665][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.310'. [ 184.027838][ T7224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.311'. [ 184.191430][ T119] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 184.632419][ T7202] kernel profiling enabled (shift: 7) [ 184.651479][ T119] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 184.698941][ T119] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 184.729679][ T119] usb 3-1: media controller created [ 184.797606][ T119] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.971545][ T119] DVB: Unable to find symbol dib7000p_attach() [ 185.002732][ T119] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 186.143991][ T119] rc_core: IR keymap rc-dib0700-rc5 not found [ 186.585990][ T7249] FAULT_INJECTION: forcing a failure. [ 186.585990][ T7249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.599148][ T7249] CPU: 1 UID: 0 PID: 7249 Comm: syz.0.314 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 186.599170][ T7249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 186.599179][ T7249] Call Trace: [ 186.599188][ T7249] [ 186.599196][ T7249] dump_stack_lvl+0x241/0x360 [ 186.599228][ T7249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.599253][ T7249] ? __pfx__printk+0x10/0x10 [ 186.599282][ T7249] ? snprintf+0xda/0x120 [ 186.599301][ T7249] should_fail_ex+0x40a/0x550 [ 186.599324][ T7249] _copy_to_user+0x31/0xb0 [ 186.599343][ T7249] simple_read_from_buffer+0xca/0x150 [ 186.599367][ T7249] proc_fail_nth_read+0x1e9/0x250 [ 186.599389][ T7249] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.599411][ T7249] ? rw_verify_area+0x243/0x630 [ 186.599434][ T7249] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.599454][ T7249] vfs_read+0x1f8/0xb40 [ 186.599478][ T7249] ? fdget_pos+0x254/0x320 [ 186.599500][ T7249] ? __pfx___mutex_lock+0x10/0x10 [ 186.599521][ T7249] ? __pfx_vfs_read+0x10/0x10 [ 186.599547][ T7249] ? __fget_files+0x2a/0x410 [ 186.599568][ T7249] ? __fget_files+0x395/0x410 [ 186.599587][ T7249] ? __fget_files+0x2a/0x410 [ 186.599616][ T7249] ksys_read+0x18f/0x2b0 [ 186.599642][ T7249] ? __pfx_ksys_read+0x10/0x10 [ 186.599665][ T7249] ? do_syscall_64+0x100/0x230 [ 186.599688][ T7249] ? do_syscall_64+0xb6/0x230 [ 186.599711][ T7249] do_syscall_64+0xf3/0x230 [ 186.599731][ T7249] ? clear_bhb_loop+0x35/0x90 [ 186.599755][ T7249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.599776][ T7249] RIP: 0033:0x7f06d058b7bc [ 186.599792][ T7249] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 186.599804][ T7249] RSP: 002b:00007f06d1370030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.599822][ T7249] RAX: ffffffffffffffda RBX: 00007f06d07a6160 RCX: 00007f06d058b7bc [ 186.599833][ T7249] RDX: 000000000000000f RSI: 00007f06d13700a0 RDI: 0000000000000009 [ 186.599843][ T7249] RBP: 00007f06d1370090 R08: 0000000000000000 R09: 0000000000000000 [ 186.599853][ T7249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.599862][ T7249] R13: 0000000000000000 R14: 00007f06d07a6160 R15: 00007ffdbbdfc988 [ 186.599889][ T7249] [ 186.974038][ T119] Registered IR keymap rc-empty [ 186.979847][ T119] dvb-usb: could not initialize remote control. [ 187.168208][ T119] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 187.326143][ T119] usb 3-1: USB disconnect, device number 7 [ 187.419785][ T119] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 188.519984][ T7283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.322'. [ 189.011701][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.323'. [ 189.524146][ T5872] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 189.665325][ T7309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.328'. [ 189.741983][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 189.777987][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.328'. [ 189.793420][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 189.814204][ T5872] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 190.017503][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.026243][ T5872] usb 5-1: Product: syz [ 190.030467][ T5872] usb 5-1: Manufacturer: syz [ 190.035153][ T5872] usb 5-1: SerialNumber: syz [ 190.041740][ T5872] usb 5-1: config 0 descriptor?? [ 190.067187][ T5872] hub 5-1:0.0: bad descriptor, ignoring hub [ 190.087886][ T5872] hub 5-1:0.0: probe with driver hub failed with error -5 [ 190.631186][ T5872] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 190.925626][ T7315] team0: Port device virt_wifi0 added [ 191.022799][ T5872] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 191.085972][ T5872] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 191.154862][ T5872] usb 5-1: USB disconnect, device number 13 [ 191.724138][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 191.730715][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 191.741330][ T5136] Bluetooth: hci0: command 0x0406 tx timeout [ 191.747677][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 193.560114][ T7353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.594778][ T7353] batadv_slave_0: entered promiscuous mode [ 193.600655][ T7353] batadv_slave_0: entered allmulticast mode [ 193.728902][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.336'. [ 194.002469][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 194.754825][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.643973][ T119] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 196.874962][ T119] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 196.939733][ T119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.986816][ T119] usb 1-1: Product: syz [ 197.223078][ T119] usb 1-1: Manufacturer: syz [ 197.228119][ T119] usb 1-1: SerialNumber: syz [ 197.234988][ T119] usb 1-1: config 0 descriptor?? [ 198.051013][ T119] airspy 1-1:0.0: Board ID: 00 [ 198.064173][ T119] airspy 1-1:0.0: Firmware version: [ 198.210733][ T7431] netlink: 32 bytes leftover after parsing attributes in process `syz.2.348'. [ 198.257440][ T7431] netem: unknown loss type 13 [ 198.301943][ T7431] netem: change failed [ 198.329638][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.350825][ T7435] batadv_slave_0: entered promiscuous mode [ 198.390196][ T7435] batadv_slave_0: entered allmulticast mode [ 198.743303][ T7444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.350'. [ 198.964229][ T7452] FAULT_INJECTION: forcing a failure. [ 198.964229][ T7452] name failslab, interval 1, probability 0, space 0, times 0 [ 198.978089][ T7452] CPU: 0 UID: 0 PID: 7452 Comm: syz.5.351 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 198.978111][ T7452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 198.978121][ T7452] Call Trace: [ 198.978128][ T7452] [ 198.978135][ T7452] dump_stack_lvl+0x241/0x360 [ 198.978167][ T7452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.978191][ T7452] ? __pfx__printk+0x10/0x10 [ 198.978215][ T7452] ? fs_reclaim_acquire+0x93/0x130 [ 198.978239][ T7452] ? __pfx___might_resched+0x10/0x10 [ 198.978254][ T7452] ? dynamic_dname+0x141/0x1b0 [ 198.978278][ T7452] should_fail_ex+0x40a/0x550 [ 198.978301][ T7452] should_failslab+0xac/0x100 [ 198.978322][ T7452] __kmalloc_noprof+0xdd/0x4c0 [ 198.978341][ T7452] ? tomoyo_encode+0x26f/0x540 [ 198.978368][ T7452] tomoyo_encode+0x26f/0x540 [ 198.978392][ T7452] ? __pfx_sockfs_dname+0x10/0x10 [ 198.978414][ T7452] tomoyo_realpath_from_path+0x59e/0x5e0 [ 198.978449][ T7452] tomoyo_path_number_perm+0x236/0x860 [ 198.978468][ T7452] ? __lock_acquire+0x1397/0x2100 [ 198.978497][ T7452] ? tomoyo_path_number_perm+0x206/0x860 [ 198.978520][ T7452] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 198.978580][ T7452] ? __fget_files+0x2a/0x410 [ 198.978603][ T7452] ? __fget_files+0x2a/0x410 [ 198.978629][ T7452] security_file_ioctl+0xc6/0x2a0 [ 198.978652][ T7452] __se_sys_ioctl+0x46/0x170 [ 198.978678][ T7452] do_syscall_64+0xf3/0x230 [ 198.978699][ T7452] ? clear_bhb_loop+0x35/0x90 [ 198.978723][ T7452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.978743][ T7452] RIP: 0033:0x7f8477d8cda9 [ 198.978759][ T7452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.978771][ T7452] RSP: 002b:00007f8478c05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.978789][ T7452] RAX: ffffffffffffffda RBX: 00007f8477fa6080 RCX: 00007f8477d8cda9 [ 198.978801][ T7452] RDX: 00000000200001c0 RSI: 0000000000008946 RDI: 0000000000000006 [ 198.978812][ T7452] RBP: 00007f8478c05090 R08: 0000000000000000 R09: 0000000000000000 [ 198.978822][ T7452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.978832][ T7452] R13: 0000000000000000 R14: 00007f8477fa6080 R15: 00007ffc61e0e7e8 [ 198.978859][ T7452] [ 198.979339][ T7452] ERROR: Out of memory at tomoyo_realpath_from_path. [ 199.161368][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.456925][ T119] airspy 1-1:0.0: Registered as swradio24 [ 199.550728][ T119] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 199.594743][ T119] usb 1-1: USB disconnect, device number 4 [ 200.603989][ T838] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 200.843318][ T838] usb 6-1: Using ep0 maxpacket: 32 [ 200.874478][ T838] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.947612][ T838] usb 6-1: config 0 has no interface number 0 [ 201.072135][ T838] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 201.130911][ T838] usb 6-1: config 0 interface 1 has no altsetting 0 [ 201.325038][ T838] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 201.441723][ T838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.449907][ T838] usb 6-1: Product: syz [ 201.454189][ T838] usb 6-1: Manufacturer: syz [ 201.458848][ T838] usb 6-1: SerialNumber: syz [ 201.499181][ T838] usb 6-1: config 0 descriptor?? [ 201.690418][ T7484] FAULT_INJECTION: forcing a failure. [ 201.690418][ T7484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.760131][ T7484] CPU: 1 UID: 0 PID: 7484 Comm: syz.0.360 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 201.760158][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 201.760167][ T7484] Call Trace: [ 201.760173][ T7484] [ 201.760181][ T7484] dump_stack_lvl+0x241/0x360 [ 201.760214][ T7484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.760238][ T7484] ? __pfx__printk+0x10/0x10 [ 201.760262][ T7484] ? __pfx_lock_release+0x10/0x10 [ 201.760290][ T7484] should_fail_ex+0x40a/0x550 [ 201.760312][ T7484] _copy_from_iter+0x1e9/0x1c20 [ 201.760337][ T7484] ? lockdep_hardirqs_on+0x99/0x150 [ 201.760361][ T7484] ? 0xffffffff81000000 [ 201.760374][ T7484] ? __pfx__copy_from_iter+0x10/0x10 [ 201.760393][ T7484] ? __phys_addr_symbol+0x21/0x70 [ 201.760416][ T7484] ? __sanitizer_cov_trace_pc+0x4/0x70 [ 201.760436][ T7484] ? __phys_addr_symbol+0x2f/0x70 [ 201.760455][ T7484] ? __check_object_size+0x47a/0x730 [ 201.760472][ T7484] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 201.760492][ T7484] skb_copy_datagram_from_iter+0xf2/0x6a0 [ 201.760511][ T7484] ? skb_put+0x114/0x1f0 [ 201.760535][ T7484] tun_get_user+0x193c/0x48a0 [ 201.760579][ T7484] ? __pfx_tun_get_user+0x10/0x10 [ 201.760601][ T7484] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 201.760629][ T7484] ? rcu_is_watching+0x15/0xb0 [ 201.760653][ T7484] ? rcu_read_unlock_special+0x497/0x570 [ 201.760671][ T7484] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 201.760688][ T7484] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 201.760707][ T7484] ? __pfx_lock_release+0x10/0x10 [ 201.760736][ T7484] ? __rcu_read_unlock+0xa1/0x110 [ 201.760755][ T7484] ? tun_get+0x1e/0x2f0 [ 201.760774][ T7484] ? tun_get+0x27d/0x2f0 [ 201.760797][ T7484] tun_chr_write_iter+0x10d/0x1f0 [ 201.760822][ T7484] vfs_write+0xacf/0xd10 [ 201.760849][ T7484] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 201.760871][ T7484] ? __pfx_vfs_write+0x10/0x10 [ 201.760897][ T7484] ? __fget_files+0x2a/0x410 [ 201.760919][ T7484] ? __fget_files+0x2a/0x410 [ 201.760946][ T7484] ksys_write+0x18f/0x2b0 [ 201.760971][ T7484] ? __pfx_ksys_write+0x10/0x10 [ 201.761004][ T7484] do_syscall_64+0xf3/0x230 [ 201.761024][ T7484] ? clear_bhb_loop+0x35/0x90 [ 201.761048][ T7484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.761067][ T7484] RIP: 0033:0x7f06d058b85f [ 201.761082][ T7484] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 201.761103][ T7484] RSP: 002b:00007f06d1391000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 201.761121][ T7484] RAX: ffffffffffffffda RBX: 00007f06d07a6080 RCX: 00007f06d058b85f [ 201.761133][ T7484] RDX: 0000000000000d81 RSI: 0000000020000700 RDI: 00000000000000c8 [ 201.761142][ T7484] RBP: 00007f06d1391090 R08: 0000000000000000 R09: 0000000000000000 [ 201.761152][ T7484] R10: 0000000000000d81 R11: 0000000000000293 R12: 0000000000000001 [ 201.761161][ T7484] R13: 0000000000000000 R14: 00007f06d07a6080 R15: 00007ffdbbdfc988 [ 201.761186][ T7484] [ 202.137751][ T838] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 202.148381][ T838] cx231xx 6-1:0.1: Failed to read PCB config [ 202.154475][ T838] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 202.168834][ T838] usb 6-1: USB disconnect, device number 3 [ 202.623306][ T7509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.655781][ T119] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 202.755425][ T51] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 202.764163][ T5873] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 202.813966][ T119] usb 6-1: Using ep0 maxpacket: 32 [ 202.823183][ T119] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.833152][ T119] usb 6-1: config 0 has no interface number 0 [ 202.839653][ T119] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 202.853758][ T119] usb 6-1: config 0 interface 1 has no altsetting 0 [ 202.863427][ T119] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 202.872864][ T119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.881325][ T119] usb 6-1: Product: syz [ 202.885846][ T119] usb 6-1: Manufacturer: syz [ 202.890466][ T119] usb 6-1: SerialNumber: syz [ 202.899566][ T119] usb 6-1: config 0 descriptor?? [ 202.923998][ T51] usb 4-1: Using ep0 maxpacket: 32 [ 202.925213][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 202.931800][ T51] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 202.937890][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 202.953368][ T51] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 202.960480][ T5873] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 202.963982][ T51] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 202.978859][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.984363][ T51] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.990341][ T5873] usb 3-1: Product: syz [ 202.999730][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.013239][ T51] usb 4-1: Product: ᠌ [ 203.013981][ T5873] usb 3-1: Manufacturer: syz [ 203.017831][ T51] usb 4-1: Manufacturer:  [ 203.027038][ T51] usb 4-1: SerialNumber: 㘡҇숷唾钘쀻谿E줦ꂞ⏭ꋖః둪宒ꋣ百뷾묜njጋ岺莕 [ 203.029487][ T5873] usb 3-1: SerialNumber: syz [ 203.051587][ T5873] usb 3-1: config 0 descriptor?? [ 203.109571][ T7467] fuse: Bad value for 'rootmode' [ 203.132868][ T119] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 203.144476][ T119] cx231xx 6-1:0.1: Failed to read PCB config [ 203.150547][ T119] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 203.170311][ T119] usb 6-1: USB disconnect, device number 4 [ 203.265570][ T51] cdc_ncm 4-1:1.0: bind() failure [ 203.288606][ T51] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 203.304490][ T51] cdc_ncm 4-1:1.1: bind() failure [ 203.315582][ T51] usb 4-1: USB disconnect, device number 8 [ 203.470954][ T7503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.480942][ T7503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.603221][ T7527] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 203.617320][ T7527] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 204.456471][ T5873] gs_usb 3-1:0.0: Couldn't get device config: (err=-110) [ 204.463666][ T5873] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 204.584725][ T51] usb 3-1: USB disconnect, device number 8 [ 205.418642][ T7563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.435642][ T7563] batadv_slave_0: entered promiscuous mode [ 205.441508][ T7563] batadv_slave_0: entered allmulticast mode [ 205.560475][ T7569] ipvlan2: entered promiscuous mode [ 205.625441][ T5873] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 205.814024][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 205.825759][ T5872] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 205.855174][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.893970][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.904010][ T5873] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 205.913095][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.048282][ T5872] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 206.134648][ T5873] usb 5-1: config 0 descriptor?? [ 206.145059][ T5872] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 206.294125][ T5873] hub 5-1:0.0: USB hub found [ 206.332762][ T5872] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.450897][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.552620][ T5873] hub 5-1:0.0: 1 port detected [ 206.572053][ T7567] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 206.588576][ T7567] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 206.609492][ T5872] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 207.277108][ T5873] usb 4-1: USB disconnect, device number 9 [ 207.940101][ T5875] hub 5-1:0.0: activate --> -90 [ 208.214914][ T119] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 209.115030][ T119] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 209.148080][ T119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.161642][ T5873] usb 5-1: USB disconnect, device number 14 [ 209.205586][ T119] usb 6-1: Product: syz [ 209.228656][ T119] usb 6-1: Manufacturer: syz [ 209.246682][ T119] usb 6-1: SerialNumber: syz [ 209.272032][ T119] usb 6-1: config 0 descriptor?? [ 209.345806][ T7622] ipvlan2: entered promiscuous mode [ 209.491942][ T119] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 209.524445][ T119] usb 6-1: USB disconnect, device number 5 [ 209.788047][ T7630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.394'. [ 211.353573][ T7635] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 212.353554][ T7662] ipvlan3: entered promiscuous mode [ 214.652893][ T7693] 9pnet_fd: Insufficient options for proto=fd [ 216.519390][ T7714] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 216.540285][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 217.594095][ T119] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 217.636008][ T7727] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.768222][ T119] usb 4-1: Using ep0 maxpacket: 8 [ 217.784790][ T119] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 217.809219][ T119] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 217.831524][ T119] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 217.854307][ T119] usb 4-1: Product: syz [ 217.860665][ T119] usb 4-1: Manufacturer: syz [ 217.869685][ T119] usb 4-1: SerialNumber: syz [ 217.887840][ T7727] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.965793][ T7727] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.045929][ T7727] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.183490][ T119] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 218.197411][ T119] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 218.212448][ T119] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 218.222609][ T119] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 218.272506][ T7727] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.289640][ T7727] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.307048][ T7727] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.326532][ T7727] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.375487][ T119] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 218.397487][ T119] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 218.421934][ T119] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 218.527497][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 218.553998][ T7727] syz.2.422 (7727) used greatest stack depth: 18712 bytes left [ 218.605824][ T5874] usb 4-1: USB disconnect, device number 10 [ 218.618685][ T5874] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 218.637616][ T5874] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 218.660627][ T5874] visor 4-1:1.0: device disconnected [ 219.024117][ T5866] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 219.207897][ T5866] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 219.270344][ T5866] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 219.373795][ T5866] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 219.405312][ T5866] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 219.463714][ T5866] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 219.526534][ T5866] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 219.546356][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 219.590856][ T5866] usb 5-1: Product: syz [ 219.618027][ T5866] usb 5-1: Manufacturer: syz [ 219.737131][ T5866] cdc_wdm 5-1:1.0: skipping garbage [ 220.089777][ T119] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 220.139730][ T5866] cdc_wdm 5-1:1.0: skipping garbage [ 220.189211][ T5866] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 220.198517][ T5866] cdc_wdm 5-1:1.0: Unknown control protocol [ 220.251830][ T119] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 220.255094][ T5866] usb 5-1: USB disconnect, device number 15 [ 220.717575][ T119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.754133][ T119] usb 4-1: Product: syz [ 220.758349][ T119] usb 4-1: Manufacturer: syz [ 220.762990][ T119] usb 4-1: SerialNumber: syz [ 221.392716][ T119] usb 4-1: config 0 descriptor?? [ 222.201593][ T7773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.439'. [ 222.404011][ T5874] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 222.484107][ T5872] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 222.503962][ T119] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 222.586440][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 222.597372][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 222.608999][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 222.619984][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 222.629918][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.645375][ T5874] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 222.647522][ T5872] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 222.654576][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.671475][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.671847][ T5874] usb 1-1: Product: syz [ 222.671863][ T5874] usb 1-1: Manufacturer: syz [ 222.671877][ T5874] usb 1-1: SerialNumber: syz [ 222.696778][ T5872] usb 3-1: config 0 descriptor?? [ 222.705156][ T119] usb 5-1: config 0 has an invalid interface number: 100 but max is 0 [ 222.717455][ T119] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 222.719457][ T5874] usb 1-1: config 0 descriptor?? [ 222.742595][ T119] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 222.776487][ T5874] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 222.780713][ T119] usb 5-1: config 0 has no interface number 0 [ 222.794617][ T5874] imon 1-1:0.0: unable to initialize intf0, err -90 [ 222.801239][ T5874] imon:imon_probe: failed to initialize context! [ 222.815549][ T838] usb 4-1: USB disconnect, device number 11 [ 222.817470][ T119] usb 5-1: config 0 has no interface number 1 [ 222.825135][ T5874] imon 1-1:0.0: unable to register, err -19 [ 222.857751][ T119] usb 5-1: config 0 interface 100 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 222.899223][ T119] usb 5-1: config 0 interface 100 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 222.944103][ T119] usb 5-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 222.944185][ T119] usb 5-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 222.944208][ T119] usb 5-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 222.944231][ T119] usb 5-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 222.944254][ T119] usb 5-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 222.944276][ T119] usb 5-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 222.944369][ T119] usb 5-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 222.944393][ T119] usb 5-1: config 0 interface 66 has no altsetting 0 [ 222.946700][ T119] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=3c.ad [ 222.946726][ T119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.946745][ T119] usb 5-1: Product: syz [ 222.946792][ T119] usb 5-1: Manufacturer: syz [ 222.946807][ T119] usb 5-1: SerialNumber: syz [ 222.949331][ T119] usb 5-1: config 0 descriptor?? [ 222.951771][ T119] port100 5-1:0.100: NFC: Could not find bulk-in or bulk-out endpoint [ 222.965533][ C0] port100 5-1:0.66: NFC: Urb failure (status -71) [ 223.099214][ C0] port100 5-1:0.66: NFC: Urb failure (status -71) [ 223.105770][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.125991][ T119] port100 5-1:0.66: NFC: Could not get supported command types [ 223.161034][ T7770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.216212][ T7770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.232298][ T5872] ath6kl: Failed to submit usb control message: -71 [ 223.239177][ T5872] ath6kl: unable to send the bmi data to the device: -71 [ 223.246470][ T5872] ath6kl: Unable to send get target info: -71 [ 223.262211][ T5872] ath6kl: Failed to init ath6kl core: -71 [ 223.268741][ T5872] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 223.284500][ T5872] usb 3-1: USB disconnect, device number 9 [ 223.358750][ T7787] netlink: 'syz.0.438': attribute type 11 has an invalid length. [ 223.375630][ T838] usb 5-1: USB disconnect, device number 16 [ 224.210235][ T7795] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 225.716524][ T7814] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 225.892252][ T51] usb 1-1: USB disconnect, device number 5 [ 226.264572][ T29] audit: type=1800 audit(1738460774.402:12): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.458" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 226.304090][ T119] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 226.833382][ T51] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 226.916038][ T119] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.927338][ T119] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.949170][ T119] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 226.958373][ T119] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.985799][ T119] usb 6-1: config 0 descriptor?? [ 227.048082][ T7834] netlink: 76 bytes leftover after parsing attributes in process `syz.2.462'. [ 227.085491][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 227.115260][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.223353][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.351088][ T51] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 227.748896][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.776166][ T119] usbhid 6-1:0.0: can't add hid device: -71 [ 227.783741][ T119] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 227.814495][ T51] usb 5-1: config 0 descriptor?? [ 228.020279][ T51] hub 5-1:0.0: USB hub found [ 228.055243][ T119] usb 6-1: USB disconnect, device number 6 [ 228.485310][ T51] hub 5-1:0.0: 1 port detected [ 229.725907][ T51] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 229.740902][ T51] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 229.796791][ T51] usbhid 5-1:0.0: can't add hid device: -71 [ 229.802820][ T51] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 229.836811][ T51] usb 5-1: USB disconnect, device number 17 [ 230.783948][ T51] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 230.974386][ T51] usb 1-1: Using ep0 maxpacket: 16 [ 230.991436][ T51] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.049823][ T51] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.130129][ T51] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 231.279045][ T51] usb 1-1: config 0 interface 0 has no altsetting 0 [ 231.343058][ T51] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 231.450320][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.552201][ T51] usb 1-1: config 0 descriptor?? [ 232.438475][ T29] audit: type=1326 audit(1738460780.572:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7896 comm="syz.2.480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc1c18cda9 code=0x0 [ 232.459260][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.521195][ T51] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 232.524906][ T7872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.528975][ T51] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 232.838880][ T7872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.007214][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.481'. [ 233.069093][ T51] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 233.155943][ T51] hid-generic 0003:045E:05DA.0003: ignoring exceeding usage max [ 233.934486][ T51] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 233.943268][ T7912] tty tty1: ldisc open failed (-12), clearing slot 0 [ 234.102087][ T51] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 234.126190][ T51] hid-generic 0003:045E:05DA.0003: unbalanced collection at end of report description [ 234.220674][ T51] hid-generic 0003:045E:05DA.0003: probe with driver hid-generic failed with error -22 [ 234.648873][ T119] usb 1-1: USB disconnect, device number 6 [ 236.224383][ T7936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.233138][ T7936] batadv_slave_0: entered promiscuous mode [ 236.264099][ T7936] batadv_slave_0: entered allmulticast mode [ 237.554068][ T5873] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 237.709695][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 237.766019][ T7958] fuse: Unknown parameter 'rootmode' [ 237.953334][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 238.061532][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.248674][ T5873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.281059][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 238.327603][ T5873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 238.343688][ T7969] FAULT_INJECTION: forcing a failure. [ 238.343688][ T7969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.496614][ T7969] CPU: 1 UID: 0 PID: 7969 Comm: syz.2.494 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 238.496639][ T7969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 238.496650][ T7969] Call Trace: [ 238.496656][ T7969] [ 238.496663][ T7969] dump_stack_lvl+0x241/0x360 [ 238.496695][ T7969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.496717][ T7969] ? __pfx__printk+0x10/0x10 [ 238.496741][ T7969] ? __pfx_lock_release+0x10/0x10 [ 238.496767][ T7969] should_fail_ex+0x40a/0x550 [ 238.496787][ T7969] _copy_from_user+0x2d/0xb0 [ 238.496802][ T7969] core_sys_select+0x639/0x910 [ 238.496826][ T7969] ? __pfx_core_sys_select+0x10/0x10 [ 238.496841][ T7969] ? ksys_write+0x22a/0x2b0 [ 238.496883][ T7969] ? __pfx_set_user_sigmask+0x10/0x10 [ 238.496897][ T7969] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 238.496915][ T7969] ? __fget_files+0x2a/0x410 [ 238.496939][ T7969] __se_sys_pselect6+0x321/0x3e0 [ 238.496963][ T7969] ? __pfx___se_sys_pselect6+0x10/0x10 [ 238.496979][ T7969] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 238.496998][ T7969] ? do_syscall_64+0x100/0x230 [ 238.497018][ T7969] ? __x64_sys_pselect6+0x21/0xf0 [ 238.497036][ T7969] do_syscall_64+0xf3/0x230 [ 238.497055][ T7969] ? clear_bhb_loop+0x35/0x90 [ 238.497077][ T7969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.497095][ T7969] RIP: 0033:0x7efc1c18cda9 [ 238.497110][ T7969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.497122][ T7969] RSP: 002b:00007efc1d0b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 238.497147][ T7969] RAX: ffffffffffffffda RBX: 00007efc1c3a5fa0 RCX: 00007efc1c18cda9 [ 238.497159][ T7969] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 238.497168][ T7969] RBP: 00007efc1d0b5090 R08: 0000000000000000 R09: 0000000000000000 [ 238.497177][ T7969] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 238.497187][ T7969] R13: 0000000000000000 R14: 00007efc1c3a5fa0 R15: 00007ffebbcf5ad8 [ 238.497210][ T7969] [ 238.513950][ T5873] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 238.660355][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.746174][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.774930][ T5873] usb 4-1: config 0 descriptor?? [ 238.799524][ T7950] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 239.009598][ T51] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 239.358858][ T7977] FAULT_INJECTION: forcing a failure. [ 239.358858][ T7977] name failslab, interval 1, probability 0, space 0, times 0 [ 239.371831][ T7977] CPU: 1 UID: 0 PID: 7977 Comm: syz.2.498 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 239.371856][ T7977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 239.371866][ T7977] Call Trace: [ 239.371872][ T7977] [ 239.371879][ T7977] dump_stack_lvl+0x241/0x360 [ 239.371913][ T7977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.371936][ T7977] ? __pfx__printk+0x10/0x10 [ 239.371960][ T7977] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 239.371976][ T7977] ? __pfx___might_resched+0x10/0x10 [ 239.371989][ T7977] should_fail_ex+0x40a/0x550 [ 239.372002][ T7977] should_failslab+0xac/0x100 [ 239.372015][ T7977] kmem_cache_alloc_node_noprof+0x77/0x380 [ 239.372032][ T7977] ? __alloc_skb+0x1c3/0x440 [ 239.372057][ T7977] __alloc_skb+0x1c3/0x440 [ 239.372084][ T7977] ? __pfx___alloc_skb+0x10/0x10 [ 239.372107][ T7977] ? netlink_autobind+0xd6/0x2f0 [ 239.372122][ T7977] ? netlink_autobind+0x2b0/0x2f0 [ 239.372133][ T7977] netlink_sendmsg+0x638/0xcb0 [ 239.372152][ T7977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.372171][ T7977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.372191][ T7977] __sock_sendmsg+0x221/0x270 [ 239.372213][ T7977] ____sys_sendmsg+0x52a/0x7e0 [ 239.372244][ T7977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.372271][ T7977] ? __sys_sendmsg+0x241/0x350 [ 239.372284][ T7977] ? __sys_sendmsg+0x24e/0x350 [ 239.372300][ T7977] __sys_sendmsg+0x269/0x350 [ 239.372316][ T7977] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.372355][ T7977] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.372402][ T7977] do_syscall_64+0xf3/0x230 [ 239.372422][ T7977] ? clear_bhb_loop+0x35/0x90 [ 239.372437][ T7977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.372449][ T7977] RIP: 0033:0x7efc1c18cda9 [ 239.372459][ T7977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.372466][ T7977] RSP: 002b:00007efc1d094038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.372478][ T7977] RAX: ffffffffffffffda RBX: 00007efc1c3a6080 RCX: 00007efc1c18cda9 [ 239.372489][ T7977] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 239.372498][ T7977] RBP: 00007efc1d094090 R08: 0000000000000000 R09: 0000000000000000 [ 239.372509][ T7977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.372519][ T7977] R13: 0000000000000000 R14: 00007efc1c3a6080 R15: 00007ffebbcf5ad8 [ 239.372545][ T7977] [ 239.875605][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 239.906462][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 239.933556][ T51] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.946844][ T51] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.955960][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.995659][ T51] usb 1-1: config 0 descriptor?? [ 240.037856][ T7971] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 240.324583][ T5873] usb 4-1: USB disconnect, device number 12 [ 240.334178][ T5832] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 241.369407][ T51] usbhid 1-1:0.0: can't add hid device: -71 [ 241.380378][ T51] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 241.394959][ T51] usb 1-1: USB disconnect, device number 7 [ 242.191046][ T29] audit: type=1326 audit(1738460790.332:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8005 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d058cda9 code=0x7ffc0000 [ 242.953967][ T29] audit: type=1326 audit(1738460790.332:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8005 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d058cda9 code=0x7ffc0000 [ 243.028963][ T29] audit: type=1326 audit(1738460790.372:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8005 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06d058cda9 code=0x7ffc0000 [ 243.134004][ T29] audit: type=1326 audit(1738460790.372:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8005 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d058cda9 code=0x7ffc0000 [ 243.187831][ T29] audit: type=1326 audit(1738460790.372:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8005 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d058cda9 code=0x7ffc0000 [ 243.270898][ T29] audit: type=1326 audit(1738460790.382:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8005 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f06d058cda9 code=0x7ffc0000 [ 243.300635][ T29] audit: type=1326 audit(1738460790.382:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8005 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d058cda9 code=0x7ffc0000 [ 243.322431][ T29] audit: type=1326 audit(1738460790.382:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8005 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d058cda9 code=0x7ffc0000 [ 243.344221][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.352374][ T29] audit: type=1326 audit(1738460790.382:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8005 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06d058b710 code=0x7ffc0000 [ 243.695969][ T29] audit: type=1326 audit(1738460791.152:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8005 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d058cda9 code=0x7ffc0000 [ 245.430583][ T8040] FAULT_INJECTION: forcing a failure. [ 245.430583][ T8040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.443797][ T8040] CPU: 1 UID: 0 PID: 8040 Comm: syz.5.517 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 245.443822][ T8040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 245.443831][ T8040] Call Trace: [ 245.443837][ T8040] [ 245.443844][ T8040] dump_stack_lvl+0x241/0x360 [ 245.443890][ T8040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.443913][ T8040] ? __pfx__printk+0x10/0x10 [ 245.443938][ T8040] ? __pfx_lock_release+0x10/0x10 [ 245.443967][ T8040] should_fail_ex+0x40a/0x550 [ 245.443990][ T8040] _copy_from_user+0x2d/0xb0 [ 245.444008][ T8040] copy_msghdr_from_user+0xae/0x680 [ 245.444034][ T8040] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 245.444051][ T8040] ? __fget_files+0x2a/0x410 [ 245.444075][ T8040] ? __fget_files+0x2a/0x410 [ 245.444103][ T8040] __sys_sendmmsg+0x32b/0x720 [ 245.444137][ T8040] ? __pfx___sys_sendmmsg+0x10/0x10 [ 245.444171][ T8040] ? __pfx_lock_release+0x10/0x10 [ 245.444189][ T8040] ? kstrtouint_from_user+0x128/0x190 [ 245.444232][ T8040] ? ksys_write+0x22a/0x2b0 [ 245.444256][ T8040] ? __pfx_lock_release+0x10/0x10 [ 245.444281][ T8040] ? sb_end_write+0xe9/0x1c0 [ 245.444301][ T8040] ? vfs_write+0x7fa/0xd10 [ 245.444325][ T8040] ? __mutex_unlock_slowpath+0x227/0x800 [ 245.444370][ T8040] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 245.444393][ T8040] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.444415][ T8040] ? do_syscall_64+0x100/0x230 [ 245.444438][ T8040] __x64_sys_sendmmsg+0xa0/0xb0 [ 245.444463][ T8040] do_syscall_64+0xf3/0x230 [ 245.444483][ T8040] ? clear_bhb_loop+0x35/0x90 [ 245.444506][ T8040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.444527][ T8040] RIP: 0033:0x7f8477d8cda9 [ 245.444547][ T8040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.444560][ T8040] RSP: 002b:00007f8478c05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 245.444579][ T8040] RAX: ffffffffffffffda RBX: 00007f8477fa6080 RCX: 00007f8477d8cda9 [ 245.444592][ T8040] RDX: 000000000400006d RSI: 00000000200029c0 RDI: 0000000000000005 [ 245.444603][ T8040] RBP: 00007f8478c05090 R08: 0000000000000000 R09: 0000000000000000 [ 245.444613][ T8040] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000001 [ 245.444623][ T8040] R13: 0000000000000000 R14: 00007f8477fa6080 R15: 00007ffc61e0e7e8 [ 245.444649][ T8040] [ 245.958818][ T8044] ceph: No mds server is up or the cluster is laggy [ 246.000097][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.523'. [ 246.421599][ T8044] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.518'. [ 246.462564][ T8063] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.518'. [ 248.220166][ T8092] netlink: 5 bytes leftover after parsing attributes in process `syz.3.529'. [ 248.274277][ T8092] netlink: 44 bytes leftover after parsing attributes in process `syz.3.529'. [ 248.708663][ T8101] batadv_slave_0: entered promiscuous mode [ 248.740014][ T8101] batadv_slave_0: entered allmulticast mode [ 251.807884][ T5872] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 252.410696][ T5872] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 252.434500][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.461499][ T5872] usb 6-1: Product: syz [ 252.466730][ T5872] usb 6-1: Manufacturer: syz [ 252.471427][ T5872] usb 6-1: SerialNumber: syz [ 252.497436][ T5872] usb 6-1: config 0 descriptor?? [ 252.511003][ T5872] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 252.756142][ T5873] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.820916][ T5873] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 252.921659][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 252.938818][ T8157] netlink: 'syz.2.546': attribute type 1 has an invalid length. [ 252.946869][ T8157] netlink: 224 bytes leftover after parsing attributes in process `syz.2.546'. [ 253.011218][ T5873] usb 6-1: USB disconnect, device number 7 [ 253.193938][ T5866] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 253.964427][ T5866] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 253.973508][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.048084][ T5866] usb 1-1: config 0 descriptor?? [ 254.082836][ T8172] tun0: tun_chr_ioctl cmd 1074025675 [ 254.083434][ T8166] Cannot find set identified by id 0 to match [ 254.088472][ T8172] tun0: persist enabled [ 254.100468][ T5866] gspca_main: spca508-2.14.0 probing 8086:0110 [ 254.134346][ T8172] tun0: tun_chr_ioctl cmd 1074025675 [ 254.143978][ T8172] tun0: persist disabled [ 255.114925][ T5866] gspca_spca508: reg_read err -110 [ 255.143397][ T5866] gspca_spca508: reg_read err -32 [ 255.176729][ T5866] gspca_spca508: reg_read err -32 [ 255.746907][ T8183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.797669][ T8183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.991472][ T8191] bridge1: entered promiscuous mode [ 255.996887][ T8191] bridge1: entered allmulticast mode [ 256.055528][ T5866] gspca_spca508: reg_read err -110 [ 256.179747][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.210016][ T5866] gspca_spca508: reg write: error -32 [ 256.235198][ T8190] netlink: 'syz.3.555': attribute type 3 has an invalid length. [ 256.245644][ T5866] spca508 1-1:0.0: probe with driver spca508 failed with error -32 [ 256.267682][ T8190] netlink: 224 bytes leftover after parsing attributes in process `syz.3.555'. [ 256.295208][ T5866] usb 1-1: USB disconnect, device number 8 [ 257.434040][ T5866] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 257.735546][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 257.759762][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 257.772114][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 257.785182][ T5866] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 257.803872][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.822147][ T5866] usb 6-1: Product: syz [ 257.826826][ T5866] usb 6-1: Manufacturer: syz [ 257.831443][ T5866] usb 6-1: SerialNumber: syz [ 257.854964][ T5866] usb 6-1: config 0 descriptor?? [ 257.934153][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 258.110500][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.123756][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.139609][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 258.148844][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.163969][ T8] usb 1-1: config 0 descriptor?? [ 258.294676][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 258.305146][ T8222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.561'. [ 258.345810][ T8222] netlink: 20 bytes leftover after parsing attributes in process `syz.4.561'. [ 259.600892][ T5866] usb 6-1: USB disconnect, device number 8 [ 260.168148][ T8237] netlink: 'syz.5.566': attribute type 1 has an invalid length. [ 260.247696][ T8239] netlink: 3 bytes leftover after parsing attributes in process `syz.5.566'. [ 260.268238][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.398125][ T8237] bond1: entered promiscuous mode [ 260.404069][ T8237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.425176][ T8239] batadv1: entered promiscuous mode [ 260.430428][ T8239] batadv1: entered allmulticast mode [ 260.488296][ T8239] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 260.546312][ T8243] netlink: 48 bytes leftover after parsing attributes in process `syz.5.566'. [ 260.581363][ T8239] bond1: (slave batadv1): making interface the new active one [ 260.628776][ T8239] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 260.650262][ T8252] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 260.672947][ T8252] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 260.795287][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 260.807594][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 260.826109][ T8] usb 1-1: USB disconnect, device number 9 [ 262.160937][ T8273] netlink: 24 bytes leftover after parsing attributes in process `syz.5.574'. [ 262.451042][ T8273] netlink: 20 bytes leftover after parsing attributes in process `syz.5.574'. [ 263.998419][ T8283] loop2: detected capacity change from 0 to 7 [ 264.167785][ T8292] evm: overlay not supported [ 264.257495][ T8283] Dev loop2: unable to read RDB block 7 [ 264.263501][ T8283] loop2: unable to read partition table [ 264.893784][ T8283] loop2: partition table beyond EOD, truncated [ 265.011026][ T8283] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 265.219856][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 266.913050][ T8324] random: crng reseeded on system resumption [ 267.686805][ T8322] tipc: Can't bind to reserved service type 2 [ 268.276345][ T8337] netlink: 'syz.0.588': attribute type 4 has an invalid length. [ 268.941609][ T8337] syz.0.588 (8337) used greatest stack depth: 18544 bytes left [ 269.314044][ T51] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 269.813914][ T51] usb 4-1: Using ep0 maxpacket: 16 [ 269.824895][ T51] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 269.835312][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.847208][ T51] usb 4-1: Product: syz [ 270.638817][ T51] usb 4-1: Manufacturer: syz [ 270.643565][ T51] usb 4-1: SerialNumber: syz [ 270.668297][ T51] usb 4-1: config 0 descriptor?? [ 270.690994][ T51] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 270.716826][ T51] usb 4-1: Detected FT232H [ 270.879581][ T51] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 270.974461][ T8356] input: syz1 as /devices/virtual/input/input10 [ 271.003933][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 271.093496][ T8356] netlink: 196 bytes leftover after parsing attributes in process `syz.2.594'. [ 271.174615][ T8356] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 271.389825][ T51] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5 [ 271.412702][ T51] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 272.247198][ T5866] usb 4-1: USB disconnect, device number 13 [ 272.283659][ T5866] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 272.334004][ T5866] ftdi_sio 4-1:0.0: device disconnected [ 272.463056][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 273.297516][ T8377] random: crng reseeded on system resumption [ 274.592111][ T8395] xt_l2tp: invalid flags combination: c [ 275.281250][ T8399] syz.5.604: attempt to access beyond end of device [ 275.281250][ T8399] nbd5: rw=0, sector=1, nr_sectors = 1 limit=0 [ 275.334595][ T8399] qnx4: unable to read the superblock [ 275.483971][ T119] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 275.649326][ T119] usb 5-1: config 0 has no interfaces? [ 275.667589][ T119] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 275.708998][ T119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.755221][ T119] usb 5-1: config 0 descriptor?? [ 275.770665][ T8404] __vm_enough_memory: pid: 8404, comm: syz.5.607, bytes: 21199849242624 not enough memory for the allocation [ 275.994842][ T8398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.029703][ T8398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.059166][ T8398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.263260][ T8398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.871299][ T8] usb 5-1: USB disconnect, device number 18 [ 278.764642][ T8430] random: crng reseeded on system resumption [ 280.203739][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 385.933775][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 385.940772][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8440/1:b..l [ 385.949250][ C0] rcu: (detected by 0, t=10502 jiffies, g=23777, q=172 ncpus=2) [ 385.956985][ C0] task:syz.3.615 state:R running task stack:23728 pid:8440 tgid:8439 ppid:5833 task_flags:0x400140 flags:0x00004002 [ 385.971525][ C0] Call Trace: [ 385.974821][ C0] [ 385.977771][ C0] __schedule+0x18bc/0x4c40 [ 385.982312][ C0] ? __pfx___schedule+0x10/0x10 [ 385.987194][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 385.993199][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 385.998498][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 386.003627][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 386.009369][ C0] irqentry_exit+0x5e/0x90 [ 386.013792][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 386.019273][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0xd/0x40 [ 386.025448][ C0] Code: f5 90 0f 0b 90 90 90 eb c6 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d 27 98 2c 04 00 <74> 1e 83 3d ca c9 2c 04 00 74 15 65 48 8b 0c 25 c0 d4 03 00 31 c0 [ 386.045077][ C0] RSP: 0018:ffffc9001c2a7698 EFLAGS: 00000202 [ 386.051511][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888032b88ae8 [ 386.059495][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0ab8e0 RDI: ffffffff8c5fac60 [ 386.067559][ C0] RBP: ffffc9001c2a7750 R08: ffffffff942c3847 R09: 1ffffffff2858708 [ 386.075542][ C0] R10: dffffc0000000000 R11: fffffbfff2858709 R12: 1ffff92003854ed8 [ 386.083519][ C0] R13: ffff888033bac808 R14: dffffc0000000000 R15: ffffc9001c2a77e0 [ 386.091522][ C0] ? ___pte_offset_map+0x9e/0x380 [ 386.096564][ C0] ___pte_offset_map+0xa7/0x380 [ 386.101430][ C0] ? __pfx____pte_offset_map+0x10/0x10 [ 386.106914][ C0] __pte_offset_map_lock+0xc7/0x300 [ 386.112124][ C0] ? follow_page_pte+0xe54/0x1460 [ 386.117158][ C0] ? __pfx_lock_release+0x10/0x10 [ 386.122197][ C0] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 386.128031][ C0] follow_page_pte+0x121/0x1460 [ 386.132902][ C0] ? __pfx___might_resched+0x10/0x10 [ 386.138218][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 386.143527][ C0] ? handle_mm_fault+0x595/0x7e0 [ 386.148495][ C0] __get_user_pages+0xb33/0x4140 [ 386.153497][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 386.158893][ C0] ? __pfx_mt_find+0x10/0x10 [ 386.163520][ C0] populate_vma_page_range+0x264/0x330 [ 386.168997][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 386.174990][ C0] ? userfaultfd_unmap_complete+0x30c/0x360 [ 386.180906][ C0] __mm_populate+0x27a/0x460 [ 386.185537][ C0] ? __pfx___mm_populate+0x10/0x10 [ 386.190673][ C0] vm_mmap_pgoff+0x303/0x430 [ 386.195284][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 386.200411][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 386.206752][ C0] ? do_syscall_64+0x100/0x230 [ 386.211525][ C0] ? ksys_mmap_pgoff+0xdf/0x720 [ 386.216390][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 386.221169][ C0] do_syscall_64+0xf3/0x230 [ 386.225684][ C0] ? clear_bhb_loop+0x35/0x90 [ 386.230375][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.236279][ C0] RIP: 0033:0x7f95ef98cda9 [ 386.240701][ C0] RSP: 002b:00007f95f071a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 386.249134][ C0] RAX: ffffffffffffffda RBX: 00007f95efba5fa0 RCX: 00007f95ef98cda9 [ 386.257116][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 386.265105][ C0] RBP: 00007f95efa0e2a0 R08: ffffffffffffffff R09: 0000000000000000 [ 386.273096][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 386.281079][ C0] R13: 0000000000000000 R14: 00007f95efba5fa0 R15: 00007fff70f39178 [ 386.289080][ C0] [ 386.292108][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g23777 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 386.304434][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=16526 [ 386.312323][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g23777 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 386.323696][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 386.333692][ C0] rcu: RCU grace-period kthread stack dump: [ 386.339589][ C0] task:rcu_preempt state:I stack:25624 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 386.351540][ C0] Call Trace: [ 386.354834][ C0] [ 386.357779][ C0] __schedule+0x18bc/0x4c40 [ 386.362302][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 386.368570][ C0] ? __pfx___schedule+0x10/0x10 [ 386.373435][ C0] ? __pfx_lock_release+0x10/0x10 [ 386.378478][ C0] ? __pfx___mod_timer+0x10/0x10 [ 386.383426][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 386.389770][ C0] ? schedule+0x90/0x320 [ 386.394020][ C0] schedule+0x14b/0x320 [ 386.398184][ C0] schedule_timeout+0x15a/0x290 [ 386.403043][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 386.408428][ C0] ? __pfx_process_timeout+0x10/0x10 [ 386.413731][ C0] ? prepare_to_swait_event+0x330/0x350 [ 386.419288][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 386.424496][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 386.429356][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 386.434568][ C0] ? rcu_gp_init+0x1256/0x1630 [ 386.439351][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 386.444302][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 386.449856][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 386.455768][ C0] ? finish_swait+0xd4/0x1e0 [ 386.460368][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 386.465580][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 386.470211][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 386.475427][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 386.481334][ C0] ? __kthread_parkme+0x169/0x1d0 [ 386.486372][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 386.491582][ C0] kthread+0x7a9/0x920 [ 386.495660][ C0] ? __pfx_kthread+0x10/0x10 [ 386.500268][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 386.505496][ C0] ? __pfx_kthread+0x10/0x10 [ 386.510110][ C0] ? __pfx_kthread+0x10/0x10 [ 386.514732][ C0] ? __pfx_kthread+0x10/0x10 [ 386.519400][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.524631][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 386.529847][ C0] ? __pfx_kthread+0x10/0x10 [ 386.534453][ C0] ret_from_fork+0x4b/0x80 [ 386.538881][ C0] ? __pfx_kthread+0x10/0x10 [ 386.543510][ C0] ret_from_fork_asm+0x1a/0x30 [ 386.548298][ C0] [ 386.551327][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 386.557666][ C0] Sending NMI from CPU 0 to CPUs 1: [ 386.562899][ C1] NMI backtrace for cpu 1 [ 386.562913][ C1] CPU: 1 UID: 0 PID: 8413 Comm: syz.5.609 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 386.562929][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 386.562938][ C1] RIP: 0010:lock_release+0x625/0xa30 [ 386.562958][ C1] Code: 01 0f 85 9a 00 00 00 4c 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 f8 79 88 00 48 c7 84 24 90 00 00 00 00 00 00 00 9c <8f> 84 24 90 00 00 00 42 80 3c 3b 00 74 08 4c 89 f7 e8 e5 78 88 00 [ 386.562970][ C1] RSP: 0018:ffffc90000a18b58 EFLAGS: 00000046 [ 386.562991][ C1] RAX: 0000000000000001 RBX: 1ffff9200014317e RCX: ffffc90000a18b03 [ 386.563001][ C1] RDX: 0000000000000000 RSI: ffffffff8c0ab8e0 RDI: ffffffff8c5fac60 [ 386.563011][ C1] RBP: ffffc90000a18c90 R08: ffffffff901a1777 R09: 1ffffffff20342ee [ 386.563021][ C1] R10: dffffc0000000000 R11: fffffbfff20342ef R12: 1ffff92000143178 [ 386.563031][ C1] R13: 0000000000000046 R14: ffffc90000a18bf0 R15: dffffc0000000000 [ 386.563041][ C1] FS: 00007f8478c056c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 386.563053][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.563062][ C1] CR2: 000000110c2de2d5 CR3: 0000000066a16000 CR4: 00000000003526f0 [ 386.563075][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 386.563084][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 386.563092][ C1] Call Trace: [ 386.563099][ C1] [ 386.563106][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 386.563135][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 386.563172][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 386.563201][ C1] ? nmi_handle+0x2a/0x5a0 [ 386.563241][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 386.563256][ C1] ? nmi_handle+0x14f/0x5a0 [ 386.563273][ C1] ? nmi_handle+0x2a/0x5a0 [ 386.563290][ C1] ? lock_release+0x625/0xa30 [ 386.563306][ C1] ? default_do_nmi+0x63/0x160 [ 386.563325][ C1] ? exc_nmi+0x123/0x1f0 [ 386.563343][ C1] ? end_repeat_nmi+0xf/0x53 [ 386.563366][ C1] ? lock_release+0x625/0xa30 [ 386.563382][ C1] ? lock_release+0x625/0xa30 [ 386.563399][ C1] ? lock_release+0x625/0xa30 [ 386.563414][ C1] [ 386.563418][ C1] [ 386.563426][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 386.563441][ C1] ? __hrtimer_run_queues+0x477/0xd30 [ 386.563460][ C1] ? __pfx_lock_release+0x10/0x10 [ 386.563477][ C1] ? debug_object_deactivate+0x2d5/0x390 [ 386.563492][ C1] ? advance_sched+0xa02/0xca0 [ 386.563507][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 386.563523][ C1] _raw_spin_unlock_irqrestore+0x79/0x140 [ 386.563538][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 386.563556][ C1] ? timerqueue_del+0xac/0x100 [ 386.563574][ C1] ? __pfx_advance_sched+0x10/0x10 [ 386.563587][ C1] __hrtimer_run_queues+0x477/0xd30 [ 386.563613][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 386.563631][ C1] ? sched_clock+0x4a/0x70 [ 386.563645][ C1] ? read_tsc+0x9/0x20 [ 386.563658][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 386.563677][ C1] hrtimer_interrupt+0x403/0xa40 [ 386.563705][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 386.563726][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 386.563741][ C1] [ 386.563746][ C1] [ 386.563752][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 386.563770][ C1] RIP: 0010:copy_msghdr_from_user+0xd3/0x680 [ 386.563787][ C1] Code: e8 32 c4 35 fb 48 89 c3 31 ff 48 89 c6 e8 45 81 14 f8 48 85 db 74 62 e8 5b 7c 14 f8 bb f2 ff ff ff 48 c7 44 24 40 0e 36 e0 45 <48> b8 00 00 00 00 00 fc ff df 48 8b 4c 24 38 c7 04 08 00 00 00 00 [ 386.563798][ C1] RSP: 0018:ffffc9001c177960 EFLAGS: 00000246 [ 386.563810][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 386.563818][ C1] RDX: ffffc9001c177d30 RSI: 0000000000000000 RDI: ffffc9001c177d28 [ 386.563828][ C1] RBP: ffffc9001c177a70 R08: ffffffff84df2f88 R09: ffffc9001c177d10 [ 386.563838][ C1] R10: ffffc9001c177d50 R11: fffff5200382efac R12: 1ffff9200382ef3b [ 386.563848][ C1] R13: 0000000000000000 R14: ffffc9001c1779d8 R15: 1ffff9200382ef00 [ 386.563861][ C1] ? __import_iovec+0x3a8/0x870 [ 386.563879][ C1] ? __pfx___might_resched+0x10/0x10 [ 386.563895][ C1] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 386.563913][ C1] ? do_recvmmsg+0x44e/0xab0 [ 386.563926][ C1] ? __might_fault+0xaa/0x120 [ 386.563947][ C1] do_recvmmsg+0x3bd/0xab0 [ 386.563966][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 386.563984][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 386.564009][ C1] ? futex_wait+0x285/0x360 [ 386.564026][ C1] ? __pfx_futex_wait+0x10/0x10 [ 386.564045][ C1] ? __pfx___schedule+0x10/0x10 [ 386.564061][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 386.564083][ C1] ? __pfx_do_futex+0x10/0x10 [ 386.564104][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 386.564119][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 386.564133][ C1] ? do_syscall_64+0x100/0x230 [ 386.564150][ C1] ? do_syscall_64+0xb6/0x230 [ 386.564167][ C1] do_syscall_64+0xf3/0x230 [ 386.564183][ C1] ? clear_bhb_loop+0x35/0x90 [ 386.564201][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.564218][ C1] RIP: 0033:0x7f8477d8cda9 [ 386.564232][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.564243][ C1] RSP: 002b:00007f8478c05038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 386.564257][ C1] RAX: ffffffffffffffda RBX: 00007f8477fa6080 RCX: 00007f8477d8cda9 [ 386.564267][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 386.564275][ C1] RBP: 00007f8477e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 386.564284][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 386.564292][ C1] R13: 0000000000000000 R14: 00007f8477fa6080 R15: 00007ffc61e0e7e8 [ 386.564309][ C1]