last executing test programs: 7m4.371359603s ago: executing program 0 (id=884): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000300)="c30a6a", 0x3}, {0x0, 0x38}], 0x2) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x59) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x7000000) 7m3.660950722s ago: executing program 0 (id=889): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (rerun: 64) ioprio_get$uid(0x0, 0xffffffffffffffff) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (rerun: 32) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (async) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 7m1.940813776s ago: executing program 0 (id=899): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) connect$bt_rfcomm(r2, &(0x7f00000002c0)={0x1f, @none, 0x6}, 0xa) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f00000004c0)="18", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0000f80d00000000000800010049fc3a2ff0d50ac036e64de4f533e347641395da4e67ee1f2626eb444e3f56324f01040000c1f71d9cb3eea3cf5c90c2ff07000096b9d1e55beb2c50bf1505000000787fa5625de0f22155a900ddc748b72898950f17090f192f6b7fc9d51f7227bc", @ANYRES32=0x0, @ANYBLOB="0c00030000000000000000000800020000000000"], 0x30}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x10}}, 0x14004800) 7m0.287347804s ago: executing program 0 (id=901): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x2e, 0x0, &(0x7f0000000040)="61df712bc849f7aaa85f84fe8acf7c47f9c4f053a7a9a2fabcdaa8c2d80e72a628d2a3fdf15160d10d4c44ec94e4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000015c0), 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$sg(0x0, 0x7ff, 0x224c00) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {0x300}, {}, {}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xb}) 6m59.828957297s ago: executing program 0 (id=903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xc4}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) syz_io_uring_setup(0x24f6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x3, 0x2, 0x1, 0x112, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f393563030890e0879b0af8c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$VT_RELDISP(r2, 0x5605) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000085000000400000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000280)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x009', @ANYRES32=0x0, @ANYRES32], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000280)) 6m58.734543206s ago: executing program 0 (id=909): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x0, 0x1d8, 0x1d8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'ip6gre0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x88000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@private, @rand_addr=0x64010102, 0x0, 0x0, 'bridge_slave_0\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@connbytes={{0x38}, {[{0x7fffffff}, {0x8}], 0x571dc3c1a8f3e291, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x81, 0xe, [0x19, 0x2a, 0x28, 0x10, 0x32, 0xd, 0x17, 0xf, 0x25, 0x2c, 0x9, 0x37, 0x32, 0x36, 0x22, 0x4], 0x0, 0xa, 0x6}}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) futimesat(r1, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000200)={@qipcrtr={0x2a, 0x2, 0x2}, {&(0x7f0000000100)=""/251, 0xfb}, &(0x7f0000000040), 0x24}, 0xa0) 6m43.605759782s ago: executing program 32 (id=909): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x0, 0x1d8, 0x1d8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'ip6gre0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x88000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@private, @rand_addr=0x64010102, 0x0, 0x0, 'bridge_slave_0\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@connbytes={{0x38}, {[{0x7fffffff}, {0x8}], 0x571dc3c1a8f3e291, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x81, 0xe, [0x19, 0x2a, 0x28, 0x10, 0x32, 0xd, 0x17, 0xf, 0x25, 0x2c, 0x9, 0x37, 0x32, 0x36, 0x22, 0x4], 0x0, 0xa, 0x6}}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) futimesat(r1, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000200)={@qipcrtr={0x2a, 0x2, 0x2}, {&(0x7f0000000100)=""/251, 0xfb}, &(0x7f0000000040), 0x24}, 0xa0) 2m39.885572203s ago: executing program 5 (id=2253): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = add_key(&(0x7f0000000480)='rxrpc\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000340)='logon\x00', &(0x7f0000000380)='+(,/[W%\x9c\\}[{\x00') ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x30, r11, 0x5, 0x20, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x80000000}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xec}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r11, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x24000884) socket$nl_rdma(0x10, 0x3, 0x14) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xf, 0xb}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffff, 0x0, 0x22, 0xbe, 0x7fffffff, 0x4de8be1c, 0x3, 0x1ff, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) keyctl$search(0xa, r1, &(0x7f0000000080)='keyring\x00', &(0x7f00000003c0)={'syz', 0x1}, r1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='omfs\x00', 0x0, &(0x7f0000000340)) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010000003c000180060001000a0000000c00070000000000000000000800090000000008000800000000000800050001000000"], 0x50}}, 0x0) read$snddsp(0xffffffffffffffff, &(0x7f00000001c0)=""/243, 0xf3) 2m38.581003249s ago: executing program 5 (id=2261): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) fcntl$addseals(0xffffffffffffffff, 0x409, 0xb) io_setup(0xb4, &(0x7f0000002340)=0x0) io_submit(r2, 0x1, &(0x7f0000000d40)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000540)='p', 0x1}]) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000000)={0x3, @null}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x1df, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x71bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040804}, 0x4000000) 2m37.953587464s ago: executing program 5 (id=2271): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc400) syz_clone(0x50300000, &(0x7f0000000180)="22eb59220da3c5963f9059783bf2a8a4f5114fb671b5314b0b3b40ceb212435ae96db77216586bd8e681654655b911384b3ce4273b12cca96472a15a8ca49a0c9d65dd8c7b372aaad4791c43dd5f7a5a3572bff5ec1275bff4b05f5ef46ad5562b8448f2c9acead248f7ecdc8e5e61a2db4b5aac3d8e4da336a97522ba", 0x7d, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000500)="14528f9f923c078cb284c9ed3bd3fa0ccf38716bc7ca6bdfd64de395da0c04a040e4e295b8332d8ad8eb65d4ed761a30d590c21984ef485a7b9b91bf98b3fdeb728a52da43d294514494949b3319106770f5498c0e63e5735bf8b13a87c815c64f94f0088fc00cc1a0cde988e6b2f44c2c36c07e477767bcf2d680459dce5279da60354406bc2ab202f3f3b387fd7f660fc9cdbd11bf24e120c7b05ffba1ef62f758328fcba7a3337c84ae4a57453b7a439650ea07503fb3e0386659d2e195c0b3ffbc26ecf01faf9796b0f12bf2fbd52eda18d4f861b4359dd3350ff82cdb532044b8dc335f6f3077a7496c90ddb3532d6f") (async) r1 = syz_clone(0x50300000, &(0x7f0000000180)="22eb59220da3c5963f9059783bf2a8a4f5114fb671b5314b0b3b40ceb212435ae96db77216586bd8e681654655b911384b3ce4273b12cca96472a15a8ca49a0c9d65dd8c7b372aaad4791c43dd5f7a5a3572bff5ec1275bff4b05f5ef46ad5562b8448f2c9acead248f7ecdc8e5e61a2db4b5aac3d8e4da336a97522ba", 0x7d, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000500)="14528f9f923c078cb284c9ed3bd3fa0ccf38716bc7ca6bdfd64de395da0c04a040e4e295b8332d8ad8eb65d4ed761a30d590c21984ef485a7b9b91bf98b3fdeb728a52da43d294514494949b3319106770f5498c0e63e5735bf8b13a87c815c64f94f0088fc00cc1a0cde988e6b2f44c2c36c07e477767bcf2d680459dce5279da60354406bc2ab202f3f3b387fd7f660fc9cdbd11bf24e120c7b05ffba1ef62f758328fcba7a3337c84ae4a57453b7a439650ea07503fb3e0386659d2e195c0b3ffbc26ecf01faf9796b0f12bf2fbd52eda18d4f861b4359dd3350ff82cdb532044b8dc335f6f3077a7496c90ddb3532d6f") write$P9_RGETLOCK(r0, &(0x7f00000002c0)={0x1e, 0x37, 0x2, {0x0, 0x3, 0x2400000000000000, r1}}, 0x1e) (async) write$P9_RGETLOCK(r0, &(0x7f00000002c0)={0x1e, 0x37, 0x2, {0x0, 0x3, 0x2400000000000000, r1}}, 0x1e) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x64010101, @multicast1}}}}}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = gettid() r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000017000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001c0006000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x40011}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r8 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) (async) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) ptrace(0x10, r8) (async) ptrace(0x10, r8) r9 = syz_open_procfs(r8, &(0x7f0000000040)='status\x00') preadv(r9, &(0x7f0000000680)=[{&(0x7f0000000400)=""/121, 0x79}], 0x1, 0xffffffff, 0x1) (async) preadv(r9, &(0x7f0000000680)=[{&(0x7f0000000400)=""/121, 0x79}], 0x1, 0xffffffff, 0x1) readv(r4, &(0x7f0000000100)=[{0x0}], 0x1) tkill(r6, 0xb) 2m37.62096227s ago: executing program 5 (id=2277): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) fanotify_init(0x200, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000025c0)={0x9, 0x7, 0xd513, 0x17ac, 0x1}) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x20, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x4}, {[@cipso={0x86, 0x77, 0x0, [{0x0, 0x12, "e256b28c5988169cc0b5d62af081fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, '\x00\x00\x00\x00\x00\x00\x00\x00'}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) 2m36.207056561s ago: executing program 5 (id=2281): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x12000021) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_rm_watch(r0, r1) sched_setscheduler(0x0, 0xb46bdb8283d88b52, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x6044040}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'lo\x00'}) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8024) r7 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, 0x0, 0x8, 0x30bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x40000004, 0x0, 0x4, 0x3}}}}, 0xffc3}, 0x1, 0x0, 0x0, 0x48004}, 0x4000000) 2m36.004935011s ago: executing program 5 (id=2283): accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60f91e2e00103c00fe88000000000000000000000000fc01ff020000000000000000000000000001000000000401907800716a0100cc197882a3b5799d62be1775d0cae762adfba31d545837a83c"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0xffffffffffffff18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000200), 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sync() sync() sync() sync() sync() sync() sync() socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c040, 0x6a) 2m20.91479261s ago: executing program 33 (id=2283): accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60f91e2e00103c00fe88000000000000000000000000fc01ff020000000000000000000000000001000000000401907800716a0100cc197882a3b5799d62be1775d0cae762adfba31d545837a83c"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0xffffffffffffff18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000200), 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sync() sync() sync() sync() sync() sync() sync() socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c040, 0x6a) 2m4.66381222s ago: executing program 2 (id=2421): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/227) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x10080, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000180)=0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r2, 0x0, 0x8, 0x8c, &(0x7f0000000200)="a040a85de12c5a1981d0d655b2f35cd4f8e6f0871dfd4a73d1470915941f18cba1ccec82fe342fbc1cfe6ec3c5b8993aa34acb13be6c4af60277ddb7488ada5a4f3bd64fd7c30ed10d17f8be163f1c2f751bceb108b21cfdcb3a00c72c89aa4730e44ef800689461857e363d3d8a9034a843c11735e0d2c2cc07dbc30e5b96a78731c12d06790be6700ec20d", 0x1}) ioctl$FBIOBLANK(r2, 0x4611, 0x2) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000380)={0x18, 0x1, 0x1, 0x0, r4, 0x3}) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000003c0)) ioctl$FIOCLEX(r3, 0x5451) socket$tipc(0x1e, 0x2, 0x0) syz_usb_connect(0x2, 0x336, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x2, 0x25, 0x3a, 0x20, 0x4dd, 0x8002, 0xa22f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x324, 0x1, 0x2, 0x68, 0x90, 0x3, [{{0x9, 0x4, 0x11, 0x4, 0xb, 0xff, 0x2, 0xd0, 0xe, [], [{{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x6, 0x8d, 0x7}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x7, 0x7, 0x8a, [@generic={0x98, 0x11, "e3662804fb163d8750d88d9f3f8bff16a900068a95ecd6ac11f6d2979e7a0c2aea1896b97c92e38e02f56aba1c43d1a63bfd5d4267dcc5456cc3a46ae8beac5f1776e1f68b94274f056b3b36ab1187fc37bb3d13bb37a6b760dcb592d23e4c1d0ec24bb74e4abb8a84713acb0bcbaa7dd11967be920631b903af532cff390f1c9dd848eb6216cd138e8c6b91078406aa725fcb14682b"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0x2, 0x30, 0x2, [@generic={0x11, 0xf, "4c8243e8d300b89b464842794c6bdc"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7ff}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0xff, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xdb, 0x9}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x5}, @generic={0x3, 0x1, "14"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x0, 0x3, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0xa}]}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0xf, 0x5, 0x1, [@generic={0xbc, 0x24, "f2540d4f04f2ffc62456ebe7454a78cdb4e16b84d770716d78f670c818ab3bd4e93bb1a5ede63c62ea0f058759516de0c7d40eac700acd53b3573f8ee8538eb70b59d027ba7eff38f52fb21196cfac2a94b4171ea023ee0c11102262cc8d42e63e5ffbb048216ae39538679c627dee211f800753580ae527417041acbceb5e847827729320e029c8135a98c65cdc8c05c22d1a626dc4a329df89b18023f6366b9c7784823d7167bc17f661690afea57d803d22c66dac01343b6d"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x6, 0xc, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x40}]}}, {{0x9, 0x5, 0x3, 0x3, 0x200, 0xe, 0x9, 0xc4}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x6, 0x4, [@generic={0x1c, 0x27, "1727b2472d958cd7a1c11000e7f98d125bc436cc8cc373dc6630"}, @generic={0xfa, 0x30, "fbda247062e415559749b0ad5cfb1482cc1f440b6301b9a0ce4f1e2176eddecaa03c1201448cc2e3721e289fda4ecdfb4229dcf3052ed7d0e304557533963827c7b15230b571928b5c8a3a4db6d9b1d187b899ed5fc02a251606e698358747b5f33cd2564de8c83177671f063988c27955bbd21e0e71161f27c14d2508775618cabf676671db98a1c1531d5d93efd6bb9c79c73a013728e6d1c241bbc040d9b830fc8db0e6f653384787f08a7ee51d88f194596ca7b07b7a0597607eda358dfa6b9139ef94d3adbcbe415cad8702df8c2671d9eb9468b5af533732ffff0f9ef2ad1f8c25f4364c999666cac66fd28c1506100cb27e5c1423"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0xb, 0xb0, 0x31, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x61c8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x5}]}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x250, 0x4, 0x4, 0x7, 0xff, 0x1}, 0x69, &(0x7f00000007c0)={0x5, 0xf, 0x69, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x1, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x9, 0x401}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "53ffb3227d57cf1a99068b556376915b"}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x10000, 0xf000, 0x2, [0x7f400f, 0xff0000, 0xf, 0x0, 0xff3f30]}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x0, 0xf, 0x3, [0xf, 0x3f60, 0xc00f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x1, 0x3, 0x2}]}, 0x6, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x860}}, {0x85, &(0x7f0000000940)=@string={0x85, 0x3, "c5f5e1e2bdbd2f91e3dc07517967606a9a77b95c0c5b96f57deb5363cd41e73014c488f8536203c2d0b58502fa50f67076bbb38e5518050afc7d9b92eaa652ec343a6a324b0cecf053731e94eef87a142e254d2c76455471347ac77591bd8a5fd12620db9333fa3c41274ef0bc183bfad491bd4fec0d4c58399d67000ba51a6fcadda3"}}, {0x1f, &(0x7f0000000a00)=@string={0x1f, 0x3, "7992d713e29f289a9b1e2e6bb2cde287319a4b3cd976ede243a7088e3b"}}]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000b40)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0xc5, 0x7a}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x80, 0xf3}}]}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x201, 0x9, 0x9, 0x7f, 0x40, 0x4}, 0x19, &(0x7f0000000bc0)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x8, 0xf6a7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x2, 0x2, 0xfff9}]}, 0x3, [{0x100, &(0x7f0000000c00)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x409}}]}) write$bt_hci(r2, &(0x7f0000000dc0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0xff}}}, 0x7) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000e00)=0x2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000e40), &(0x7f0000000e80)=0x8) connect$unix(r2, &(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_usb_connect(0x0, 0x122, &(0x7f0000000f40)={{0x12, 0x1, 0x310, 0x21, 0xda, 0x47, 0x20, 0x10c4, 0x815f, 0xca0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x110, 0x1, 0x8, 0xcf, 0x40, 0x10, [{{0x9, 0x4, 0x37, 0x8, 0x1, 0xb2, 0x86, 0x11, 0x9, [], [{{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x0, 0x9, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0xff}, @generic={0xee, 0x2, "a1e2f9fc136c974ada558cc5c1fb1b959982da4842e47421c52f0a47ab2134cc296d32ddb686d0b0815f37e0f7fd897f23a4f5d4ee4ee7048aeb0da3193b2760e8c95b2937fd5ed2243fb0188d0551daf3622fbc5365eec90404e3a5bb23b2759d6e28005b7c587ed77b7ff0d44e33db600afba4c62869fe65a2b2ad8d3c46726cbce1915ca743e25b703fec8ebcff1d4639b13e12e8c110bebf761ca76e4f5c95425a94d75f53cd936d1d43d676847b142c83d60448435b1ebed1f09f636beb6222ad4d695e6ff2d5185dafdc6ba9acc0eaddbf41df00e8f81f7220d5eba39851080d0b68da9fc7be49808d"}]}}]}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x201, 0x30, 0x5, 0x6, 0x48, 0x2}, 0x3d, &(0x7f00000010c0)={0x5, 0xf, 0x3d, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0xa00, 0xf, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0xb, 0x8}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfb, "a9bf3dd7cfdf9df750a619fa4bf36059"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x83, 0x83, 0x4, 0x1, 0x2}]}, 0x7, [{0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x500a}}, {0x8e, &(0x7f0000001140)=@string={0x8e, 0x3, "77e8bea7c3c3e92d6b3b325f465fa8349022226daa2470e552b8d36c0fe9e39a91a679ae277e7befdd5d19f5ac9bb4b4425271412ee2f35fb9f8f4570b118df94c56474bd62a3469c103c4e2874ff87f536f928d35367313694897c4ff9a6345b42f10d018356afb8f5f940ee5f2a595a97ff37ba9b62a26467772b60ebcf19e07abdb3fe32c77b09967147f"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x421}}, {0xda, &(0x7f0000001240)=@string={0xda, 0x3, "abe1043f52eaf67a505ead93901aedc4bd392250bf85e94599ffac726edda11688ba87ae396e8c5c354f9a14c753b830d0873e59c0b21722826c726c4904939e828e0585bcadaeb496f200b272761c15cdc92c21f8856bba5e3252178d68b7793aaef621894e15eea68c8689f58ad5e749005422de0302ce8e5440ecc28b687f0de0e0d8a18747ba248c0ef99ded9af8be192d18dd68b4af0c03900b1b61d50cb83550c9d5d63ef75cf724aee2801a71b05fd63f2e094a2376ba5c1406c1f3d2a3b81d99073d1b2758d3200200ab790dea98e55cc348d59f"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x455}}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001480)={r1, 0x80, 0xfff, 0x8}) rmdir(&(0x7f00000014c0)='./file0\x00') syz_usb_connect$cdc_ecm(0x4, 0x6f, &(0x7f0000001500)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x6, 0x90, 0x88, [{{0x9, 0x4, 0x0, 0x17, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x9, 0x24, 0x6, 0x0, 0x0, "a6bfeac5"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x4, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x28, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x7, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x8, 0x4}}}}}]}}]}}, &(0x7f0000001840)={0xa, &(0x7f0000001580)={0xa, 0x6, 0x299, 0x10, 0x78, 0x6, 0xff, 0x2}, 0x12c, &(0x7f00000015c0)={0x5, 0xf, 0x12c, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x7, 0xf, 0x7, [0xc0c0]}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x4, 0xf000, 0x6}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x1, 0xf000, 0xfff7, [0xff3fc0, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x9, 0x1, 0x2}, @generic={0xe6, 0x10, 0x2, "f6c5a1349430c8ce62fede09e0246691a1b740cb546d50bceeeb0958542d5b0b0812c451d18ba4d2dc66431b64d7324fb13354d6f69a0b99148092ca7c26f8314aa28940230ec93f02b9ae8877c105db4b3b8e4149b8011eb78c0428210adcc674937b471dda788dbb49ba215c3873c05e1e1f4b59d62d02f55645ad4acddfc303595e9d5f7d1822cef3548d929781a53bedfc6ef88926e1ff1f525b95de5755fb2cb3b90141045a50e0358bff72ef5b6c250b2c9426c667eb9c25c06eca36537b156fbe544c306dfa2505ba5339552cc7e7ee4ade3df7950e0f3311c528353eee83ed"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x8, 0x9}]}, 0x3, [{0xaf, &(0x7f0000001700)=@string={0xaf, 0x3, "924460de654e3db978ceed8c4890b6f173a65d1a3ca52994fc840eeee0cdef801979760c5cf434e68b3f33ba67d2e55f38ecdc031499dc11518c5376db77bff2e062a775f252a064edd9e11105c753a998bb08f67fc607e881b317076bf377508296f6731784f17a0301212f7a612c9c912c607c14aa4f3921c395e64b6bf3322059d219ac7d9b7fa8fcc82345aae4c519f58e8cc16e9523664a5cf3cd539c863d2cf6faa913b7a78f3668115e"}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x7, &(0x7f0000001800)=@string={0x7, 0x3, "1861e470ac"}}]}) getpid() fcntl$setlease(r6, 0x400, 0x2) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000001880)={0x28, 0x3, r4, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe4}) process_mrelease(r3, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000018c0), 0x68acc0, 0x0) 2m1.312665101s ago: executing program 2 (id=2437): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r2 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'tunl0\x00', &(0x7f0000000840)={'gretap0\x00', 0x0, 0xf890, 0x0, 0x6, 0x4, {{0x5, 0x4, 0x2, 0x5, 0x14, 0x66, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @rand_addr=0x64010101}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0x0, 0xee01, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x100) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000ff0700000000000012800b000100626174616476000004000280"], 0x34}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04f69294cf900e"], 0x7) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x8, 0x1, 0xfffffffa, @vifc_lcl_addr=@broadcast, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x54}}, 0x44091) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900010000000000000000d4915f46ffff11000900000000"], 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRES16], 0xfc}}, 0x40000) ioctl$TCFLSH(0xffffffffffffffff, 0x40045436, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2eec0a0009000070e2db620ba0", 0xd}], 0x1}, 0x20000000) getresuid(&(0x7f0000005140)=0x0, &(0x7f0000005180), &(0x7f00000051c0)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000e40)="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", 0x2000, &(0x7f0000005400)={&(0x7f0000000300)={0x50, 0x0, 0x81, {0x7, 0x29, 0x0, 0x8008010, 0xc02, 0xfff8, 0x6, 0x5, 0x0, 0x0, 0x8, 0x8}}, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x100000001}}, &(0x7f0000000380)={0x18, 0x0, 0xfffffffffffffff1, {0x8}}, &(0x7f00000003c0)={0x6e, 0x0, 0xfdfffffffffffff7, {0x9}}, &(0x7f0000000400)={0x18, 0xfffffffffffffff4, 0xffe, {0x7f}}, &(0x7f0000000440)={0x28, 0x0, 0x7, {{0xfffffffffffffffd, 0x8000000000000000, 0x2}}}, &(0x7f0000000480)={0x60, 0xfffffffffffffffe, 0x8, {{0x200, 0x7, 0x9, 0x80000001, 0x2, 0x2, 0x9a93, 0x400}}}, &(0x7f0000000500)={0x18, 0x0, 0x2008, {0x7f6}}, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000000000010080000000000ff009d77242d007b7b95"], &(0x7f00000005c0)={0x20, 0xfffffffffffffffe, 0x9, {0x0, 0x6}}, &(0x7f00000007c0)={0x78, 0x0, 0x9, {0x7, 0x4, 0x0, {0x0, 0xfffffffffffffff7, 0x7, 0x9, 0xeb3e, 0x4, 0x200000, 0x3, 0x0, 0x8000, 0xfffffffc, r7, 0x0, 0xf, 0xffffffff}}}, &(0x7f00000009c0)={0x90, 0x0, 0x1, {0x4, 0x3, 0xb22e, 0x48000000000000, 0xaca2, 0xff, {0x1, 0xfffffffffffffeff, 0x8000000000000000, 0x0, 0x80000001, 0xfffffffeffffffff, 0x9, 0x7fffffff, 0x1000, 0x8000, 0x5, 0x0, 0x0, 0x1, 0xffffff32}}}, &(0x7f0000000a80)=ANY=[@ANYBLOB="70000000000000000e0000000000000003000000000000000200000000000000080000000101000067726574617030000200000000000000f10000000000000002000000060000007b2c000000000000040000000000000001000080000000000200002008000000235c000000000000"], &(0x7f0000002e40)=ANY=[@ANYBLOB="900200d41a0000800000000000000400000000000000030000000000000004000000000000000c000000000000007f000000d908000005000000000000000100000000a01e00090000000000000004000000000000000600000000000000001000000000000009000000d6010000ffff000000c00000001000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000300000000000000000000000000000001000000000000000800000000800000677265746170300006000000000000000200000000000000ff000000000000000000000000000000f2ffffff04000000060000000000000000000000000000003309000000000000ff00000000000000ff010000000000000500000000000000010000009a0a000000fcffff00200000a6020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="060000007e000000000000000500000000000000020000000000000005000000010000002a272c3a7d000000050000000000000001000000000000000a000000000000001804000000000000ff030000070000000400000000000000ff07000000000000090000000000000001000000010000009478000000000000170c00000000000008000000020000000100000099faaaef05000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020800002a6b00000000000001000000000000000b0000000000000005000000050000006873723000000000"], &(0x7f0000000d00)={0xa0, 0x0, 0x1, {{0x6, 0x0, 0x2, 0x4, 0x10000, 0x0, {0x3, 0x3, 0x2, 0xf3e, 0x8000, 0xff, 0x3ff, 0x4, 0xb9, 0xc000, 0x4, 0x0, 0x0, 0xfffffff7, 0xfffffffd}}, {0x0, 0x766cf6666c4f88a1}}}, &(0x7f0000000dc0)={0x20, 0xffffffffffffffd8, 0x9, {0xa, 0x4, 0x3, 0x5}}, &(0x7f00000052c0)={0x130, 0xfffffffffffffffe, 0xcb34, {0x0, 0x8000, 0x0, '\x00', {0x0, 0x5, 0x200, 0x0, r7, 0x0, 0x6000, '\x00', 0x4, 0x0, 0x5, 0x3, {0xa, 0xa024}, {0x9, 0x7}, {0x4, 0x2}, {0x3425, 0x2b3}, 0x2, 0x246, 0x5, 0x954f}}}}) 2m0.273972364s ago: executing program 2 (id=2441): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$llc(0x1a, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) alarm(0x8000000000000001) alarm(0xb) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = syz_open_dev$sg(0x0, 0x0, 0x8002) fcntl$dupfd(r5, 0x0, r5) 1m57.120596889s ago: executing program 2 (id=2452): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000300)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (fail_nth: 4) 1m56.764895078s ago: executing program 2 (id=2453): syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x34, 0x10000ec}}], 0x18}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x8, 0x2, 0x4}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x840, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000018c0)=ANY=[@ANYBLOB="2c0000002e0001002dbd70000000000008000000", @ANYRES32=r5, @ANYBLOB="1400008010007d800c009f000300000000000000"], 0x2c}], 0x1}, 0x4) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0x7ff, 0x100) ioctl$VIDIOC_G_CTRL(r6, 0xc008561b, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r7, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0x22, 0x8000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r8, 0x11, 0x1, 0x0, &(0x7f0000000000)) 1m56.319724986s ago: executing program 2 (id=2455): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000400000000", @ANYRES32, @ANYBLOB="000000000000000066080000000001011800000000000000000000000000000095000000000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @scatter={0x1, 0x0, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/81, 0x51}]}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x9, 0x0, 0x0}) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x1f5821, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x207, 0x161a81) r2 = memfd_create(&(0x7f0000000500)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdc\xc0*rw[\r\x98\xf6\xd3\xbf\xa1\xcf\x8e\xc2\x8c\f\xee}g\xfe\xae\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\x01\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x1f\x88Z0\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdf\x00\x10\x00\x00\x00\x00\x00\x00\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r3, @ANYBLOB="140006"], 0x48}}, 0x4000) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000300)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8, 0x1, 0x100, 0x8000, 0xca0025, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0xe4, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sync() mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, &(0x7f0000000180)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x541b) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x440402, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 1m41.045395295s ago: executing program 34 (id=2455): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000400000000", @ANYRES32, @ANYBLOB="000000000000000066080000000001011800000000000000000000000000000095000000000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @scatter={0x1, 0x0, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/81, 0x51}]}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x9, 0x0, 0x0}) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x1f5821, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x207, 0x161a81) r2 = memfd_create(&(0x7f0000000500)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdc\xc0*rw[\r\x98\xf6\xd3\xbf\xa1\xcf\x8e\xc2\x8c\f\xee}g\xfe\xae\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\x01\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x1f\x88Z0\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdf\x00\x10\x00\x00\x00\x00\x00\x00\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r3, @ANYBLOB="140006"], 0x48}}, 0x4000) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000300)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8, 0x1, 0x100, 0x8000, 0xca0025, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0xe4, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sync() mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, &(0x7f0000000180)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x541b) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x440402, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 12.040620478s ago: executing program 7 (id=2889): socket$kcm(0x10, 0x3, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x220, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r4, 0x400, 0x0) read$eventfd(r4, &(0x7f0000001500), 0x8) syz_usb_ep_write(r3, 0x81, 0x3, &(0x7f0000000180)="fbc8f5") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) 8.767630657s ago: executing program 7 (id=2904): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e00000000000000590000000000000000020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x8, 0x0, 0x0, 0x2044}, 0x60) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)='\f', 0x1}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002780)='\f', 0x1}], 0x1}, 0x4040040) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000000)) listen(0xffffffffffffffff, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x2042, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) truncate(&(0x7f0000000100)='./file0\x00', 0xdf) ioctl$SNDCTL_DSP_SETFMT(r5, 0x40045010, &(0x7f0000000300)=0x100a) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000300), 0x0, 0xc) 8.112355073s ago: executing program 4 (id=2905): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x23b) read$FUSE(r1, &(0x7f0000000a80)={0x2020}, 0x2020) r3 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$team(&(0x7f0000000100), r3) 7.748941864s ago: executing program 1 (id=2908): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/227) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x10080, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000180)=0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r2, 0x0, 0x8, 0x8c, &(0x7f0000000200)="a040a85de12c5a1981d0d655b2f35cd4f8e6f0871dfd4a73d1470915941f18cba1ccec82fe342fbc1cfe6ec3c5b8993aa34acb13be6c4af60277ddb7488ada5a4f3bd64fd7c30ed10d17f8be163f1c2f751bceb108b21cfdcb3a00c72c89aa4730e44ef800689461857e363d3d8a9034a843c11735e0d2c2cc07dbc30e5b96a78731c12d06790be6700ec20d", 0x1}) ioctl$FBIOBLANK(r2, 0x4611, 0x2) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000380)={0x18, 0x1, 0x1, 0x0, r4, 0x3}) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000003c0)) ioctl$FIOCLEX(r3, 0x5451) socket$tipc(0x1e, 0x2, 0x0) 7.748396104s ago: executing program 7 (id=2909): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0500"], 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001b80)=[{{&(0x7f00000000c0)={0xa, 0x4e26, 0x1, @remote, 0x7}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000300)="4c63085f8850843254a558a3b1e96c221eaae6e6a50c989a21c49d38b2c921c7a904614d30b2f50128947c4a644c24f1fb95b3766579ab730017111904a0b09f7044427b362351887684be53946502dec74bf6d9295ba9a4cc59aec2382719f4416ed2d62c22dd041102bcf6394a40863bbeb4952066fa3862b8b37505ca3d4c749b6ef3bb9466574404f700109d58205982de159af6f9f9c40ac7e2", 0x9c}, {&(0x7f0000000180)="681f15", 0x3}, {&(0x7f0000000240)="a6ec42f93c6a3b6ed5d4815bfffb32a199f7b6b3da733976901eb7c5f4ccc8e4ac189725200c65d05d4eada3481d22ead22151b665f8cfc588c35fd1260815fc79c940c3438b79ae7a879f20b1bdd9f4b01e01ded5c13dac7873c3c65a616da243e28d3ad7a18fad8e5c0259f7100dfcbafc13cfd463d8dfd8db747011f1", 0x7e}, {&(0x7f00000003c0)="816dfc0fe506825ea7fe0bd0ebdc05ccdc3d0c1b48609e1a7e4d98a204a7f2ef6ca3bf577470a4e62eb9b45671b6f275f48334cb6f2e5802ac0b39469596c806fbc3b4128157c60abcbde833efdf95896abfce255583fa7609a63a05feec05977487f49e4e0b02d6cdf665d8f583d0e281f62a5914b7ad2ccdd32514e9f10e2d25b3acf5ff9288dc1cbe4b0fffe8af672bc2b05dbaf85a5252ab", 0x9a}, {&(0x7f0000000480)="c9d59b06e3fa2779d4e227653df437a6906ad1f571944911e8df2fd57f1a8f8d6c91f2bfe4372ad08e1b81bd7b8348c33ea5775a819af9d72d5500e4b0e6b31944e445dc8d836936e8afedd1c50b65234ac8e2ae6924282d2f0a42690631fca8e07a1878377d473b2155d8a041a407bfd256c72e3e3a4662489e8625e7ba36c50a02327c84fa8b95f346ba84513bbfc2a80a4c207fba9d0be3d47a837a1dbdb5fa0676a848298d6f20", 0xa9}], 0x5, &(0x7f00000005c0)=[@dstopts_2292={{0x118, 0x29, 0x4, {0x2c, 0x1f, '\x00', [@generic={0x6, 0x21, "e8d265c14a8120918b8a93544a70b9d01e68043bed7b6366b00b749f05b752acb2"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1a}}, @generic={0xe2, 0xa9, "1caf0b941f1bee124db8d1f20d5ab738b9a1d05e2d1ee62c0b8d6c3cc46d54f3429ad98d694e4cca30cfd3699bae9c7e9e2073dad9622b6225d12939758c492186384f2e01f8a428638beb83efff0c74db1eeadc9133bf42e592ba53be053446022a813fb0e2e6badddbfb9068f7a2ac79cda497bad82e07f6e179d48a308dfd8c58f00d4f4f1f93b39b692e9d751600aa19377167ad1cbc4c1f08f282c5bf10c325254599770fb9bb"}, @jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x10}]}}}, @hopopts={{0x38, 0x29, 0x36, {0x5e, 0x3, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @private0}]}}}, @rthdrdstopts={{0x1080, 0x29, 0x37, {0x2b, 0x20c, '\x00', [@generic={0x2, 0x1000, "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"}, @generic={0x0, 0x60, "9a95b1241e7d65aba2e2ff06a270396eb02edd810b4099077741da14c23b5cc9fd5b258bdac0a6902a61f5c058527cbe2758672e54742758fa347e9f31866e7796966e841e517b7c9473a83eb4835bfed0d7f98cb39cbb2c544c44939389a2a7"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x34}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x11, 0x14, 0x0, 0x0, 0x0, [@remote, @mcast1, @ipv4={'\x00', '\xff\xff', @remote}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @dstopts={{0x150, 0x29, 0x37, {0x0, 0x27, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0xb4, "6976cc899a456a85eff4a92ccde0d154c30572fbacf89d89d4b20f1d092d8591725e91fb5abd8edcb17636a844e418507ff0399d6760f6398610ed4175f1293fc93fb5569e4a8031d0ca7afd4c1fa8ea826c0ee049378aea2f641a777fc5855b1b37d528f4ec8ee20974e07f1c5a240fffa54f0310a0d25f2951040a4afcea97b9ef3f98696b16c02069a93e9592c6ab1c4c6899abca508ae638354a545d3a48c70287ca41a94775cb0c6d3b94402b13d53f2069"}, @ra={0x5, 0x2, 0x2cb6}, @generic={0x4, 0x5b, "2b46b99077a6c94b996b8eb2e50c4faca44aa2ab58fc3098d66755516dc478f7540855fe0cd9e0c087ea30173df7aa26cd46fb5d2f01c464fdd549799627ba306388426ac36b1fcc2015c0244e6bcee7d18fecbb912c0d6f308a77"}, @jumbo={0xc2, 0x4, 0x7fff}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2c, 0x10, 0x2, 0x5, 0x0, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1c}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @hopopts_2292={{0xf0, 0x29, 0x36, {0x2e, 0x1a, '\x00', [@generic={0x0, 0xd3, "f552357c5d279f852ac0ea81cee66e73daa0f469e586d1e41981e47b3b4abda080c41a4d80fa7dde3b0510470ac666de1951ed0462826c96ada804e0e8ded51ec0c1c488e664ac813212c23842c6814fe952e3eac415022c7bb00726d50566945d42178463818b3eb06feda665153646ecbe54521e367c729279f26df8e0b000c91772caf8bce2ce88ecd49577cbe789474aaec01afedfd389b15d1bad7a68bad1682ae522147a0cb300064c83e95f86e05249d214df9fd5eab73427ca4c2339f0a149aea5982417b75f47caab0e29be9879b0"}]}}}], 0x1590}}], 0x1, 0x0) unshare(0x2040400) unshare(0x44010000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x15) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000404f045db60000000000010902240001000000000904000001030000000921000000000005000905810300"], 0x0) ioctl$TCFLSH(r3, 0xc0384707, 0x20000000) 7.690951464s ago: executing program 1 (id=2910): socket$netlink(0x10, 0x3, 0x6) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000100)={0x1000, 0x1, 0x39}) fsopen(&(0x7f0000000040)='cifs\x00', 0x0) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r2, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r7}, &(0x7f00000002c0), &(0x7f00000004c0)}, 0x20) 6.854623479s ago: executing program 4 (id=2912): read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r3, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/234, 0xea}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, 0xffff, 0x5dd073cf) (async) prlimit64(0x0, 0x9, &(0x7f0000000240)={0x5, 0x80004}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x6, &(0x7f0000000280)=0x6) mmap(&(0x7f0000186000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x8804) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x1f, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5aff, @void, @value}, 0xfffffdf4) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=0xfffffffd, 0x4) (async) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000000)) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="310306000000000000000947650008000300659d3e853197a33acdb8a378e04445836b94c6ace1244861f69921ff2aa36bc2104074a606e50e4ae56ddb520dbdd7c100fe0a6d3bf2a9b4071ffa6fcfbabb27976b2ca9ae1d0e9d48402fe88cf6150a1663e2164b11d296f396ed1cebffef882a72c48a8fbb91752a4a", @ANYRES32=r9, @ANYRES64=r2, @ANYRESDEC=r8, @ANYRESDEC=r0], 0x24}}, 0x0) 6.696954274s ago: executing program 4 (id=2914): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004080}, 0x44000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x80041285, &(0x7f0000001080)) write$P9_ROPEN(r1, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x2, 0x1, 0x7}, 0x8001}}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000700)=ANY=[@ANYBLOB="12011001000000406b1d018140000102030109028a000301ffa0060904000000010100000a240100000202010207240504062e7d0c240201060201400a000c0509040100000102000009040101010102000009050109758b06200107250100060d000904020000010200000904020101010200001124020129040803000c0000000000000007240116050110090582090002ff08ff0725"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 5.720940725s ago: executing program 1 (id=2917): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x80800) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0), 0x4) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="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", 0x1bc, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'hmac(sha256)\x00'}}) syz_usb_connect(0x1, 0x50d, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) r5 = open(&(0x7f0000000040)='.\x00', 0x160100, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x40) r7 = syz_io_uring_setup(0x18d6, &(0x7f0000000040), &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x1000000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYRES16=0x0], 0xc) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000000)={0x18, 0xfffffffffffffff5}, 0x18) write$FUSE_DIRENTPLUS(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r10, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r10, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200, 0x8000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="747f0000009ff499252782a92b5f13", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',\x00']) r11 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) writev(r11, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) copy_file_range(r6, 0x0, r5, 0x0, 0x9, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r13 = inotify_init1(0x0) inotify_add_watch(r13, &(0x7f0000000040)='.\x00', 0x440000a0) fsetxattr$trusted_overlay_redirect(r12, &(0x7f0000000040), 0x0, 0x0, 0x0) 4.852860554s ago: executing program 4 (id=2919): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket(0x2000000000000021, 0x1, 0x10000000000002) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r2, 0x0, 0x20000054) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./file1/file3\x00', 0x151) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x2946}, 0x6, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000001fc0)=ANY=[], 0x45) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000300)=0x1, 0x4) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 4.663101793s ago: executing program 7 (id=2920): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/227) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x10080, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000180)=0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r2, 0x0, 0x8, 0x8c, &(0x7f0000000200)="a040a85de12c5a1981d0d655b2f35cd4f8e6f0871dfd4a73d1470915941f18cba1ccec82fe342fbc1cfe6ec3c5b8993aa34acb13be6c4af60277ddb7488ada5a4f3bd64fd7c30ed10d17f8be163f1c2f751bceb108b21cfdcb3a00c72c89aa4730e44ef800689461857e363d3d8a9034a843c11735e0d2c2cc07dbc30e5b96a78731c12d06790be6700ec20d", 0x1}) ioctl$FBIOBLANK(r2, 0x4611, 0x2) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000380)={0x18, 0x1, 0x1, 0x0, r4, 0x3}) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000003c0)) ioctl$FIOCLEX(r3, 0x5451) socket$tipc(0x1e, 0x2, 0x0) 4.568856021s ago: executing program 7 (id=2921): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000340)="0f22a5b93a090000b8433e0000ba000000000f300f2063f30fc735977f00008fc9e093ae3e4600000f01769c660f38100e66baf80cb890e55383ef66bafc0cb8540a0000ef36670f0172750f20d835200000000f22d8", 0x56}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 32) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (rerun: 32) r9 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r9, &(0x7f00000000c0), 0xfec8) (async) fsmount(r1, 0x1, 0x85) (async) recvmmsg(r9, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000001880)=""/4096, 0x1000}], 0x2}, 0x4}], 0x1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) 4.278266155s ago: executing program 1 (id=2923): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x3}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="07001500070000000c001680080001"], 0x38}}, 0x20000014) 3.910341632s ago: executing program 3 (id=2924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102385, &(0x7f0000000000)=0x18ff1) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000207010100000000000000255f54f6ab335fdd6100050000f7ba86a21306"], 0x14}}, 0x20008810) 3.404810582s ago: executing program 1 (id=2925): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x3}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="07001500070000000c001680080001"], 0x38}}, 0x20000014) 3.356270188s ago: executing program 6 (id=2926): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) socket$inet6(0xa, 0x6, 0x0) r0 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00002b3000/0x2000)=nil, 0x800000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000fcffffff04000280"], 0x18}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r4, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x100000000000000) close(r3) 3.290745473s ago: executing program 3 (id=2927): getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x0, 0x20004080}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004700)=""/141, 0x8d}, 0x7}], 0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf09000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x1, 0x808, 0x2, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x20008891}, 0x40001) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00040000010000000000000003020000b68c52d2be3c0d90"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@bloom_filter={0x1e, 0x2, 0x8, 0x428a, 0x14042, r1, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x3, @void, @value, @value=r0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$dmmidi(&(0x7f0000000080), 0xfc, 0x8081) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r6, 0xc0245720, &(0x7f0000000000)={0x1}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1abc82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x501503) 2.908710362s ago: executing program 3 (id=2928): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x2}]}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) io_setup(0x6, &(0x7f0000000040)=0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = fsmount(r0, 0x0, 0x70) r4 = eventfd(0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0xa) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r5, r7, 0x1, 0x0, @val=@perf_event={0xb}}, 0x18) io_submit(r1, 0x6, &(0x7f0000000640)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x7, r2, &(0x7f0000000080)="bc482e979e73aa7c0dd4833ef06356dbd528fb6082d0a19cf2e17fb8aba1ccae5ae2549ad970427ac2c2036a9c0a460cba36974f90d3d1e99e0b7ed39bc4e83db92683951dddfb9d913af919949485589a149c2f2240ac51a69d59ce6d921df93e60852c333e9052b00f0afdde5d5eee60cf3e1f19787cfc1aaaa275757fc8b251876556aae4daa4160fea4b0f0f763c83615b51f5a307833c6e4646b9b23d0f512ac81bc712", 0xa6, 0xffffffffffffffff}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2d8f, r0, &(0x7f0000000180)="248c8033e877866f55f7013c5ee66d8a4e0c5005c15a9b176b788e547eefb782f66c1bc2d9811a82fd8757c269d37d387938078b1cf9", 0x36, 0x4, 0x0, 0x3, r3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000280)="9c359be716a4858ba172e32ce6d9e7e80c8a864457e956644d092f5b29fba891757f10659a7a5b1c6e8ff43a9f4dfc59a96bba36765edffa4a07a0882d4bae9942bde50c623f148c4e20320ab52b53886a6a4c563f5645162cf6378148a32f6531f71bcbc4d20053e321fe0e8878ef897d7e3fedd08ec381c6a9d8100543a9975dacd4a8f6275e411f39a81368", 0x8d, 0xfffffffffffffffa, 0x0, 0x6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xb7e6ee48862af195, 0x2f2, r0, &(0x7f0000000380)="89ed64d7d83814d0cd7eb4347d52fb4c249cd8c0700a5519977ecc62fe4e8e1a27ab9fa22dc410a8d4567c130e6f2ba65f052d79fc1b478f311fcd39e050a058d1127a62d0f0d3bfe7e8d735bda9730dfcc9756e59a85161007a21fe1d1dc3ec8e848534cf1751b664322203f98fc9d3b4dbf65d01e15addb3991a5ffe6c4ba70bc61d4afcb9607073f34aeec907044e0ed050cf22750dc9a3", 0x99, 0x80, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x2, r0, &(0x7f0000000480)="be58ddf50a0c82bcdfc51903cd54d477b8e30de4a00785be7c13c8109fdb3d39e34a89dd350276c8f52302d7106cd6399ad8b242c887019be9aff3e2ebc9b31fbe70de107e7461601b62a5b47704672a4a90a1ceefa097c370b4961510bcc30e5735e50d8538acc25c514b3720d6163b96182a4d7d506c569930ad127d7fbd75e2a79d975c8d5e3f57db", 0x8a, 0x401, 0x0, 0x5, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f0000000580)="1c374aa88ba1b31d674912ec6f177e6f1df613dbc52651f1e611f2692b79b9844e4457f22b42e50b21e17fb457581a138ac53afdc64c67e7b942c28049e4185b2d436d", 0x43, 0xc000000000000, 0x0, 0x3, r7}]) 2.433749924s ago: executing program 3 (id=2929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004200000040"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x0, 0x2}]}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x7, 0x52d882) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xc}) write$sndseq(r4, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) pipe(&(0x7f0000000040)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x0, 0x1, 0x70bd29, 0xfffffffc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x29}]}, 0x34}}, 0x8000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r1}, 0x38) 2.377329655s ago: executing program 6 (id=2930): r0 = socket(0x29, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008e}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000000080001c00128009000100626f6e6400000000170002800500fdff010000007caf199eb3b1e37395539ae00252173dbdabf72315d525ed53d0f43cde5f5eed889a7128a44fbe20f7d57eab86b710512735f716e6e8352c289f342310221f51000534ad8699b5a5b8fde607d64c5509a5439b", @ANYBLOB="4c9f7d7a0ba1e902d18d698bbe03a2ebc1d745210b0f76ad1241019f70d1257bcd5e3ee21cc028f86e13321b0c5903da7adf6f85892dfffdd2f07018f7c3451f5ed1aa25cf06e9640c6c488c99c0e6ac79841d90462950d3a16e46e3d25f5c11395ad2fbffabd9f0ed1b9a4557fc226b6375b4b0988c0d1251642df7982a597d7c5e757dcb5513d90b1186229a5a3043de24d4433e88ef022c3b69187c7f174a5e0a45c1f14a085824b1cbbdab97133277f6fa10e873cd797371ba894e575b30227e1f7481ffbf3c5141f90015e2bdeb454aa1", @ANYRES64, @ANYRES8=r1, @ANYRES32=0x0], 0x3c}}, 0x20801) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000e41b7f1e96a2bdcb00000000000000000080fd46d54858f9e793005939ef22f8ed0703d44531e8ebd3872e00ece899cca2f4221d46da71ac560f7dd372d6f069022d2d59cdc8bc5701ec6f8bb647b90bbf57a2029883f71d268d6091e57933537979036ef46d0d7ab8fef90884d4be58425545d7a7cd59e5560b8db772cf59aa2210993c397ce431b975768c01905cd3368e90", @ANYRES8=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r4], 0x64}, 0x1, 0x0, 0x0, 0xe925ebceee828163}, 0x40) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000200)}, {&(0x7f0000000680)=""/127, 0x7f}, {&(0x7f0000000700)=""/242, 0xf2}], 0x4, &(0x7f0000000980)=""/228, 0xe4}, 0x2}, {{&(0x7f0000000a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000b00)=""/65, 0x41}, {&(0x7f0000000b80)=""/149, 0x95}, {&(0x7f0000000c40)=""/138, 0x8a}], 0x3, &(0x7f0000000d00)=""/240, 0xf0}, 0x3}, {{&(0x7f0000000e00)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/108, 0x6c}, 0x91}], 0x3, 0x10003, 0x0) bpf$ENABLE_STATS(0x3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x0, 0x80}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioperm(0x0, 0x2, 0x7e) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x80006) write(r0, &(0x7f0000000600)="24000000520001000000f4f9002304000a04f5110800010002fe705d90de7ef52ea0859f", 0x24) 2.344337025s ago: executing program 7 (id=2931): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/227) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x10080, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000180)=0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r2, 0x0, 0x8, 0x8c, &(0x7f0000000200)="a040a85de12c5a1981d0d655b2f35cd4f8e6f0871dfd4a73d1470915941f18cba1ccec82fe342fbc1cfe6ec3c5b8993aa34acb13be6c4af60277ddb7488ada5a4f3bd64fd7c30ed10d17f8be163f1c2f751bceb108b21cfdcb3a00c72c89aa4730e44ef800689461857e363d3d8a9034a843c11735e0d2c2cc07dbc30e5b96a78731c12d06790be6700ec20d", 0x1}) ioctl$FBIOBLANK(r2, 0x4611, 0x2) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000380)={0x18, 0x1, 0x1, 0x0, r4, 0x3}) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000003c0)) ioctl$FIOCLEX(r3, 0x5451) syz_usb_connect(0x2, 0x336, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x2, 0x25, 0x3a, 0x20, 0x4dd, 0x8002, 0xa22f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x324, 0x1, 0x2, 0x68, 0x90, 0x3, [{{0x9, 0x4, 0x11, 0x4, 0xb, 0xff, 0x2, 0xd0, 0xe, [], [{{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x6, 0x8d, 0x7}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x7, 0x7, 0x8a, [@generic={0x98, 0x11, "e3662804fb163d8750d88d9f3f8bff16a900068a95ecd6ac11f6d2979e7a0c2aea1896b97c92e38e02f56aba1c43d1a63bfd5d4267dcc5456cc3a46ae8beac5f1776e1f68b94274f056b3b36ab1187fc37bb3d13bb37a6b760dcb592d23e4c1d0ec24bb74e4abb8a84713acb0bcbaa7dd11967be920631b903af532cff390f1c9dd848eb6216cd138e8c6b91078406aa725fcb14682b"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0x2, 0x30, 0x2, [@generic={0x11, 0xf, "4c8243e8d300b89b464842794c6bdc"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7ff}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0xff, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xdb, 0x9}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x5}, @generic={0x3, 0x1, "14"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x0, 0x3, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0xa}]}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0xf, 0x5, 0x1, [@generic={0xbc, 0x24, "f2540d4f04f2ffc62456ebe7454a78cdb4e16b84d770716d78f670c818ab3bd4e93bb1a5ede63c62ea0f058759516de0c7d40eac700acd53b3573f8ee8538eb70b59d027ba7eff38f52fb21196cfac2a94b4171ea023ee0c11102262cc8d42e63e5ffbb048216ae39538679c627dee211f800753580ae527417041acbceb5e847827729320e029c8135a98c65cdc8c05c22d1a626dc4a329df89b18023f6366b9c7784823d7167bc17f661690afea57d803d22c66dac01343b6d"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x6, 0xc, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x40}]}}, {{0x9, 0x5, 0x3, 0x3, 0x200, 0xe, 0x9, 0xc4}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x6, 0x4, [@generic={0x1c, 0x27, "1727b2472d958cd7a1c11000e7f98d125bc436cc8cc373dc6630"}, @generic={0xfa, 0x30, "fbda247062e415559749b0ad5cfb1482cc1f440b6301b9a0ce4f1e2176eddecaa03c1201448cc2e3721e289fda4ecdfb4229dcf3052ed7d0e304557533963827c7b15230b571928b5c8a3a4db6d9b1d187b899ed5fc02a251606e698358747b5f33cd2564de8c83177671f063988c27955bbd21e0e71161f27c14d2508775618cabf676671db98a1c1531d5d93efd6bb9c79c73a013728e6d1c241bbc040d9b830fc8db0e6f653384787f08a7ee51d88f194596ca7b07b7a0597607eda358dfa6b9139ef94d3adbcbe415cad8702df8c2671d9eb9468b5af533732ffff0f9ef2ad1f8c25f4364c999666cac66fd28c1506100cb27e5c1423"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0xb, 0xb0, 0x31, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x61c8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x5}]}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x250, 0x4, 0x4, 0x7, 0xff, 0x1}, 0x69, &(0x7f00000007c0)={0x5, 0xf, 0x69, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x1, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x9, 0x401}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "53ffb3227d57cf1a99068b556376915b"}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x10000, 0xf000, 0x2, [0x7f400f, 0xff0000, 0xf, 0x0, 0xff3f30]}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x0, 0xf, 0x3, [0xf, 0x3f60, 0xc00f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x1, 0x3, 0x2}]}, 0x6, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x860}}, {0x85, &(0x7f0000000940)=@string={0x85, 0x3, "c5f5e1e2bdbd2f91e3dc07517967606a9a77b95c0c5b96f57deb5363cd41e73014c488f8536203c2d0b58502fa50f67076bbb38e5518050afc7d9b92eaa652ec343a6a324b0cecf053731e94eef87a142e254d2c76455471347ac77591bd8a5fd12620db9333fa3c41274ef0bc183bfad491bd4fec0d4c58399d67000ba51a6fcadda3"}}, {0x1f, &(0x7f0000000a00)=@string={0x1f, 0x3, "7992d713e29f289a9b1e2e6bb2cde287319a4b3cd976ede243a7088e3b"}}]}) 2.343424983s ago: executing program 1 (id=2932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') preadv(r1, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4b6, 0x0) 1.899653607s ago: executing program 3 (id=2933): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0xfb, &(0x7f0000000040)=0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x3, 0x200b40) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f00000000c0)={0xfffffff9, [0x0, 0x80, 0xffffffc3], [{0x3, 0x6, 0x0, 0x0, 0x1}, {0x5, 0x401, 0x0, 0x1, 0x0, 0x1}, {0x6, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x80, 0x2dae, 0x1}, {0x7, 0x3, 0x1}, {0x972e, 0x80000001}, {0xcedf, 0x9, 0x1, 0x1, 0x1}, {0x3, 0x8001, 0x1}, {0x6, 0x8, 0x0, 0x0, 0x1}, {0x5, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x8a, 0x2, 0x1, 0x1, 0x0, 0x1}], 0xffffff90}) r3 = dup(r1) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfffffffe}, 0x8) shutdown(r3, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) 1.376779056s ago: executing program 6 (id=2934): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000000000000bb00000000000000f667d391c2fe7f2acb4de7c83c2c9ae9a0b71c1cc259b8a36b59c078f71be184e984ff2b90a9a911ebd3343c6037267808df7883776368fadb8a51bc849d06faecc437df8eef5e088b0db7", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x2e, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x101008}) fadvise64(0xffffffffffffffff, 0x0, 0x8000, 0x4) recvmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000700)=""/135, 0x87}], 0x2, &(0x7f00000007c0)=""/241, 0xf1}, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}, 0x1, 0x0, 0x0, 0x4402}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0xd8, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7ff}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xf}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x6f, 0xa8, @random="a7c6fe9740d063f33a915aed8073b1d5d8299a2003538c16c2eeae7b8560b919f37862ae0c4a4da2f290c4a4ecee956e26e3093f6e48e59059c95631c77298dd7d8ae4262855a470c63ed9e09a63d58e13ee6c9c528d5dae3442d3f8cebff75f4da84d4517de4887edd874"}, @DEVLINK_ATTR_RATE_NODE_NAME={0x2b, 0xa8, @random="726f2a98d1cd1671246f0609823a8ceaffc95d1b55fb5ac1ec99300c0265271a87a0301438b75e"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r7, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r10) 603.612136ms ago: executing program 3 (id=2935): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0xaaf, &(0x7f00000015c0)=ANY=[@ANYBLOB="12015002d72199402104fc002ed10102030109029d0a02077f5003090457040b0202ff8c0524060001052400f7ff0d240f015ba13345060008000606241aff07190424020c042402080724140300010005240101980b24060001f602673926ce05240000000d240f010300000000000200f706241a060011052401010c09050308ff03063609e3"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) sendmmsg$unix(r1, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000180)={0x3, 0x0, 0x5, 0x6, 0x4, 0x1, 0x100}) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) 451.953387ms ago: executing program 6 (id=2936): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) unshare(0x8000000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) semget$private(0x0, 0x4000, 0x555) socket$inet6(0xa, 0x800, 0xffffffff) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)=0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='+memory'], 0x8) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x95b0, 0x400}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r6, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) unshare(0x2c040000) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/ipc\x00') 315.087507ms ago: executing program 4 (id=2937): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xac) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_io_uring_setup(0x7f17, &(0x7f00000012c0)={0x0, 0xe1f6, 0x40, 0x1, 0x1ba}, &(0x7f0000001340), &(0x7f0000001380)) syz_io_uring_setup(0x7d5, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x2, 0xca, 0x0, r2}, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r3) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000200), &(0x7f0000000280)={0x0, 0xfb, 0x1015, 0x5, 0x10, "4f4fbab2e8f66d0a7a45e6fb90465c48", "01e686afa400c7794556bd6b09a37b0b055798716d602f2d23ec02ec56a855d1f3f68a6c0e0b4179f63323756f4aaaffe548aad85999d41ad7346a8ba3f27ec2f74956500703c6331726e6e745990c83f47c6728d654a23120924f539d9564d5d21bdde6015be69ac73dd79dfe782ad6dcfefd21535a203443038a4c39915a252120c14038a2e6723a582506c0bf932a45237e7f58b459dadafca253d2e8b7ad88844187ebc7c52949ce281756523675e463aa5cfc46e28daac278f8fd5484d748f25aeca16df847ba8ba61ae8eaea7b2008c29cfeb7395d0576dc25a15ff9b2bcd141b1ff0e494887d906258f880358ea69f226ab53ea8279af2ba65b60c3f90d4f214c34c6f23f0b86e74d2e6f084456848dfcfe06ff182a7e175e8c3bdcf05ef4e2c1dad5d40a8873c1c47d445d14b30450bee52280fcc6f4ec4ad830b1d3befce7849fc75a094e80159f81c88af8f4061edceb3e165654b6c777c24ddb7bdfb704aaf4b56c39b366c2ad7f9a095c5abec105f3b10b90f90ae5d16d83df2e1a4eae226e7ac667d3f5f2817a35840306a787f69e2e9ac81266ad5b69f218973010a40d5c7e482deba33a059e6157db92ea28307d32b9f133589022b8097d8ec86b023588b3c8a115ba36ae948edebc387ed6a30dd984885fc4db3ecbfa0a0106d6fe0a73be6a606d439e575379a192d9092c7a0b77c7f2743b2beec792edcc374cb4634b70a1763267a32abd01480902b715cee68bad79f5ee5f911064952232949a27c8e5fac4885d89a7957c27827094117f9f24a726a7184c7f4f526bb227e0b2a587d96ed9c33d4030ff27806b86a7f3558f190c4005dec671e8a5e18cdf7bb6c2dcb3b85cad1122d01b3e58e0d37829710a23e38f25b6531856d56cfc52e42bd011342a01c31c7f541b1783c476c42607bb43949e9c3d809574f8f77b4c5df88ef96462b1eef94ef2f476760c1398397a61feb068c03bf7d89b02362af670d0298c63cd812e0bf58e9ae3df5a8cc58d5690a9e70ca4a0076f40efb4ffdcf9be0e45f34cbee085cb9bfd5f255024845657becc99445d109670400b2629161a911841d1a010c09d528240fe07d22fe2a8b1aa2efd4b38ab60a17e42d891fb5ca4b73bded267049b08487cfae0b62bf53198de0143ff3b64832b068e2ee453b246108de86c2fffad3ddc0853aa561b19075ef8715ce789efe49b91c2218dbaa7f3281b825917c7ec2cf5e1f0ea37116c77b4c9dccbe3dac46fae0bf82eb7d5b5390347df2e6b03e77bd15db3e92000a3a211f29131f0f6b0665885cceb42c15e49c6ce164ce31eb1dd025efff1ec826a39e4cd10bab667b5711140cff155c417422d30cd3864cf82e87772a45e91e9b875c4da98f4c68b13dc62127a11f9a93be8fbd05711bb02962281a5c4f2baa763f05c3cdfbc5f258ee0348e15f65560c891b3d606fa84e8981534d298e6b8143e4a0e4afac2d46951bf0b8bbe8cd03d3117316473cf13066f5af42f5cfe1010d200b290bf67322be0d9d44387fbe68d2affa4574962b042d9bcd6a4a72107ee802c518855dbe16a2b9b056ef51fe2a2d07d52ce99e78e4f2c1aa29cdacc2345cf75dab3c9fb4e06277e3d5a76131dccab933f9ac3a15341636c052b337a9e4ce634d928ef05d5844f67ca23c8661101b34829ea616bf52e37e1657f053871e9b4b4d8e0db5752c2e523c6a8408bd067382d1697866c68c789868c4f98b0c5cded894d51135d5d1a239b3e4cdfa0b175158886f9049ab7e20b68f87a953e88bed042a33f64f5adf9822c967a9c403f179ff2eac19f91aa587381d5aa04220aee9a43f3b1876fbbbfe070b03609c3dd28e568d772187cf1e05edf5aee6a191996ca87a7db4c8073b40dde9ae3e35cdb0acfe046a6dd7e48b7f67cd73468d7206be481be71f08dbfc1d84afce2cad137217f986e2229659c7ebdaddc0476c84fc44b812880cce4203aafcd98e4756cc880ea87b1b9853000e90e6ffb383a2d3e12fd447241ddc2dcb8c48f72945917ce5192f7c2c2941e0483c22c6f1ecd1f812b0812419b4749f5e513d27328a193f218dddccf5a3af31e3eeeda04b792789c3ddeedf7f36369462d363892857d4f857a07f1d12c807f604495f4f9f23600a15418267b182bf590684863edc565d7ffe7089711ba8c48145ed6858b956c88c2a95183c0fa7c55f860ca84c1a59c59e72230c873c0e9ec3e3da857e354959aac959ea9436f66df0705bdc1f1d40064c2547ec658ffec07820ad68f835ed69e033ffa2b1d26623ca3d6982b0aed2abe38e8fd9758c56b757658d70d1c95c883e5766c8ee268e5fecfed3dc9389a90460581dc7de59c4fe0eb8f94a4fdf5e3857c9a819c177020b75ce0c3e3b2823420bb6812a29cbba38e05b5759b331ab561064e7de480179d75892f1ec89a653eb0c152a95be0da83d69821ffb56f4ef4c5d8c28eb78f985688f946bd2c347bcaaf4448d11e88ba94b7aaaa993c63c6ff1c9c6cafe019c1325604b0ab6017c2584702559d4211dc842024c749aee3f3fdd6c1b49be178ec11de0af9819d2dcb203cf0fbd7671b4667e41c82e757d35a556127d5ac7e1a871e470661d9e7a4c2f54710c11e25a248091ec1126db53b8613892393962205bdf4990005376c0a209f15b5a332e5edbcb70d9517576dd60e0f35acd22cf049df34263556c888442558a5accadf4300fbe5d6de2dcc98b7a3b4a9ddd0098458311cc394f86e2f88e151be8f4c7bc742f5ef686f535c9a171a59548c9fead0138c49634fddff727dfeeced8386e6eb07a97d39f447ddfbcc102d8d740dd3d1dbadbfa41048ef979ae5babd46c2493f7015c9567108b5b9646fa809c1428c435f657d70706e390bd0bdddcd6d2e6471a2aedf37d9c6dc1a7ee5e1da720a67dede58267906379abdd68486f0ef9e906b3cb2e0301df9d48655bf43bd7acfe9cf5a7eb0ae1153ba7adc51aadbdb2ec67eab9a067e8b9c56d2d9dac3979c29e7993dcd3d9a860a765b7ba15e13712b2aa7dc910508f8d78ac20276a961bf0726f2e06911b06d5f9b18137268f757dd9ba0b133cc7364ddaeabddd9c0043b4b7322b367daecdc9beebe6cb80877fe5c97618344399fce6b88f28e5e8055fd8a7898eda531923e077f668741d8923d893642957f02bfbb27ea1c074582d163f014c954eca74c26321016965c57320e518ab96e2b8daa33a5eced8d7d6a3757c75f61b091cd263635eb673b99906471d4e429ff03f48225e5096d26851fe41beb13e48840246967f88e777fbc95a32c1b6548b9612ebf9b05ed0a0bcb4a5eb37d562004923ad976da2508011f6e88064bed7189ee365a59ab8f1e40db6d46478a0fe03fddf00a2f37fd6d943221c5ec396bf876c2ee6262d0b8594e79781fc70c0ca294ee700f027a75b78e23b3995d976e4239474e2e3255b66f7368d490cc045bb527cf7ad2d53ec5526ed221d0c65970166abd859cff49512a4580412c0a947f9c1e78de39a406d893122d7435f8306f6554a4b2c6a996755575977784646a7a7f22caa5371684af2e425feb2e9c433415c439c38579f3cac8b94a06350317d6e3ea8bef22a3a2d474cedf3cfa83d28fa2569ff93c7a93cf028295ed1c035ba4f7b54867445f2558866b1273a36a02d71b8e057918b044f45b87ad4a0ab000ed41f578053f078a9d88efc5889021fdbdc735cde9ace22c938a78aa282fca938f4dd7075fa6c992b660db1ea9db75acfcb28e1e15cad10b527c52760c93d053184a519c3bf49afd8d8fded46967be58784854741e8d08d600ca76d2e12d684766c9c1e9f56081edcf92c01d43b0bf9382074f2e4e066f2b119e2d3169bdf9aef3ade3a8580ba675a4cccba393b357353c5b2e2380d6112ec9da09bb8f333d1f2250ce6655202645af88c8de8fcf62000a2bb2ee3d0a15c52f8c08026426791065e87c9e269f2168b13780c2c104919a795928242abe8e2c9462d34e343a85fb6a7c4788323844fafa57445b272ba5399e3a76b808236b4a415fccede4d6937ecb2c083551a04ac05a8ab7dfdf595b3bb95b6c832239e4f3772a065afddf57815f6d5803f420e1cd94cf23080e9a03afbc8e51cb89858cd200dde5fa02c4c6899084f2b2887cc36082d239e81939af359cd1ab7f5bd6f98808985a28331de515787cdb8f4e95672ede01e9e45ae77956b8f0b8f7434e0b110b0f6e2e638b3bce73c1e540397d3d6d99a6d14ef656f765a7696fd10abadc5fcff34543c35bbf64d7d14a9e33825086e557fdbd55eccbab625c971d948775dcb422f09d6f5cd3bdb532fb2cc11349da189d5f2ad32a80e926d0a5013a25e97293f6b7c2eecc99103797d1065ecec466bfa78f48842d6af561bf21f94edbceb94f70efbbe08c9520b8c0051cef1fa71a7984bfb81c801ac8948f65cbbbcb93158814d5be14e371311ea4e65ca5c5dbb8684609435580b2e623b60d52406eb3b1d01665112411f6a8a772d6b810e9aae4596bef589d6cc79ea41e896bca38c0b7bb0a7f83f2c9399c779249b1be63609710f85ee3b8551aa2dcae4ac43b30c1fbb857ac1214257b08a490f7179d0ce1c271e72d170ad837378102e0fa0b0b898fe9ec1cdee2c6aa10b0f806abc5a5b869eeadc7afab82b338ad2c45692b3b5850505c29deebbe33317423458d7d1674446f753f344d2eef55c505614932313e5a7945cec9e7cdd873970a78fd0de19b8e3e5f9a4b754501d56c66bb52dc6ffc8d40c9631e7bc14d8d453026761a74217d42184e7e8b428ca04b6baf422705e4d6a6828623df96907fb0102e8c6bdc34454c09d696c2a67eea8b46c8101a33f1701b3c953e7dda7c1d636b3e3f8a8469ad0915728c3cca4b94e31e2adfdb7b34ec432659d32f31eb92caac54db0b15f91b4273ea5fdd4e04f3f7e4156ceba357d8c117525bc310d6791035b23ee41dfe55cbdc5fbaad18d43796f55c809c2adfe19f57e12fdcd161c8bb73b46876cf6b0c6122d4351791fc46e15c786281bf2dc00249d6facc91972cb488bb94fe936a37523a4084c66414ec212c1a89dc88278054dda4a2c088fd6316aa469ac7709ed7004a94c41fdf337fdd07dc83b8e9406a8184a25da635aad9a7b705eed42df5e2e53e86b90b466dafe9dc4dbafe8f51d69f33b5beda5e0042d24798715570e0fd7405ac594d5f80b74f551269b2554fc73c04cbc4635bb7b5815c4d26dede9ab118ab841a6be8d0dddd85658d1b593eb81df8d15219d2ea0455e83b1afe8396ad7002de765449f98022307810a69f2a822f1731ff424e802397de40bb32c65cc01ecb5aa8dc75f7f92f1e87f2ad97cece6c30ed83cca3c17ca96dad6c69470e394d8fb07f9ca36f06e645df7fa137862617e1a6c7ff512d73d82b0d37c6e2563db8602c8e4fe63473dbff4df7c4c08f228eff4d55a9416db97c1844b896bd4a986781f5ae7bf7c07e65f6a552a5510087c31c28768bcaefe378e4b3a22870532f1848334edf5a6d5706ed20302a2d7d463e0f1d71773f78e2d22e6acad073d4c14bdf6703eccab3c5483391caa294ca5a4242ce942726d318c1c8521f4b4de38d26d650410a6431241b3daf2995db6cdb7a7cc900dcb975150d03fc7f023cd680d16c775c95a672366f042b6220e25a3c2ff726be0ce5c9a99051bce4ecdae4778b05aef4a5c0380b6a5fef5aef243777fcb409d88359935b646e5d11771645d7e4debd2a4d1737a49ad44c89e89d33525fa763dfb1883539b23b20ea949a52c89a014083150344"}, 0x1015, 0x3) socket(0x10, 0x803, 0x0) socket(0x200000100000011, 0x3, 0x0) r5 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000000c0)=ANY=[@ANYRES16=r8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 161.894094ms ago: executing program 6 (id=2938): socket$nl_route(0x10, 0x3, 0x0) 21.362544ms ago: executing program 6 (id=2939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004200000040"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x0, 0x2}]}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x7, 0x52d882) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xc}) write$sndseq(r4, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) pipe(&(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x0, 0x1, 0x70bd29, 0xfffffffc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x29}]}, 0x34}}, 0x8000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r1}, 0x38) 0s ago: executing program 4 (id=2940): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='sessionid\x00') r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100, 0x0, 0x84}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x2416, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r3, 0x567, 0xffffffa1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T5867] usb 3-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 540.305705][ T5867] usb 3-1: config 2 has no interface number 0 [ 540.399392][ T5867] usb 3-1: config 2 interface 17 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 540.458222][ T5867] usb 3-1: config 2 interface 17 altsetting 4 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 540.472716][ T5867] usb 3-1: config 2 interface 17 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 540.567077][ T5867] usb 3-1: config 2 interface 17 altsetting 4 endpoint 0xD has an invalid bInterval 0, changing to 4 [ 540.611726][ T5867] usb 3-1: config 2 interface 17 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 1023 [ 540.730799][ T5867] usb 3-1: config 2 interface 17 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 540.754812][ T5867] usb 3-1: config 2 interface 17 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 540.805959][ T5867] usb 3-1: config 2 interface 17 has no altsetting 0 [ 541.034245][ T5867] usb 3-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=a2.2f [ 541.098086][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.111584][ T5867] usb 3-1: Product: с [ 541.116065][ T5867] usb 3-1: Manufacturer: Х [ 541.120673][ T5867] usb 3-1: SerialNumber: ࡠ [ 541.619833][ T29] audit: type=1400 audit(1738392591.247:1579): avc: denied { setattr } for pid=14214 comm="syz.1.2432" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 541.668054][T14183] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 541.889739][T14183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.913426][T14183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.953825][ T5867] safe_serial 3-1:2.17: safe_serial converter detected [ 541.965499][ T5867] safe_serial 3-1:2.17: probe with driver safe_serial failed with error -22 [ 542.014965][ T5867] usb 3-1: USB disconnect, device number 92 [ 542.238065][T14221] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.355891][T14221] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.953620][T14229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2437'. [ 543.238903][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2438'. [ 543.576177][T14221] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.662125][T14221] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.996962][T14221] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.032834][T14221] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.054556][T14221] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.067567][ T29] audit: type=1400 audit(1738392595.697:1580): avc: denied { read } for pid=14248 comm="syz.4.2443" path="socket:[49510]" dev="sockfs" ino=49510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 546.128833][T14221] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.219592][T14253] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 546.320607][ T29] audit: type=1400 audit(1738392595.947:1581): avc: denied { validate_trans } for pid=14260 comm="syz.4.2447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 546.425450][T14124] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 546.595377][T14124] usb 4-1: Using ep0 maxpacket: 32 [ 546.601851][T14124] usb 4-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 546.612827][T14124] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 546.626930][T14124] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 546.639078][T14124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.649832][T14124] usb 4-1: config 0 descriptor?? [ 546.656906][T14124] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 546.675472][ T5870] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 546.856712][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 546.866931][ T5870] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 546.878838][ T5870] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 546.889532][ T5870] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 546.899793][ T5870] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.914515][ T5870] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 546.924085][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 546.932642][ T5870] usb 2-1: Product: syz [ 547.056181][T14276] FAULT_INJECTION: forcing a failure. [ 547.056181][T14276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.076546][T14276] CPU: 0 UID: 0 PID: 14276 Comm: syz.2.2452 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 547.076570][T14276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 547.076581][T14276] Call Trace: [ 547.076586][T14276] [ 547.076609][T14276] dump_stack_lvl+0x16c/0x1f0 [ 547.076645][T14276] should_fail_ex+0x50a/0x650 [ 547.076674][T14276] _copy_to_user+0x32/0xd0 [ 547.076702][T14276] simple_read_from_buffer+0xd0/0x160 [ 547.076733][T14276] proc_fail_nth_read+0x198/0x270 [ 547.076758][T14276] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 547.076782][T14276] ? rw_verify_area+0xcf/0x680 [ 547.076806][T14276] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 547.076828][T14276] vfs_read+0x1df/0xbf0 [ 547.076852][T14276] ? __fget_files+0x1fc/0x3a0 [ 547.076868][T14276] ? __pfx___mutex_lock+0x10/0x10 [ 547.076895][T14276] ? __pfx_vfs_read+0x10/0x10 [ 547.076927][T14276] ? __fget_files+0x206/0x3a0 [ 547.076949][T14276] ksys_read+0x12b/0x250 [ 547.076974][T14276] ? __pfx_ksys_read+0x10/0x10 [ 547.077004][T14276] do_syscall_64+0xcd/0x250 [ 547.077022][T14276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.077046][T14276] RIP: 0033:0x7fc00a58b7bc [ 547.077061][T14276] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 547.077078][T14276] RSP: 002b:00007fc00b35e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 547.077095][T14276] RAX: ffffffffffffffda RBX: 00007fc00a7a5fa0 RCX: 00007fc00a58b7bc [ 547.077107][T14276] RDX: 000000000000000f RSI: 00007fc00b35e0a0 RDI: 0000000000000003 [ 547.077117][T14276] RBP: 00007fc00b35e090 R08: 0000000000000000 R09: 0000000000000000 [ 547.077126][T14276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.077136][T14276] R13: 0000000000000000 R14: 00007fc00a7a5fa0 R15: 00007ffc4cd8fe98 [ 547.077158][T14276] [ 547.293145][T14270] hfs: can't find a HFS filesystem on dev nullb0 [ 547.310320][ T5870] usb 2-1: usb_control_msg returned -71 [ 547.325546][ T5870] usbtmc 2-1:16.0: can't read capabilities [ 547.338520][ T5870] usb 2-1: USB disconnect, device number 33 [ 547.462974][T14282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2453'. [ 547.788430][ T29] audit: type=1400 audit(1738392597.417:1582): avc: denied { watch_sb watch_reads } for pid=14251 comm="syz.3.2444" path="/450/file0" dev="tmpfs" ino=2472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 547.878850][ T9611] block nbd0: Possible stuck request ffff888025d70000: control (read@0,4096B). Runtime 420 seconds [ 548.179142][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2457'. [ 548.202384][T14300] vlan2: entered allmulticast mode [ 548.211997][T14300] syz_tun: entered allmulticast mode [ 548.235555][ T5141] Bluetooth: hci0: command tx timeout [ 548.901432][T14310] FAULT_INJECTION: forcing a failure. [ 548.901432][T14310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.018861][T14310] CPU: 1 UID: 0 PID: 14310 Comm: syz.4.2461 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 549.018886][T14310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 549.018897][T14310] Call Trace: [ 549.018902][T14310] [ 549.018909][T14310] dump_stack_lvl+0x16c/0x1f0 [ 549.018939][T14310] should_fail_ex+0x50a/0x650 [ 549.018965][T14310] _copy_from_iter+0x2a1/0x1560 [ 549.018993][T14310] ? irqentry_exit+0x3b/0x90 [ 549.019019][T14310] ? lockdep_hardirqs_on+0x7c/0x110 [ 549.019043][T14310] ? __pfx__copy_from_iter+0x10/0x10 [ 549.019072][T14310] ? __check_object_size+0x488/0x710 [ 549.019096][T14310] netlink_sendmsg+0x813/0xd70 [ 549.019118][T14310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.019144][T14310] ____sys_sendmsg+0xaaf/0xc90 [ 549.019167][T14310] ? copy_msghdr_from_user+0x10b/0x160 [ 549.019189][T14310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 549.019223][T14310] ___sys_sendmsg+0x135/0x1e0 [ 549.019243][T14310] ? __pfx____sys_sendmsg+0x10/0x10 [ 549.019271][T14310] ? __pfx_lock_release+0x10/0x10 [ 549.019292][T14310] ? trace_lock_acquire+0x14e/0x1f0 [ 549.019318][T14310] ? __fget_files+0x206/0x3a0 [ 549.019341][T14310] __sys_sendmsg+0x16e/0x220 [ 549.019360][T14310] ? __pfx___sys_sendmsg+0x10/0x10 [ 549.019393][T14310] do_syscall_64+0xcd/0x250 [ 549.019411][T14310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.019435][T14310] RIP: 0033:0x7f294cf8cda9 [ 549.019449][T14310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.019465][T14310] RSP: 002b:00007f294dd69038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.019483][T14310] RAX: ffffffffffffffda RBX: 00007f294d1a5fa0 RCX: 00007f294cf8cda9 [ 549.019494][T14310] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 549.019505][T14310] RBP: 00007f294dd69090 R08: 0000000000000000 R09: 0000000000000000 [ 549.019515][T14310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.019525][T14310] R13: 0000000000000000 R14: 00007f294d1a5fa0 R15: 00007ffe247b7bc8 [ 549.019547][T14310] [ 549.507079][T14124] usb 4-1: USB disconnect, device number 86 [ 549.539020][T14316] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 550.381339][ T29] audit: type=1400 audit(1738392600.007:1583): avc: denied { listen } for pid=14323 comm="syz.4.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 550.613890][T14330] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 550.613890][T14330] Ue[%#s' [ 550.625564][ T29] audit: type=1400 audit(1738392600.197:1584): avc: denied { create } for pid=14318 comm="syz.3.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 550.729578][T14335] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2467'. [ 550.753986][ T29] audit: type=1400 audit(1738392600.207:1585): avc: denied { connect } for pid=14324 comm="syz.6.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 550.798812][ T29] audit: type=1400 audit(1738392600.377:1586): avc: denied { listen } for pid=14324 comm="syz.6.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 550.821997][T14328] netlink: 187320 bytes leftover after parsing attributes in process `syz.6.2465'. [ 550.826834][ T29] audit: type=1400 audit(1738392600.377:1587): avc: denied { accept } for pid=14324 comm="syz.6.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 550.831891][T14328] netlink: zone id is out of range [ 550.859494][T14328] netlink: zone id is out of range [ 550.864756][T14328] netlink: zone id is out of range [ 550.870560][T14328] netlink: zone id is out of range [ 550.878551][T14328] netlink: zone id is out of range [ 550.883759][T14328] netlink: zone id is out of range [ 550.891277][T14328] netlink: zone id is out of range [ 550.896740][ T29] audit: type=1400 audit(1738392600.517:1588): avc: denied { write } for pid=14324 comm="syz.6.2465" path="socket:[49040]" dev="sockfs" ino=49040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 550.915328][T14328] netlink: zone id is out of range [ 550.938799][T14328] netlink: zone id is out of range [ 551.723758][T14345] overlay: ./file0 is not a directory [ 552.118353][T14353] ALSA: mixer_oss: invalid OSS volume 'RA' [ 552.402919][ T5141] Bluetooth: hci3: command 0x0406 tx timeout [ 553.395039][T14384] tipc: Started in network mode [ 553.400235][T14384] tipc: Node identity 2, cluster identity 4711 [ 553.409199][T14382] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 553.409199][T14382] Ue[%#s' [ 553.414923][T14384] tipc: Node number set to 2 [ 553.525823][T14384] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2481'. [ 554.825349][T14124] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 554.929679][T14413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2487'. [ 554.939087][T14413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2487'. [ 555.072532][T14124] usb 5-1: not running at top speed; connect to a high speed hub [ 555.095205][T14124] usb 5-1: config 2 has an invalid interface number: 17 but max is 0 [ 555.115329][T14124] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 555.162020][T14124] usb 5-1: config 2 has no interface number 0 [ 555.180430][T14124] usb 5-1: config 2 interface 17 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 555.222772][T14124] usb 5-1: config 2 interface 17 altsetting 4 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 555.241214][T14124] usb 5-1: config 2 interface 17 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 555.275590][ T5141] Bluetooth: hci3: command 0x0406 tx timeout [ 555.281732][T14124] usb 5-1: config 2 interface 17 altsetting 4 endpoint 0xD has an invalid bInterval 0, changing to 4 [ 555.428978][T14124] usb 5-1: config 2 interface 17 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 1023 [ 555.494134][T14124] usb 5-1: config 2 interface 17 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 555.541872][T14124] usb 5-1: config 2 interface 17 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 555.599767][T14124] usb 5-1: config 2 interface 17 has no altsetting 0 [ 555.642161][T14124] usb 5-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=a2.2f [ 555.654860][T14124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.663940][T14124] usb 5-1: Product: с [ 555.676917][T14124] usb 5-1: Manufacturer: Х [ 555.713130][T14124] usb 5-1: SerialNumber: ࡠ [ 555.742368][T14409] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 555.828222][T14416] fuse: Unknown parameter 'group_id/00000000000000000000' [ 555.959376][T14409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.001524][T14409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.044340][T14124] safe_serial 5-1:2.17: safe_serial converter detected [ 556.071694][T14124] safe_serial 5-1:2.17: probe with driver safe_serial failed with error -22 [ 556.099091][T14422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2494'. [ 556.113584][T14124] usb 5-1: USB disconnect, device number 77 [ 556.390080][T14428] IPv6: NLM_F_REPLACE set, but no existing node found! [ 556.662851][T14435] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 556.662851][T14435] Ue[%#s' [ 556.782247][T14439] raw_sendmsg: syz.4.2499 forgot to set AF_INET. Fix it! [ 556.865096][T14441] netlink: 'syz.6.2500': attribute type 5 has an invalid length. [ 556.910607][T14441] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2500'. [ 557.155797][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 557.311395][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 557.365544][ T5901] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 557.551451][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.614522][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 557.644081][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.649460][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.659848][ T5901] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 557.674902][ T9] usb 7-1: Product: syz [ 557.709595][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.772461][ T5901] usb 5-1: config 0 descriptor?? [ 558.018187][ T9] usb 7-1: Manufacturer: syz [ 558.022808][ T9] usb 7-1: SerialNumber: syz [ 558.052320][ T9] usb 7-1: config 0 descriptor?? [ 558.270761][ T9] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 558.308538][ T5901] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 558.329977][ T5901] cm6533_jd 0003:0D8C:0022.0021: item fetching failed at offset 4/5 [ 558.355688][ T5901] cm6533_jd 0003:0D8C:0022.0021: parse failed [ 558.372925][ T5901] cm6533_jd 0003:0D8C:0022.0021: probe with driver cm6533_jd failed with error -22 [ 558.476892][ T5141] Bluetooth: hci1: command tx timeout [ 558.504758][ T5864] usb 5-1: USB disconnect, device number 78 [ 558.626744][ T29] audit: type=1400 audit(1738392608.247:1589): avc: denied { setopt } for pid=14456 comm="syz.3.2506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 558.935372][ T5869] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 559.119358][ T5869] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 559.150796][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.159758][T14465] PKCS8: Unsupported PKCS#8 version [ 559.180422][ T5869] usb 4-1: Product: syz [ 559.184627][ T5869] usb 4-1: Manufacturer: syz [ 559.194169][ T5869] usb 4-1: SerialNumber: syz [ 559.200989][ T5869] usb 4-1: config 0 descriptor?? [ 559.218917][ T5869] comedi comedi0: This driver needs USB 2.0 to operate. Aborting... [ 559.229654][ T5869] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 559.492263][ T9] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 559.545823][ T9] usb 7-1: USB disconnect, device number 5 [ 560.086257][ T5901] usb 4-1: USB disconnect, device number 87 [ 560.646031][T14494] net_ratelimit: 16 callbacks suppressed [ 560.646044][T14494] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 560.660349][T14494] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 560.857286][ T5901] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 561.043533][ T5901] usb 7-1: not running at top speed; connect to a high speed hub [ 561.058749][ T5901] usb 7-1: config 2 has an invalid interface number: 17 but max is 0 [ 561.069810][ T5901] usb 7-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 561.093942][ T5901] usb 7-1: config 2 has no interface number 0 [ 561.108022][ T5901] usb 7-1: config 2 interface 17 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 561.133017][ T5901] usb 7-1: config 2 interface 17 altsetting 4 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 561.152210][ T5901] usb 7-1: config 2 interface 17 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 561.163181][ T5901] usb 7-1: config 2 interface 17 altsetting 4 endpoint 0xD has an invalid bInterval 0, changing to 4 [ 561.176391][ T5901] usb 7-1: config 2 interface 17 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 1023 [ 561.188086][ T5901] usb 7-1: config 2 interface 17 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 561.199419][ T5901] usb 7-1: config 2 interface 17 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 561.223611][ T5901] usb 7-1: config 2 interface 17 has no altsetting 0 [ 561.234674][ T5901] usb 7-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=a2.2f [ 561.250613][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.259699][ T5901] usb 7-1: Product: с [ 561.263977][ T5901] usb 7-1: Manufacturer: Х [ 561.275109][ T5901] usb 7-1: SerialNumber: ࡠ [ 561.285119][T14492] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 561.385381][ T5869] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 561.550079][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 561.564032][ T5869] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 561.582574][T14492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.595705][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.667276][ T5869] usb 4-1: config 0 descriptor?? [ 561.677240][ T5869] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 561.690102][T14492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.725483][ T5901] safe_serial 7-1:2.17: safe_serial converter detected [ 561.738667][ T5901] safe_serial 7-1:2.17: probe with driver safe_serial failed with error -22 [ 561.784815][ T5901] usb 7-1: USB disconnect, device number 6 [ 562.305475][ T5864] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 562.465618][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 562.483238][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.505605][ T5864] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 562.523709][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.543575][ T5864] usb 2-1: config 0 descriptor?? [ 562.558023][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.677844][ T29] audit: type=1400 audit(1738392612.297:1590): avc: denied { getopt } for pid=14513 comm="syz.6.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 563.011564][ T5864] mcp2221 0003:04D8:00DD.0022: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 563.417382][T14511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.436991][T14511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.481956][T14511] overlayfs: conflicting options: userxattr,metacopy=on [ 563.515883][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 563.523772][T14511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.560765][T14511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.609729][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 563.620751][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 563.634199][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 563.635426][T14124] usb 2-1: USB disconnect, device number 34 [ 563.651879][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 563.659345][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 563.666578][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 563.982927][T14527] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 563.989496][T14527] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 563.998148][T14527] vhci_hcd vhci_hcd.0: Device attached [ 564.211514][T14530] vhci_hcd: connection closed [ 564.213160][ T8859] vhci_hcd: stop threads [ 564.226763][ T8859] vhci_hcd: release socket [ 564.231309][ T8859] vhci_hcd: disconnect device [ 564.485863][T14543] ALSA: mixer_oss: invalid OSS volume 'RA' [ 564.557585][T14536] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2526'. [ 564.917747][T14522] chnl_net:caif_netlink_parms(): no params data found [ 565.016969][ T5869] gspca_vc032x: reg_w err -71 [ 565.021686][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.043183][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.046386][ T29] audit: type=1400 audit(1738392614.667:1591): avc: denied { getopt } for pid=14548 comm="syz.1.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 565.055349][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.093332][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.106166][ T29] audit: type=1400 audit(1738392614.727:1592): avc: denied { accept } for pid=14548 comm="syz.1.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 565.158674][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.191516][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.230606][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.238721][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.254895][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.264101][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.267298][T14522] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.295361][T14522] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.437902][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.443238][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.448632][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.453968][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.459443][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.464780][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.470160][ T5869] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.475573][ T5869] gspca_vc032x: Unknown sensor... [ 565.480675][ T5869] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 565.486927][T14522] bridge_slave_0: entered allmulticast mode [ 565.491669][ T5869] usb 4-1: USB disconnect, device number 88 [ 565.516174][T14522] bridge_slave_0: entered promiscuous mode [ 565.672520][T14522] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.704218][T14522] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.818906][ T5141] Bluetooth: hci6: command tx timeout [ 565.832235][T14522] bridge_slave_1: entered allmulticast mode [ 565.898466][T14522] bridge_slave_1: entered promiscuous mode [ 566.600506][T14571] 9pnet_fd: Insufficient options for proto=fd [ 567.092710][T14522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.111001][T14522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.266480][T14522] team0: Port device team_slave_0 added [ 567.273698][ T29] audit: type=1400 audit(1738392616.897:1593): avc: denied { link } for pid=14572 comm="syz.1.2535" name="file1" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 567.306804][T14522] team0: Port device team_slave_1 added [ 567.325718][ T29] audit: type=1400 audit(1738392616.907:1594): avc: denied { setattr } for pid=14572 comm="syz.1.2535" name="#2f" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 567.384278][T14522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.405442][T14522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.471378][T14522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.493012][T14522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.501189][T14522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.529452][T14522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.671460][T14584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2538'. [ 567.835357][ T5141] Bluetooth: hci6: command tx timeout [ 567.953095][T14585] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 568.270128][T14522] hsr_slave_0: entered promiscuous mode [ 568.282593][T14522] hsr_slave_1: entered promiscuous mode [ 568.291819][T14522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.293814][ T29] audit: type=1400 audit(1738392617.917:1595): avc: denied { map } for pid=14590 comm="syz.1.2540" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 568.300008][T14522] Cannot create hsr debugfs directory [ 568.325029][ T29] audit: type=1400 audit(1738392617.917:1596): avc: denied { call } for pid=14590 comm="syz.1.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 568.958533][T14609] delete_channel: no stack [ 568.964261][ T29] audit: type=1400 audit(1738392618.587:1597): avc: denied { setopt } for pid=14609 comm="syz.3.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 568.997287][T14611] vivid-000: disconnect [ 569.004506][T14522] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 569.317286][T14522] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 569.382318][T14522] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 569.436885][T14522] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 569.716035][ T29] audit: type=1400 audit(1738392619.347:1598): avc: denied { name_bind } for pid=14624 comm="syz.3.2549" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 569.861104][T14607] vivid-000: reconnect [ 569.916176][T14522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.916340][ T5141] Bluetooth: hci6: command tx timeout [ 569.952932][T14522] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.992938][ T8848] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.000059][ T8848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.022753][T14613] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.022828][T14613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.175364][ T5870] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 570.254658][T14641] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 570.254658][T14641] Ue[%#s' [ 570.361987][ T5870] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 570.578957][ T5870] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 570.588703][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 570.601458][ T5870] usb 5-1: SerialNumber: syz [ 570.681124][T14522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.806063][ T5868] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 570.839108][ T5870] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 570.859485][ T5870] usb 5-1: USB disconnect, device number 79 [ 570.990734][T14652] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 571.005819][ T5868] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 571.025714][ T5868] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 571.039021][ T5868] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 571.088831][ T5868] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 571.111151][T14661] input: syz0 as /devices/virtual/input/input39 [ 571.266592][T14652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=14652 comm=syz.6.2553 [ 571.397168][ T5868] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 571.476723][ T5868] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 571.490471][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 571.516970][ T5868] usb 2-1: Product: syz [ 571.525157][ T5868] usb 2-1: Manufacturer: syz [ 571.564371][T14522] veth0_vlan: entered promiscuous mode [ 571.573462][ T5868] cdc_wdm 2-1:1.0: skipping garbage [ 571.593571][ T5868] cdc_wdm 2-1:1.0: skipping garbage [ 571.612002][T14522] veth1_vlan: entered promiscuous mode [ 571.621754][ T5868] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 571.642966][ T5868] cdc_wdm 2-1:1.0: Unknown control protocol [ 571.664482][T14522] veth0_macvtap: entered promiscuous mode [ 571.697891][T14522] veth1_macvtap: entered promiscuous mode [ 571.708695][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2555'. [ 571.733317][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.744315][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.754927][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.767715][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.779887][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.792109][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.802447][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.815699][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.826454][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.838520][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.848861][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.859682][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.873008][T14522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.881296][T14666] bond0: Device is already in use. [ 571.902347][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.919298][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.938888][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.954203][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.980072][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.995685][ T5141] Bluetooth: hci6: command tx timeout [ 572.015567][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.036720][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 572.037272][ T9] usb 2-1: USB disconnect, device number 35 [ 572.043566][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 572.055285][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 572.064279][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.092471][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.109076][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.122341][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.133199][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.146615][T14637] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2551'. [ 572.156134][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.170876][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.181423][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.192588][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.204689][T14522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.264455][T14522] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.283756][T14522] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.315639][T14522] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.334864][T14522] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.139538][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.240843][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.296477][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.310827][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.460618][T14684] usb usb1: usbfs: process 14684 (syz.6.2561) did not claim interface 0 before use [ 573.490269][T14689] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 573.496740][T14689] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 573.581284][T14690] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 573.581284][T14690] Ue[%#s' [ 574.681261][T14710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2570'. [ 574.759023][T14711] netlink: 'syz.3.2570': attribute type 10 has an invalid length. [ 575.131555][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 575.133888][ T5870] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 575.139742][T14711] bridge0: port 3(erspan0) entered disabled state [ 575.153357][T14711] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.162367][T14711] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.352059][ T5870] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 575.387019][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.395325][ T5870] usb 5-1: Product: syz [ 575.399498][ T5870] usb 5-1: Manufacturer: syz [ 575.404088][ T5870] usb 5-1: SerialNumber: syz [ 575.416347][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 575.438389][ T9] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 575.438849][ T5870] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 575.455608][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.472770][ T9] usb 2-1: Product: syz [ 575.478084][ T9] usb 2-1: Manufacturer: syz [ 575.482762][ T9] usb 2-1: SerialNumber: syz [ 575.504761][ T9] usb 2-1: config 0 descriptor?? [ 575.521228][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 575.619684][T14718] Device name cannot be null; rc = [-22] [ 575.708824][ T970] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 575.865387][ T9] gspca_sq930x: reg_r 001f failed -32 [ 575.870853][ T9] sq930x 2-1:0.0: probe with driver sq930x failed with error -32 [ 576.137771][ T9] usb 5-1: USB disconnect, device number 80 [ 576.140384][T14725] fuse: Bad value for 'group_id' [ 576.148762][T14725] fuse: Bad value for 'group_id' [ 576.282538][T14730] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2577'. [ 576.292461][T14730] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2577'. [ 576.306401][T14730] netlink: 'syz.6.2577': attribute type 2 has an invalid length. [ 576.334987][ T29] audit: type=1400 audit(1738392625.947:1599): avc: denied { connect } for pid=14727 comm="syz.3.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 576.385282][ T29] audit: type=1400 audit(1738392625.997:1600): avc: denied { accept } for pid=14729 comm="syz.6.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 576.805344][ T970] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 576.835866][ T970] ath9k_htc: Failed to initialize the device [ 576.842694][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 577.165619][ T9] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 577.427573][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 577.444463][ T9] usb 5-1: config 2 has an invalid interface number: 17 but max is 0 [ 577.452971][ T9] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 577.462690][ T9] usb 5-1: config 2 has no interface number 0 [ 577.475392][ T9] usb 5-1: config 2 interface 17 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 577.505325][ T9] usb 5-1: config 2 interface 17 altsetting 4 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 577.532193][ T9] usb 5-1: config 2 interface 17 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 577.569865][ T9] usb 5-1: config 2 interface 17 altsetting 4 endpoint 0xD has an invalid bInterval 0, changing to 4 [ 577.611565][ T9] usb 5-1: config 2 interface 17 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 1023 [ 577.638944][ T9] usb 5-1: config 2 interface 17 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 577.659731][ T9] usb 5-1: config 2 interface 17 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 577.677545][ T9] usb 5-1: config 2 interface 17 has no altsetting 0 [ 577.693222][ T9] usb 5-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=a2.2f [ 577.731429][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.754648][T14124] usb 2-1: USB disconnect, device number 36 [ 577.774968][ T9] usb 5-1: Product: с [ 577.793464][ T9] usb 5-1: Manufacturer: Х [ 577.810135][ T9] usb 5-1: SerialNumber: ࡠ [ 577.823285][T14740] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 577.930664][ T9611] block nbd0: Possible stuck request ffff888025d70000: control (read@0,4096B). Runtime 450 seconds [ 578.061464][T14740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.097055][T14740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.119091][ T9] safe_serial 5-1:2.17: safe_serial converter detected [ 578.136240][ T9] safe_serial 5-1:2.17: probe with driver safe_serial failed with error -22 [ 578.156152][ T9] usb 5-1: USB disconnect, device number 81 [ 578.345982][T14124] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 578.595605][T14124] usb 2-1: Using ep0 maxpacket: 32 [ 578.627636][T14124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 578.682195][T14124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.784697][T14124] usb 2-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 578.864785][T14124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.901145][T14124] usb 2-1: config 0 descriptor?? [ 579.203958][T14771] ALSA: mixer_oss: invalid OSS volume 'RA' [ 579.704040][T14778] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 579.704040][T14778] Ue[%#s' [ 579.745060][T14777] netlink: 'syz.4.2590': attribute type 21 has an invalid length. [ 579.943424][T14124] wacom 0003:056A:0003.0023: unknown main item tag 0x0 [ 579.946197][ T29] audit: type=1400 audit(1738392629.557:1601): avc: denied { ioctl } for pid=14773 comm="syz.6.2591" path="socket:[53320]" dev="sockfs" ino=53320 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 579.974974][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.976503][T14124] wacom 0003:056A:0003.0023: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 580.117024][ T29] audit: type=1400 audit(1738392629.617:1602): avc: denied { getopt } for pid=14773 comm="syz.6.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 580.188238][T14124] wacom 0003:056A:0003.0023: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.1-1/input0 [ 580.203783][T14124] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0003.0023/input/input40 [ 580.416671][T14786] @: renamed from vlan0 (while UP) [ 580.970292][T14124] usb 2-1: USB disconnect, device number 37 [ 581.525448][ T5141] Bluetooth: hci6: command tx timeout [ 581.953593][T14800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2599'. [ 582.454865][ T29] audit: type=1400 audit(1738392632.077:1603): avc: denied { setcheckreqprot } for pid=14807 comm="syz.3.2602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 582.539945][ T29] audit: type=1326 audit(1738392632.167:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.6.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3978cda9 code=0x7ffc0000 [ 582.544289][T14793] FAULT_INJECTION: forcing a failure. [ 582.544289][T14793] name failslab, interval 1, probability 0, space 0, times 0 [ 582.621684][ T29] audit: type=1326 audit(1738392632.167:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.6.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3978cda9 code=0x7ffc0000 [ 582.693313][T14793] CPU: 1 UID: 0 PID: 14793 Comm: syz.6.2595 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 582.693337][T14793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 582.693347][T14793] Call Trace: [ 582.693352][T14793] [ 582.693359][T14793] dump_stack_lvl+0x16c/0x1f0 [ 582.693398][T14793] should_fail_ex+0x50a/0x650 [ 582.693422][T14793] ? fs_reclaim_acquire+0xae/0x150 [ 582.693448][T14793] should_failslab+0xc2/0x120 [ 582.693468][T14793] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 582.693486][T14793] ? __alloc_skb+0x2b1/0x380 [ 582.693507][T14793] __alloc_skb+0x2b1/0x380 [ 582.693523][T14793] ? __pfx___alloc_skb+0x10/0x10 [ 582.693539][T14793] ? rcu_is_watching+0x12/0xc0 [ 582.693557][T14793] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 582.693580][T14793] ? kmem_cache_alloc_noprof+0x279/0x3d0 [ 582.693598][T14793] ? audit_log_start+0x2bc/0x7e0 [ 582.693624][T14793] audit_log_start+0x2e1/0x7e0 [ 582.693647][T14793] ? __pfx_audit_log_start+0x10/0x10 [ 582.693671][T14793] ? __pfx_lock_release+0x10/0x10 [ 582.693698][T14793] ? migrate_enable+0x1ef/0x260 [ 582.693721][T14793] ? __pfx_migrate_enable+0x10/0x10 [ 582.693746][T14793] audit_seccomp+0x61/0x280 [ 582.693768][T14793] __seccomp_filter+0x816/0xf40 [ 582.693791][T14793] ? __pfx___seccomp_filter+0x10/0x10 [ 582.693814][T14793] ? fput+0x67/0x440 [ 582.693834][T14793] ? ksys_write+0x1ba/0x250 [ 582.693863][T14793] __secure_computing+0x26c/0x3f0 [ 582.693884][T14793] syscall_trace_enter+0x8b/0x260 [ 582.693911][T14793] do_syscall_64+0x1ee/0x250 [ 582.693928][T14793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.693951][T14793] RIP: 0033:0x7f9c3978cda9 [ 582.693965][T14793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.693982][T14793] RSP: 002b:00007f9c3a5ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 582.693998][T14793] RAX: ffffffffffffffda RBX: 00007f9c399a5fa0 RCX: 00007f9c3978cda9 [ 582.694009][T14793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 582.694019][T14793] RBP: 00007f9c3a5ba090 R08: 0000000000000000 R09: 0000000000000000 [ 582.694029][T14793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.694039][T14793] R13: 0000000000000000 R14: 00007f9c399a5fa0 R15: 00007ffecfa94698 [ 582.694060][T14793] [ 582.694077][T14793] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 582.741191][ T29] audit: type=1326 audit(1738392632.167:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.6.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9c3978cda9 code=0x7ffc0000 [ 582.776730][T14793] audit: out of memory in audit_log_start [ 583.278476][ T29] audit: type=1326 audit(1738392632.167:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.6.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3978cda9 code=0x7ffc0000 [ 583.375558][ T29] audit: type=1326 audit(1738392632.167:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.6.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f9c3978cda9 code=0x7ffc0000 [ 583.417401][ T9] libceph: connect (1)[c::]:6789 error -99 [ 583.423435][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 583.437286][ T29] audit: type=1326 audit(1738392632.167:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.6.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3978cda9 code=0x7ffc0000 [ 583.461275][ T29] audit: type=1326 audit(1738392632.167:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.6.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c3978b710 code=0x7ffc0000 [ 583.519397][ T53] Bluetooth: hci7: sending frame failed (-49) [ 583.533119][T14805] ceph: No mds server is up or the cluster is laggy [ 583.540322][ T5141] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 583.574481][T14838] vivid-000: disconnect [ 584.201898][T14834] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 584.392319][T14833] vivid-000: reconnect [ 584.435449][ T5869] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 585.015393][ T5869] usb 7-1: Using ep0 maxpacket: 32 [ 585.031905][ T5869] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 585.145383][ T5869] usb 7-1: config 0 has no interface number 0 [ 585.151513][ T5869] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 585.197541][ T5869] usb 7-1: config 0 interface 1 has no altsetting 0 [ 585.223933][ T5869] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 585.243740][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.267254][ T5869] usb 7-1: Product: syz [ 585.276739][ T5869] usb 7-1: Manufacturer: syz [ 585.292539][ T5869] usb 7-1: SerialNumber: syz [ 585.314659][ T5869] usb 7-1: config 0 descriptor?? [ 585.531628][T14862] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2617'. [ 585.734618][ T5869] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 585.834636][ T5869] cx231xx 7-1:0.1: Failed to read PCB config [ 585.871132][ T5869] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 585.905433][ T5869] usb 7-1: USB disconnect, device number 7 [ 586.306473][ T5869] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 586.507855][ T5869] usb 7-1: Using ep0 maxpacket: 32 [ 586.529333][ T5869] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 586.559953][ T5869] usb 7-1: config 0 has no interface number 0 [ 586.583235][ T5869] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 586.597612][ T5869] usb 7-1: config 0 interface 1 has no altsetting 0 [ 586.610748][ T5869] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 586.623757][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.634088][ T5869] usb 7-1: Product: syz [ 586.640446][ T5869] usb 7-1: Manufacturer: syz [ 586.645108][ T5869] usb 7-1: SerialNumber: syz [ 586.658976][ T5869] usb 7-1: config 0 descriptor?? [ 586.701529][ T5141] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 586.985815][ T5869] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 587.301911][T14881] syz.1.2624 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 587.558090][ T5869] cx231xx 7-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 587.567709][T14881] netlink: 'syz.1.2624': attribute type 10 has an invalid length. [ 587.577760][T14881] hsr0: entered promiscuous mode [ 587.675730][ T5869] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 587.683936][ T5869] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 587.694991][ T5869] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 587.724979][ T5869] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 587.745715][ T5869] cx231xx 7-1:0.1: Failed to set devmode to analog: error: -32 [ 587.789886][ T5869] i2c i2c-2: Added multiplexed i2c bus 4 [ 587.813756][ T5869] i2c i2c-2: Added multiplexed i2c bus 5 [ 587.832214][T14841] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2610'. [ 587.853240][T14841] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2610'. [ 587.912626][ T5869] cx231xx 7-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 587.942748][ T5869] cx231xx 7-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 588.003063][ T5869] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 588.140070][ T5869] usb 7-1: USB disconnect, device number 8 [ 588.593862][T14902] futex_wake_op: syz.4.2622 tries to shift op by -1; fix this program [ 589.591087][T14911] ALSA: mixer_oss: invalid OSS volume 'RA' [ 590.486194][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2634'. [ 590.688328][ T5868] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 591.305365][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 591.332751][T14935] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2638'. [ 591.335679][ T5868] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 591.405421][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 591.415203][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 591.465435][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 591.465450][ T29] audit: type=1400 audit(1738392641.077:1618): avc: denied { setopt } for pid=14936 comm="syz.7.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 591.480853][ T5868] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.515806][T14124] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 591.538397][ T5868] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 591.555316][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 591.563446][ T5868] usb 4-1: Product: syz [ 591.590347][T14943] misc userio: Begin command sent, but we're already running [ 591.697550][T14124] usb 7-1: Using ep0 maxpacket: 8 [ 591.704663][T14124] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.718381][T14124] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 591.732177][T14124] usb 7-1: New USB device found, idVendor=056a, idProduct=0326, bcdDevice= 0.00 [ 591.741596][T14124] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.752483][T14124] usb 7-1: config 0 descriptor?? [ 591.796719][T14917] hfs: can't find a HFS filesystem on dev nullb0 [ 591.814171][ T5868] usb 4-1: usb_control_msg returned -71 [ 591.824041][ T5868] usbtmc 4-1:16.0: can't read capabilities [ 591.851372][ T5868] usb 4-1: USB disconnect, device number 89 [ 591.963861][ T29] audit: type=1400 audit(1738392641.577:1619): avc: denied { connect } for pid=14953 comm="syz.1.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 592.233272][T14124] wacom 0003:056A:0326.0024: item fetching failed at offset 10/11 [ 592.249749][T14124] wacom 0003:056A:0326.0024: parse failed [ 592.256614][T14124] wacom 0003:056A:0326.0024: probe with driver wacom failed with error -22 [ 592.960530][T14933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.980754][T14933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.215084][ T5868] usb 7-1: USB disconnect, device number 9 [ 593.635510][ T5870] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 593.795479][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 593.812339][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.837093][ T5870] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 593.856729][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.889829][ T5870] usb 4-1: config 0 descriptor?? [ 594.075919][ T5141] Bluetooth: hci6: command tx timeout [ 594.175607][T14124] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 594.254492][ T29] audit: type=1326 audit(1738392643.787:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14975 comm="syz.1.2647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe23af8cda9 code=0x0 [ 594.325429][T14124] usb 7-1: Using ep0 maxpacket: 8 [ 594.337636][T14124] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 594.347358][T14124] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.356016][T14124] usb 7-1: Product: syz [ 594.361070][T14124] usb 7-1: Manufacturer: syz [ 594.366040][T14124] usb 7-1: SerialNumber: syz [ 594.374508][T14124] usb 7-1: config 0 descriptor?? [ 594.576843][ T5870] mcp2221 0003:04D8:00DD.0025: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 594.812696][T14969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.823678][T14969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.843662][ T5867] usb 4-1: USB disconnect, device number 90 [ 595.617588][ T29] audit: type=1400 audit(1738392645.247:1621): avc: denied { write } for pid=14992 comm="syz.1.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 596.510804][T14990] nvme_fabrics: unknown parameter or missing value 'gDf' in ctrl creation request [ 596.809530][T14990] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2652'. [ 596.864170][T14990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2652'. [ 596.874887][T14990] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2652'. [ 597.026685][T14990] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2652'. [ 598.051664][T14124] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 598.066159][T14124] gspca_sunplus: reg_w_riv err -71 [ 598.071423][T14124] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 598.097825][T14124] usb 7-1: USB disconnect, device number 10 [ 598.280290][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 598.517051][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 598.527174][ T9] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 598.718191][ T9] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 598.735004][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 598.756387][ T9] usb 2-1: config 1 has no interface number 0 [ 598.785348][ T9] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 598.814847][T15039] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 598.832148][ T9] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 598.878550][T15039] cramfs: wrong magic [ 598.882933][ T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 598.905658][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.953626][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 599.228141][T15045] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2668'. [ 599.355468][ T53] Bluetooth: hci6: command 0x0405 tx timeout [ 599.399942][T15049] vivid-000: disconnect [ 599.597350][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 600.086309][ T29] audit: type=1400 audit(1738392649.667:1622): avc: denied { map } for pid=15050 comm="syz.7.2670" path="pipe:[53883]" dev="pipefs" ino=53883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 600.162513][ T29] audit: type=1400 audit(1738392649.667:1623): avc: denied { mount } for pid=15050 comm="syz.7.2670" name="/" dev="rpc_pipefs" ino=52880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 600.321152][ T29] audit: type=1400 audit(1738392649.897:1624): avc: denied { accept } for pid=15056 comm="syz.7.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 600.395337][ T29] audit: type=1326 audit(1738392650.007:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15018 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23af8cda9 code=0x7ffc0000 [ 600.396733][ T5901] usb 2-1: USB disconnect, device number 38 [ 600.420433][ T29] audit: type=1326 audit(1738392650.017:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15018 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe23af8cda9 code=0x7ffc0000 [ 600.453221][ T29] audit: type=1326 audit(1738392650.017:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15018 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23af8cda9 code=0x7ffc0000 [ 600.477567][T15047] vivid-000: reconnect [ 600.585455][ T29] audit: type=1326 audit(1738392650.017:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15018 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fe23af8cda9 code=0x7ffc0000 [ 600.629464][T15061] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.2674'. [ 600.632465][ T5901] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 600.880247][ T29] audit: type=1326 audit(1738392650.017:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15018 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23af8cda9 code=0x7ffc0000 [ 600.938108][ T29] audit: type=1326 audit(1738392650.017:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15018 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fe23af8cda9 code=0x7ffc0000 [ 600.997065][ T29] audit: type=1326 audit(1738392650.017:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15018 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23af8cda9 code=0x7ffc0000 [ 601.020552][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.636782][T15079] ALSA: mixer_oss: invalid OSS volume 'RA' [ 602.230913][T15090] ALSA: mixer_oss: invalid OSS volume 'RA' [ 602.425979][ T5867] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 602.458339][T15092] ALSA: mixer_oss: invalid OSS volume 'RA' [ 602.805619][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 602.845644][ T5867] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.859467][ T5867] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.914558][ T5867] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 602.934733][ T5867] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 602.955656][ T5867] usb 4-1: Product: syz [ 602.960464][ T5867] usb 4-1: Manufacturer: syz [ 603.001757][ T5867] hub 4-1:4.0: USB hub found [ 603.256358][ T5867] hub 4-1:4.0: 2 ports detected [ 603.307388][T15106] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 603.322824][T15106] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 603.765446][ T5901] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 603.926600][ T5901] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 603.954695][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.965530][ T5901] usb 7-1: config 0 descriptor?? [ 603.974094][ T5901] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 603.985937][T15069] xt_TCPMSS: Only works on TCP SYN packets [ 604.191335][T15113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.215614][T15113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.441175][ T5901] gp8psk: usb out operation failed. [ 604.489386][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 604.515734][ T5901] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 604.548253][ T5901] usb 7-1: media controller created [ 604.716561][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 604.721449][ T5867] hub 4-1:4.0: activate --> -90 [ 604.772888][ T5901] gp8psk_fe: Frontend attached [ 604.783412][ T5901] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 604.813235][ T5901] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 604.854063][ T5901] gp8psk: usb in 138 operation failed. [ 604.862753][ T5901] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 604.882600][ T5901] gp8psk: found Genpix USB device pID = 203 (hex) [ 604.899118][ T5901] usb 7-1: USB disconnect, device number 11 [ 604.933082][ T5868] usb 4-1: USB disconnect, device number 91 [ 604.939759][ T5867] hub 4-1:4.0: hub_ext_port_status failed (err = -71) [ 605.204757][ T5901] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 605.248830][T15124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2692'. [ 605.257958][T15124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2692'. [ 605.697374][T15125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2692'. [ 606.126132][ T5867] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 606.255664][ T5868] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 606.519066][T15146] ALSA: mixer_oss: invalid OSS volume 'RA' [ 606.887176][ T5868] usb 4-1: not running at top speed; connect to a high speed hub [ 606.895930][ T5868] usb 4-1: config 2 has an invalid interface number: 17 but max is 0 [ 606.910160][ T5868] usb 4-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 606.925399][ T5867] usb 2-1: config 0 has no interfaces? [ 606.930892][ T5867] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 606.965635][ T5868] usb 4-1: config 2 has no interface number 0 [ 606.985602][ T5868] usb 4-1: config 2 interface 17 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 606.997122][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.013742][ T5868] usb 4-1: config 2 interface 17 altsetting 4 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 607.030788][ T5867] usb 2-1: config 0 descriptor?? [ 607.044059][ T5868] usb 4-1: config 2 interface 17 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 607.067803][ T5868] usb 4-1: config 2 interface 17 altsetting 4 endpoint 0xD has an invalid bInterval 0, changing to 4 [ 607.086824][T15151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2701'. [ 607.106314][ T5868] usb 4-1: config 2 interface 17 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 1023 [ 607.159987][ T5868] usb 4-1: config 2 interface 17 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 607.200706][ T5868] usb 4-1: config 2 interface 17 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 607.631547][ T5868] usb 4-1: config 2 interface 17 has no altsetting 0 [ 607.679083][ T5901] usb 2-1: USB disconnect, device number 39 [ 607.679906][ T5868] usb 4-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=a2.2f [ 607.704993][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.748413][ T5868] usb 4-1: Product: с [ 607.754902][ T5868] usb 4-1: Manufacturer: Х [ 607.765148][ T5141] Bluetooth: hci5: command tx timeout [ 607.777810][ T5868] usb 4-1: SerialNumber: ࡠ [ 607.851471][T15140] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 607.995960][ T9611] block nbd0: Possible stuck request ffff888025d70000: control (read@0,4096B). Runtime 480 seconds [ 608.236832][T15140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.245823][T15140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.268956][ T5868] safe_serial 4-1:2.17: safe_serial converter detected [ 608.292144][ T5868] safe_serial 4-1:2.17: probe with driver safe_serial failed with error -22 [ 608.341535][ T5868] usb 4-1: USB disconnect, device number 92 [ 608.633662][ T5870] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 608.935407][ T5870] usb 7-1: Using ep0 maxpacket: 16 [ 609.043096][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.106215][ T5870] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 609.122776][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.233197][ T5870] usb 7-1: config 0 descriptor?? [ 609.626562][ T5868] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 609.911200][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 610.005567][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.479123][ T5870] mcp2221 0003:04D8:00DD.0026: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 610.506300][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.530598][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 610.942285][ T5868] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 610.952051][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.966165][ T5868] usb 4-1: config 0 descriptor?? [ 610.981435][ T5870] usb 7-1: USB disconnect, device number 12 [ 611.687592][ T5868] usbhid 4-1:0.0: can't add hid device: -71 [ 611.703981][ T5868] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 611.722007][ T5868] usb 4-1: USB disconnect, device number 93 [ 612.482894][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 612.559160][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 612.734603][T15214] ceph: No mds server is up or the cluster is laggy [ 612.957425][ T53] Bluetooth: hci1: command tx timeout [ 613.145348][T14124] usb 4-1: new low-speed USB device number 94 using dummy_hcd [ 613.245384][ T5867] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 613.255578][ T5868] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 613.295686][T14124] usb 4-1: device descriptor read/64, error -71 [ 613.419897][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.431418][ T5868] usb 7-1: Using ep0 maxpacket: 16 [ 613.440563][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 613.461764][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.476750][ T5868] usb 7-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 613.493278][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 613.507299][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.531252][ T5868] usb 7-1: Product: syz [ 613.537121][ T5867] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 613.546330][T14124] usb 4-1: new low-speed USB device number 95 using dummy_hcd [ 613.553972][ T5868] usb 7-1: Manufacturer: syz [ 613.564519][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.573168][ T5868] usb 7-1: SerialNumber: syz [ 613.585152][ T5868] usb 7-1: config 0 descriptor?? [ 613.601815][ T5867] usb 2-1: config 0 descriptor?? [ 613.607536][ T5868] kobil_sct 7-1:0.0: KOBIL USB smart card terminal converter detected [ 613.666383][ T5868] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 613.685864][T14124] usb 4-1: device descriptor read/64, error -71 [ 613.807370][T14124] usb usb4-port1: attempt power cycle [ 613.824106][ T5864] usb 7-1: USB disconnect, device number 13 [ 613.836850][ T5864] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 613.875843][ T5864] kobil_sct 7-1:0.0: device disconnected [ 614.049074][ T5867] usbhid 2-1:0.0: can't add hid device: -71 [ 614.056127][ T5867] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 614.081682][ T5867] usb 2-1: USB disconnect, device number 40 [ 614.155664][T14124] usb 4-1: new low-speed USB device number 96 using dummy_hcd [ 614.186487][T14124] usb 4-1: device descriptor read/8, error -71 [ 614.548359][T14124] usb 4-1: new low-speed USB device number 97 using dummy_hcd [ 614.575848][T14124] usb 4-1: device descriptor read/8, error -71 [ 614.686588][T14124] usb usb4-port1: unable to enumerate USB device [ 614.968634][T14124] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 615.085626][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 615.085636][ T29] audit: type=1400 audit(1738392664.707:1637): avc: denied { accept } for pid=15239 comm="syz.1.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 615.193060][T15242] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2729'. [ 615.215394][T14124] usb 5-1: Using ep0 maxpacket: 16 [ 615.263072][T14124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.294834][T14124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.324182][T14124] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 615.348169][T14124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.377002][T14124] usb 5-1: config 0 descriptor?? [ 615.562412][T15247] bridge0: port 3(hsr_slave_1) entered blocking state [ 615.570071][T15247] bridge0: port 3(hsr_slave_1) entered disabled state [ 615.577128][T15247] hsr_slave_1: entered allmulticast mode [ 615.584111][T15247] hsr_slave_1: left allmulticast mode [ 615.836564][ T5141] Bluetooth: hci2: command 0x0406 tx timeout [ 615.851098][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2733'. [ 615.867510][T15235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.869868][T15253] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28535 sclass=netlink_xfrm_socket pid=15253 comm=syz.1.2733 [ 615.878019][T15235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.896598][ T5864] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 616.166785][ T5864] usb 7-1: device descriptor read/64, error -71 [ 616.178658][T14124] usbhid 5-1:0.0: can't add hid device: -71 [ 616.185355][T14124] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 616.236494][T14124] usb 5-1: USB disconnect, device number 82 [ 616.404764][ T53] Bluetooth: hci5: command tx timeout [ 616.495966][ T9] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 616.503613][ T5864] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 616.557779][ T29] audit: type=1400 audit(1738392666.187:1638): avc: denied { setopt } for pid=15263 comm="syz.1.2736" lport=36628 faddr=::ffff:172.20.255.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 616.655372][ T5864] usb 7-1: device descriptor read/64, error -71 [ 616.723065][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 616.748840][ T9] usb 4-1: config 2 has an invalid interface number: 17 but max is 0 [ 616.757131][ T9] usb 4-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 616.766174][ T5864] usb usb7-port1: attempt power cycle [ 616.772254][ T9] usb 4-1: config 2 has no interface number 0 [ 616.780320][ T9] usb 4-1: config 2 interface 17 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 616.791888][ T9] usb 4-1: config 2 interface 17 altsetting 4 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 616.814605][ T9] usb 4-1: config 2 interface 17 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 616.839123][ T9] usb 4-1: config 2 interface 17 altsetting 4 endpoint 0xD has an invalid bInterval 0, changing to 4 [ 616.850305][ T9] usb 4-1: config 2 interface 17 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 1023 [ 616.861895][ T9] usb 4-1: config 2 interface 17 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 616.883596][ T9] usb 4-1: config 2 interface 17 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 616.897159][ T9] usb 4-1: config 2 interface 17 has no altsetting 0 [ 616.909196][ T9] usb 4-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=a2.2f [ 616.922540][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.087826][ T9] usb 4-1: Product: с [ 617.092487][ T9] usb 4-1: Manufacturer: Х [ 617.098289][ T9] usb 4-1: SerialNumber: ࡠ [ 617.118590][T15257] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 617.278691][ T5864] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 617.326118][ T5864] usb 7-1: device descriptor read/8, error -71 [ 617.360848][ T9] safe_serial 4-1:2.17: safe_serial converter detected [ 617.375117][ T9] safe_serial 4-1:2.17: probe with driver safe_serial failed with error -22 [ 617.431185][ T9] usb 4-1: USB disconnect, device number 98 [ 617.564844][ T5870] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 617.595710][ T5864] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 617.630232][ T5864] usb 7-1: device descriptor read/8, error -71 [ 618.165336][ T5864] usb usb7-port1: unable to enumerate USB device [ 618.186904][ T5870] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 618.203345][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.217917][ T5870] usb 5-1: config 0 has no interface number 0 [ 618.242868][ T5870] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 618.270859][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.282119][ T5870] usb 5-1: Product: syz [ 618.286771][ T5870] usb 5-1: Manufacturer: syz [ 618.291478][ T5870] usb 5-1: SerialNumber: syz [ 618.299057][ T5870] usb 5-1: config 0 descriptor?? [ 618.393153][T15289] program syz.3.2743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 618.715645][ T53] Bluetooth: hci6: command 0x0405 tx timeout [ 619.091107][ T29] audit: type=1400 audit(1738392668.717:1639): avc: denied { getopt } for pid=15302 comm="syz.1.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 619.333077][T15306] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 619.365574][ T5901] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 619.394771][ T8859] Bluetooth: hci7: Frame reassembly failed (-84) [ 619.545874][ T5901] usb 7-1: Using ep0 maxpacket: 16 [ 619.619818][ T5901] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 619.683363][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.713841][ T5901] usb 7-1: Product: syz [ 619.747481][ T5901] usb 7-1: Manufacturer: syz [ 619.752174][ T5901] usb 7-1: SerialNumber: syz [ 619.773405][ T5901] usb 7-1: config 0 descriptor?? [ 619.782748][ T5901] visor 7-1:0.0: Sony Clie 3.5 converter detected [ 619.899873][ T5870] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 619.928758][ T5870] usb 5-1: No valid video chain found. [ 619.992943][ T5870] usb 5-1: USB disconnect, device number 83 [ 620.027820][ T5901] usb 7-1: clie_3_5_startup: get config number bad return length: 0 [ 620.050655][T15315] ALSA: mixer_oss: invalid OSS volume 'RA' [ 620.059220][ T5901] visor 7-1:0.0: probe with driver visor failed with error -5 [ 620.075621][ T46] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 620.279748][ T46] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 620.283510][T15297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.291860][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.376693][ T46] usb 2-1: Product: syz [ 620.380901][ T46] usb 2-1: Manufacturer: syz [ 620.394512][ T46] usb 2-1: SerialNumber: syz [ 620.423496][ T46] usb 2-1: config 0 descriptor?? [ 620.893211][ T5901] usb 2-1: USB disconnect, device number 41 [ 621.006663][ T46] usb 7-1: USB disconnect, device number 18 [ 621.132139][T15312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 621.142254][T15312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.160678][T15312] Cannot find set identified by id 0 to match [ 621.325646][ T9] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 621.435446][ T53] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 621.486951][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 621.498500][ T9] usb 5-1: config 2 has an invalid interface number: 17 but max is 0 [ 621.534307][ T9] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 621.556029][ T9] usb 5-1: config 2 has no interface number 0 [ 621.575937][ T9] usb 5-1: config 2 interface 17 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 621.604209][ T9] usb 5-1: config 2 interface 17 altsetting 4 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 621.604841][T15326] 9pnet_fd: Insufficient options for proto=fd [ 621.631699][ T9] usb 5-1: config 2 interface 17 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 621.655270][ T9] usb 5-1: config 2 interface 17 altsetting 4 endpoint 0xD has an invalid bInterval 0, changing to 4 [ 621.666866][ T9] usb 5-1: config 2 interface 17 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 1023 [ 621.678236][ T9] usb 5-1: config 2 interface 17 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 621.689407][ T9] usb 5-1: config 2 interface 17 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 621.701965][ T9] usb 5-1: config 2 interface 17 has no altsetting 0 [ 621.718206][ T9] usb 5-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=a2.2f [ 621.727757][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.742540][ T9] usb 5-1: Product: с [ 621.755819][ T9] usb 5-1: Manufacturer: Х [ 621.760279][ T53] Bluetooth: hci1: command tx timeout [ 621.760329][ T9] usb 5-1: SerialNumber: ࡠ [ 621.774607][T15322] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 621.890587][T15335] netlink: 'syz.1.2759': attribute type 21 has an invalid length. [ 622.100165][ T9] safe_serial 5-1:2.17: safe_serial converter detected [ 622.126203][ T9] safe_serial 5-1:2.17: probe with driver safe_serial failed with error -22 [ 622.189772][ T9] usb 5-1: USB disconnect, device number 84 [ 622.524662][T15349] netlink: 'syz.7.2761': attribute type 21 has an invalid length. [ 623.026577][T15361] i2c i2c-0: Invalid block write size 34 [ 623.785318][ T5901] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 623.858465][T15373] tmpfs: Bad value for 'mpol' [ 623.867891][T15372] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2769'. [ 623.915599][T15372] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2769'. [ 623.924583][T15372] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2769'. [ 623.956605][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 30, changing to 8 [ 623.991584][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.015024][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.046054][ T5901] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.105375][ T5901] usb 7-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 624.135584][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.208476][T15383] fuse: Bad value for 'rootmode' [ 624.237370][ T53] Bluetooth: hci1: command tx timeout [ 624.526158][ T5901] usb 7-1: config 0 descriptor?? [ 624.895290][T14124] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 624.956135][ T5901] samsung 0003:0419:0600.0027: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.6-1/input0 [ 625.106757][T14124] usb 2-1: not running at top speed; connect to a high speed hub [ 625.126122][T14124] usb 2-1: config 2 has an invalid interface number: 17 but max is 0 [ 625.134239][T14124] usb 2-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 625.163493][T14124] usb 2-1: config 2 has no interface number 0 [ 625.169961][T14124] usb 2-1: config 2 interface 17 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 625.181906][T14124] usb 2-1: config 2 interface 17 altsetting 4 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 625.192916][T14124] usb 2-1: config 2 interface 17 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 625.209515][T14124] usb 2-1: config 2 interface 17 altsetting 4 endpoint 0xD has an invalid bInterval 0, changing to 4 [ 625.221412][T14124] usb 2-1: config 2 interface 17 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 1023 [ 625.232948][T14124] usb 2-1: config 2 interface 17 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 625.243841][T14124] usb 2-1: config 2 interface 17 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 625.262091][T14124] usb 2-1: config 2 interface 17 has no altsetting 0 [ 625.271051][T14124] usb 2-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=a2.2f [ 625.281293][T14124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.290614][T14124] usb 2-1: Product: с [ 625.294892][T14124] usb 2-1: Manufacturer: Х [ 625.299461][T14124] usb 2-1: SerialNumber: ࡠ [ 625.307261][T15388] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 625.452973][ T29] audit: type=1400 audit(1738392675.080:1640): avc: denied { write } for pid=15395 comm="syz.3.2778" name="usbmon7" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 625.484938][ T29] audit: type=1400 audit(1738392675.080:1641): avc: denied { map } for pid=15395 comm="syz.3.2778" path="/dev/usbmon7" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 625.526226][T14124] safe_serial 2-1:2.17: safe_serial converter detected [ 625.538945][T14124] safe_serial 2-1:2.17: probe with driver safe_serial failed with error -22 [ 625.560371][ T29] audit: type=1400 audit(1738392675.110:1642): avc: denied { execute } for pid=15395 comm="syz.3.2778" path="/dev/usbmon7" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 625.571506][T14124] usb 2-1: USB disconnect, device number 42 [ 626.075594][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 626.255923][T15406] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 626.398625][T15403] Process accounting resumed [ 626.715364][T15389] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 626.827972][ T5869] usb 7-1: USB disconnect, device number 19 [ 627.083751][T15415] ALSA: mixer_oss: invalid OSS volume 'RA' [ 627.567156][T15421] netlink: 'syz.6.2783': attribute type 4 has an invalid length. [ 630.168304][T15435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 630.399857][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2790'. [ 630.601986][ T9] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 630.686079][T15451] netlink: 'syz.3.2793': attribute type 21 has an invalid length. [ 630.889811][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.906962][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 630.936430][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 630.970844][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 631.002843][ T9] usb 5-1: SerialNumber: syz [ 631.032417][ T9] usb 5-1: 0:2 : does not exist [ 631.279569][T15460] vivid-000: disconnect [ 631.995571][ T9] usb 5-1: USB disconnect, device number 85 [ 632.145851][T15454] vivid-000: reconnect [ 632.239370][ T8069] udevd[8069]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 632.431502][T15480] FAULT_INJECTION: forcing a failure. [ 632.431502][T15480] name failslab, interval 1, probability 0, space 0, times 0 [ 632.444595][ T5864] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 632.454497][T15480] CPU: 1 UID: 0 PID: 15480 Comm: syz.1.2802 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 632.454522][T15480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 632.454532][T15480] Call Trace: [ 632.454537][T15480] [ 632.454544][T15480] dump_stack_lvl+0x16c/0x1f0 [ 632.454575][T15480] should_fail_ex+0x50a/0x650 [ 632.454599][T15480] ? fs_reclaim_acquire+0xae/0x150 [ 632.454624][T15480] should_failslab+0xc2/0x120 [ 632.454643][T15480] __kmalloc_node_noprof+0xd1/0x510 [ 632.454661][T15480] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 632.454690][T15480] __kvmalloc_node_noprof+0xad/0x1a0 [ 632.454716][T15480] xt_alloc_entry_offsets+0x3a/0x60 [ 632.454734][T15480] translate_table+0x22e/0x17b0 [ 632.454764][T15480] ? _copy_from_user+0x59/0xd0 [ 632.454793][T15480] ? __pfx_translate_table+0x10/0x10 [ 632.454817][T15480] ? __might_fault+0xe3/0x190 [ 632.454843][T15480] do_ip6t_set_ctl+0x926/0xbf0 [ 632.454867][T15480] ? trace_contention_end+0xee/0x140 [ 632.454892][T15480] ? __mutex_lock+0x1cc/0xb10 [ 632.454920][T15480] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 632.454946][T15480] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 632.454974][T15480] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 632.455011][T15480] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 632.455041][T15480] nf_setsockopt+0x8a/0xf0 [ 632.455068][T15480] ipv6_setsockopt+0x135/0x170 [ 632.455101][T15480] tcp_setsockopt+0xa4/0x100 [ 632.455124][T15480] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 632.455146][T15480] do_sock_setsockopt+0x222/0x480 [ 632.455168][T15480] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 632.455190][T15480] ? lock_acquire+0x2f/0xb0 [ 632.455227][T15480] __sys_setsockopt+0x1a0/0x230 [ 632.455246][T15480] __x64_sys_setsockopt+0xbd/0x160 [ 632.455262][T15480] ? do_syscall_64+0x91/0x250 [ 632.455275][T15480] ? lockdep_hardirqs_on+0x7c/0x110 [ 632.455298][T15480] do_syscall_64+0xcd/0x250 [ 632.455315][T15480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.455339][T15480] RIP: 0033:0x7fe23af8cda9 [ 632.455353][T15480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.455370][T15480] RSP: 002b:00007fe23bdaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 632.455388][T15480] RAX: ffffffffffffffda RBX: 00007fe23b1a5fa0 RCX: 00007fe23af8cda9 [ 632.455399][T15480] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 632.455409][T15480] RBP: 00007fe23bdaf090 R08: 00000000000003c8 R09: 0000000000000000 [ 632.455419][T15480] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.455429][T15480] R13: 0000000000000000 R14: 00007fe23b1a5fa0 R15: 00007ffeec190ec8 [ 632.455452][T15480] [ 632.718740][ C1] vkms_vblank_simulate: vblank timer overrun [ 632.769053][T15484] tmpfs: Bad value for 'mpol' [ 632.821651][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.868145][T15485] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 632.909867][ T5864] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 633.101706][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.199492][ T5864] usb 4-1: config 0 descriptor?? [ 633.210583][ T5864] pwc: Askey VC010 type 2 USB webcam detected. [ 633.391828][T15490] ALSA: mixer_oss: invalid OSS volume 'RA' [ 633.608276][ T5864] pwc: send_video_command error -71 [ 633.633067][ T5864] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 633.655723][ T5864] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 633.689273][ T5864] usb 4-1: USB disconnect, device number 99 [ 634.322018][T15502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 634.816022][ T5864] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 634.864519][ T29] audit: type=1400 audit(1738392684.490:1643): avc: denied { accept } for pid=15503 comm="syz.1.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 635.065423][ T5864] usb 4-1: device descriptor read/64, error -71 [ 635.280839][T15511] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 635.288124][T15511] cramfs: wrong magic [ 635.295685][T15511] No such timeout policy "syz0" [ 636.165680][ T5864] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 636.249969][T15529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2820'. [ 636.340559][ T5864] usb 4-1: not running at top speed; connect to a high speed hub [ 636.356404][ T5864] usb 4-1: config 2 has an invalid interface number: 17 but max is 0 [ 636.370497][ T5864] usb 4-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 636.390787][ T5864] usb 4-1: config 2 has no interface number 0 [ 636.410541][ T5864] usb 4-1: config 2 interface 17 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 636.429898][ T5864] usb 4-1: config 2 interface 17 altsetting 4 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 636.441939][ T5864] usb 4-1: config 2 interface 17 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 636.453729][ T5864] usb 4-1: config 2 interface 17 altsetting 4 endpoint 0xD has an invalid bInterval 0, changing to 4 [ 636.465407][ T5864] usb 4-1: config 2 interface 17 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 1023 [ 636.476987][ T5864] usb 4-1: config 2 interface 17 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 636.488658][ T5864] usb 4-1: config 2 interface 17 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 636.499911][ T5864] usb 4-1: config 2 interface 17 has no altsetting 0 [ 636.508923][ T5864] usb 4-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=a2.2f [ 636.518851][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.527262][ T5864] usb 4-1: Product: с [ 636.531549][ T5864] usb 4-1: Manufacturer: Х [ 636.536430][ T5864] usb 4-1: SerialNumber: ࡠ [ 636.554359][T15517] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 636.778541][ T5864] safe_serial 4-1:2.17: safe_serial converter detected [ 636.823220][ T5864] safe_serial 4-1:2.17: probe with driver safe_serial failed with error -22 [ 636.854539][ T5864] usb 4-1: USB disconnect, device number 101 [ 637.578331][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 637.694836][T15564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 637.767318][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 637.846930][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.858771][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.886526][ T9] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 637.896073][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.152730][ T9611] block nbd0: Possible stuck request ffff888025d70000: control (read@0,4096B). Runtime 510 seconds [ 638.194030][ T9] usb 7-1: config 0 descriptor?? [ 638.405498][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 639.595495][T14124] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 639.650342][T15588] ALSA: seq fatal error: cannot create timer (-22) [ 639.671613][ T53] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 639.683577][ T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u9:0 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 639.683605][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 639.683623][ T53] Workqueue: hci1 hci_rx_work [ 639.683648][ T53] Call Trace: [ 639.683654][ T53] [ 639.683662][ T53] dump_stack_lvl+0x16c/0x1f0 [ 639.683693][ T53] sysfs_warn_dup+0x7f/0xa0 [ 639.683721][ T53] sysfs_create_dir_ns+0x24d/0x2b0 [ 639.683747][ T53] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 639.683774][ T53] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 639.683793][ T53] ? kobject_add_internal+0x12d/0x990 [ 639.683814][ T53] ? do_raw_spin_unlock+0x172/0x230 [ 639.683833][ T53] kobject_add_internal+0x2c8/0x990 [ 639.683857][ T53] kobject_add+0x16f/0x240 [ 639.683877][ T53] ? __pfx_kobject_add+0x10/0x10 [ 639.683896][ T53] ? class_to_subsys+0x3e/0x160 [ 639.683918][ T53] ? do_raw_spin_unlock+0x172/0x230 [ 639.683936][ T53] ? kobject_put+0xab/0x5a0 [ 639.683962][ T53] device_add+0x289/0x1a70 [ 639.683983][ T53] ? __pfx_dev_set_name+0x10/0x10 [ 639.684007][ T53] ? __pfx_device_add+0x10/0x10 [ 639.684026][ T53] ? mgmt_send_event_skb+0x2f2/0x460 [ 639.684053][ T53] hci_conn_add_sysfs+0x17e/0x230 [ 639.684077][ T53] le_conn_complete_evt+0x107f/0x1da0 [ 639.684102][ T53] ? __pfx_lock_release+0x10/0x10 [ 639.684127][ T53] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 639.684147][ T53] ? __mutex_lock+0x1cc/0xb10 [ 639.684184][ T53] hci_le_conn_complete_evt+0x23c/0x370 [ 639.684209][ T53] hci_le_meta_evt+0x2e2/0x5d0 [ 639.684229][ T53] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 639.684253][ T53] hci_event_packet+0x666/0x1180 [ 639.684279][ T53] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 639.684300][ T53] ? __pfx_hci_event_packet+0x10/0x10 [ 639.684319][ T53] ? mark_held_locks+0x9f/0xe0 [ 639.684345][ T53] ? kcov_remote_start+0x3cf/0x6e0 [ 639.684371][ T53] ? lockdep_hardirqs_on+0x7c/0x110 [ 639.684405][ T53] hci_rx_work+0x2c5/0x16b0 [ 639.684427][ T53] ? process_one_work+0x921/0x1ba0 [ 639.684456][ T53] process_one_work+0x9c5/0x1ba0 [ 639.684488][ T53] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 639.684514][ T53] ? __pfx_process_one_work+0x10/0x10 [ 639.684545][ T53] ? assign_work+0x1a0/0x250 [ 639.684570][ T53] worker_thread+0x6c8/0xf00 [ 639.684604][ T53] ? __pfx_worker_thread+0x10/0x10 [ 639.684630][ T53] kthread+0x3af/0x750 [ 639.684652][ T53] ? __pfx_kthread+0x10/0x10 [ 639.684673][ T53] ? lock_acquire+0x2f/0xb0 [ 639.684701][ T53] ? __pfx_kthread+0x10/0x10 [ 639.684724][ T53] ret_from_fork+0x45/0x80 [ 639.684747][ T53] ? __pfx_kthread+0x10/0x10 [ 639.684769][ T53] ret_from_fork_asm+0x1a/0x30 [ 639.684802][ T53] [ 639.684902][ T53] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 639.895335][ T5870] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 639.901785][ T53] Bluetooth: hci1: failed to register connection device [ 640.016989][T14124] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 640.027559][T14124] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 640.041291][T14124] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 640.050913][T14124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.061567][T14124] usb 4-1: config 0 descriptor?? [ 640.070644][T14124] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 640.086332][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 640.115635][ T5870] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 640.185521][ T5870] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 640.251407][ T5870] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 640.289647][ T5870] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 640.336375][ T5870] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 640.351261][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 640.361726][ T5870] usb 5-1: Product: syz [ 640.475623][ T53] Bluetooth: hci6: command 0x0405 tx timeout [ 640.762979][T15590] hfs: can't find a HFS filesystem on dev nullb0 [ 640.769092][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 640.785666][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 640.814679][ T5870] usb 5-1: usb_control_msg returned -71 [ 640.825360][ T5870] usbtmc 5-1:16.0: can't read capabilities [ 640.837797][ T9] usb 7-1: USB disconnect, device number 20 [ 640.848416][ T5870] usb 5-1: USB disconnect, device number 86 [ 641.502032][T15612] syz.7.2847 (15612): drop_caches: 2 [ 641.535107][T15612] syz.7.2847 (15612): drop_caches: 2 [ 641.652691][T15617] 9pnet: p9_errstr2errno: server reported unknown error N! [ 641.865353][ T5869] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 642.020534][T15626] serio: Serial port ptm0 [ 642.036828][ T5869] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 642.049163][ T5869] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 642.059588][ T5869] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 642.068959][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.116038][T15615] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 642.138684][ T5869] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 642.405354][ T5864] usb 4-1: USB disconnect, device number 102 [ 642.494052][ T29] audit: type=1400 audit(1738392692.120:1644): avc: denied { watch watch_reads } for pid=15632 comm="syz.3.2854" path="/proc/1672/net/unix" dev="proc" ino=4026533149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 642.897935][ T5864] usb 7-1: USB disconnect, device number 21 [ 643.295975][T14124] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 643.536715][T14124] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 643.628372][T14124] usb 2-1: config 0 has no interface number 0 [ 643.866913][T14124] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 12336, setting to 64 [ 643.905139][T14124] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 643.935284][T14124] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 643.956866][T14124] usb 2-1: Product: syz [ 643.961056][T14124] usb 2-1: Manufacturer: syz [ 643.976258][T14124] usb 2-1: SerialNumber: syz [ 644.165771][ T29] audit: type=1400 audit(1738392693.670:1645): avc: denied { write } for pid=15650 comm="syz.4.2858" name="file0" dev="tmpfs" ino=2957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 644.713158][ T29] audit: type=1400 audit(1738392693.670:1646): avc: denied { open } for pid=15650 comm="syz.4.2858" path="/549/file0" dev="tmpfs" ino=2957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 644.721029][T14124] usb 2-1: config 0 descriptor?? [ 644.784152][T14124] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 644.792292][T14124] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 644.801136][T14124] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 644.817775][T14124] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 645.043415][T14124] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 645.086858][ T29] audit: type=1400 audit(1738392693.670:1647): avc: denied { append } for pid=15650 comm="syz.4.2858" name="file0" dev="tmpfs" ino=2957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 645.096220][T14124] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 645.294804][ T29] audit: type=1400 audit(1738392693.680:1648): avc: denied { lock } for pid=15650 comm="syz.4.2858" path="/549/file0" dev="tmpfs" ino=2957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 645.852379][ T29] audit: type=1400 audit(1738392693.680:1649): avc: denied { connect } for pid=15650 comm="syz.4.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 646.478414][T14124] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 646.481793][ T29] audit: type=1400 audit(1738392696.110:1650): avc: denied { module_load } for pid=15667 comm="syz.6.2863" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=56838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 646.496116][T14124] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 646.533019][T14124] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 646.547894][T14124] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 646.955494][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 647.034140][ T9] usb 2-1: USB disconnect, device number 43 [ 647.091992][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 647.152675][ T29] audit: type=1400 audit(1738392696.780:1651): avc: denied { getopt } for pid=15676 comm="syz.1.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 647.281721][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 647.295635][T15670] Invalid ELF header magic: != ELF [ 647.467275][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 647.522971][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 647.555731][ T9] keyspan 2-1:0.107: device disconnected [ 647.968584][ T5864] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 648.119159][T15700] netlink: 'syz.3.2872': attribute type 4 has an invalid length. [ 648.829388][ T5864] usb 7-1: not running at top speed; connect to a high speed hub [ 649.535460][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 649.586192][ T5864] usb 7-1: config 2 has an invalid interface number: 17 but max is 0 [ 649.604766][ T5864] usb 7-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 649.831997][ T5864] usb 7-1: config 2 has no interface number 0 [ 649.838182][ T5864] usb 7-1: config 2 interface 17 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 649.849534][ T5864] usb 7-1: config 2 interface 17 altsetting 4 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 649.861783][ T5864] usb 7-1: config 2 interface 17 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 649.872926][ T5864] usb 7-1: config 2 interface 17 altsetting 4 endpoint 0xD has an invalid bInterval 0, changing to 4 [ 649.887647][ T5864] usb 7-1: config 2 interface 17 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 1023 [ 649.918989][T15713] netlink: 'syz.4.2876': attribute type 21 has an invalid length. [ 649.945507][ T5864] usb 7-1: config 2 interface 17 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 650.223765][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.235039][ T5864] usb 7-1: config 2 interface 17 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 650.246876][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 650.265276][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.274244][ T5864] usb 7-1: config 2 interface 17 has no altsetting 0 [ 650.298080][ T5864] usb 7-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=a2.2f [ 650.308742][ T9] usb 2-1: config 0 descriptor?? [ 650.318671][ T5864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.327555][ T5864] usb 7-1: Product: с [ 650.331796][ T5864] usb 7-1: Manufacturer: Х [ 650.337166][ T5864] usb 7-1: SerialNumber: ࡠ [ 650.346431][T15693] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 650.600793][ T5864] safe_serial 7-1:2.17: safe_serial converter detected [ 650.608474][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 650.614415][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 650.636406][ T5864] safe_serial 7-1:2.17: probe with driver safe_serial failed with error -22 [ 650.652672][ T9] usb 2-1: USB disconnect, device number 44 [ 651.009552][ T5864] usb 7-1: USB disconnect, device number 22 [ 651.425642][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 651.438101][T15736] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 651.467015][T15736] overlayfs: missing 'lowerdir' [ 651.595457][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 651.602940][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.638498][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 651.670887][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.978002][ T9] usb 2-1: config 0 descriptor?? [ 652.124242][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 652.139816][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 652.319759][ T9] usb 2-1: USB disconnect, device number 45 [ 652.624062][T15759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2890'. [ 653.032020][ T29] audit: type=1400 audit(1738392702.640:1652): avc: denied { read } for pid=15742 comm="syz.6.2885" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 653.115202][ T29] audit: type=1400 audit(1738392702.640:1653): avc: denied { open } for pid=15742 comm="syz.6.2885" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 653.179762][ T29] audit: type=1400 audit(1738392702.710:1654): avc: denied { cmd } for pid=15735 comm="syz.3.2882" path="socket:[56968]" dev="sockfs" ino=56968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 653.627797][T15743] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 653.665412][T15743] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 653.693712][T15743] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 653.700108][T15743] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 653.716700][T15743] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 653.722719][T15743] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 653.743083][T15743] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 653.763392][T15743] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 653.792731][T15743] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 653.836644][T15743] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 653.888940][T15743] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 653.906378][T15743] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 654.001460][T15743] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 654.449694][T15783] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 654.919857][T15783] batman_adv: batadv0: Adding interface: gretap1 [ 654.931602][T15783] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.276675][ T5141] Bluetooth: hci3: command 0x0406 tx timeout [ 655.913400][ T5141] Bluetooth: hci4: command 0x0405 tx timeout [ 655.919536][ T5141] Bluetooth: hci1: command 0x0c1a tx timeout [ 655.925629][ T5141] Bluetooth: hci5: command 0x0406 tx timeout [ 655.931636][ T5141] Bluetooth: hci2: command 0x0406 tx timeout [ 655.938002][ T5141] Bluetooth: hci6: command 0x0405 tx timeout [ 655.987926][T15783] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 656.219525][T15810] IPv6: NLM_F_CREATE should be specified when creating new route [ 656.252071][T15805] syz.4.2905 (15805): drop_caches: 2 [ 656.279019][T15805] syz.4.2905 (15805): drop_caches: 2 [ 656.559023][ T9] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 656.745844][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 656.765035][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 656.794992][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 657.166426][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 657.198860][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 657.208257][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.228490][ T9] usb 4-1: Product: syz [ 657.243567][ T9] usb 4-1: Manufacturer: syz [ 657.261852][ T9] usb 4-1: SerialNumber: syz [ 657.905313][ T5869] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 658.005396][ T53] Bluetooth: hci6: command 0x0405 tx timeout [ 658.011561][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 658.061946][ T9] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 658.125470][ T5141] Bluetooth: hci5: command 0x0406 tx timeout [ 658.132265][ T5141] Bluetooth: hci1: command 0x0c1a tx timeout [ 658.347613][ T5869] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 658.369719][ T5869] usb 5-1: config 1 has no interface number 1 [ 658.383194][ T5869] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 658.397331][ T5869] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 658.413509][ T5869] usb 5-1: New USB device found, idVendor=1d6b, idProduct=8101, bcdDevice= 0.40 [ 658.422983][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.431253][ T5869] usb 5-1: Product: syz [ 658.435748][ T5869] usb 5-1: Manufacturer: syz [ 658.440346][ T5869] usb 5-1: SerialNumber: syz [ 658.453460][T15835] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 658.615725][ T5864] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 658.760105][ T9] usb 4-1: failed to read current rate; disabling the check [ 658.801931][ T5864] usb 2-1: config 7 has an invalid interface number: 219 but max is 2 [ 658.812642][ T5864] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 658.824088][ T5864] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 3 [ 658.829246][T15850] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2918'. [ 658.840310][ T5864] usb 2-1: config 7 has no interface number 0 [ 658.849125][ T5864] usb 2-1: config 7 interface 219 altsetting 49 endpoint 0x2 has invalid maxpacket 29899, setting to 8 [ 658.862300][ T5864] usb 2-1: config 7 interface 219 altsetting 49 has an invalid endpoint descriptor of length 4, skipping [ 658.874348][ T5864] usb 2-1: config 7 interface 219 altsetting 49 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 658.888016][ T5864] usb 2-1: config 7 interface 219 has no altsetting 0 [ 658.894809][ T5864] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=77.a1 [ 658.903948][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.914178][T15848] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 658.921722][T15848] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 658.980609][ T5869] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 658.994079][ T5869] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 659.051669][ T5869] usb 5-1: USB disconnect, device number 87 [ 659.095565][ T5870] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 659.157875][ T5864] usb 2-1: string descriptor 0 read error: -71 [ 659.172048][ T29] audit: type=1400 audit(1738392708.800:1655): avc: denied { setattr } for pid=15809 comm="syz.3.2906" name="/" dev="configfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 659.175601][ T5864] ems_usb 2-1:7.219 (unnamed net_device) (uninitialized): couldn't initialize controller: -71 [ 659.197550][ T46] usb 4-1: USB disconnect, device number 103 [ 659.232514][ T5864] ems_usb 2-1:7.219: probe with driver ems_usb failed with error -71 [ 659.251784][ T5870] usb 7-1: Using ep0 maxpacket: 32 [ 659.254113][ T5864] usb 2-1: USB disconnect, device number 46 [ 659.278985][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 659.308363][ T5870] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.337169][ T5870] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 659.347893][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.359339][ T5870] usb 7-1: Product: syz [ 659.363530][ T5870] usb 7-1: Manufacturer: syz [ 659.368416][ T5870] usb 7-1: SerialNumber: syz [ 659.374700][ T5870] usb 7-1: config 0 descriptor?? [ 659.417704][ T5870] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 659.604572][T15850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.624456][T15850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.647573][ T9] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 659.702691][ T8848] usb 7-1: Failed to submit usb control message: -71 [ 659.702785][ T46] usb 7-1: USB disconnect, device number 23 [ 659.710382][ T8848] usb 7-1: unable to send the bmi data to the device: -71 [ 659.733629][ T8848] usb 7-1: unable to get target info from device [ 659.740072][ T8848] usb 7-1: could not get target info (-71) [ 659.746075][ T8848] usb 7-1: could not probe fw (-71) [ 659.780736][ T29] audit: type=1400 audit(1738392709.400:1656): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 659.870699][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.891320][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 659.902953][T15865] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 659.915249][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.941255][ T9] usb 5-1: config 0 descriptor?? [ 659.964923][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 660.046171][T15869] netlink: 'syz.1.2923': attribute type 21 has an invalid length. [ 660.166928][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 660.175456][ T9] pwc: send_video_command error -71 [ 660.180178][T15843] Bluetooth: hci6: command 0x0405 tx timeout [ 660.180773][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 660.196774][ T9] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 660.268535][ T9] usb 5-1: USB disconnect, device number 88 [ 660.945490][ T5870] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 661.338292][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.396968][ T5870] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 661.410420][T15879] netlink: 'syz.1.2925': attribute type 21 has an invalid length. [ 661.459481][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.657642][ T5870] usb 5-1: config 0 descriptor?? [ 661.682656][ T5870] pwc: Askey VC010 type 2 USB webcam detected. [ 662.197655][T15893] netlink: 'syz.6.2930': attribute type 10 has an invalid length. [ 662.231784][T15893] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.245380][T15843] Bluetooth: hci1: command 0x0c1a tx timeout [ 662.260177][T15893] bond0: (slave team0): Enslaving as an active interface with an up link [ 662.324358][ T5870] pwc: recv_control_msg error -32 req 02 val 2b00 [ 662.445835][ T5870] pwc: recv_control_msg error -32 req 02 val 2700 [ 663.715605][ T5864] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 663.768570][ T5870] pwc: recv_control_msg error -71 req 02 val 2c00 [ 663.775514][ T5870] pwc: recv_control_msg error -71 req 04 val 1000 [ 663.784496][ T5870] pwc: recv_control_msg error -71 req 04 val 1300 [ 663.792390][ T5870] pwc: recv_control_msg error -71 req 04 val 1400 [ 663.800056][ T5870] pwc: recv_control_msg error -71 req 02 val 2000 [ 663.807508][ T5870] pwc: recv_control_msg error -71 req 02 val 2100 [ 663.814797][ T5870] pwc: recv_control_msg error -71 req 04 val 1500 [ 663.824443][ T5870] pwc: recv_control_msg error -71 req 02 val 2500 [ 663.833661][ T5870] pwc: recv_control_msg error -71 req 02 val 2400 [ 663.840846][ T5870] pwc: recv_control_msg error -71 req 02 val 2600 [ 663.850066][ T5870] pwc: recv_control_msg error -71 req 02 val 2900 [ 663.865608][ T5870] pwc: recv_control_msg error -71 req 02 val 2800 [ 663.872444][ T5870] pwc: recv_control_msg error -71 req 04 val 1100 [ 663.880303][ T5870] pwc: recv_control_msg error -71 req 04 val 1200 [ 663.899106][ T5864] usb 4-1: unable to get BOS descriptor or descriptor too short [ 663.913183][ T5870] pwc: Registered as video103. [ 663.925125][ T5870] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input45 [ 663.939335][ T5864] usb 4-1: config 7 has an invalid interface number: 87 but max is 1 [ 663.968066][ T5864] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 663.975508][ T5870] usb 5-1: USB disconnect, device number 89 [ 663.984287][ T29] audit: type=1400 audit(1738392713.610:1657): avc: denied { setattr } for pid=15910 comm="syz.4.2937" name="RAW" dev="sockfs" ino=58346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 664.002537][ T5864] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 664.049291][ T5864] usb 4-1: config 7 has no interface number 0 [ 664.082960][ T5864] usb 4-1: config 7 interface 87 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 664.098810][ T5864] usb 4-1: config 7 interface 87 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 664.148781][ T5864] usb 4-1: config 7 interface 87 has no altsetting 0 [ 664.180183][ T5864] usb 4-1: New USB device found, idVendor=0421, idProduct=00fc, bcdDevice=d1.2e [ 664.192270][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.204270][ T5864] usb 4-1: Product: syz [ 664.326129][ T30] INFO: task syz.5.2283:13703 blocked for more than 143 seconds. [ 664.521724][ T5864] usb 4-1: Manufacturer: syz [ 664.525488][ T30] Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 664.543127][ T5864] usb 4-1: SerialNumber: syz [ 664.555981][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 664.611096][ T30] task:syz.5.2283 state:D stack:26752 pid:13703 tgid:13702 ppid:9382 task_flags:0x400140 flags:0x00004006 [ 664.655774][ T30] Call Trace: [ 664.659166][ T30] [ 664.662239][ T30] __schedule+0xf43/0x5890 [ 664.670310][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 664.679130][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 664.711293][ T30] ? __pfx___schedule+0x10/0x10 [ 664.719083][ T30] ? schedule+0x298/0x350 [ 664.724590][ T30] ? __pfx_lock_release+0x10/0x10 [ 664.730251][ T30] ? __mutex_trylock_common+0x78/0x250 [ 664.736349][ T30] ? lock_acquire+0x2f/0xb0 [ 664.742502][ T30] ? schedule+0x1fd/0x350 [ 664.749150][ T30] schedule+0xe7/0x350 [ 664.776214][ T5864] rndis_host 4-1:7.87: More than one union descriptor, skipping ... [ 664.776824][ T30] schedule_preempt_disabled+0x13/0x30 [ 664.790159][ T30] __mutex_lock+0x6bd/0xb10 [ 664.791783][ T5864] usb 4-1: bad CDC descriptors [ 664.794681][ T30] ? sync_bdevs+0xfd/0x360 [ 664.794707][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 664.811638][ T5864] cdc_acm 4-1:7.87: More than one union descriptor, skipping ... [ 664.844968][ T5864] usb 4-1: USB disconnect, device number 104 [ 664.865627][ T30] ? sync_bdevs+0xc7/0x360 [ 664.870117][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 664.882572][ T30] ? iput+0xd3/0x890 [ 664.887822][ T30] ? sync_bdevs+0xfd/0x360 [ 664.892275][ T30] sync_bdevs+0xfd/0x360 [ 664.897072][ T30] ksys_sync+0xb3/0x150 [ 664.901246][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 664.906390][ T30] ? __might_fault+0xe3/0x190 [ 664.911085][ T30] ? rcu_is_watching+0x12/0xc0 [ 664.916475][ T30] ? syscall_trace_enter+0xf0/0x260 [ 664.921668][ T30] __do_sys_sync+0xe/0x20 [ 664.926123][ T30] do_syscall_64+0xcd/0x250 [ 664.930633][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.936569][ T30] RIP: 0033:0x7f305578cda9 [ 664.940963][ T30] RSP: 002b:00007f3056501038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 664.949444][ T30] RAX: ffffffffffffffda RBX: 00007f30559a5fa0 RCX: 00007f305578cda9 [ 664.962779][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 664.970982][ T30] RBP: 00007f30559a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 664.978986][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.987323][ T30] R13: 0000000000000000 R14: 00007f30559a5fa0 R15: 00007fff854c9fe8 [ 664.995374][ T30] [ 664.998439][ T30] INFO: task syz.5.2283:13706 blocked for more than 144 seconds. [ 665.006336][ T30] Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 665.014021][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 665.022797][ T30] task:syz.5.2283 state:D stack:27856 pid:13706 tgid:13702 ppid:9382 task_flags:0x400140 flags:0x00004004 [ 665.040188][ T30] Call Trace: [ 665.043472][ T30] [ 665.046525][ T30] __schedule+0xf43/0x5890 [ 665.050960][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 665.056309][ T30] ? __pfx___schedule+0x10/0x10 [ 665.061171][ T30] ? schedule+0x298/0x350 [ 665.065635][ T30] ? __pfx_lock_release+0x10/0x10 [ 665.070656][ T30] ? __mutex_trylock_common+0x78/0x250 [ 665.076227][ T30] ? lock_acquire+0x2f/0xb0 [ 665.080732][ T30] ? schedule+0x1fd/0x350 [ 665.085063][ T30] schedule+0xe7/0x350 [ 665.089320][ T30] schedule_preempt_disabled+0x13/0x30 [ 665.094785][ T30] __mutex_lock+0x6bd/0xb10 [ 665.099515][ T30] ? sync_bdevs+0xfd/0x360 [ 665.103944][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 665.109041][ T30] ? sync_bdevs+0xc7/0x360 [ 665.113524][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 665.119485][ T30] ? iput+0xd3/0x890 [ 665.123430][ T30] ? sync_bdevs+0xfd/0x360 [ 665.127997][ T30] sync_bdevs+0xfd/0x360 [ 665.132261][ T30] ksys_sync+0xb3/0x150 [ 665.136471][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 665.141230][ T30] ? __might_fault+0xe3/0x190 [ 665.146042][ T30] ? rcu_is_watching+0x12/0xc0 [ 665.150806][ T30] ? syscall_trace_enter+0xf0/0x260 [ 665.156085][ T30] __do_sys_sync+0xe/0x20 [ 665.160408][ T30] do_syscall_64+0xcd/0x250 [ 665.164897][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.170934][ T30] RIP: 0033:0x7f305578cda9 [ 665.175407][ T30] RSP: 002b:00007f30535f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 665.183822][ T30] RAX: ffffffffffffffda RBX: 00007f30559a6080 RCX: 00007f305578cda9 [ 665.191848][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 665.200172][ T30] RBP: 00007f30559a6080 R08: 0000000000000000 R09: 0000000000000000 [ 665.208285][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.216312][ T30] R13: 0000000000000000 R14: 00007f30559a6080 R15: 00007fff854c9fe8 [ 665.224603][ T30] [ 665.227725][ T30] INFO: task syz.5.2283:13709 blocked for more than 144 seconds. [ 665.236656][ T30] Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 665.244129][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 665.252954][ T30] task:syz.5.2283 state:D stack:27984 pid:13709 tgid:13702 ppid:9382 task_flags:0x400040 flags:0x00004004 [ 665.265047][ T30] Call Trace: [ 665.268374][ T30] [ 665.271302][ T30] __schedule+0xf43/0x5890 [ 665.275800][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 665.281011][ T30] ? __pfx___schedule+0x10/0x10 [ 665.286001][ T30] ? schedule+0x298/0x350 [ 665.290331][ T30] ? __pfx_lock_release+0x10/0x10 [ 665.295400][ T30] ? __mutex_trylock_common+0x78/0x250 [ 665.300866][ T30] ? lock_acquire+0x2f/0xb0 [ 665.305448][ T30] ? schedule+0x1fd/0x350 [ 665.309804][ T30] schedule+0xe7/0x350 [ 665.313855][ T30] schedule_preempt_disabled+0x13/0x30 [ 665.319358][ T30] __mutex_lock+0x6bd/0xb10 [ 665.324488][ T30] ? sync_bdevs+0xfd/0x360 [ 665.329090][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 665.334135][ T30] ? sync_bdevs+0xc7/0x360 [ 665.338622][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 665.343934][ T30] ? iput+0xd3/0x890 [ 665.347955][ T30] ? sync_bdevs+0xfd/0x360 [ 665.352379][ T30] sync_bdevs+0xfd/0x360 [ 665.356881][ T30] ksys_sync+0xb3/0x150 [ 665.361053][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 665.366057][ T30] ? __might_fault+0xe3/0x190 [ 665.370748][ T30] ? rcu_is_watching+0x12/0xc0 [ 665.375575][ T30] ? syscall_trace_enter+0xf0/0x260 [ 665.380793][ T30] __do_sys_sync+0xe/0x20 [ 665.385123][ T30] do_syscall_64+0xcd/0x250 [ 665.389722][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.395754][ T30] RIP: 0033:0x7f305578cda9 [ 665.400154][ T30] RSP: 002b:00007f30535d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 665.408688][ T30] RAX: ffffffffffffffda RBX: 00007f30559a6160 RCX: 00007f305578cda9 [ 665.416715][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 665.424992][ T30] RBP: 00007f30559a6160 R08: 0000000000000000 R09: 0000000000000000 [ 665.433054][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.441098][ T30] R13: 0000000000000001 R14: 00007f30559a6160 R15: 00007fff854c9fe8 [ 665.449211][ T30] [ 665.452259][ T30] INFO: task syz.5.2283:13711 blocked for more than 144 seconds. [ 665.467363][ T30] Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 665.474659][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 665.487437][ T30] task:syz.5.2283 state:D stack:28656 pid:13711 tgid:13702 ppid:9382 task_flags:0x400040 flags:0x00004004 [ 665.500651][ T30] Call Trace: [ 665.503925][ T30] [ 665.509348][ T30] __schedule+0xf43/0x5890 [ 665.513760][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 665.519292][ T30] ? __pfx___schedule+0x10/0x10 [ 665.524297][ T30] ? schedule+0x298/0x350 [ 665.529204][ T30] ? __pfx_lock_release+0x10/0x10 [ 665.534240][ T30] ? __mutex_trylock_common+0x78/0x250 [ 665.539814][ T30] ? lock_acquire+0x2f/0xb0 [ 665.544336][ T30] ? schedule+0x1fd/0x350 [ 665.548735][ T30] schedule+0xe7/0x350 [ 665.552817][ T30] schedule_preempt_disabled+0x13/0x30 [ 665.558378][ T30] __mutex_lock+0x6bd/0xb10 [ 665.562888][ T30] ? sync_bdevs+0xfd/0x360 [ 665.567464][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 665.572514][ T30] ? sync_bdevs+0xc7/0x360 [ 665.576992][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 665.582284][ T30] ? iput+0xd3/0x890 [ 665.586345][ T30] ? sync_bdevs+0xfd/0x360 [ 665.590756][ T30] sync_bdevs+0xfd/0x360 [ 665.594978][ T30] ksys_sync+0xb3/0x150 [ 665.599364][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 665.604131][ T30] ? __might_fault+0xe3/0x190 [ 665.609027][ T30] ? rcu_is_watching+0x12/0xc0 [ 665.613783][ T30] ? syscall_trace_enter+0xf0/0x260 [ 665.619043][ T30] __do_sys_sync+0xe/0x20 [ 665.623374][ T30] do_syscall_64+0xcd/0x250 [ 665.628379][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.634293][ T30] RIP: 0033:0x7f305578cda9 [ 665.638736][ T30] RSP: 002b:00007f30531b2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 665.647306][ T30] RAX: ffffffffffffffda RBX: 00007f30559a6240 RCX: 00007f305578cda9 [ 665.655357][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 665.663332][ T30] RBP: 00007f30559a6240 R08: 0000000000000000 R09: 0000000000000000 [ 665.671363][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.679483][ T30] R13: 0000000000000001 R14: 00007f30559a6240 R15: 00007fff854c9fe8 [ 665.687632][ T30] [ 665.690673][ T30] INFO: task syz.5.2283:13712 blocked for more than 144 seconds. [ 665.698533][ T30] Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 665.705874][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 665.714536][ T30] task:syz.5.2283 state:D stack:28064 pid:13712 tgid:13702 ppid:9382 task_flags:0x400040 flags:0x00004004 [ 665.726565][ T30] Call Trace: [ 665.729840][ T30] [ 665.733052][ T30] __schedule+0xf43/0x5890 [ 665.737540][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 665.742747][ T30] ? __pfx___schedule+0x10/0x10 [ 665.747646][ T30] ? schedule+0x298/0x350 [ 665.752000][ T30] ? __pfx_lock_release+0x10/0x10 [ 665.757352][ T30] ? __mutex_trylock_common+0x78/0x250 [ 665.762819][ T30] ? lock_acquire+0x2f/0xb0 [ 665.767471][ T30] ? schedule+0x1fd/0x350 [ 665.771818][ T30] schedule+0xe7/0x350 [ 665.775985][ T30] schedule_preempt_disabled+0x13/0x30 [ 665.781452][ T30] __mutex_lock+0x6bd/0xb10 [ 665.787182][ T30] ? sync_bdevs+0xfd/0x360 [ 665.791584][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 665.796651][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 665.801953][ T30] ? iput+0xd3/0x890 [ 665.806092][ T30] ? sync_bdevs+0xfd/0x360 [ 665.810506][ T30] sync_bdevs+0xfd/0x360 [ 665.814736][ T30] ksys_sync+0xb3/0x150 [ 665.818968][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 665.823743][ T30] ? __might_fault+0xe3/0x190 [ 665.828494][ T30] ? rcu_is_watching+0x12/0xc0 [ 665.833666][ T30] ? syscall_trace_enter+0xf0/0x260 [ 665.838999][ T30] __do_sys_sync+0xe/0x20 [ 665.843323][ T30] do_syscall_64+0xcd/0x250 [ 665.847940][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.853838][ T30] RIP: 0033:0x7f305578cda9 [ 665.858360][ T30] RSP: 002b:00007f3052d8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 665.866843][ T30] RAX: ffffffffffffffda RBX: 00007f30559a6320 RCX: 00007f305578cda9 [ 665.874819][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 665.882841][ T30] RBP: 00007f30559a6320 R08: 0000000000000000 R09: 0000000000000000 [ 665.890949][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.899009][ T30] R13: 0000000000000001 R14: 00007f30559a6320 R15: 00007fff854c9fe8 [ 665.907097][ T30] [ 665.910141][ T30] INFO: task syz.5.2283:13713 blocked for more than 144 seconds. [ 665.918008][ T30] Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 665.925396][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 665.934069][ T30] task:syz.5.2283 state:D stack:28064 pid:13713 tgid:13702 ppid:9382 task_flags:0x400040 flags:0x00004004 [ 665.946516][ T30] Call Trace: [ 665.949818][ T30] [ 665.952740][ T30] __schedule+0xf43/0x5890 [ 665.957219][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 665.962445][ T30] ? __pfx___schedule+0x10/0x10 [ 665.967409][ T30] ? schedule+0x298/0x350 [ 665.971739][ T30] ? __pfx_lock_release+0x10/0x10 [ 665.976863][ T30] ? lock_acquire+0x2f/0xb0 [ 665.981368][ T30] ? schedule+0x1fd/0x350 [ 665.985770][ T30] schedule+0xe7/0x350 [ 665.989845][ T30] schedule_preempt_disabled+0x13/0x30 [ 665.995458][ T30] __mutex_lock+0x6bd/0xb10 [ 665.999967][ T30] ? sync_bdevs+0xfd/0x360 [ 666.004361][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 666.009534][ T30] ? sync_bdevs+0xc7/0x360 [ 666.013944][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 666.019314][ T30] ? iput+0xd3/0x890 [ 666.023207][ T30] ? sync_bdevs+0xfd/0x360 [ 666.027737][ T30] sync_bdevs+0xfd/0x360 [ 666.031979][ T30] ksys_sync+0xb3/0x150 [ 666.036165][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 666.041241][ T30] ? __might_fault+0xe3/0x190 [ 666.046081][ T30] ? rcu_is_watching+0x12/0xc0 [ 666.050851][ T30] ? syscall_trace_enter+0xf0/0x260 [ 666.056122][ T30] __do_sys_sync+0xe/0x20 [ 666.060461][ T30] do_syscall_64+0xcd/0x250 [ 666.064971][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.071029][ T30] RIP: 0033:0x7f305578cda9 [ 666.079485][ T30] RSP: 002b:00007f305296c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 666.088072][ T30] RAX: ffffffffffffffda RBX: 00007f30559a6400 RCX: 00007f305578cda9 [ 666.096188][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 666.104152][ T30] RBP: 00007f30559a6400 R08: 0000000000000000 R09: 0000000000000000 [ 666.112270][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.120301][ T30] R13: 0000000000000001 R14: 00007f30559a6400 R15: 00007fff854c9fe8 [ 666.128419][ T30] [ 666.131479][ T30] INFO: task syz.5.2283:13714 blocked for more than 145 seconds. [ 666.139433][ T30] Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 666.147279][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 666.156112][ T30] task:syz.5.2283 state:D stack:27856 pid:13714 tgid:13702 ppid:9382 task_flags:0x400040 flags:0x00004004 [ 666.168180][ T30] Call Trace: [ 666.171476][ T30] [ 666.174390][ T30] __schedule+0xf43/0x5890 [ 666.178903][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 666.184134][ T30] ? __pfx___schedule+0x10/0x10 [ 666.189093][ T30] ? schedule+0x298/0x350 [ 666.193448][ T30] ? __pfx_lock_release+0x10/0x10 [ 666.198544][ T30] ? __mutex_trylock_common+0x78/0x250 [ 666.204020][ T30] ? lock_acquire+0x2f/0xb0 [ 666.208695][ T30] ? schedule+0x1fd/0x350 [ 666.213037][ T30] schedule+0xe7/0x350 [ 666.217266][ T30] schedule_preempt_disabled+0x13/0x30 [ 666.222782][ T30] __mutex_lock+0x6bd/0xb10 [ 666.227407][ T30] ? sync_bdevs+0xfd/0x360 [ 666.231819][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 666.237395][ T30] ? sync_bdevs+0xc7/0x360 [ 666.241829][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 666.247945][ T30] ? iput+0xd3/0x890 [ 666.251860][ T30] ? sync_bdevs+0xfd/0x360 [ 666.256352][ T30] sync_bdevs+0xfd/0x360 [ 666.260595][ T30] ksys_sync+0xb3/0x150 [ 666.264732][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 666.269580][ T30] ? __might_fault+0xe3/0x190 [ 666.274258][ T30] ? rcu_is_watching+0x12/0xc0 [ 666.279104][ T30] ? syscall_trace_enter+0xf0/0x260 [ 666.284311][ T30] __do_sys_sync+0xe/0x20 [ 666.288790][ T30] do_syscall_64+0xcd/0x250 [ 666.293354][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.299339][ T30] RIP: 0033:0x7f305578cda9 [ 666.303769][ T30] RSP: 002b:00007f3052549038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 666.312305][ T30] RAX: ffffffffffffffda RBX: 00007f30559a64e0 RCX: 00007f305578cda9 [ 666.320342][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 666.328486][ T30] RBP: 00007f30559a64e0 R08: 0000000000000000 R09: 0000000000000000 [ 666.336557][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.344530][ T30] R13: 0000000000000001 R14: 00007f30559a64e0 R15: 00007fff854c9fe8 [ 666.353048][ T30] [ 666.356307][ T30] [ 666.356307][ T30] Showing all locks held in the system: [ 666.364037][ T30] 1 lock held by khungtaskd/30: [ 666.369031][ T30] #0: ffffffff8e1be000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 666.379008][ T30] 2 locks held by getty/5570: [ 666.383663][ T30] #0: ffff88814d1d40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 666.393516][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 666.405448][ T30] 1 lock held by udevd/5833: [ 666.410058][ T30] #0: ffff888143ff74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 666.419492][ T30] 1 lock held by syz.5.2283/13703: [ 666.424596][ T30] #0: ffff888143ff74c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 666.434013][ T30] 1 lock held by syz.5.2283/13706: [ 666.439177][ T30] #0: ffff888143ff74c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 666.449026][ T30] 1 lock held by syz.5.2283/13709: [ 666.454150][ T30] #0: ffff888143ff74c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 666.463526][ T30] 1 lock held by syz.5.2283/13711: [ 666.468826][ T30] #0: ffff888143ff74c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 666.478340][ T30] 1 lock held by syz.5.2283/13712: [ 666.483461][ T30] #0: ffff888143ff74c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 666.492943][ T30] 1 lock held by syz.5.2283/13713: [ 666.498106][ T30] #0: ffff888143ff74c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 666.507510][ T30] 1 lock held by syz.5.2283/13714: [ 666.512608][ T30] #0: ffff888143ff74c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 666.521972][ T30] 1 lock held by syz.2.2455/14288: [ 666.527199][ T30] #0: ffff888143ff74c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 666.536620][ T30] [ 666.538950][ T30] ============================================= [ 666.538950][ T30] [ 666.547408][ T30] NMI backtrace for cpu 1 [ 666.547419][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 666.547436][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 666.547446][ T30] Call Trace: [ 666.547452][ T30] [ 666.547458][ T30] dump_stack_lvl+0x116/0x1f0 [ 666.547487][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 666.547507][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 666.547529][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 666.547552][ T30] watchdog+0xf62/0x12b0 [ 666.547582][ T30] ? __pfx_watchdog+0x10/0x10 [ 666.547605][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 666.547630][ T30] ? __kthread_parkme+0x148/0x220 [ 666.547648][ T30] ? __pfx_watchdog+0x10/0x10 [ 666.547675][ T30] kthread+0x3af/0x750 [ 666.547696][ T30] ? __pfx_kthread+0x10/0x10 [ 666.547720][ T30] ? __pfx_kthread+0x10/0x10 [ 666.547741][ T30] ret_from_fork+0x45/0x80 [ 666.547763][ T30] ? __pfx_kthread+0x10/0x10 [ 666.547783][ T30] ret_from_fork_asm+0x1a/0x30 [ 666.547813][ T30] [ 666.547820][ T30] Sending NMI from CPU 1 to CPUs 0: [ 666.660019][ C0] NMI backtrace for cpu 0 [ 666.660031][ C0] CPU: 0 UID: 0 PID: 14613 Comm: kworker/u8:5 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 666.660047][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 666.660056][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 666.660075][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp2+0x8/0x20 [ 666.660096][ C0] Code: b6 f7 bf 01 00 00 00 e9 86 fe ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <0f> b7 d6 0f b7 f7 bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 [ 666.660109][ C0] RSP: 0018:ffffc9000bf2fba8 EFLAGS: 00000202 [ 666.660119][ C0] RAX: 0000000000000000 RBX: ffff888021b9c000 RCX: ffffffff8accefae [ 666.660133][ C0] RDX: ffff888059a30000 RSI: 0000000000000080 RDI: 0000000000000088 [ 666.660142][ C0] RBP: ffff8880793dd978 R08: 0000000000000003 R09: 000000000000000c [ 666.660150][ C0] R10: 0000000000000000 R11: 0000000000000004 R12: ffff88802ab18e40 [ 666.660158][ C0] R13: dffffc0000000000 R14: ffff88805bba5850 R15: 0000000000000080 [ 666.660167][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 666.660180][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 666.660192][ C0] CR2: 00007f5c4ed78ab8 CR3: 00000000122aa000 CR4: 00000000003526f0 [ 666.660200][ C0] DR0: 0000000000000008 DR1: 00000000000000ff DR2: fffffffffffffffb [ 666.660209][ C0] DR3: 3e00000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 666.660217][ C0] Call Trace: [ 666.660222][ C0] [ 666.660228][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 666.660245][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 666.660262][ C0] ? nmi_handle+0x1ac/0x5d0 [ 666.660280][ C0] ? __sanitizer_cov_trace_const_cmp2+0x8/0x20 [ 666.660298][ C0] ? default_do_nmi+0x6a/0x160 [ 666.660313][ C0] ? exc_nmi+0x170/0x1e0 [ 666.660327][ C0] ? end_repeat_nmi+0xf/0x53 [ 666.660347][ C0] ? ieee80211_iface_work+0x3ae/0xf50 [ 666.660363][ C0] ? __sanitizer_cov_trace_const_cmp2+0x8/0x20 [ 666.660381][ C0] ? __sanitizer_cov_trace_const_cmp2+0x8/0x20 [ 666.660399][ C0] ? __sanitizer_cov_trace_const_cmp2+0x8/0x20 [ 666.660417][ C0] [ 666.660422][ C0] [ 666.660426][ C0] ieee80211_iface_work+0x3ae/0xf50 [ 666.660442][ C0] cfg80211_wiphy_work+0x3ed/0x570 [ 666.660456][ C0] process_one_work+0x9c5/0x1ba0 [ 666.660476][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 666.660489][ C0] ? __pfx_process_one_work+0x10/0x10 [ 666.660507][ C0] ? assign_work+0x1a0/0x250 [ 666.660522][ C0] worker_thread+0x6c8/0xf00 [ 666.660540][ C0] ? __kthread_parkme+0x148/0x220 [ 666.660554][ C0] ? __pfx_worker_thread+0x10/0x10 [ 666.660570][ C0] kthread+0x3af/0x750 [ 666.660584][ C0] ? __pfx_kthread+0x10/0x10 [ 666.660598][ C0] ? lock_acquire+0x2f/0xb0 [ 666.660616][ C0] ? __pfx_kthread+0x10/0x10 [ 666.660630][ C0] ret_from_fork+0x45/0x80 [ 666.660646][ C0] ? __pfx_kthread+0x10/0x10 [ 666.660660][ C0] ret_from_fork_asm+0x1a/0x30 [ 666.660678][ C0] [ 666.661113][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 666.960211][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 666.970349][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 666.980392][ T30] Call Trace: [ 666.983657][ T30] [ 666.986577][ T30] dump_stack_lvl+0x3d/0x1f0 [ 666.991162][ T30] panic+0x71d/0x800 [ 666.995060][ T30] ? __pfx_panic+0x10/0x10 [ 666.999459][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 667.004823][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 667.010805][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 667.016167][ T30] ? watchdog+0xdcc/0x12b0 [ 667.020574][ T30] ? watchdog+0xdbf/0x12b0 [ 667.024994][ T30] watchdog+0xddd/0x12b0 [ 667.029232][ T30] ? __pfx_watchdog+0x10/0x10 [ 667.033897][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 667.039095][ T30] ? __kthread_parkme+0x148/0x220 [ 667.044105][ T30] ? __pfx_watchdog+0x10/0x10 [ 667.048772][ T30] kthread+0x3af/0x750 [ 667.052832][ T30] ? __pfx_kthread+0x10/0x10 [ 667.057415][ T30] ? __pfx_kthread+0x10/0x10 [ 667.061999][ T30] ret_from_fork+0x45/0x80 [ 667.066414][ T30] ? __pfx_kthread+0x10/0x10 [ 667.070992][ T30] ret_from_fork_asm+0x1a/0x30 [ 667.075748][ T30] [ 667.078962][ T30] Kernel Offset: disabled [ 667.083264][ T30] Rebooting in 86400 seconds..