last executing test programs: 8m22.739962829s ago: executing program 4 (id=375): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000d000af7070100dd214b45c39173690abb20011b150460ae46258acda53200005b91325b38000000", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x6, 0x0) shutdown(r4, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x40000) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) 8m21.588083145s ago: executing program 4 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000000000002a00000008002f0000000000050036000000000008000200", @ANYRES32=r1], 0x2c}, 0x4, 0x700000000000000, 0x0, 0x4000050}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r3) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r4, 0x30b}, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x3c, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000882}, 0x40000) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0xb) close(r6) recvmsg(r5, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/153, 0x99}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/240, 0xf0}], 0x8, &(0x7f0000002600)=""/240, 0xf0}, 0x20) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x10, 0x2d, 0x1}, 0x10}], 0x1}, 0x0) 8m21.044578964s ago: executing program 4 (id=383): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='rxrpc_congest\x00', r0}, 0x57) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @dev}}}, @ip_tos_u8={{0x11, 0x110}}], 0x38}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x9, 0xb9, &(0x7f0000000080)=""/185, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000003a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x148, 0x4c, 0x232, 0x148, 0x0, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@multiport={{0x50}, {0x2, 0xc, [0x4e22, 0x4e24, 0x4e20, 0x4e21, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e22, 0x4e22, 0x4e23, 0x4e23, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x1, 0x1, 0x11, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1]}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private1, [0x0, 0x0, 0x0, 0xff], [], 'veth1_macvtap\x00', 'xfrm0\x00', {}, {}, 0x0, 0xfd}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x4, "8cea"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xc, 0x0, 0x2, 0xd, 'snmp\x00', 'syz1\x00', {0x401}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800bb001200014100000000000000f506", @ANYRES32=0x0, @ANYBLOB="000000000000000008001d00ff000000"], 0x28}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d0000", 0x17}], 0x1, 0x0, 0x0, 0x5865}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 8m17.531229656s ago: executing program 4 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000000000002a00000008002f0000000000050036000000000008000200", @ANYRES32=r1], 0x2c}, 0x4, 0x700000000000000, 0x0, 0x4000050}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r3) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r4, 0x30b}, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x3c, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000882}, 0x40000) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0xb) close(r6) recvmsg(r5, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/153, 0x99}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/240, 0xf0}], 0x8, &(0x7f0000002600)=""/240, 0xf0}, 0x20) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x10, 0x2d, 0x1}, 0x10}], 0x1}, 0x0) 8m16.966682961s ago: executing program 4 (id=394): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1e, 0x13, r1, 0x82cfc000) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x80}, @iv={0x70, 0x117, 0x2, 0x5a, "d3e34936d954b506f655972d20ce98105335d4b92c5765ed2ff3e0106f9697adea3e9773e355191f8211cc41841dfbb37a5b05d16893ad7dfeb814d451d5ee4051f146a39417bd011738dd1b778943631fd01f48be04517d9b8f"}], 0x88}, 0x8015) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x10410, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x42082, 0x0) write$FUSE_IOCTL(r7, &(0x7f0000000100)={0x20}, 0xfdef) accept4$unix(r3, &(0x7f00000001c0), &(0x7f0000000280)=0x6e, 0xc1800) read$FUSE(r7, &(0x7f0000001940)={0x2020}, 0x2020) 8m16.68798873s ago: executing program 4 (id=396): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000000000002a00000008002f0000000000050036000000000008000200", @ANYRES32=r1], 0x2c}, 0x4, 0x700000000000000, 0x0, 0x4000050}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x30b}, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x3c, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000882}, 0x40000) r4 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) recvmsg(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/153, 0x99}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/240, 0xf0}], 0x8, &(0x7f0000002600)=""/240, 0xf0}, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x10, 0x2d, 0x1}, 0x10}], 0x1}, 0x0) 8m0.737982757s ago: executing program 32 (id=396): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000000000002a00000008002f0000000000050036000000000008000200", @ANYRES32=r1], 0x2c}, 0x4, 0x700000000000000, 0x0, 0x4000050}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x30b}, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x3c, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000882}, 0x40000) r4 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) recvmsg(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/153, 0x99}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/240, 0xf0}], 0x8, &(0x7f0000002600)=""/240, 0xf0}, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x10, 0x2d, 0x1}, 0x10}], 0x1}, 0x0) 7m56.791840811s ago: executing program 0 (id=435): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@can_delroute={0x15c, 0x19, 0x800, 0x70bd26, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_SRC_IF, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x2d, 0x23, 0x1, 0x0, "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", 0x0, "f05c6f557a910dded5d47797d25387e99ef4664a"}}, @CGW_DST_IF={0x8}, @CGW_SRC_IF={0xfffffffffffffcf6}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x1ff, 0x7, 0xf7}, &(0x7f0000000380)=0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = epoll_create(0x1) r4 = dup3(r2, r3, 0x0) read$FUSE(r4, &(0x7f0000002900)={0x2020}, 0x2020) 7m55.766568318s ago: executing program 0 (id=436): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x10040000) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000013, 0x4000010, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x1, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_SEND={0x1a, 0x23, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000054, 0x0, {0x0, r6}}) r7 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @empty=0xcf050000}}) r8 = io_uring_setup(0x57a4, &(0x7f0000000440)={0x0, 0xd898, 0xc2, 0x2000, 0x2, 0x0, r3}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x16, 0x20000002, r9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x4, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x10000000) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x22, 0x0, @fd_index, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, {0x0, r6}}) socket$inet6(0xa, 0xa, 0x7) bind$rose(r0, 0x0, 0x3) 7m51.881322209s ago: executing program 0 (id=445): pread64(0xffffffffffffffff, &(0x7f0000000380)=""/4096, 0x1000, 0x7) (async, rerun: 32) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}}, [@srcaddr={0x14, 0xd, @in=@private=0xa010102}, @tfcpad={0x8, 0x16, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000001380)={'sit0\x00', 0x0, 0x5, 0x110, 0x0, 0x7, {{0x40, 0x4, 0x1, 0x3, 0x100, 0x67, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x31}, {[@generic={0x89, 0x12, "88589b65d682056cebb64d1bebb02aed"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x53, 0x0, [{0x1, 0x12, "295f3f5e8a2b3cecc6221d571dce2d96"}, {0x7, 0x9, "9d91ab10079c00"}, {0x5, 0x8, "5bd371be1f52"}, {0x5, 0x4, "24e9"}, {0x0, 0xb, "eeec5312a8ca243719"}, {0x7, 0xf, "a3fb6f6902349ae5f7fed1df5d"}, {0x0, 0xc, "04fc0a54b8432913290c"}]}, @end, @cipso={0x86, 0x4a, 0xffffffffffffffff, [{0x7, 0x7, "e6ea5e8612"}, {0x1, 0xf, "2bd8ecebd0761f36799274e2fa"}, {0x2, 0x3, '%'}, {0x0, 0xe, "e5a38b8bbb74de4d703b45e0"}, {0x2ef78d6a03d87df7, 0x9, "e13d9b5557de24"}, {0x1, 0xc, "515cb0c78d233323950c"}, {0x0, 0x8, "f08152b133bd"}]}, @timestamp_prespec={0x44, 0x24, 0xe5, 0x3, 0x3, [{@remote, 0x1}, {@broadcast, 0x96}, {@broadcast, 0x7}, {@rand_addr=0x64010102, 0x4}]}, @timestamp={0x44, 0xc, 0x54, 0x0, 0xf, [0x7, 0x1]}, @timestamp={0x44, 0x8, 0x48, 0x0, 0x9, [0xb]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x9}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) 7m51.36425819s ago: executing program 0 (id=448): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x44050) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) io_uring_enter(0xffffffffffffffff, 0x6252, 0xc09b, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) listen(r3, 0x8) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x4224}], 0x1, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 7m50.5920422s ago: executing program 0 (id=450): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x230002a3) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32], 0x38}}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_disconnect(r2) 7m47.396646665s ago: executing program 0 (id=458): shmctl$SHM_LOCK(0x0, 0xb) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) close(r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0xee00, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, 0x0) 7m32.23001622s ago: executing program 33 (id=458): shmctl$SHM_LOCK(0x0, 0xb) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63aa66cdb3646a37626de7361b5338c197dd3e6844dafcb4338dce0b79ee41da150eca12fbd36b4873ce8e4747b63e8830ee6c32f254d37792053e2b77cc86279ea843600"/297, 0x3accf8d5) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) close(r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0xee00, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, 0x0) 5m40.647952003s ago: executing program 6 (id=766): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil) socket(0x11, 0x2, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@deltaction={0x9c, 0x31, 0x4, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20000002}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100003000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5m37.509503586s ago: executing program 6 (id=771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000045c62d455de365b53efd834e3306c828d0000000800007c4f513500d8fd73d1192e02fc09a80668638d1e50b3e7994a368d1690a58d1167eeed82", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x1, 0x7, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009058b3e"], 0x0) syz_usb_disconnect(r2) syz_emit_ethernet(0xc7, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @initdev={0xac, 0x1e, 0xfd, 0x0}, {[@rr={0x44, 0x3, 0x31}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"7a361e79212ceda9b152546fb47bf609db4ea1ca0a1445f7ad753f9cf35033efa75f923f6655cec679edfe89e24d9a5c35811cd65afa775ad15f3c480c293037dcf2fe168faa18c962109ae24a477971c167dd6831e378c1ea6c7a6d0e277ed35a860207fabf66deeea345124530a89210c5fa91f7aca5383582af5e9b9b3d337511130784eabc16208c88c9c1"}}}}}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x2, 0x4448, @dev={0xfe, 0x80, '\x00', 0xf}, 0x9}, 0x1c) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x40, 0x6, 0x48, {0x48, 0x21, "547a79eafc269cbd06168fdab0f85a10a7ff0c65cc32f7a58da582e618f3ffc67991ac48d022b5da7b6c0cec4bc69b3004a0cea471f11456aeffbe71ea86a8add78de8138766"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x1c, &(0x7f0000000780)={0x20, 0x7, 0x8c, "5bafb79265c75a49dd752cfb2e37cc53c038e79d9a1234f8f5d68f33c0bcf624bccb5e3cb26b16c97430d0c6c34540c7e56bb668fb2f349b40149f1efcc44ed2c0b841ae82e44aae678dafaf98437db260a300c4cd2296085c908720134813f8486189d1c8a85f462470930a6d55a9153d056b7407c2c6007060851eae1698235605a63d9e2687cce3e819b1"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x26}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x6}}) r4 = io_uring_setup(0x700b, &(0x7f00000005c0)={0x0, 0x6eff, 0x1000, 0x3, 0x2eb}) syz_io_uring_setup(0x3203, &(0x7f0000000640)={0x0, 0x108c, 0x200, 0x2, 0x1bd, 0x0, r4}, &(0x7f0000000180), &(0x7f0000000240)) r5 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000350000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a0104000000000000000001"], 0xdc}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000ff00000000000a20000000000a01010000000000000000010000000900010073797a300000000034000000090a010200000000000000020100000008000a40008000000900020073797a320000000009000100737973"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000c0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000200)={{0x77359400}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xff]}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000340), 0xffff, r1}, 0x38) 5m31.450859764s ago: executing program 6 (id=783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x4, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40050) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) close(r6) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @random="0100"}) 5m30.353197064s ago: executing program 6 (id=784): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1000000000006005, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x1ff, 0xa, 0x1, 0x10}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x47f491713281c04}, 0xc) bind$netlink(r2, &(0x7f00000000c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000480)='cpu.max.burst\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0xde, 0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000003000000040060809c0a01"], 0xab4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m29.062919824s ago: executing program 6 (id=788): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYBLOB="ac1414ad00000000000000001c"], 0x40}, 0x0) syz_emit_vhci(0x0, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0xfffffffffffffffe) write$uinput_user_dev(r6, 0x0, 0x0) write$uinput_user_dev(r6, &(0x7f00000005c0)={'syz1\x00', {0x5, 0x1, 0xd06}, 0x34, [0xa, 0x2, 0x7, 0x20, 0x2000, 0x9, 0x3, 0x5, 0x5, 0x7fffffff, 0x4, 0x7, 0x1, 0x5, 0x0, 0xfffffffd, 0x2, 0x932, 0x84, 0xe, 0xb9e5, 0x6, 0x0, 0xfffffc8a, 0xc, 0x400, 0x8, 0x10, 0x2, 0x8001, 0xfffffff8, 0x7e, 0xe, 0xb, 0x3, 0x4, 0x400, 0x108, 0xe0, 0x8, 0x4, 0x1000, 0x10001, 0x5, 0x6, 0x4, 0x2bcc, 0x5, 0x6, 0x7, 0x0, 0x7, 0xd16, 0x8f802, 0xa84, 0x7f, 0x7, 0xfff, 0x5, 0xf09, 0x3, 0x4, 0x7, 0x7], [0x3, 0x6, 0x5, 0x6de8, 0x9, 0x9, 0x3, 0x1, 0x0, 0x1, 0x8, 0x81, 0x5, 0x0, 0x0, 0x8, 0x7, 0x1, 0x205, 0x2434b750, 0x1, 0x100, 0xeada, 0x4, 0xfffff0a6, 0x2ea2, 0x0, 0x8, 0x1, 0x80000001, 0x0, 0x7, 0x7, 0x7, 0x2088, 0x3, 0x6, 0x7fffffff, 0x8, 0x7, 0x9, 0x0, 0x9, 0x9, 0x4, 0x0, 0x6, 0x5, 0x100, 0xf796, 0xffffffff, 0x8, 0x60, 0xffffffff, 0xbd, 0x0, 0x5, 0x5, 0xe0000000, 0x8a55, 0xffff8001, 0x3, 0x4000, 0x800], [0xd7f7, 0x9, 0x8, 0x4, 0xc3b5, 0x9, 0xffffff00, 0x6, 0x58, 0xc85, 0x7, 0x0, 0xe, 0x2, 0x0, 0x5, 0x3800000, 0xb, 0x3, 0x6, 0x5, 0x9c, 0xff, 0xd7, 0x7, 0xfff, 0x9, 0x1000, 0x7, 0x7, 0x3b0, 0x3, 0x10, 0x0, 0x200, 0x6, 0x6, 0xd, 0x401, 0x4, 0x0, 0x81, 0x0, 0x7fffffff, 0xa, 0x1, 0x3, 0x2, 0x4, 0xffff, 0x7d, 0xb, 0x7, 0x4810759c, 0x3, 0xb, 0xb, 0x2a, 0xf1, 0xfffffff8, 0x2, 0x9, 0x1, 0x101], [0x3, 0x6, 0x7, 0x4, 0x1, 0x7, 0xff, 0x6, 0x7, 0x2, 0x28, 0x5, 0x2, 0x10000000, 0x8001, 0x7, 0x5, 0xc, 0x17fa1a84, 0x7, 0x6, 0x7, 0x7fffffff, 0x7fff, 0x5, 0xfffffffe, 0x5, 0x3, 0x9, 0x35, 0x200, 0x3, 0x80000000, 0x4, 0x80000001, 0x1, 0x8, 0x0, 0x3, 0x400, 0x7ff, 0x2, 0x2, 0x2, 0x3, 0x81, 0x4, 0x5, 0xffffffff, 0x1, 0x8, 0xb, 0x1, 0x0, 0x9, 0x4, 0x8001, 0x2, 0x8000, 0x1002, 0x6, 0x10, 0x2, 0x3]}, 0x45c) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r7, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x7ffe, 0x9) 5m27.925670041s ago: executing program 6 (id=793): prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x4, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}]}}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f000000c1c0)={0x2020}, 0x2020) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, 0x0, &(0x7f0000000180)=0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r5}, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3) mount$tmpfs(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000180), 0x2483, &(0x7f00000009c0)={[{@huge_always}, {}, {@grpquota}, {@inode64}, {@gid}, {@inode64}, {@nr_inodes={'nr_inodes', 0x3d, [0x34]}}], [{@smackfsroot={'smackfsroot', 0x3d, 'grpquota'}}, {@fowner_lt={'fowner<', 0xee01}}, {@smackfsroot={'smackfsroot', 0x3d, ')*$}+'}}, {@euid_gt}]}) r6 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) 5m12.458263843s ago: executing program 34 (id=793): prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x4, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}]}}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f000000c1c0)={0x2020}, 0x2020) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, 0x0, &(0x7f0000000180)=0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r5}, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3) mount$tmpfs(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000180), 0x2483, &(0x7f00000009c0)={[{@huge_always}, {}, {@grpquota}, {@inode64}, {@gid}, {@inode64}, {@nr_inodes={'nr_inodes', 0x3d, [0x34]}}], [{@smackfsroot={'smackfsroot', 0x3d, 'grpquota'}}, {@fowner_lt={'fowner<', 0xee01}}, {@smackfsroot={'smackfsroot', 0x3d, ')*$}+'}}, {@euid_gt}]}) r6 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) 4m18.233128981s ago: executing program 5 (id=912): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$smack_xattr_label(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='security.SMACK64IPIN\x00', &(0x7f0000000440)=ANY=[@ANYRESHEX=r1], 0x4, 0x3) openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "01000000000e65300000000800000200"}) readv(r8, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/68, 0x44}], 0x1) 4m16.766890992s ago: executing program 5 (id=917): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$inet(r1, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xae, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioprio_set$pid(0x0, 0x0, 0x2007) lsm_get_self_attr(0x64, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, 0x0) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB='#/yz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[]) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) 4m13.212072858s ago: executing program 5 (id=923): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x4, "ff0f00000000000001a82d866bf4ff0713e4b89c3c00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0xd) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') pselect6(0x40, &(0x7f0000000680)={0x0, 0x742, 0x9000000, 0xa, 0x0, 0x0, 0x8000000000000001, 0xec}, &(0x7f0000000080)={0xea, 0x93e6, 0x100000401, 0x0, 0x0, 0x0, 0x0, 0xd5}, 0x0, 0x0, 0x0) 4m12.513695843s ago: executing program 5 (id=928): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$smack_xattr_label(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='security.SMACK64IPIN\x00', &(0x7f0000000440)=ANY=[@ANYRESHEX=r1], 0x4, 0x3) openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "01000000000e65300000000800000200"}) readv(r8, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/68, 0x44}], 0x1) 4m10.879227612s ago: executing program 5 (id=933): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) acct(&(0x7f0000000080)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r4}, 0x8) r6 = memfd_secret(0x80000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="8500003dc3c44ed172a621e6030000000000000000000000000000000000d9d793acbc00771600000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xf, 0x4, 0x1000008, 0x1, 0x0, r6, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000002006000000060000000000000039aa4646"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 4m8.315250343s ago: executing program 5 (id=937): syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc, 0xa3, 0x8f, 0x40, 0x13d8, 0x11, 0xd062, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa6, 0x1, 0x56}}]}}]}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001002cbd70000000000010001d"], 0x28}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0xec, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xa6, 0x6, "e5777db1f38ac1e737cd5b9ce21443c5b33d0178d03324706a158b3d4f27482ceaac69564b9415545cb3879cb5784b3a10971f09b1e71288e0819271646bbe310d3b73e1a2a10c85b94b7ae1e632192e831a3713a6671de06f54db7e8bf070dcc9b532c81d8b61b9daa90bca409b353f61b1bd58583a4b58063cd943e0b7ab8697d6e1a1051a0e99623fa5cc7130b1fc02010dadec3769d7ef4f9c72375bacc96eaf"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x114}, 0x1, 0x0, 0x0, 0x40800}, 0x40810) sched_setaffinity(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x97, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x2, 0x1, 0x3, 0x40, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "32f54cb4"}, {0x5, 0x24, 0x0, 0x1cd9}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8, 0x1, 0xf}, {0x6, 0x24, 0x1a, 0xb6, 0x4}, [@country_functional={0x6, 0x24, 0x7, 0xf1}, @call_mgmt={0x5, 0x24, 0x1, 0x4, 0x1b}, @dmm={0x7, 0x24, 0x14, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x81, 0x7, 0x7}, @country_functional={0xc, 0x24, 0x7, 0x1, 0x70da, [0xfd2a, 0x5, 0xe]}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x2, 0x24}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x77, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x9, 0xe}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xfc, 0x95, 0x0, 0x20, 0x3}, 0xcd, &(0x7f0000000200)={0x5, 0xf, 0xcd, 0x2, [@generic={0xbe, 0x10, 0xb, "3a52cc02727ce7beae0acd4218babdfb9176066b36362bfc29da922a5060b637527c0aa12a3909a2f83bbb823b584cc1df53a1cfdb769e4bc69d77942e2fc2420be14e1849fb1796672f9d203b7c35166b2de4704a59c5c22c7b67da3c24c8ff607017b021b4ed834aff70a939d69a07909c0059366cd1b178adfa66d06af98b766c7dad044b61351aef712dea2c46e6927ee24495a4cd11206a1f87a46a7b8b334027f39c8109baee78f085bb29460ba4fefa5d54e1b7a0231557"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x6, 0x6}]}, 0xa, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x408}}, {0x7a, &(0x7f0000000140)=@string={0x7a, 0x3, "88ba6b1b540bcb9558f9b813a85de196cf543419e30734d86ecc067fb19251b232b7a908ea3a314e4e828fec49975f6cba932a26eef7989c6e1072c674b0497d4b5dd73a56a67bf6eaf748b1de06991abb093b02ce501288a0afa9ce7fc6bee2a2a153b51e84d3090cad558fae03b1ba795667e5fa6a6e1f"}}, {0x102, &(0x7f0000000300)=@string={0x102, 0x3, "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"}}, {0xa8, &(0x7f0000000440)=@string={0xa8, 0x3, "1ca138c66ce19c0025da8c64bfd11d4a4a0eeb8ae476842b7eb495a10bbd62d52ae14f8824a552bb7c6b71beec18a12677026cff080fd5b530a43cc8b8c2ef0798171222b2aa791720b519bb1f3e97fd45df96e76b454dd7009c6a89c1160697fb7181f2a27fba20ac9ad743212029f9878ae7912da33b84c57af6023bfcb9a2e205cc8fb3cc93f042c48279e374c2d896608167d46e44db8aba83e93911ea7aca81eefe05f9"}}, {0x7c, &(0x7f0000000500)=@string={0x7c, 0x3, "42441ab50b25de9138a7eeee43f7934a53ec740521a4b31926764d090728de8c30ce1b5249d72ce696abc6d7ddf06f78370d8009a4a24b4a07e39e3d4a8a80749e41dbf513f4eb63c5547858b86685095c781d68b26d796c6c801dd4c03b3bb46cf17633d9820b99d062daf10ec69a8ad6e20b2ef485a0b56780"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x814}}, {0x3a, &(0x7f00000005c0)=@string={0x3a, 0x3, "d8f8326211c554fb8afb312fa08ebaf4db9586400815bc2a44dfa7ee82321857ed93818142cb11a599b732d21eab8d1572c958d6356bc7d9"}}, {0x9c, &(0x7f0000000600)=@string={0x9c, 0x3, "e009966979f5fc0a54582d55ae04b38bfbd64b12e5c31bef44881923169f8bc38153c5d3b59f2d0cb355e1da5fc28495aba33640985b7d5be6acb4c9ada15dcc070dfb8aa5734c0538222307a31eee95a29ab057b6b2fe075b02f08b006875a295ca9581b6b9e06e055ab39a309416c660cb204d5cbdbf36b83f71f7ba21e6b70cc057527a5ca75909b4f5d9dc3ed22a05f52fa73236fdd1dfcf"}}, {0xc3, &(0x7f00000006c0)=@string={0xc3, 0x3, "7a324d844a496e85602997925c3229a990d1fd843700fe1a1218f4a340acfe82241b922534c0eefaaa124546e39a07c7cf9ba2cef869753cedc3ac287295c11ce1a8f34a2616c755933964ae475264638e318e35f82559ee62decb3680261cf2a43bf6d7245e533d4dba97458e27b08a94edb63377b90119a25d10d498c66cf0cc2d214d4d7fe4cc2ac5f9b9bd5fde584eb389ecdce5d852d785ca7596f31ae2c32da8e815d780c7c3a8bdac5134376273d29e086d0c9715ccc058cebddee7400f"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1c0a}}]}) 3m53.042504891s ago: executing program 35 (id=937): syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc, 0xa3, 0x8f, 0x40, 0x13d8, 0x11, 0xd062, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa6, 0x1, 0x56}}]}}]}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001002cbd70000000000010001d"], 0x28}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0xec, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xa6, 0x6, "e5777db1f38ac1e737cd5b9ce21443c5b33d0178d03324706a158b3d4f27482ceaac69564b9415545cb3879cb5784b3a10971f09b1e71288e0819271646bbe310d3b73e1a2a10c85b94b7ae1e632192e831a3713a6671de06f54db7e8bf070dcc9b532c81d8b61b9daa90bca409b353f61b1bd58583a4b58063cd943e0b7ab8697d6e1a1051a0e99623fa5cc7130b1fc02010dadec3769d7ef4f9c72375bacc96eaf"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x114}, 0x1, 0x0, 0x0, 0x40800}, 0x40810) sched_setaffinity(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x97, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x2, 0x1, 0x3, 0x40, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "32f54cb4"}, {0x5, 0x24, 0x0, 0x1cd9}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8, 0x1, 0xf}, {0x6, 0x24, 0x1a, 0xb6, 0x4}, [@country_functional={0x6, 0x24, 0x7, 0xf1}, @call_mgmt={0x5, 0x24, 0x1, 0x4, 0x1b}, @dmm={0x7, 0x24, 0x14, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x81, 0x7, 0x7}, @country_functional={0xc, 0x24, 0x7, 0x1, 0x70da, [0xfd2a, 0x5, 0xe]}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x2, 0x24}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x77, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x9, 0xe}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xfc, 0x95, 0x0, 0x20, 0x3}, 0xcd, &(0x7f0000000200)={0x5, 0xf, 0xcd, 0x2, [@generic={0xbe, 0x10, 0xb, "3a52cc02727ce7beae0acd4218babdfb9176066b36362bfc29da922a5060b637527c0aa12a3909a2f83bbb823b584cc1df53a1cfdb769e4bc69d77942e2fc2420be14e1849fb1796672f9d203b7c35166b2de4704a59c5c22c7b67da3c24c8ff607017b021b4ed834aff70a939d69a07909c0059366cd1b178adfa66d06af98b766c7dad044b61351aef712dea2c46e6927ee24495a4cd11206a1f87a46a7b8b334027f39c8109baee78f085bb29460ba4fefa5d54e1b7a0231557"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x6, 0x6}]}, 0xa, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x408}}, {0x7a, &(0x7f0000000140)=@string={0x7a, 0x3, "88ba6b1b540bcb9558f9b813a85de196cf543419e30734d86ecc067fb19251b232b7a908ea3a314e4e828fec49975f6cba932a26eef7989c6e1072c674b0497d4b5dd73a56a67bf6eaf748b1de06991abb093b02ce501288a0afa9ce7fc6bee2a2a153b51e84d3090cad558fae03b1ba795667e5fa6a6e1f"}}, {0x102, &(0x7f0000000300)=@string={0x102, 0x3, "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"}}, {0xa8, &(0x7f0000000440)=@string={0xa8, 0x3, "1ca138c66ce19c0025da8c64bfd11d4a4a0eeb8ae476842b7eb495a10bbd62d52ae14f8824a552bb7c6b71beec18a12677026cff080fd5b530a43cc8b8c2ef0798171222b2aa791720b519bb1f3e97fd45df96e76b454dd7009c6a89c1160697fb7181f2a27fba20ac9ad743212029f9878ae7912da33b84c57af6023bfcb9a2e205cc8fb3cc93f042c48279e374c2d896608167d46e44db8aba83e93911ea7aca81eefe05f9"}}, {0x7c, &(0x7f0000000500)=@string={0x7c, 0x3, "42441ab50b25de9138a7eeee43f7934a53ec740521a4b31926764d090728de8c30ce1b5249d72ce696abc6d7ddf06f78370d8009a4a24b4a07e39e3d4a8a80749e41dbf513f4eb63c5547858b86685095c781d68b26d796c6c801dd4c03b3bb46cf17633d9820b99d062daf10ec69a8ad6e20b2ef485a0b56780"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x814}}, {0x3a, &(0x7f00000005c0)=@string={0x3a, 0x3, "d8f8326211c554fb8afb312fa08ebaf4db9586400815bc2a44dfa7ee82321857ed93818142cb11a599b732d21eab8d1572c958d6356bc7d9"}}, {0x9c, &(0x7f0000000600)=@string={0x9c, 0x3, "e009966979f5fc0a54582d55ae04b38bfbd64b12e5c31bef44881923169f8bc38153c5d3b59f2d0cb355e1da5fc28495aba33640985b7d5be6acb4c9ada15dcc070dfb8aa5734c0538222307a31eee95a29ab057b6b2fe075b02f08b006875a295ca9581b6b9e06e055ab39a309416c660cb204d5cbdbf36b83f71f7ba21e6b70cc057527a5ca75909b4f5d9dc3ed22a05f52fa73236fdd1dfcf"}}, {0xc3, &(0x7f00000006c0)=@string={0xc3, 0x3, "7a324d844a496e85602997925c3229a990d1fd843700fe1a1218f4a340acfe82241b922534c0eefaaa124546e39a07c7cf9ba2cef869753cedc3ac287295c11ce1a8f34a2616c755933964ae475264638e318e35f82559ee62decb3680261cf2a43bf6d7245e533d4dba97458e27b08a94edb63377b90119a25d10d498c66cf0cc2d214d4d7fe4cc2ac5f9b9bd5fde584eb389ecdce5d852d785ca7596f31ae2c32da8e815d780c7c3a8bdac5134376273d29e086d0c9715ccc058cebddee7400f"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1c0a}}]}) 2m34.956109537s ago: executing program 3 (id=1448): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0x34, 0x0, "0c9e08f7644a0405000000f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd3c4fa3838bf399ad5bd35f21907c798a11300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e28, 0xfffffffb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x81}}, 0x0, 0x0, 0xe, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18defd5f2fdf98328de9441031348589b763d46d14810acc5f70000000000000010"}, 0xdd) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 2m32.400746238s ago: executing program 3 (id=1456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000280)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x68750}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m31.751643418s ago: executing program 3 (id=1462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 2m31.52905692s ago: executing program 3 (id=1463): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@gettclass={0xffffffffffffff9c, 0x2a, 0x2, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x9}, {0x7, 0x10}, {0xd, 0xfff1}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0x6ebf}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) 2m31.204455024s ago: executing program 3 (id=1465): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000940)={0x2d520, 0x2, 0x0, 0x8d6b, 0x40, "0412412d08d500001e200021077b0a008000"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7) 2m30.95600857s ago: executing program 3 (id=1467): socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x80) r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x40, 0x123}, 0x18) readlinkat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f00000006c0)=""/231, 0xe7) sync() sync() sync() sync() sync() sync() sync() sync() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x50, 0xffffffffffffffff, 0xfffff000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7}, {0x2}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0xfffffffe, {0x2b}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 2m15.9336356s ago: executing program 36 (id=1467): socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x80) r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x40, 0x123}, 0x18) readlinkat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f00000006c0)=""/231, 0xe7) sync() sync() sync() sync() sync() sync() sync() sync() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x50, 0xffffffffffffffff, 0xfffff000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7}, {0x2}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0xfffffffe, {0x2b}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 19.845378436s ago: executing program 1 (id=1767): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x800) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x800454cf, &(0x7f0000000100)={{}, "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"}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0203200019000000000000000000000004000300000000000000000065c6797900000000000000010000000000000000030006000000000002004e207f0000010000000000000000040004000000000004000000000000000000000000000000000000000000000002000100000000000000000000000000030005000000000002004e21ffffffff000000000000000005000700000000000a004e2200000005fc010000000000000000000000000000000000000000000002001300"], 0xc8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000080)={[{@dyn}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r2, &(0x7f0000003800)={0x2020}, 0x2020) r3 = syz_open_dev$video(&(0x7f00000010c0), 0x0, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000040)={0x2}) ioctl$BLKTRACESETUP(r0, 0x1265, &(0x7f0000000800)={'\x00', 0x11, 0x8, 0x9ff2, 0x2000003}) 19.587220553s ago: executing program 2 (id=1768): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0xa}}, 0x26) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005000)=@newtaction={0x3ad4, 0x1e, 0x300, 0x0, 0xfffffffc, {}, [{0xe0, 0x1, [@m_ct={0xdc, 0xc, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x9}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_MARK={0x8, 0x5, 0x4}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_ACTION={0x6, 0x3, 0x23}]}, {0x8b, 0x6, "50777671ce986d76b053a90d9f329e137f609c465d4da4153d01195d2c255b0f24cea7473af63951b0048833d26a66c12b6c7d7ca96a72263a27317ffb84b4c7dbe0893ca21c040cdffc24db1d86c9293cbde82d6e4e0ed586ed74fafbb4083d527750ad8dac86f7f7e04b8ae00f117787dd519474b85e853bba6a11da37dbc79ca031be052d81"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x1428, 0x1, [@m_ct={0x164, 0x0, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_LABELS={0x14, 0x7, "23bccae79be51a061da0a219c477afbb"}, @TCA_CT_ACTION={0x6, 0x3, 0x8}, @TCA_CT_MARK={0x8, 0x5, 0x180000}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}, @TCA_CT_ACTION={0x6}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0xf8, 0x10, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1b}, @TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}]}, {0xa9, 0x6, "8224324e1f901efa04b18a7f6b7bf93f1ce75c0a31c2dec9ab435d6b5006d6f131ae3fee02035539b80ea310e140d1239fdb05303520e12a4e8345836ebad694b138f1867cb1e2006ffe1e1560a73728f23d74055c638e30abaf4a64b7f7838175782666736c38771b50f8265c145c8f399d4facf108f22b9ec86976b1c865ee9b2e4d897be0e76c4332251298b24b8aa5aae66b67d85dcb93a0759c298a843efbe31f9623"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0x1060, 0xe, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x5, 0x0, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x210b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x7fa, 0x20000003}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mirred={0x168, 0x12, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6e, 0x7, 0x2, 0xfffffffb, 0xcc5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xcd5c, 0x6, 0x9, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x1, 0x6, 0x211c, 0xa}, 0xcdc19200c87730b6}}]}, {0xdb, 0x6, "cf581370f0d5be5fa5760a821578bc2fe79a16f6c2ce829fee75c19c75d8bd56c698b4d910acebe9869d5e47c05a79ca242344bcb7d1a0edde38d452b9ab30f7f4786ada03391b1de200fdf48f97e103798620a261712d20a77dc2e60048b7fc55ad0931c8cc2ac6b261905c4142f675d7cbe25cf3db6776fdc1ebc9d45d1c8d1ad11287f015ef809c126337c29fe8a9049afce1f3d3d67ad0c4c864130865df90dc6578692dc1c934cda4121814cd7ec3b0e39622275086c37bf84290ae7f3aa05f971f2fc86ff023606f2d130a4980d7f85f5cf20b7a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x15e4, 0x1, [@m_csum={0x248, 0x8, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffe01, 0xfffffff9, 0x2, 0xffffffee, 0xcb0a}, 0x2b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2b300000, 0x9, 0x20000000, 0x8, 0x7fe00}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xc, 0x3, 0x4, 0x5}, 0x47}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x0, 0x0, 0x80}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc, 0xffffffff, 0x8, 0xfffffff7, 0x5}, 0x7a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffff801, 0x5, 0x3, 0x5, 0x1000}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe55, 0x10001, 0x1, 0x2, 0xfff}, 0x1b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x81, 0x0, 0x800, 0x200}, 0x64}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x6, 0xd7b, 0x2}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x8, 0x3, 0x100, 0x1}, 0xa}}]}, {0x101, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x144, 0x1f, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x7, 0x8, 0x1ff, 0x22}, 0x10}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfff, 0x808, 0x7, 0x0, 0xf9}, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x3, 0xb6, 0x85}, 0xf}}]}, {0x7e, 0x6, "f902c729ba83ecdc5bedb6b00dad206752bcddd4e4643bdd439938593f04cbf3f0dfdf7b5ed00c8ad0623c5ff4df9025b07649e1c7c6fcfdb5c2296edc09a1f19792e2749829b061721a60e5cd3c3eb9294ec2a7a859536dac1204f664cc09bb47344bc8c2e2539fda3f8094c2a74017ea4a7b5549d2b2d50ab3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0x160, 0x3, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000001, 0x0, 0x2, 0x0, 0x1}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x60, 0x8, 0xa, 0xb}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x200, 0x5}, 0x216c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x2, 0x9, 0x5}, 0x8}}]}, {0xbe, 0x6, "95618f2989bfae64bb73509c0a945597824d2fa23d221e34323759ee253fa1c85c03d51c63f6a4b44f0ac8e0cea62b7bffca0410b9e49b6924ec5310afeaf59800eaa3a343760442c89c7fa115310a03e2bb2a8e363c09ded2ab66f9eb8aa11d09e0708e66db3fcf7c46924d510b79a9e5468f7417a4cb70d1e9cd92d59962074e0ed85badf6653e76acded00f1b7a7b68001a67223f08b31b5969978c100c65a08132104d66de3ba0d517f45ee3333368efad4f8dd8c0584e89"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x400}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xe54}]}, {0xa, 0x6, "f9212942a9bb"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x1018, 0x16, 0x0, 0x0, {{0xa}, {0xf34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xc8, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x9356a3ed8041bbc6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x1, 0x80000000, 0x0, 0xfff, 0xfff}, 0xfc, 0x0, [{0x4a, 0x51, 0x8000, 0xf, 0x1, 0xf97}, {0x4, 0x3, 0x8, 0xfffffffd, 0x10001, 0x1}, {0xffff8001, 0x4, 0x5, 0x6, 0x101, 0x40}]}, [{0x4, 0x401, 0x0, 0xfff, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x6, 0x5, 0x200}, {0x7, 0x3, 0x1, 0x63c554cb, 0x7, 0x800}, {0xb, 0x2a, 0x3, 0x1ff, 0x0, 0x34}, {0x7fff, 0x80000001, 0x1, 0x8001, 0x8, 0x2}, {0x1, 0x0, 0x6, 0x0, 0x8, 0x7ff}, {0x10000, 0x5, 0xfffffffc, 0x800, 0x53c2, 0x8}, {0x35d3, 0x400, 0x40, 0x8, 0x4, 0xfffffffb}, {0x9, 0x6, 0xd, 0xed71, 0x5, 0x9}, {0x9, 0x5, 0x7f, 0x4, 0x0, 0x9}, {0xff, 0xd6bc, 0xc, 0x9, 0x400, 0x7}, {0x9, 0xffff, 0x4, 0x8, 0x9, 0xed}, {0x1, 0x1, 0x8001, 0xc1fa, 0x6e, 0x1}, {0x10000, 0x7, 0x200, 0x6, 0x0, 0x5}, {0x3, 0x1, 0x4, 0x5, 0x5, 0x8}, {0x2, 0x9, 0xc, 0x78, 0x6aeb, 0x2}, {0xfff, 0x1, 0x7, 0x7, 0x2, 0x1}, {0x2, 0xb, 0xf, 0x0, 0xba, 0x4}, {0x4bc, 0x4000000, 0xfffff000, 0xf5d, 0x7, 0x8}, {0x9, 0x9, 0x8, 0x0, 0x1, 0x57}, {0x87ad, 0x1, 0x8, 0x1, 0x1, 0x10000}, {0xffffffff, 0x6, 0x7ff, 0x10, 0x0, 0x8}, {0x6, 0x5, 0x10000, 0x9, 0x80000000, 0x3}, {0xe3f2, 0x40, 0x9, 0x8, 0x98, 0x8}, {0x1ff, 0x8, 0x7ff, 0x34c, 0x4, 0x40}, {0xb, 0x3, 0x4, 0x3, 0x8000, 0xff}, {0xb, 0x2, 0x2, 0x6, 0x4e, 0x5}, {0x7, 0xfffffffc, 0x9, 0x0, 0x2, 0x9}, {0xecd2, 0x2, 0x8000000, 0x8, 0x63e5, 0x4}, {0x8, 0x9, 0x1, 0x1, 0x2decaed8, 0x6}, {0x0, 0x1ff, 0x7e0, 0x7fff, 0x10001, 0x1}, {0xffff, 0x5, 0x0, 0x10, 0x1, 0xf4}, {0xffffffff, 0x8, 0x400, 0x7b5e29f4, 0xe, 0x9}, {0x401, 0x40, 0x0, 0x9, 0x5, 0x3}, {0x9, 0x9, 0x4, 0x400, 0x4, 0x860}, {0x4, 0x5, 0x4, 0x3, 0x4, 0x5}, {0x200, 0xd, 0xf, 0x10, 0x3, 0x5}, {0x5, 0xffff960b, 0x1ff, 0x6, 0x40, 0xfffffff8}, {0xfffffffc, 0x5, 0x6, 0x5, 0xfffffff7, 0x2}, {0x4, 0x4, 0x8, 0xfffffff7, 0xfff, 0xfffffffe}, {0xf, 0xd, 0x1, 0x6, 0x6, 0x5}, {0xfffffc01, 0x81, 0x5, 0x6, 0x3, 0x7fff}, {0xffffff01, 0x9, 0xffffff5a, 0x4, 0xe441, 0x4}, {0x1, 0x4, 0x3, 0x23, 0xfffffe4c, 0xe}, {0x9, 0x1ff, 0x4, 0x80000000, 0x0, 0x7ff}, {0x1, 0x5, 0x65, 0x7, 0x2dd}, {0xf, 0x0, 0x81, 0x8, 0x9, 0x2}, {0x7f, 0x4, 0x3, 0xfffff90d, 0x4, 0x4}, {0x72, 0xffffffc0, 0xfffffffb, 0xfff, 0x9, 0x5}, {0x1, 0x6, 0x6, 0x1, 0xdc}, {0x61ec1ca6, 0x1, 0x0, 0x7, 0xfd, 0x7f}, {0xfffff801, 0xff, 0x7, 0x68, 0x9}, {0x7, 0x3, 0x1000, 0x9, 0x3, 0x7e}, {0x9, 0x9, 0x9, 0x7fffffff, 0x3, 0x7ff}, {0x3, 0x8, 0x5, 0x40, 0x7, 0x9}, {0x2, 0x5, 0x4, 0x8, 0xc, 0x1}, {0x3ff, 0x1, 0x2, 0x2, 0x6, 0xfffffc01}, {0x1000, 0x0, 0x9, 0x8, 0x28c00, 0x10001}, {0x2, 0x3, 0x2, 0xc, 0x3, 0x2}, {0x7f, 0x4, 0x4995, 0x9, 0x2c, 0x8000}, {0x40, 0x2, 0xa6f, 0x9, 0xd, 0x9}, {0x8001, 0x1ff, 0xbe57, 0x1b, 0x0, 0x5}, {0x8, 0x70b4, 0x4, 0x5, 0x1, 0x2}, {0x1, 0x6, 0x3ff, 0x9fb, 0x40, 0x1}, {0x10001, 0xfffffff7, 0x3, 0x1, 0xfec, 0x4}, {0x9b01, 0xffffffff, 0x0, 0x4, 0x7, 0x1}, {0x8001, 0x7ff, 0x436, 0x10, 0xc00, 0xf7a05de}, {0x40, 0x57ff, 0x7fffffff, 0xa2c, 0x6, 0x8}, {0x10, 0x1, 0x9, 0x1, 0xac72, 0x8}, {0xffffffff, 0x3, 0x80, 0x4, 0xd2a, 0x766}, {0x38000, 0xeb7, 0x81, 0x6, 0xb3, 0x8}, {0x6, 0x3, 0xfffffffb, 0x2, 0x8000, 0x401}, {0x9, 0x7, 0x6, 0xfffffffd, 0x6, 0x37}, {0x3, 0x4, 0x3ff, 0x3, 0xa0a, 0x1}, {0x9, 0x4, 0x30, 0x1763d00, 0x97, 0x8000}, {0xfff, 0xb, 0x0, 0xc, 0x800, 0x1}, {0x8, 0x8, 0x4, 0xffffff5e, 0x4, 0xa}, {0x1, 0x6, 0x200, 0x0, 0x58a}, {0xc, 0x1, 0x10001, 0x400, 0xa, 0x6}, {0x1, 0x9, 0x3, 0x8001, 0x800, 0x3}, {0x1b, 0x80000000, 0x8, 0x10000, 0x0, 0x9}, {0xffffffff, 0xb, 0xa, 0x0, 0xffffffff, 0xbe4a}, {0x8, 0x116f, 0x6, 0x10, 0x8, 0x8}, {0x80000001, 0x3, 0x2, 0x0, 0x5, 0x5}, {0x0, 0x6, 0x6, 0x800, 0x67, 0x3}, {0x7, 0x7a9f2508, 0x6, 0xfff, 0xa, 0xfffffff1}, {0xf0, 0xc32, 0x9, 0xfffff25d, 0x6, 0x80}, {0x4, 0x9, 0x7, 0x7fff, 0x7ff, 0x4}, {0x5b7, 0x4, 0x200, 0x2, 0x8001, 0x9}, {0x2, 0xed, 0x40, 0x1ff, 0x7, 0x1}, {0x84f0, 0x1, 0xfffffffa, 0x0, 0x696, 0x9}, {0xffff, 0x5, 0x2, 0x6, 0xf, 0x7}, {0x5, 0x1, 0xd6, 0x1, 0x8, 0x4}, {0x9, 0x200, 0x8, 0x836, 0xa, 0x1}, {0x1, 0x9, 0x5, 0x7, 0x6, 0xff}, {0x0, 0x4, 0x8, 0x9, 0x80000000, 0xacda}, {0x9, 0x9, 0x7, 0x8, 0x80}, {0x7, 0xf, 0x2, 0x1, 0x8, 0xfff}, {0x1, 0x81, 0x3, 0x3, 0x8000, 0x6}, {0xf, 0x4, 0xff, 0x80000001, 0xfffffffd, 0x6}, {0xfff, 0x1, 0xa9, 0x7, 0x8, 0x7}, {0x8, 0x800, 0x2e74, 0x8, 0x6b27, 0x8}, {0x200, 0x5, 0x9, 0x3ee, 0x5}, {0x8000, 0x5, 0x8, 0x1, 0x1ff, 0x160}, {0x81, 0x200, 0xb220, 0xd, 0x200, 0xfff}, {0xb54, 0x7, 0x1000, 0x6, 0x4, 0x1aa28831}, {0x3, 0x9, 0xf, 0x9, 0x27, 0x3525}, {0x8000, 0x1, 0x3, 0x6, 0x9, 0xff}, {0x5c3f, 0x2, 0x6, 0xfff, 0x5, 0x7}, {0x0, 0xe2f, 0x1b80, 0x5, 0x6b, 0x101}, {0xfffffff9, 0x0, 0x800, 0x9, 0x400, 0x401}, {0x6, 0x3, 0x800, 0x0, 0x4, 0x6}, {0x100, 0xfffffffe, 0x2, 0x40, 0x4, 0x8}, {0x4, 0x5, 0xa, 0x0, 0x0, 0xffff8000}, {0x8, 0xd0c5, 0x4, 0xd, 0x9, 0x5}, {0x7, 0xc0ea, 0x8, 0x4, 0x3ef, 0x4}, {0x8, 0x7, 0x2000, 0x8, 0x5, 0x7}, {0x3ff, 0x4, 0x7, 0x800, 0x1ff, 0x400}, {0x1, 0xe, 0xfff, 0x6, 0x47b, 0x6}, {0x80, 0x76, 0x4, 0x200, 0x10001, 0x7}, {0x1, 0xfffff001, 0x763, 0x81, 0x3ff, 0x3}, {0xc5, 0x5, 0x3f, 0x1, 0x7, 0x7}, {0x1ff, 0x8001, 0x7, 0x7fffffff, 0x10000, 0x2}, {0xfffffffc, 0x990, 0x2, 0x5, 0x7ff, 0x2b286e36}, {0x5, 0xb, 0x8, 0x6, 0x8, 0x4}, {0x3, 0x6b, 0x6, 0x80, 0x7, 0x81}, {0x0, 0x0, 0xfffffffe, 0x2, 0x5, 0x5}, {0x2, 0x8, 0x100, 0x0, 0x400, 0x3}], [{0x3}, {0x2}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {}, {}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x21c7979d60f42a07}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x3}, {0x0, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x5}, {0x3}, {0x2}, {0x1, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x2b56b5e75cf551e8, 0x1}, {0x5}, {0x4cf0e0182e399885, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x4}, {0x4, 0x1}, {}, {}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}]}}]}, {0xba, 0x6, "d56134b626abb8de6c4b633e0f729fa7e933e33193d254ac48ea277c4b7d589372ab2a2c30d2b25f07486085c218ed7d4072cf4bd760ed7246b9a6ba78a53f598a6210df40ec17fc7b1645c361e1a433372b42ebc03fd843a61293d754bce86971fc21ce44d870489b000f7c7c46727e468f1788de033e6c993679a811eedbea5b2ab0e10c48085c94c6ac96b75a027118eb7c8004f2beb19b2a42bea1fc50c4afa756c17408f8a25d016ff6ceda3357e72a9b0e9eca"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_vlan={0x8c, 0x1e, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0x57, 0x6, "9f5975f5ad1582652534c7f69faf5ac483d505b1c85fa4a2e617fd54b8b021f4c20d26b59e85373c5e9aa1d2e4a535b9f7dfb3a7930f2d881604825b57339b1a1facf097ade104cf62773b8d304e8f651aa95e"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, {0x4b4, 0x1, [@m_ct={0x11c, 0xb, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x1}, @TCA_CT_LABELS={0x14, 0x7, "10c941eb5b1c9d9880d8acb73d290332"}, @TCA_CT_ZONE={0x6, 0x4, 0xf}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_LABELS={0x14, 0x7, "793b56ee0030a83df5c9a1d549c31c52"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}]}, {0xa3, 0x6, "ada1488edf32d02d7555a292ab5ff58b6ce498b4874a98eec2d0eaa7a80eb8d9e0ef0a237c22521fd8b8a37d03b96ef6d95f77b98e46582e253f8e16cd32a6aed88dc3c5ac255eea17225a8efae2238e4939445609cc4c8ce4af02e2fc79dd867c4a6f74038a776a3384defa4583dcf95456bcdce22a690bb22884c9dfc57dc03e05d34c815ebd7d25e1a3a01f046989388f0cbc298ee2c093e384c14cc32c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0xdc, 0x1c, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7fff, 0x20000000, 0x3, 0x3}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x784, 0x10000000, 0x2, 0x1}, 0x409}}]}, {0x72, 0x6, "548f83617ef0d5ed6cf94672df9025365c003e29fdad46b5587d7b77d20789eca6d20147f52b7461a1f8e12ca761ad2d3e871fc75d9d9719994f6997525954a6500af15c6ba602da5c1864619f114d72e91fcec80e4d6fe54c3d9fe86af3f6a90f6dfed6ec773267c709001b2417"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x12c, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x2, 0x5, 0x7, 0x9}, 0x3}}]}, {0xe2, 0x6, "bb3c6e1f0b4790ca84b86e11d061818f8854285f9d79818cd39959201a28043d5dac45d83929bafc1f752405d0c4d789d92adff6ba89f6dafe5b621f4991a6f0b385f772eed59d10b3b6c46129fc903f0c4edce6a641ef8285b098562c292d5583aa211e51c19624dc677827405c7d50c014068a99cb5503f6bc1eb9f0f5d2f239ab45ae5f22bf3dec5ad8558a4a2e76ed8204261d3b80005895654121e7e60613624ff70ede44526d639eb3560512b7c07e943ca7c9fca525d5969de0256dbf8c5b6f95f13663a64feaf00ca4d0923db30d8de0a3a2a3ed692c8cd25503"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_nat={0x18c, 0xb, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x80000000, 0x2, 0x4, 0xee2}, @multicast2, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x9, 0x8, 0x7, 0x7}, @empty, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xbe3, 0x20000000, 0x2, 0x6}, @loopback, @local, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc, 0x8, 0x0, 0x81, 0x37221e80}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xe0000000, 0x20000000, 0x5, 0x5}, @private=0xa010101, @multicast1, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8b6, 0x8, 0x5, 0x8000, 0x7f}, @empty, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x4, 0x7, 0x91, 0xfffffffd}, @private=0xa010100, @private=0xa010100, 0xff000000, 0x1}}]}, {0x4a, 0x6, "f4bb35f958ab7302db793c6383eb169d060c4bdd28de6587ce2b2cca93007dd047ad55eb8c42e336f47ae55d8381be9411ca6969557a631ad18486e6d1de0588481d358ce275"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0xb20, 0x1, [@m_nat={0x1d4, 0x11, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x81c, 0xa, 0x6, 0x7f, 0x2}, @dev={0xac, 0x14, 0x14, 0x12}, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x0, 0x3, 0x2, 0x2fc7fac3}, @empty, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x2, 0x10000000, 0x81, 0xfffffffe}, @dev={0xac, 0x14, 0x14, 0x30}, @rand_addr=0x64010102, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x0, 0x8, 0x8, 0x9}, @rand_addr=0x64010100, @rand_addr=0x64010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x16, 0x9, 0x4, 0x1, 0xfffffffb}, @remote, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x7f, 0x7, 0x1fb, 0x2c71ad19}, @loopback, @local, 0xffffff00, 0x1}}]}, {0xbb, 0x6, "16f93d8cb713a080cb09ea6a6307167449c58b8fbffdd41427b95be71a7bd76865e7152b9fc366c46d88cd38a3973a8b3a66eac0da2192fe5afb1ea74f6df49a282a9a3812b5b55152bea7fc06410c4af151c86a8964ee7638abdf100cf1c016e00b4077ac3e7abcec10a45ae1484e6213b0b5bca5f4db820ae9576d031fd8323167b4c900debb9810fbffe746a0cf3a7ab1443aff6363f8bc94be95e8ee330422dd596679df94293e4cc43cd39311f1b2f51db4c7c8b2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x6c, 0x14, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x3ff, 0x5, 0x9, 0x2}}}]}, {0xd, 0x6, "4f8183750e1caa88c6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ctinfo={0xa4, 0x1b, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0xffff, 0x7, 0x9, 0x401}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x69b, 0x20000000, 0x3, 0xd466}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x27}]}, {0x37, 0x6, "7a6d6f169f8e9ae5c60b05901ef1c675f451c5c347a287a655248662f3181acf4a1ae9c909bda736cc1ee9ecf25b5fb01b9a50"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0xb0, 0x1f, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x8, 0x0, 0x200, 0x35bc}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7ff, 0xffffffffffffffff, 0xfff, 0x14a9}, 0x63}}]}, {0x4b, 0x6, "aa61850ef522e067dfe164223ebc8957f9e958990f0dce4ba89fc9d34eceb8ab8e6c7d067cfbab38bf1fe3963fbb91daa1d078f432b633ec095b0187c75d5a74861b978ac681ac"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0x358, 0x1e, 0x0, 0x0, {{0x7}, {0x288, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0xec, 0x6, {0x7, 'nat\x00', 0x9, 0x5, "b84d94a64057f3aaf72ae153a643f5a1bbe716b43a4a8e9b025bb984d782e5bc6c2bf33fe46a73c3f503d5ca9e2a02484fc5ed121af109b96549d2e498a840774f3b90e0bb24b523085a6264298c36d2392a381f784f8d604af3f69346f1663f378bef8d9cfff9cc38ace38f8ce9821cf1d0d552ff6e71c040ff661594e060b4dff4107df6380e083898dbb0105721deeecc5959a5a963e97be718d0a7afb9e1194160409af2c92d4ffa55ee59a371efd5d6033434392c14bdde9518711405335308"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x104, 0x6, {0x7, 'raw\x00', 0x8, 0x40, "4b0cbdeb0387ba37d1ea53f3b9009cedf98217f1e29765a943adaf955ae5a8284cf083e6bde588c35d2eb3bd5f45a575c25e3753c8496c856db64c4470ba7184da4d991a281edb2fcf0994a985cc64762c0e4f03a5581e4e9f95850d13d109b22324704006bb5cc4684e8b520ba4d31027388334a57c9c54a927cf1bc9886e936718520034269cd0552271546b1720ba1f20470c86004ab33ab5434f6d8a2cdf6cb05ed42623ed613ac02ff749026b4786321d9f0ed89afc5d7fbf2e586d90d09b07ee5b3c75546d5efd6bd2fe62fb6594617e10adb224ed691d"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8}]}, {0xac, 0x6, "affb00df7064a2e4ccb4b422bd0b1a724f44f765066a6b0350ce7dc2f1d80ce2bbbe9847ad67401b3477bf04c4a3950dad56eadc07dbf0bbf925bf2bac00e75df17dc69bd90adf6736c47224099f4486c8f2f119513a905e0275c4079ff46b27c3236ce3c81cdd998d0c067783d65844ef6597559ca74cf4af60b72368c4fe2757fdb83eba59f2cd4d8170fa3c823923dcac9cd2c745aadb15d65dba0de84bdbd61ae4be73b0259c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x12c, 0x3, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x6, 0x8, 0x7}, 0x1}}]}, {0xd9, 0x6, "921089647317f8a7e0e1ed833caaff885fdc32384d7dad88c697a8bc2f75d7e9afd99ba7ca42e682ff9ae670092c0d2af27eb4e60f1002357fae51598d9e5cd6457f5c0af23d736781e384126aaa0e33b00b26aea2f8ae76609dc8b8ca930f24f8591a3c02889d152caf815075409fe49de14e4cc28585b1759efffe688fabb8c4c285eebf9093f8e14282b72eb5626f77e32cc37aaadfaf8e4340149cc9078d08820c56c8dfc4a4bb8c0a5cf578ef79b0fe6af7d89e55de96853a152b0e3d74fc4fe876f4627df02e6b4ff74e39d2afd20e4f2144"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_xt={0x2b0, 0x12, 0x0, 0x0, {{0x7}, {0x1c0, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0x112, 0x6, {0x3, 'security\x00', 0x8, 0x8, "e8d00c7e980c8f5726b79a9a173a9104972cc59d3b068e530f21b5dc396c50ad5ebcad2ffe717a5d950a11e1a6e351352641527e935199ce5a3635d96eeb4f87623928d1248818096a6191f623c7dde4ed425313e89cef28e958727a1d08a03c499a00ca909ec8ac3d3f4b218b7f7d67352c01d0c263070bb7b182ac4a1bd3e1b9a4796a0f6c4e53879d17c377aa20daa2a8d07e10dfda51462e76194063d8fe0b553013e274fd914fd6569498ef780762ad7f38b07e880b53a0fe4fb874162a0c24968dbdba5a2af75fceada1f0ef6adfed1a3f5340a1f6156d29ee6905990433406591d0efa710"}}, @TCA_IPT_TARG={0x98, 0x6, {0x1000, 'filter\x00', 0x9, 0x8, "c21c57536dc0d63bb7431aab8dbd72193fd43a2a3fccad3434a8cf19131a84bf539219ed5bab30545e33950be5e9e913ee3e1c092ccfe22fc500f3fd7d141af9af23a4294b17e58f1db50ce652dd15bb5b6f8b3262c187ad57c1658618e9578dcc840d5ac42b02ed8443b96acfdb"}}]}, {0xc9, 0x6, "f3494484d8bc3f75cbd0dcd90b059103474f1f6ef9492b190390ce2d3d8bc8d72975351bf04b351477604063eb6db2ccc8d82b1bddd9e444a3c9c1b34d3fab39cdf530c0bf16d587cc3398eee1960d6543fb356d489ce798df913a2c45e06f940e70e97ed4d5d70e5cf1e1058b34e67a23c160976ad6d912e57b73618e7d23b9158f3be67faf6dbf1c79d416c42e637f16874004d7f4359c182dbeb96b90251c93e58ad887049bbbfd3ce726844f8cddd3d5eb1af84a8f44ccdb6fbcc90f867e00c32f6fc1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x54, 0x3, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x23, 0x6, "6267097bd752da20ac14de65b1d7661586c364c4a21ae2cd211caf2111004c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x3ad4}}, 0x41) socket$netlink(0x10, 0x3, 0x13) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r7, 0x8008ae9d, &(0x7f0000000380)=""/174) syz_io_uring_setup(0x3676, &(0x7f000000a9c0)={0x0, 0x0, 0x100, 0xfffbffff, 0xffffffff}, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) close_range(r0, r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000000101040000000000000000020080021400018008000100e000000208000200e000000200"/56], 0x38}}, 0x0) 17.123141903s ago: executing program 1 (id=1773): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000001c0)={0x26, 0x37, 0x1, {0x0, 0x0, 0x38, r0, 0x8, ']^!^(*-)'}}, 0x26) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x0, 0x4, 0x7fffff) r5 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, 0x0, 0x20004805) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r8, 0x0, 0x48a, &(0x7f0000000000)={0xd3e9, 0xfffffff7, 0x2}, 0xc) 15.307145024s ago: executing program 1 (id=1776): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x471, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000280)={0xf, 0x0, 'client0\x00', 0x1, "359808004d3f9510", "efd391e95eec7559218f7b75d2a962ae35c05cbc884034bd4a6c2554f0997d22", 0xfffffff9}) syz_usb_disconnect(0xffffffffffffffff) r6 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a000090581034000000000"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b000000000000000000800000000000007ea3b62b44aa25d113e2ee869e3c20e72243da41da221b8777b4b957bcfed0da79c5d69acc137756337768ae4428daa1250174a8d931dc730f634c8adce2da3c7173bebbbf105c09dd6db3a9f3d7cc244764139fc54f9639700967f242e6ff373c6bc99a070237426d6973b2d746c1c07fd902f8f37e203e723ea8bc453cc75fa4865329d6d44e2a22433072f06ac166c5e007259fd1cb174bd4792012c8b42529a5c4be957dc8916c57dfc46b1c995a1d3ff24b6737471b44b16bd2c3e3438724d3130964225a29563f0d0bdc43234ec611946535120493e7f0298e59cc605d04b2024ed2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000100"/28], 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xc8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf25130000000c0009000202aaaaaaaaaaaa050003d70300000087fb982eccdc74d6f75065fdd0b76b8c2009ccd7bf4d17c05bdace"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000041) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1100070047aa32b137d401a500000010000000000a00060008024490c5592fedebda0806000000000400280084137c0f45fa63ff0ba931a90fb1b605fd92a7af086b0b3bbc021a686c4fc7a36335ec5cefd1fb8aa5ebb3b54f420861989c3a255e0b61abc69220b8720339465ad9a2d188fdcd"], 0x48}, 0x1, 0x0, 0x0, 0x51}, 0x14) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9a6e6708008847ffc8010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 12.833625135s ago: executing program 8 (id=1779): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r1, @ANYBLOB="010000000000000000008300000028000e80240000800a000100ffffffffffff000008000380040001800a0001000802110000070000c0000580200000801c0002800800a0000800000008002600f31600000800260090150000540000801c0002800800a100ff03000008002201610100000800a1000400000034000280050019010d00000008002201ea00000008002201d700000008002700020000000800a10009000000050018015d94de1cf7a52c000000480000800c0002800800a000f7ffffff2c0002800800270002000000080026009e09000008002700030000000800220185030000080026006c0900000a0001000802"], 0xfc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 64) r2 = getpid() (rerun: 64) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000480)=[{&(0x7f0000000540)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}, {&(0x7f00000024c0)="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", 0x1009}, {&(0x7f00000003c0)="ee408da5bf52c13ebbc5578f7aa2ad2d2868f5a387f8c825fbb0b7e29ca596af8e13b523907bb8595636e2881adb98bdbe5a4e8f3aecfc133b2fd1375e5b146dda680ba46fa19bdf49cc92a57214af605e2acc6dbe51b50107cbdc901bbeeddf85d27332eb7dbbf121dc3750f291aa10f904d2a752da8176a0126dbcfa59b4707997ac084bc999e0", 0x88}], 0x3) (async) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendmsg$inet6(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x4e20, 0x5, @local, 0x5}, 0x1c, &(0x7f0000000140), 0x0, &(0x7f0000000180)}, 0x4008040) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x1d, r9, &(0x7f0000000300)=""/182, 0xb6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x7}}]}]}, 0x2c}}, 0x0) 12.831809551s ago: executing program 2 (id=1780): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x54, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x10) 12.476642783s ago: executing program 9 (id=1781): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300), 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000000)={0x1, 0x7, "a340e7", 0x3, 0x9}) 12.408800615s ago: executing program 7 (id=1782): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c00000000000000000000000800", @ANYBLOB="ac1414ad000000"], 0x40}, 0x0) syz_emit_vhci(0x0, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0xfffffffffffffffe) write$uinput_user_dev(r6, 0x0, 0x0) write$uinput_user_dev(r6, &(0x7f00000005c0)={'syz1\x00', {0x5, 0x1, 0xd06}, 0x34, [0xa, 0x2, 0x7, 0x20, 0x2000, 0x9, 0x3, 0x5, 0x5, 0x7fffffff, 0x4, 0x7, 0x1, 0x5, 0x0, 0xfffffffd, 0x2, 0x932, 0x84, 0xe, 0xb9e5, 0x6, 0x0, 0xfffffc8a, 0xc, 0x400, 0x8, 0x10, 0x2, 0x8001, 0xfffffff8, 0x7e, 0xe, 0xb, 0x3, 0x4, 0x400, 0x108, 0xe0, 0x8, 0x4, 0x1000, 0x10001, 0x5, 0x6, 0x4, 0x2bcc, 0x5, 0x6, 0x7, 0x0, 0x7, 0xd16, 0x8f802, 0xa84, 0x7f, 0x7, 0xfff, 0x5, 0xf09, 0x3, 0x4, 0x7, 0x7], [0x3, 0x6, 0x5, 0x6de8, 0x9, 0x9, 0x3, 0x1, 0x0, 0x1, 0x8, 0x81, 0x5, 0x0, 0x0, 0x8, 0x7, 0x1, 0x205, 0x2434b750, 0x1, 0x100, 0xeada, 0x4, 0xfffff0a6, 0x2ea2, 0x0, 0x8, 0x1, 0x80000001, 0x0, 0x7, 0x7, 0x7, 0x2088, 0x3, 0x6, 0x7fffffff, 0x8, 0x7, 0x9, 0x0, 0x9, 0x9, 0x4, 0x0, 0x6, 0x5, 0x100, 0xf796, 0xffffffff, 0x8, 0x60, 0xffffffff, 0xbd, 0x0, 0x5, 0x5, 0xe0000000, 0x8a55, 0xffff8001, 0x3, 0x4000, 0x800], [0xd7f7, 0x9, 0x8, 0x4, 0xc3b5, 0x9, 0xffffff00, 0x6, 0x58, 0xc85, 0x7, 0x0, 0xe, 0x2, 0x0, 0x5, 0x3800000, 0xb, 0x3, 0x6, 0x5, 0x9c, 0xff, 0xd7, 0x7, 0xfff, 0x9, 0x1000, 0x7, 0x7, 0x3b0, 0x3, 0x10, 0x0, 0x200, 0x6, 0x6, 0xd, 0x401, 0x4, 0x0, 0x81, 0x0, 0x7fffffff, 0xa, 0x1, 0x3, 0x2, 0x4, 0xffff, 0x7d, 0xb, 0x7, 0x4810759c, 0x3, 0xb, 0xb, 0x2a, 0xf1, 0xfffffff8, 0x2, 0x9, 0x1, 0x101], [0x3, 0x6, 0x7, 0x4, 0x1, 0x7, 0xff, 0x6, 0x7, 0x2, 0x28, 0x5, 0x2, 0x10000000, 0x8001, 0x7, 0x5, 0xc, 0x17fa1a84, 0x7, 0x6, 0x7, 0x7fffffff, 0x7fff, 0x5, 0xfffffffe, 0x5, 0x3, 0x9, 0x35, 0x200, 0x3, 0x80000000, 0x4, 0x80000001, 0x1, 0x8, 0x0, 0x3, 0x400, 0x7ff, 0x2, 0x2, 0x2, 0x3, 0x81, 0x4, 0x5, 0xffffffff, 0x1, 0x8, 0xb, 0x1, 0x0, 0x9, 0x4, 0x8001, 0x2, 0x8000, 0x1002, 0x6, 0x10, 0x2, 0x3]}, 0x45c) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r7, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x7ffe, 0x9) 12.407266693s ago: executing program 2 (id=1783): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x20000008) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x20000000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540), 0x4, 0x0) io_setup(0x3, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000400)=0x1ff, 0x4) r4 = socket(0x26, 0x400000000080803, 0xfffffefc) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000300)=@ethtool_stats={0x1d, 0x4, [0xffffffff00000000, 0x948c, 0x3, 0x5]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r5, 0x89e0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000000000002004e23e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000002004e240a01010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e200a01010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000002004e21ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414bb00040000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2400"/1215], 0x510) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000780)='contention_end\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 10.315530361s ago: executing program 9 (id=1784): io_setup(0x7, &(0x7f00000000c0)) chdir(&(0x7f0000000180)='./file1\x00') quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(0x0, 0x0) close(0x3) r3 = syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x2, 0x0, 0x7d7159a0, 0x0, 0x1, {0x1}}) io_uring_enter(r3, 0x1a9e, 0x80000001, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000340)={0x2f, @multicast1, 0x4e24, 0x3, 'ovf\x00', 0x30, 0x0, 0x47}, 0x2c) io_setup(0x6, &(0x7f00000003c0)) epoll_create1(0x80000) 10.247190263s ago: executing program 7 (id=1785): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x4130, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20008f29, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) clock_gettime(0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) r4 = syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$sock(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) 10.184030329s ago: executing program 2 (id=1786): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0xa2800, 0x0) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x95b0, 0x400}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x2000, 0x0, 0x0) 10.132481132s ago: executing program 1 (id=1787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x471, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000280)={0xf, 0x0, 'client0\x00', 0x1, "359808004d3f9510", "efd391e95eec7559218f7b75d2a962ae35c05cbc884034bd4a6c2554f0997d22", 0xfffffff9}) syz_usb_disconnect(0xffffffffffffffff) r6 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a000090581034000000000"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b000000000000000000800000000000007ea3b62b44aa25d113e2ee869e3c20e72243da41da221b8777b4b957bcfed0da79c5d69acc137756337768ae4428daa1250174a8d931dc730f634c8adce2da3c7173bebbbf105c09dd6db3a9f3d7cc244764139fc54f9639700967f242e6ff373c6bc99a070237426d6973b2d746c1c07fd902f8f37e203e723ea8bc453cc75fa4865329d6d44e2a22433072f06ac166c5e007259fd1cb174bd4792012c8b42529a5c4be957dc8916c57dfc46b1c995a1d3ff24b6737471b44b16bd2c3e3438724d3130964225a29563f0d0bdc43234ec611946535120493e7f0298e59cc605d04b2024ed2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000100"/28], 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xc8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x20000041) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB='H\x00', @ANYBLOB="010029bd7000f9dbdf", @ANYRES32=0x0, @ANYBLOB="1100070047aa32b137d401a500000010000000000a00060008024490c5592fedebda0806000000000400280084137c0f45fa63ff0ba931a90fb1b605fd92a7af086b0b3bbc021a686c4fc7a36335ec5cefd1fb8aa5ebb3b54f420861989c3a255e0b61abc69220b8720339465ad9a2d188fdcd"], 0x48}, 0x1, 0x0, 0x0, 0x51}, 0x14) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9a6e6708008847ffc8010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 9.161109765s ago: executing program 2 (id=1788): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "01000000000e65300000000800000200"}) readv(r8, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/68, 0x44}], 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000240)) 9.107981809s ago: executing program 9 (id=1789): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() setreuid(0x0, 0xee00) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f00000010c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x8, @any, "eeac4c1df2109fa1c342c23542d0a2aaae55454fbb1594d8d33a3be3985926269acc9988e54d618a9548b0f82c9945050dc2074cf47ba5995979e48fe0fa2acf4f460d2ed54295bf6ad8314ab1d3e5075e9592b8e6d132e3a89a79170812bc34c76f89befdad69e57ed50f1caa6950c44c0b78ac2d9a3729563e101557658fd79b63e3491641a24a54eecde02cae6def81d4a3d470aefc9759d637e0b30418ed582a524b55177f1548eb55b655ad79d8b5adbcf3d9913cdebf7e205aafe524552e322ea2385fefe9e38e7fcae665554b940af61a195e858fb7aa5ab489a46ae4ce62fc5119c428d73d8947d6462b421600e14ed0377843df"}}}, 0x102) 8.71007218s ago: executing program 7 (id=1790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x2, 0x2002) r1 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x0, 0x11, r1, 0x81000000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000040)={0x0, 0x1}) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r7 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b//\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x10410, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x42082, 0x0) write$FUSE_IOCTL(r7, &(0x7f0000000100)={0x20}, 0xfdef) accept4$unix(r3, &(0x7f00000001c0), &(0x7f0000000280)=0x6e, 0xc1800) read$FUSE(r7, &(0x7f0000001940)={0x2020}, 0x2020) 6.656371473s ago: executing program 8 (id=1793): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) writev(r0, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}]}, &(0x7f0000000100)=0x10) socket$inet(0x2, 0x80001, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv6_newroute={0x4c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x0, @LWTUNNEL_IP6_FLAGS={0x6}}, @RTA_OIF={0x8, 0x4, r7}, @RTA_ENCAP_TYPE={0x6}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x0, 0xd2, r2}}, @RTA_IIF={0x8, 0x3, r7}]}, 0x4c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r5, 0x1) sendto$inet(r5, 0x0, 0x0, 0x20000000, &(0x7f0000000440)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) 6.532062377s ago: executing program 7 (id=1794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x700000000000000, 0x0, 0x4000050}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x30b}, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x14, r3, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000882}, 0x40000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0xb) close(r5) recvmsg(r4, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/153, 0x99}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/240, 0xf0}], 0x8, &(0x7f0000002600)=""/240, 0xf0}, 0x20) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x10, 0x2d, 0x1}, 0x10}], 0x1}, 0x0) 6.467118393s ago: executing program 9 (id=1795): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c0000000000000000000000080000", @ANYBLOB="ac1414ad000000"], 0x40}, 0x0) syz_emit_vhci(0x0, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0xfffffffffffffffe) write$uinput_user_dev(r6, 0x0, 0x0) write$uinput_user_dev(r6, &(0x7f00000005c0)={'syz1\x00', {0x5, 0x1, 0xd06}, 0x34, [0xa, 0x2, 0x7, 0x20, 0x2000, 0x9, 0x3, 0x5, 0x5, 0x7fffffff, 0x4, 0x7, 0x1, 0x5, 0x0, 0xfffffffd, 0x2, 0x932, 0x84, 0xe, 0xb9e5, 0x6, 0x0, 0xfffffc8a, 0xc, 0x400, 0x8, 0x10, 0x2, 0x8001, 0xfffffff8, 0x7e, 0xe, 0xb, 0x3, 0x4, 0x400, 0x108, 0xe0, 0x8, 0x4, 0x1000, 0x10001, 0x5, 0x6, 0x4, 0x2bcc, 0x5, 0x6, 0x7, 0x0, 0x7, 0xd16, 0x8f802, 0xa84, 0x7f, 0x7, 0xfff, 0x5, 0xf09, 0x3, 0x4, 0x7, 0x7], [0x3, 0x6, 0x5, 0x6de8, 0x9, 0x9, 0x3, 0x1, 0x0, 0x1, 0x8, 0x81, 0x5, 0x0, 0x0, 0x8, 0x7, 0x1, 0x205, 0x2434b750, 0x1, 0x100, 0xeada, 0x4, 0xfffff0a6, 0x2ea2, 0x0, 0x8, 0x1, 0x80000001, 0x0, 0x7, 0x7, 0x7, 0x2088, 0x3, 0x6, 0x7fffffff, 0x8, 0x7, 0x9, 0x0, 0x9, 0x9, 0x4, 0x0, 0x6, 0x5, 0x100, 0xf796, 0xffffffff, 0x8, 0x60, 0xffffffff, 0xbd, 0x0, 0x5, 0x5, 0xe0000000, 0x8a55, 0xffff8001, 0x3, 0x4000, 0x800], [0xd7f7, 0x9, 0x8, 0x4, 0xc3b5, 0x9, 0xffffff00, 0x6, 0x58, 0xc85, 0x7, 0x0, 0xe, 0x2, 0x0, 0x5, 0x3800000, 0xb, 0x3, 0x6, 0x5, 0x9c, 0xff, 0xd7, 0x7, 0xfff, 0x9, 0x1000, 0x7, 0x7, 0x3b0, 0x3, 0x10, 0x0, 0x200, 0x6, 0x6, 0xd, 0x401, 0x4, 0x0, 0x81, 0x0, 0x7fffffff, 0xa, 0x1, 0x3, 0x2, 0x4, 0xffff, 0x7d, 0xb, 0x7, 0x4810759c, 0x3, 0xb, 0xb, 0x2a, 0xf1, 0xfffffff8, 0x2, 0x9, 0x1, 0x101], [0x3, 0x6, 0x7, 0x4, 0x1, 0x7, 0xff, 0x6, 0x7, 0x2, 0x28, 0x5, 0x2, 0x10000000, 0x8001, 0x7, 0x5, 0xc, 0x17fa1a84, 0x7, 0x6, 0x7, 0x7fffffff, 0x7fff, 0x5, 0xfffffffe, 0x5, 0x3, 0x9, 0x35, 0x200, 0x3, 0x80000000, 0x4, 0x80000001, 0x1, 0x8, 0x0, 0x3, 0x400, 0x7ff, 0x2, 0x2, 0x2, 0x3, 0x81, 0x4, 0x5, 0xffffffff, 0x1, 0x8, 0xb, 0x1, 0x0, 0x9, 0x4, 0x8001, 0x2, 0x8000, 0x1002, 0x6, 0x10, 0x2, 0x3]}, 0x45c) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r7, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x7ffe, 0x9) 5.148187979s ago: executing program 9 (id=1796): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000083c000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000280)="f3440f09440f20c03509000000440f22c0649d31960200000066bad004b8ea3200001af08332d5c421d5144b0766bad004ed66b885000f00d00f23d035100000010f23f80f06", 0x46}], 0x1, 0x7e, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) sched_setscheduler(0x0, 0x3, &(0x7f0000000040)=0x10001) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.630253907s ago: executing program 1 (id=1797): sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f00000001c0)=0xc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet(0x2, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() fanotify_init(0x0, 0x0) setrlimit(0xc, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x4, 0x8}]}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0xa11, "7c16bf8f3738028760825d877dff1db25036001b763f08adb6301751e3d2b3b6", 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000000080)=0x5) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e28, 0x0, @remote}}, 0x0, 0x0, 0xb, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x23, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() 3.588042429s ago: executing program 8 (id=1798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_SET_HARDIF(r2, 0x0, 0x42054) 2.991460177s ago: executing program 8 (id=1799): r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/227, 0xe3}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x358, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0xd0, 0x8502, {0x700}}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r4, @ANYBLOB="11060000810000000000010000000800050001000000200108803c0000801400040002000300ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060003000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 2.188851191s ago: executing program 7 (id=1800): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x4130, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20008f29, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) clock_gettime(0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) r4 = syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$sock(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) 2.069582069s ago: executing program 2 (id=1801): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$smack_xattr_label(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='security.SMACK64IPIN\x00', &(0x7f0000000440)=ANY=[@ANYRESHEX=r1], 0x4, 0x3) openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "01000000000e65300000000800000200"}) readv(r7, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/68, 0x44}], 0x1) 891.947828ms ago: executing program 1 (id=1802): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() setreuid(0x0, 0xee00) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) syz_emit_vhci(&(0x7f00000010c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x8, @any, "eeac4c1df2109fa1c342c23542d0a2aaae55454fbb1594d8d33a3be3985926269acc9988e54d618a9548b0f82c9945050dc2074cf47ba5995979e48fe0fa2acf4f460d2ed54295bf6ad8314ab1d3e5075e9592b8e6d132e3a89a79170812bc34c76f89befdad69e57ed50f1caa6950c44c0b78ac2d9a3729563e101557658fd79b63e3491641a24a54eecde02cae6def81d4a3d470aefc9759d637e0b30418ed582a524b55177f1548eb55b655ad79d8b5adbcf3d9913cdebf7e205aafe524552e322ea2385fefe9e38e7fcae665554b940af61a195e858fb7aa5ab489a46ae4ce62fc5119c428d73d8947d6462b421600e14ed0377843df"}}}, 0x102) 64.58613ms ago: executing program 8 (id=1803): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x100, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080)=0x300000000000000, 0x7f03) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) dup2(r5, r0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r6, &(0x7f0000009800)={0x2020}, 0x2020) write$FUSE_INIT(r6, 0x0, 0x0) 0s ago: executing program 7 (id=1804): r0 = socket(0x10, 0x803, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000280)={0x0, r5}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x1400, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x18, 0x0, 0xfe, r6}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) kernel console output (not intermixed with test programs): 3 [ 461.885744][ T908] usb 6-1: Product: syz [ 461.891680][ T908] usb 6-1: Manufacturer: syz [ 461.898031][ T908] usb 6-1: SerialNumber: syz [ 461.924939][ T908] usb 6-1: config 0 descriptor?? [ 462.107145][ T11] team0 (unregistering): Port device team_slave_1 removed [ 462.250607][ T11] team0 (unregistering): Port device team_slave_0 removed [ 462.491220][ T5903] usb 6-1: USB disconnect, device number 17 [ 464.069953][ T8870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.091024][ T8870] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.137127][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.147873][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.215330][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.222565][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.777462][ T5904] usb 38-1: device descriptor read/8, error -110 [ 465.526341][ T5904] usb usb38-port1: attempt power cycle [ 466.294741][ T5904] usb usb38-port1: unable to enumerate USB device [ 469.110677][ T8870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.633690][ T5904] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 469.793614][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 469.820351][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 469.855429][ T5904] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 469.878771][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 469.878793][ T29] audit: type=1326 audit(1736674868.626:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9055 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb107185d29 code=0x7ffc0000 [ 469.939662][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 470.034292][ T5904] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 470.621397][ T5904] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 470.630744][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 470.639100][ T5904] usb 2-1: Product: syz [ 470.643305][ T5904] usb 2-1: Manufacturer: syz [ 470.648190][ T5904] usb 2-1: SerialNumber: syz [ 470.655111][ T5904] usb 2-1: config 0 descriptor?? [ 470.664901][ T5904] usb 2-1: NFC: intf ffff88807c8ed000 id ffffffff8f2fa5c0 [ 470.720421][ T9060] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 470.762333][ T29] audit: type=1326 audit(1736674868.666:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9055 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb107185d29 code=0x7ffc0000 [ 470.913830][ T5904] nfcmrvl 2-1:0.0: NFC: registered with nci successfully [ 470.933806][ T5904] usb 2-1: USB disconnect, device number 27 [ 470.941039][ T5904] usb 2-1: NFC: intf ffff88807c8ed000 [ 471.065045][ T29] audit: type=1326 audit(1736674868.676:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9055 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fb107185d29 code=0x7ffc0000 [ 472.093692][ T29] audit: type=1326 audit(1736674868.676:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9055 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb107185d29 code=0x7ffc0000 [ 472.216274][ T29] audit: type=1326 audit(1736674868.676:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9055 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb107185d29 code=0x7ffc0000 [ 472.226169][ T8870] veth0_vlan: entered promiscuous mode [ 472.287881][ T29] audit: type=1326 audit(1736674868.676:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9055 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fb107185d29 code=0x7ffc0000 [ 472.744499][ T8797] Bluetooth: hci1: command 0x0c1a tx timeout [ 472.765202][ T29] audit: type=1326 audit(1736674868.676:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9055 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb107185d29 code=0x7ffc0000 [ 473.006162][ T29] audit: type=1326 audit(1736674868.676:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9055 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb107185d29 code=0x7ffc0000 [ 473.028341][ T8870] veth1_vlan: entered promiscuous mode [ 473.268523][ T29] audit: type=1326 audit(1736674868.676:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9055 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fb107185d29 code=0x7ffc0000 [ 473.338662][ T8870] veth0_macvtap: entered promiscuous mode [ 473.367550][ T29] audit: type=1326 audit(1736674868.676:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9055 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb107185d29 code=0x7ffc0000 [ 473.408285][ T8870] veth1_macvtap: entered promiscuous mode [ 473.519841][ T8870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.565196][ T8870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.600641][ T8870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.624096][ T9080] ALSA: seq fatal error: cannot create timer (-19) [ 473.763231][ T8870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.776761][ T8870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.792066][ T8870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.805631][ T8870] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.816309][ T8870] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.827064][ T8870] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.838122][ T8870] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.048628][ T9091] netlink: 'syz.3.874': attribute type 3 has an invalid length. [ 474.056724][ T9091] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.874'. [ 475.794021][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.848269][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.967242][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.986278][ T908] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 476.017866][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.218848][ T9109] netlink: 'syz.7.818': attribute type 3 has an invalid length. [ 477.252546][ T9109] netlink: 'syz.7.818': attribute type 3 has an invalid length. [ 477.431111][ T908] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 477.442357][ T908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.452423][ T908] usb 4-1: Product: syz [ 477.457782][ T908] usb 4-1: Manufacturer: syz [ 477.463409][ T908] usb 4-1: SerialNumber: syz [ 477.475988][ T908] usb 4-1: config 0 descriptor?? [ 477.493621][ T908] usb 4-1: selecting invalid altsetting 1 [ 477.500730][ T908] comedi comedi0: could not switch to alternate setting 1 [ 477.847421][ T9102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.907922][ T9102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.941089][ T908] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 477.967639][ T908] usb 4-1: USB disconnect, device number 31 [ 479.813902][ T5959] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 480.014311][ T5959] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 480.086669][ T5959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 480.163673][ T5959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 480.244957][ T5959] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 480.411858][ T9136] hub 9-0:1.0: USB hub found [ 480.468573][ T9136] hub 9-0:1.0: 1 port detected [ 480.776787][ T46] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 480.786952][ T5959] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 480.798412][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.816931][ T5959] usb 6-1: config 0 descriptor?? [ 481.469810][ T9146] netlink: 92 bytes leftover after parsing attributes in process `syz.1.887'. [ 483.380570][ T5959] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max [ 483.398271][ T5959] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 483.420030][ T5959] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 483.733605][ T46] usb 4-1: device not accepting address 32, error -71 [ 485.343691][ T9] usb 6-1: reset high-speed USB device number 18 using dummy_hcd [ 486.379552][ T9174] netlink: 'syz.5.894': attribute type 29 has an invalid length. [ 486.400976][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.894'. [ 486.447464][ T9174] fuse: Bad value for 'fd' [ 486.464728][ T9174] netlink: 'syz.5.894': attribute type 29 has an invalid length. [ 486.488899][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.894'. [ 486.498083][ T5903] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 486.675816][ T5903] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 486.710004][ T5903] usb 3-1: can't read configurations, error -22 [ 486.865160][ T5903] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 487.007277][ T5904] usb 6-1: USB disconnect, device number 18 [ 487.032333][ T9183] netlink: 'syz.3.896': attribute type 3 has an invalid length. [ 487.062182][ T5903] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 487.080182][ T5903] usb 3-1: can't read configurations, error -22 [ 487.090115][ T9183] netlink: 'syz.3.896': attribute type 3 has an invalid length. [ 487.118049][ T5903] usb usb3-port1: attempt power cycle [ 487.186502][ T9188] FAULT_INJECTION: forcing a failure. [ 487.186502][ T9188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.222644][ T9188] CPU: 1 UID: 0 PID: 9188 Comm: syz.7.898 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 487.233427][ T9188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 487.243543][ T9188] Call Trace: [ 487.246857][ T9188] [ 487.249819][ T9188] dump_stack_lvl+0x241/0x360 [ 487.254578][ T9188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.259828][ T9188] ? __pfx__printk+0x10/0x10 [ 487.264475][ T9188] ? __pfx_lock_release+0x10/0x10 [ 487.269561][ T9188] should_fail_ex+0x3b0/0x4e0 [ 487.274291][ T9188] _copy_from_user+0x2f/0xc0 [ 487.278938][ T9188] copy_msghdr_from_user+0xae/0x680 [ 487.284207][ T9188] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 487.290113][ T9188] ? __fget_files+0x2a/0x410 [ 487.294761][ T9188] ? __fget_files+0x2a/0x410 [ 487.299411][ T9188] __sys_sendmmsg+0x32b/0x720 [ 487.304149][ T9188] ? __pfx___sys_sendmmsg+0x10/0x10 [ 487.309410][ T9188] ? __pfx_lock_release+0x10/0x10 [ 487.314488][ T9188] ? kstrtouint_from_user+0x128/0x190 [ 487.319933][ T9188] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 487.325889][ T9188] ? ksys_write+0x22a/0x2b0 [ 487.330445][ T9188] ? __pfx_lock_release+0x10/0x10 [ 487.335527][ T9188] ? vfs_write+0x730/0xd30 [ 487.340001][ T9188] ? __mutex_unlock_slowpath+0x21e/0x790 [ 487.345727][ T9188] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 487.351781][ T9188] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 487.358168][ T9188] ? do_syscall_64+0x100/0x230 [ 487.362990][ T9188] __x64_sys_sendmmsg+0xa0/0xb0 [ 487.367903][ T9188] do_syscall_64+0xf3/0x230 [ 487.372461][ T9188] ? clear_bhb_loop+0x35/0x90 [ 487.377187][ T9188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.383152][ T9188] RIP: 0033:0x7fa740185d29 [ 487.387615][ T9188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.407280][ T9188] RSP: 002b:00007fa73dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 487.415845][ T9188] RAX: ffffffffffffffda RBX: 00007fa740375fa0 RCX: 00007fa740185d29 [ 487.423855][ T9188] RDX: 0000000000000001 RSI: 0000000020003240 RDI: 0000000000000004 [ 487.431845][ T9188] RBP: 00007fa73dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 487.439834][ T9188] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 487.447824][ T9188] R13: 0000000000000000 R14: 00007fa740375fa0 R15: 00007ffe710a5698 [ 487.455828][ T9188] [ 487.673503][ T5903] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 487.716381][ T5903] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 487.724930][ T5903] usb 3-1: can't read configurations, error -22 [ 487.751781][ T9191] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 487.895740][ T5903] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 487.938701][ T5903] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 487.947104][ T5904] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 487.973712][ T5903] usb 3-1: can't read configurations, error -22 [ 487.993671][ T5903] usb usb3-port1: unable to enumerate USB device [ 488.089272][ T5904] usb 8-1: device descriptor read/64, error -71 [ 488.363479][ T5904] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 488.533533][ T5904] usb 8-1: device descriptor read/64, error -71 [ 488.645380][ T5904] usb usb8-port1: attempt power cycle [ 489.003587][ T5904] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 489.037931][ T5904] usb 8-1: device descriptor read/8, error -71 [ 489.293609][ T5904] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 489.355509][ T5904] usb 8-1: device descriptor read/8, error -71 [ 489.494764][ T5904] usb usb8-port1: unable to enumerate USB device [ 489.917921][ T9213] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 489.926437][ T9213] macsec1: entered allmulticast mode [ 489.932008][ T9213] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 490.715095][ T9214] netlink: 'syz.5.904': attribute type 3 has an invalid length. [ 490.723786][ T9214] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.904'. [ 491.083216][ T9219] netlink: 'syz.1.905': attribute type 3 has an invalid length. [ 491.091659][ T9219] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.905'. [ 493.623754][ T5904] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 493.910017][ T5904] usb 8-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 493.927006][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.953742][ T5904] usb 8-1: Product: syz [ 493.967174][ T5904] usb 8-1: Manufacturer: syz [ 494.005838][ T9244] netlink: 'syz.2.911': attribute type 3 has an invalid length. [ 494.020350][ T5904] usb 8-1: SerialNumber: syz [ 494.029478][ T9244] netlink: 'syz.2.911': attribute type 3 has an invalid length. [ 494.050158][ T5904] usb 8-1: config 0 descriptor?? [ 494.107873][ T5904] usb 8-1: selecting invalid altsetting 1 [ 494.123415][ T5904] comedi comedi0: could not switch to alternate setting 1 [ 494.173694][ T5904] usbduxfast 8-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 494.371352][ T9226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.371653][ T9226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.391141][ T9] usb 8-1: USB disconnect, device number 6 [ 495.295693][ T9264] 9pnet_fd: Insufficient options for proto=fd [ 495.853155][ T9275] warning: `syz.1.913' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 496.071171][ T9282] netlink: 'syz.2.918': attribute type 3 has an invalid length. [ 496.102732][ T9282] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.918'. [ 498.132377][ T9294] kAFS: unable to lookup cell '/yz1' [ 499.227465][ T9296] macvlan2: entered promiscuous mode [ 499.261056][ T9296] macvlan2: entered allmulticast mode [ 499.432892][ T9304] netlink: 'syz.7.924': attribute type 3 has an invalid length. [ 499.440834][ T9304] netlink: 'syz.7.924': attribute type 3 has an invalid length. [ 499.781051][ T9309] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 499.866162][ T9313] netlink: 56 bytes leftover after parsing attributes in process `syz.2.925'. [ 499.901560][ T9313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.925'. [ 500.586821][ T9314] ALSA: seq fatal error: cannot create timer (-19) [ 500.665851][ T9309] kvm: pic: level sensitive irq not supported [ 500.666422][ T9309] kvm: pic: non byte read [ 502.016247][ T9335] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 502.319217][ T9344] FAULT_INJECTION: forcing a failure. [ 502.319217][ T9344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.703658][ T9344] CPU: 0 UID: 0 PID: 9344 Comm: syz.7.931 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 502.714395][ T9344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 502.724492][ T9344] Call Trace: [ 502.727821][ T9344] [ 502.730781][ T9344] dump_stack_lvl+0x241/0x360 [ 502.735553][ T9344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.740801][ T9344] ? __pfx__printk+0x10/0x10 [ 502.745440][ T9344] ? __pfx_lock_release+0x10/0x10 [ 502.750516][ T9344] should_fail_ex+0x3b0/0x4e0 [ 502.755240][ T9344] _copy_from_iter+0x1e9/0x1c20 [ 502.760133][ T9344] ? __virt_addr_valid+0x183/0x530 [ 502.765311][ T9344] ? __pfx__copy_from_iter+0x10/0x10 [ 502.770731][ T9344] ? __virt_addr_valid+0x183/0x530 [ 502.775883][ T9344] ? __virt_addr_valid+0x183/0x530 [ 502.781036][ T9344] ? __virt_addr_valid+0x45f/0x530 [ 502.786194][ T9344] ? __phys_addr_symbol+0x2f/0x70 [ 502.791267][ T9344] ? __check_object_size+0x47a/0x730 [ 502.796613][ T9344] ? __ip6_append_data+0x2930/0x4460 [ 502.801944][ T9344] udplite_getfrag+0x4a/0xa0 [ 502.806604][ T9344] __ip6_append_data+0x3356/0x4460 [ 502.811769][ T9344] ? mark_lock+0x9a/0x360 [ 502.816181][ T9344] ? __pfx_udplite_getfrag+0x10/0x10 [ 502.821580][ T9344] ? __pfx___ip6_append_data+0x10/0x10 [ 502.827089][ T9344] ? ip6_setup_cork+0x9f7/0x1080 [ 502.832079][ T9344] ip6_make_skb+0x43b/0x530 [ 502.836661][ T9344] ? ip6_dst_check+0xe7/0x7e0 [ 502.841382][ T9344] ? ip6_dst_check+0x5d9/0x7e0 [ 502.846180][ T9344] ? __pfx_udplite_getfrag+0x10/0x10 [ 502.851509][ T9344] ? __pfx_ip6_make_skb+0x10/0x10 [ 502.856578][ T9344] ? ip6_sk_dst_lookup_flow+0x714/0xa30 [ 502.862161][ T9344] ? __pfx_ip6_sk_dst_lookup_flow+0x10/0x10 [ 502.868103][ T9344] ? udpv6_sendmsg+0x1cea/0x32b0 [ 502.873074][ T9344] udpv6_sendmsg+0x2383/0x32b0 [ 502.877872][ T9344] ? __pfx_udplite_getfrag+0x10/0x10 [ 502.883187][ T9344] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 502.888333][ T9344] ? security_socket_sendmsg+0xa5/0x2a0 [ 502.893994][ T9344] ? smack_socket_sendmsg+0xe2/0x540 [ 502.899332][ T9344] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 502.906132][ T9344] ? sock_rps_record_flow+0x1a/0x400 [ 502.911439][ T9344] ? inet_send_prepare+0x21/0x260 [ 502.916494][ T9344] ? inet_send_prepare+0x5a/0x260 [ 502.921593][ T9344] __sock_sendmsg+0xef/0x270 [ 502.926228][ T9344] sock_write_iter+0x2d7/0x3f0 [ 502.931032][ T9344] ? __pfx_sock_write_iter+0x10/0x10 [ 502.936399][ T9344] ? bpf_lsm_file_permission+0x9/0x10 [ 502.941805][ T9344] ? security_file_permission+0x74/0x280 [ 502.947476][ T9344] vfs_write+0xaeb/0xd30 [ 502.951858][ T9344] ? __pfx_sock_write_iter+0x10/0x10 [ 502.957185][ T9344] ? __pfx_vfs_write+0x10/0x10 [ 502.961989][ T9344] ? __fget_files+0x2a/0x410 [ 502.966610][ T9344] ? __fget_files+0x2a/0x410 [ 502.971271][ T9344] ksys_write+0x18f/0x2b0 [ 502.975682][ T9344] ? __pfx_ksys_write+0x10/0x10 [ 502.980660][ T9344] ? do_syscall_64+0x100/0x230 [ 502.985482][ T9344] ? do_syscall_64+0xb6/0x230 [ 502.990228][ T9344] do_syscall_64+0xf3/0x230 [ 502.994812][ T9344] ? clear_bhb_loop+0x35/0x90 [ 502.999529][ T9344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.005465][ T9344] RIP: 0033:0x7fa740185d29 [ 503.009908][ T9344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.029729][ T9344] RSP: 002b:00007fa73dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 503.038213][ T9344] RAX: ffffffffffffffda RBX: 00007fa740375fa0 RCX: 00007fa740185d29 [ 503.046226][ T9344] RDX: 000000000000e6da RSI: 0000000020000040 RDI: 0000000000000003 [ 503.054337][ T9344] RBP: 00007fa73dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 503.062347][ T9344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 503.070356][ T9344] R13: 0000000000000000 R14: 00007fa740375fa0 R15: 00007ffe710a5698 [ 503.078402][ T9344] [ 504.139823][ T8797] Bluetooth: hci1: command 0x0c1a tx timeout [ 505.192107][ T9356] netlink: 'syz.1.936': attribute type 3 has an invalid length. [ 505.200104][ T9356] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.936'. [ 507.180366][ T9372] netlink: 'syz.1.941': attribute type 3 has an invalid length. [ 507.184866][ T9370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.940'. [ 507.214107][ T9372] netlink: 'syz.1.941': attribute type 3 has an invalid length. [ 508.043879][ T5904] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 508.228692][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.290632][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.384103][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 508.437042][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 508.488094][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 508.527696][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 508.827857][ T5904] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 509.503437][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.547340][ T5904] usb 3-1: config 0 descriptor?? [ 509.668857][ T9393] input: syz0 as /devices/virtual/input/input40 [ 510.034822][ T9405] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 510.075397][ T5904] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max [ 510.248323][ T5904] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 510.405562][ T5904] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 511.068788][ T5904] usb 3-1: USB disconnect, device number 31 [ 512.125754][ T9414] netlink: 'syz.3.951': attribute type 3 has an invalid length. [ 512.134923][ T9414] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.951'. [ 513.240044][ T9424] usb usb7: usbfs: process 9424 (syz.7.952) did not claim interface 0 before use [ 513.385461][ T5904] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 513.414088][ T5959] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 513.548089][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 513.555995][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.566558][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 513.580470][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 513.590447][ T5904] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 513.599476][ T5959] usb 4-1: config 0 interface 0 altsetting 12 has an endpoint descriptor with address 0x15, changing to 0x5 [ 513.602370][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.625574][ T5904] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 513.626337][ T5959] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x5 has an invalid bInterval 255, changing to 11 [ 513.634824][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.644586][ T5904] usb 3-1: config 0 descriptor?? [ 513.661687][ T5959] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x5 has invalid maxpacket 34439, setting to 1024 [ 513.672887][ T5904] hso 3-1:0.0: Can't find BULK OUT endpoint [ 513.675850][ T5959] usb 4-1: config 0 interface 0 has no altsetting 0 [ 513.696922][ T5959] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 513.708853][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.718207][ T5959] usb 4-1: Product: syz [ 513.723145][ T5959] usb 4-1: Manufacturer: syz [ 513.728798][ T5959] usb 4-1: SerialNumber: syz [ 513.736912][ T5959] usb 4-1: config 0 descriptor?? [ 513.743877][ T9426] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 513.753560][ T46] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 513.763190][ T5959] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 513.772678][ T5959] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 513.781686][ T5959] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 513.791366][ T5959] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 513.801464][ T5959] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 513.810844][ T5959] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 513.819803][ T5959] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 513.823711][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 513.836440][ T5959] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 513.847774][ T5959] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 513.857101][ T5959] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 513.866539][ T5959] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 513.875528][ T5959] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 513.885117][ T5959] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 513.903822][ T5959] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 513.954088][ T46] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 513.967527][ T46] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 513.982878][ T46] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 513.983696][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 513.994223][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.008182][ T46] usb 8-1: Product: syz [ 514.013725][ T46] usb 8-1: Manufacturer: syz [ 514.019460][ T46] usb 8-1: SerialNumber: syz [ 514.050450][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.067790][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 514.078393][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.093053][ T9] usb 2-1: config 0 descriptor?? [ 514.197487][ T5904] usb 4-1: USB disconnect, device number 34 [ 514.207916][ T5904] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 514.222529][ T5904] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 514.232730][ T5904] keyspan 4-1:0.0: device disconnected [ 514.253460][ T46] cdc_ncm 8-1:1.0: bind() failure [ 514.268920][ T46] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 514.277434][ T46] cdc_ncm 8-1:1.1: bind() failure [ 514.291609][ T46] usb 8-1: USB disconnect, device number 7 [ 514.516095][ T9] hid (null): invalid report_size 12903 [ 514.525759][ T9] kye 0003:0458:5016.000E: control desc unexpectedly large [ 514.541751][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.000E/input/input41 [ 514.617633][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.000E/input/input42 [ 514.711149][ T9] kye 0003:0458:5016.000E: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 514.731664][ T9429] x_tables: duplicate entry at hook 2 [ 514.813191][ T9] usb 2-1: USB disconnect, device number 28 [ 515.245866][ T9451] support for the xor transformation has been removed. [ 515.295714][ T9450] kvm: emulating exchange as write [ 515.538420][ T9460] bridge0: entered allmulticast mode [ 515.801594][ T5904] usb 3-1: USB disconnect, device number 32 [ 516.023813][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 516.184551][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 516.193701][ T9] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 516.201946][ T9] usb 8-1: config 0 has no interface number 0 [ 516.232853][ T9] usb 8-1: config 0 interface 184 has no altsetting 0 [ 516.250028][ T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 516.261888][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.296899][ T9] usb 8-1: Product: syz [ 516.301148][ T9] usb 8-1: Manufacturer: syz [ 516.319338][ T9] usb 8-1: SerialNumber: syz [ 516.341104][ T9] usb 8-1: config 0 descriptor?? [ 516.348834][ T9] smsc75xx v1.0.0 [ 516.993621][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 517.005274][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 517.403585][ T5904] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 517.560529][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 517.571155][ T5904] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 517.581270][ T5904] usb 2-1: config 0 has no interface number 0 [ 517.601668][ T5904] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 517.621253][ T5904] usb 2-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 517.641022][ T5904] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 517.663030][ T5904] usb 2-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 517.672744][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.689479][ T5904] usb 2-1: Product: syz [ 517.695344][ T5904] usb 2-1: Manufacturer: syz [ 517.700043][ T5904] usb 2-1: SerialNumber: syz [ 517.718776][ T5904] usb 2-1: config 0 descriptor?? [ 517.725222][ T9501] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 517.732737][ T9501] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 517.853056][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 517.870422][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 517.874006][ T25] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 517.880498][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 517.880681][ T9] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 517.890146][ T9] usb 8-1: USB disconnect, device number 8 [ 518.093542][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 518.102583][ T25] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 518.113019][ T25] usb 4-1: config 0 has no interface number 0 [ 518.121083][ T25] usb 4-1: config 0 interface 184 has no altsetting 0 [ 518.131751][ T25] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 518.143751][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.152987][ T25] usb 4-1: Product: syz [ 518.158303][ T25] usb 4-1: Manufacturer: syz [ 518.164073][ T25] usb 4-1: SerialNumber: syz [ 518.172685][ T25] usb 4-1: config 0 descriptor?? [ 518.182211][ T25] smsc75xx v1.0.0 [ 518.458266][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 518.458288][ T29] audit: type=1326 audit(1736674917.206:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.7.986" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa740185d29 code=0x0 [ 518.800348][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 518.813319][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 518.863846][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 519.023498][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 519.032692][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 519.047557][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 519.060885][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 519.074415][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 519.084085][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.092134][ T9] usb 3-1: Product: syz [ 519.096499][ T9] usb 3-1: Manufacturer: syz [ 519.101146][ T9] usb 3-1: SerialNumber: syz [ 519.326928][ T9] usb 3-1: found format II with max.bitrate = 11, frame size=3572 [ 519.363573][ T9] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 519.423775][ T9] usb 3-1: USB disconnect, device number 33 [ 519.926878][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 519.941198][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 519.951925][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 519.961468][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 519.969856][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 519.977484][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 520.040300][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 520.104631][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 520.153421][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 520.203805][ T25] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 520.270468][ T25] usb 4-1: USB disconnect, device number 35 [ 520.299894][ T5875] usb 2-1: USB disconnect, device number 29 [ 521.132454][ T9523] chnl_net:caif_netlink_parms(): no params data found [ 521.534130][ T9537] netlink: 20 bytes leftover after parsing attributes in process `syz.3.994'. [ 521.901801][ T9523] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.923055][ T9523] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.959010][ T9523] bridge_slave_0: entered allmulticast mode [ 521.991224][ T9523] bridge_slave_0: entered promiscuous mode [ 522.002817][ T9523] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.012018][ T9523] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.021287][ T9523] bridge_slave_1: entered allmulticast mode [ 522.024615][ T54] Bluetooth: hci0: command tx timeout [ 522.030341][ T9523] bridge_slave_1: entered promiscuous mode [ 522.155802][ T9523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.184514][ T9523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.278073][ T9552] netlink: 20 bytes leftover after parsing attributes in process `syz.1.998'. [ 522.296641][ T9523] team0: Port device team_slave_0 added [ 522.308742][ T9523] team0: Port device team_slave_1 added [ 522.376378][ T9523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.386294][ T9523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.431801][ T9523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.505210][ T9523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.513029][ T9523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.618182][ T9523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.642588][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1002'. [ 522.764930][ T9523] hsr_slave_0: entered promiscuous mode [ 522.775645][ T9523] hsr_slave_1: entered promiscuous mode [ 522.788218][ T9523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.802253][ T9523] Cannot create hsr debugfs directory [ 524.104361][ T9523] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 524.114611][ T54] Bluetooth: hci0: command tx timeout [ 524.137454][ T9523] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 524.179940][ T9523] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 524.241463][ T9523] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 524.634245][ T9523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.689829][ T9523] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.735605][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.742888][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.764719][ T9582] binder: 9579:9582 ioctl c0306201 20000080 returned -14 [ 524.787841][ T9582] binder: BINDER_SET_CONTEXT_MGR already set [ 524.796840][ T9582] binder: 9579:9582 ioctl 4018620d 20000040 returned -16 [ 524.835391][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.842576][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.891025][ T9523] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 524.904054][ T9523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.047255][ T9590] input: syz1 as /devices/virtual/input/input43 [ 525.364569][ T9523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.673656][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 525.903559][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 525.923117][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.939130][ T9523] veth0_vlan: entered promiscuous mode [ 525.960317][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.982756][ T9523] veth1_vlan: entered promiscuous mode [ 526.010675][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 526.043893][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.076038][ T9523] veth0_macvtap: entered promiscuous mode [ 526.092313][ T9] usb 2-1: config 0 descriptor?? [ 526.117361][ T9523] veth1_macvtap: entered promiscuous mode [ 526.180351][ T9523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.183998][ T54] Bluetooth: hci0: command tx timeout [ 526.233752][ T9523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.244062][ T9523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.254886][ T9523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.267664][ T9523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.288312][ T9523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.301092][ T9523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.327468][ T9523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.348650][ T9523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.368630][ T9523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.448775][ T9523] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.460447][ T9523] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.471276][ T9523] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.482021][ T9523] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.724842][ T9] wacom 0003:056A:00D0.000F: unknown main item tag 0x0 [ 526.731985][ T9] wacom 0003:056A:00D0.000F: unbalanced collection at end of report description [ 526.742149][ T9] wacom 0003:056A:00D0.000F: parse failed [ 526.748741][ T9] wacom 0003:056A:00D0.000F: probe with driver wacom failed with error -22 [ 526.836556][ T46] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 526.861137][ T6273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.880532][ T5875] usb 2-1: USB disconnect, device number 30 [ 526.893582][ T6273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.957991][ T3548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.966185][ T3548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.083588][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 527.100952][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.124654][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.136785][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 527.148251][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.162803][ T46] usb 4-1: config 0 descriptor?? [ 527.171335][ T46] hub 4-1:0.0: USB hub found [ 527.183775][ T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 527.363820][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 527.383920][ T46] hub 4-1:0.0: 1 port detected [ 527.435358][ T25] usb 3-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 527.493713][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.539782][ T25] usb 3-1: config 0 descriptor?? [ 527.568525][ T25] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 527.591135][ T25] ftdi_sio ttyUSB0: unknown device type: 0x256 [ 527.798356][ T46] usb 4-1: USB disconnect, device number 36 [ 528.263747][ T54] Bluetooth: hci0: command tx timeout [ 528.473583][ T46] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 528.668215][ T46] usb 9-1: Using ep0 maxpacket: 16 [ 528.748840][ T46] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 528.781079][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.803570][ T46] usb 9-1: Product: syz [ 528.808955][ T46] usb 9-1: Manufacturer: syz [ 528.833857][ T46] usb 9-1: SerialNumber: syz [ 528.858994][ T46] r8152-cfgselector 9-1: Unknown version 0x0000 [ 528.877176][ T46] r8152-cfgselector 9-1: config 0 descriptor?? [ 529.823787][ T5904] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 530.033724][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 530.089411][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.162326][ T5904] usb 2-1: config 0 has no interfaces? [ 530.183624][ T9] usb 3-1: USB disconnect, device number 34 [ 530.200549][ T5904] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 530.228491][ T9] ftdi_sio 3-1:0.0: device disconnected [ 530.272687][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.336210][ T5904] usb 2-1: config 0 descriptor?? [ 530.428705][ T46] r8152-cfgselector 9-1: USB disconnect, device number 2 [ 530.739514][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 530.760830][ T29] audit: type=1326 audit(1736674929.486:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9710 comm="syz.3.1060" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb107185d29 code=0x0 [ 531.147795][ T25] usb 2-1: USB disconnect, device number 31 [ 531.159051][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 531.178944][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 531.192715][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 531.219586][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 531.329341][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1062'. [ 532.284654][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.295024][ T9] usb 3-1: config 0 descriptor?? [ 532.300922][ T9701] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 532.721442][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 532.736054][ T9727] binder: 9726:9727 ioctl c0306201 0 returned -14 [ 532.744955][ T9727] binder: 9726:9727 ioctl c0306201 0 returned -14 [ 532.770391][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 532.822361][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 532.849632][ T9730] input: syz1 as /devices/virtual/input/input44 [ 532.858801][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 532.880037][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 532.910523][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 532.943721][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 532.977899][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 533.005526][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 533.043601][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 533.051493][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 533.086467][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 533.102407][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 533.133573][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 533.153629][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 533.185256][ T9] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 533.250544][ T9] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 533.483954][ T25] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 533.602723][ T9] usb 3-1: USB disconnect, device number 35 [ 535.243698][ T9] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 535.363632][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.386309][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.397854][ T9] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 535.397896][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.400096][ T9] usb 2-1: config 0 descriptor?? [ 535.410207][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 535.438356][ T25] usb 8-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 535.449672][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.468635][ T25] usb 8-1: config 0 descriptor?? [ 535.738029][ T9763] wg2: mtu less than device minimum [ 535.843707][ T9633] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 535.908819][ T25] betop 0003:11C0:5506.0011: unbalanced delimiter at end of report description [ 535.942439][ T25] betop 0003:11C0:5506.0011: parse failed [ 535.953556][ T25] betop 0003:11C0:5506.0011: probe with driver betop failed with error -22 [ 535.989665][ T9768] usb 8-1: USB disconnect, device number 9 [ 536.013775][ T9633] usb 4-1: Using ep0 maxpacket: 32 [ 536.034614][ T9633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.059843][ T9633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.072061][ T9633] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 536.084961][ T9633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.105266][ T9633] usb 4-1: config 0 descriptor?? [ 536.561896][ T9633] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 536.830399][ T9633] usb 4-1: USB disconnect, device number 37 [ 536.960992][ T9783] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 537.005844][ T9783] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 537.762669][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 537.787250][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 537.819060][ T9] asix 2-1:0.0: probe with driver asix failed with error -71 [ 537.848479][ T9] usb 2-1: USB disconnect, device number 32 [ 538.600992][ T9823] binder: BINDER_SET_CONTEXT_MGR already set [ 538.618890][ T9823] binder: 9818:9823 ioctl 4018620d 20000040 returned -16 [ 539.423212][ T9825] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 539.984150][ T9837] lo: entered promiscuous mode [ 540.790789][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 542.083310][ T9633] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 542.264915][ T9633] usb 9-1: Using ep0 maxpacket: 32 [ 542.275452][ T9633] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 542.289087][ T9633] usb 9-1: config 0 has no interface number 0 [ 542.308482][ T9633] usb 9-1: New USB device found, idVendor=11ca, idProduct=0201, bcdDevice=d3.26 [ 542.323428][ T9633] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.373190][ T9633] usb 9-1: Product: syz [ 542.383419][ T9633] usb 9-1: Manufacturer: syz [ 542.389129][ T9633] usb 9-1: SerialNumber: syz [ 542.473431][ T9633] usb 9-1: config 0 descriptor?? [ 542.500728][ T9633] cdc_acm 9-1:0.251: Zero length descriptor references [ 542.528426][ T9633] cdc_acm 9-1:0.251: probe with driver cdc_acm failed with error -22 [ 542.742136][ T9633] usb 9-1: USB disconnect, device number 3 [ 542.925477][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 543.113714][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 543.138497][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.426151][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.456816][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 543.499538][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 543.535451][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.726071][ T9] usb 4-1: config 0 descriptor?? [ 544.155883][ T9] microsoft 0003:045E:07DA.0013: global environment stack underflow [ 544.176454][ T9] microsoft 0003:045E:07DA.0013: item 0 4 1 11 parsing failed [ 544.204737][ T9] microsoft 0003:045E:07DA.0013: parse failed [ 544.216298][ T9] microsoft 0003:045E:07DA.0013: probe with driver microsoft failed with error -22 [ 544.357493][ T9] usb 4-1: USB disconnect, device number 38 [ 547.681009][ T9958] netlink: 'syz.8.1147': attribute type 46 has an invalid length. [ 547.698883][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1147'. [ 547.943793][ T9633] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 548.062358][ T9954] Bluetooth: MGMT ver 1.23 [ 548.113991][ T5875] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 548.147365][ T9633] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.168664][ T9633] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 548.192121][ T9633] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 548.211402][ T9633] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 548.222785][ T9633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.263830][ T9633] usb 2-1: Product: syz [ 548.269055][ T9633] usb 2-1: Manufacturer: syz [ 548.283489][ T9633] usb 2-1: SerialNumber: syz [ 548.363050][ T5875] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 548.403589][ T5875] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 548.472479][ T5875] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 548.493592][ T5875] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 548.527664][ T5875] usb 9-1: SerialNumber: syz [ 548.548727][ T9962] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 548.772589][ T29] audit: type=1326 audit(1736674947.516:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9974 comm="syz.7.1153" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa740185d29 code=0x0 [ 548.817999][ T9633] cdc_ncm 2-1:1.0: bind() failure [ 548.838224][ T9633] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 548.847503][ T9633] cdc_ncm 2-1:1.1: bind() failure [ 548.877554][ T5875] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 548.888635][ T9633] usb 2-1: USB disconnect, device number 33 [ 548.910472][ T5875] usb 9-1: USB disconnect, device number 4 [ 549.423926][ T9985] netlink: 'syz.3.1157': attribute type 2 has an invalid length. [ 550.731145][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1165'. [ 551.476578][T10016] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 551.812393][ T29] audit: type=1326 audit(1736674950.556:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10018 comm="syz.8.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2edeb85d29 code=0x7ffc0000 [ 552.445022][ T29] audit: type=1326 audit(1736674950.726:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10018 comm="syz.8.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f2edeb85d29 code=0x7ffc0000 [ 552.531398][ T29] audit: type=1326 audit(1736674951.146:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10018 comm="syz.8.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2edeb85d29 code=0x7ffc0000 [ 552.560956][ T29] audit: type=1326 audit(1736674951.146:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10018 comm="syz.8.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2edeb85d29 code=0x7ffc0000 [ 552.583534][ T29] audit: type=1326 audit(1736674951.166:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10018 comm="syz.8.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f2edeb85d29 code=0x7ffc0000 [ 552.613405][ T29] audit: type=1326 audit(1736674951.166:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10018 comm="syz.8.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2edeb85d29 code=0x7ffc0000 [ 552.643262][ T29] audit: type=1326 audit(1736674951.166:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10018 comm="syz.8.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2edeb85d29 code=0x7ffc0000 [ 554.414701][ T5893] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 554.624931][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 554.634443][ T5893] usb 2-1: config 1 has an invalid descriptor of length 5, skipping remainder of the config [ 554.660098][ T5893] usb 2-1: config 1 interface 1 has no altsetting 0 [ 554.679911][ T5893] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 554.699479][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.722420][ T5893] usb 2-1: Product: syz [ 554.734440][ T5893] usb 2-1: Manufacturer: syz [ 554.743146][ T5893] usb 2-1: SerialNumber: syz [ 554.980489][ T5893] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 555.017811][ T5893] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 555.072209][ T5893] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 555.142116][T10074] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 555.857526][ T5893] usb 2-1: USB disconnect, device number 34 [ 556.058023][T10087] netlink: 22 bytes leftover after parsing attributes in process `syz.8.1198'. [ 556.329319][T10090] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 558.025065][T10143] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1223'. [ 558.035517][T10143] unsupported nlmsg_type 40 [ 558.189603][ C0] Unknown status report in ack skb [ 558.289136][T10135] syz.8.1219 (10135) used greatest stack depth: 18808 bytes left [ 559.205450][T10179] netlink: 'syz.2.1240': attribute type 3 has an invalid length. [ 559.520959][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1246'. [ 559.739743][ T5875] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 559.944369][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.973062][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.003970][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.040845][ T5875] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 560.052503][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.005111][ T5875] usb 4-1: config 0 descriptor?? [ 561.249173][T10220] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1257'. [ 561.447908][ T5875] betop 0003:11C0:5506.0014: unbalanced delimiter at end of report description [ 561.472564][ T5875] betop 0003:11C0:5506.0014: parse failed [ 561.489812][ T5875] betop 0003:11C0:5506.0014: probe with driver betop failed with error -22 [ 561.805003][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 561.810354][ T5875] usb 4-1: USB disconnect, device number 39 [ 561.966096][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.996661][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 562.018925][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.050206][ T9] usb 2-1: config 0 descriptor?? [ 562.530764][ T9] logitech 0003:046D:C50C.0015: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.1-1/input0 [ 562.717075][ T9] usb 2-1: USB disconnect, device number 35 [ 562.783141][T10246] kvm: pic: level sensitive irq not supported [ 562.783336][T10246] kvm: pic: non byte read [ 562.807682][T10239] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 562.821084][T10246] kvm: pic: level sensitive irq not supported [ 562.821224][T10246] kvm: pic: non byte read [ 565.108530][T10285] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1272'. [ 565.167500][T10290] input: syz1 as /devices/virtual/input/input45 [ 565.223224][ T5815] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 565.396667][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.418986][ T5815] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 565.472614][ T5815] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 565.509341][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.592483][T10294] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 566.049171][ T5815] usb 3-1: config 0 descriptor?? [ 566.242811][ T54] Bluetooth: hci0: link tx timeout [ 566.250133][ T54] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 566.374973][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'. [ 566.513792][T10309] Bluetooth: hci3: command 0x0406 tx timeout [ 566.673850][ T5815] usb 3-1: USB disconnect, device number 36 [ 568.673412][ T8797] Bluetooth: hci0: command 0x0c1a tx timeout [ 569.364093][ T5904] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 569.528925][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.536817][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.552938][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 569.563479][ T5904] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.579117][ T5904] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 569.598689][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.611146][ T5904] usb 4-1: Product: syz [ 569.625663][ T5904] usb 4-1: Manufacturer: syz [ 569.630619][ T5904] usb 4-1: SerialNumber: syz [ 569.710315][ T9] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 569.729975][ T9] usb 2-1: config 0 has no interface number 0 [ 569.737009][ T9] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 569.771508][ T9] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 569.794967][ T9] usb 2-1: config 0 interface 255 has no altsetting 0 [ 569.808809][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 569.832968][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.865796][ T9] usb 2-1: config 0 descriptor?? [ 569.879365][ T9] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 570.109641][ T5875] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 570.123519][ T9633] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 571.272859][ T9633] usb 9-1: Using ep0 maxpacket: 32 [ 571.284280][ T9633] usb 9-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.301142][ T9633] usb 9-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 571.329990][ T9633] usb 9-1: config 0 interface 0 has no altsetting 0 [ 571.338348][ T9633] usb 9-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 571.352229][ T9633] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.376217][ T5904] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 571.382957][ T5904] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 571.387868][ T9633] usb 9-1: config 0 descriptor?? [ 571.468894][ T9633] usbhid 9-1:0.0: can't add hid device: -22 [ 571.504009][ T9633] usbhid 9-1:0.0: probe with driver usbhid failed with error -22 [ 571.531273][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.546853][ T5875] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 571.558041][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.582422][ T5875] usb 3-1: config 0 descriptor?? [ 571.588019][ T9] usb 2-1: USB disconnect, device number 36 [ 571.807845][ T5904] cdc_ncm 4-1:1.0 eth13: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 572.031265][ T9] usb 4-1: USB disconnect, device number 40 [ 572.038562][ T9] cdc_ncm 4-1:1.0 eth13: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 572.040029][ T5875] logitech 0003:046D:C50C.0016: unbalanced delimiter at end of report description [ 572.068289][ T5875] logitech 0003:046D:C50C.0016: parse failed [ 572.075691][ T5875] logitech 0003:046D:C50C.0016: probe with driver logitech failed with error -22 [ 572.275611][ T3073] usb 3-1: USB disconnect, device number 37 [ 572.365497][ T5904] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 572.545938][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.557208][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.577553][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 572.821624][ T5904] usb 2-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 572.831658][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.841946][ T5904] usb 2-1: config 0 descriptor?? [ 573.500436][ T5904] betop 0003:11C0:5506.0017: unbalanced collection at end of report description [ 573.545275][ T5904] betop 0003:11C0:5506.0017: parse failed [ 573.588408][ T5904] betop 0003:11C0:5506.0017: probe with driver betop failed with error -22 [ 573.700370][ T5904] usb 2-1: USB disconnect, device number 37 [ 573.846725][ T25] usb 9-1: USB disconnect, device number 5 [ 576.093959][T10446] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 576.583700][ T54] Bluetooth: hci4: unexpected event for opcode 0x0c0d [ 577.695655][ T5875] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 577.886676][ T5875] usb 9-1: config index 0 descriptor too short (expected 283, got 27) [ 577.896835][ T5875] usb 9-1: config 0 has an invalid interface number: 11 but max is 6 [ 577.984581][ T5875] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 7 [ 578.013126][ T5875] usb 9-1: config 0 has no interface number 0 [ 578.031344][ T5875] usb 9-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 578.062745][ T5875] usb 9-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid wMaxPacketSize 0 [ 578.098121][ T5875] usb 9-1: config 0 interface 11 has no altsetting 0 [ 578.107352][ T5875] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 578.119150][ T5875] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.144436][T10478] binder: 10477:10478 ioctl c0306201 20000680 returned -14 [ 578.153452][ T5875] usb 9-1: config 0 descriptor?? [ 578.184349][ T5875] keyspan 9-1:0.11: Keyspan 2 port adapter converter detected [ 578.193997][ T5875] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 87 [ 578.205854][ T5875] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 81 [ 578.215554][ T5875] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 82 [ 578.225286][ T5875] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 1 [ 578.234949][ T5875] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 2 [ 578.244248][ T5875] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 85 [ 578.254168][ T5875] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 5 [ 578.333375][ T5875] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 578.344508][ T5875] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 83 [ 578.354192][ T5875] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 84 [ 578.363785][ T5875] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 3 [ 578.373628][ T5875] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 4 [ 578.383312][ T5875] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 86 [ 578.394189][ T5875] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 6 [ 578.408073][ T5875] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 578.420955][ T5875] usb 9-1: USB disconnect, device number 6 [ 578.442146][ T5875] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 578.470874][ T5875] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 578.483006][ T5875] keyspan 9-1:0.11: device disconnected [ 585.864603][T10522] syz.7.1371 (10522) used greatest stack depth: 18576 bytes left [ 588.402886][T10560] kvm: user requested TSC rate below hardware speed [ 588.539922][ T3073] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 588.729098][ T3073] usb 9-1: Using ep0 maxpacket: 32 [ 588.765990][ T3073] usb 9-1: config 4 has an invalid interface number: 128 but max is 0 [ 588.806648][ T3073] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 589.614576][ T3073] usb 9-1: config 4 has no interface number 0 [ 589.621030][ T3073] usb 9-1: config 4 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 589.634975][ T3073] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 589.654660][ T3073] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.706589][ T3073] hub 9-1:4.128: bad descriptor, ignoring hub [ 589.712959][ T3073] hub 9-1:4.128: probe with driver hub failed with error -5 [ 589.723930][ T3073] usbhid 9-1:4.128: couldn't find an input interrupt endpoint [ 590.093282][ T3073] usb 9-1: USB disconnect, device number 7 [ 590.254454][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 590.653494][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.719921][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.759812][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 590.775422][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 591.299096][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.310383][ T9] usb 2-1: config 0 descriptor?? [ 591.800755][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 591.815108][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 591.837867][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 591.862480][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 591.884713][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 591.922224][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 591.938913][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 591.969938][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 592.001287][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 592.035595][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 592.043094][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 592.067726][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 592.079045][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 592.088714][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1400'. [ 592.094257][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 592.113350][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 592.122068][ T9] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 592.175588][ T9] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 592.209849][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1402'. [ 592.240575][ T9] usb 2-1: USB disconnect, device number 38 [ 592.332985][T10610] Bluetooth: MGMT ver 1.23 [ 593.148097][T10636] tmpfs: Bad value for 'nr_inodes' [ 595.917545][ T3073] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 596.092196][ T3073] usb 4-1: Using ep0 maxpacket: 16 [ 596.101393][ T3073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.137608][ T3073] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 596.156466][ T3073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.188211][ T3073] usb 4-1: config 0 descriptor?? [ 596.646251][ T29] audit: type=1326 audit(1736674995.636:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10690 comm="syz.2.1436" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bf3f85d29 code=0x0 [ 596.673453][ T3073] hid-multitouch 0003:1FD2:6007.0019: item fetching failed at offset 5/7 [ 596.691380][T10693] bridge0: entered allmulticast mode [ 596.695572][ T3073] hid-multitouch 0003:1FD2:6007.0019: probe with driver hid-multitouch failed with error -22 [ 596.881125][ T9633] usb 4-1: USB disconnect, device number 41 [ 599.968756][ T54] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 599.973732][ T8797] Bluetooth: hci0: command 0x0c1a tx timeout [ 600.291081][T10733] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 600.999505][ T5875] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 601.226646][ T5875] usb 9-1: config 0 interface 0 altsetting 32 endpoint 0x8D has invalid maxpacket 200, setting to 64 [ 601.249281][ T5875] usb 9-1: config 0 interface 0 altsetting 32 endpoint 0x5 has invalid wMaxPacketSize 0 [ 601.290282][ T5875] usb 9-1: config 0 interface 0 altsetting 32 endpoint 0x8B has invalid maxpacket 7772, setting to 64 [ 601.329300][ T5875] usb 9-1: config 0 interface 0 has no altsetting 0 [ 601.351032][ T5875] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 601.383021][ T5875] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.434527][ T5875] usb 9-1: config 0 descriptor?? [ 601.668748][ T5875] usb 9-1: USB disconnect, device number 8 [ 601.683371][ T54] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 601.878035][T10782] input: syz0 as /devices/virtual/input/input47 [ 601.924555][ T5904] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 602.092139][ T5904] usb 3-1: unable to get BOS descriptor or descriptor too short [ 602.102141][ T5904] usb 3-1: config 8 has an invalid interface number: 108 but max is 0 [ 602.111860][ T5904] usb 3-1: config 8 has no interface number 0 [ 602.120306][ T5904] usb 3-1: config 8 interface 108 has no altsetting 0 [ 602.131960][ T5904] usb 3-1: New USB device found, idVendor=03f0, idProduct=3524, bcdDevice=43.a8 [ 602.152307][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.189548][ T5904] usb 3-1: Product: syz [ 602.193805][ T5904] usb 3-1: Manufacturer: syz [ 602.207700][ T5904] usb 3-1: SerialNumber: syz [ 602.441832][ T5904] pl2303 3-1:8.108: required endpoints missing [ 602.462768][ T5904] usb 3-1: USB disconnect, device number 38 [ 603.557120][T10832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1489'. [ 603.980726][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'. [ 604.449613][ T3073] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 604.622055][ T3073] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.632748][ T3073] usb 3-1: config 0 has no interfaces? [ 604.638350][ T3073] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 604.647761][ T3073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.658347][ T3073] usb 3-1: config 0 descriptor?? [ 604.739326][ T5904] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 604.889896][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 604.897121][ T5904] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 604.908914][ T5815] usb 3-1: USB disconnect, device number 39 [ 604.912728][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.939324][ T5904] usb 2-1: config 0 has no interface number 0 [ 604.945620][ T5904] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 604.969382][ T5904] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 604.989302][ T5904] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 605.018223][ T5904] usb 2-1: config 0 interface 52 has no altsetting 0 [ 605.042551][ T5904] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 605.056556][ T5904] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 605.065140][ T5904] usb 2-1: Manufacturer: syz [ 605.073102][ T5904] usb 2-1: config 0 descriptor?? [ 605.288506][ T5904] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 605.288873][ T5904] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 605.569006][ T5959] usb 2-1: USB disconnect, device number 39 [ 607.641460][T10894] usb usb9: usbfs: process 10894 (syz.1.1514) did not claim interface 1 before use [ 610.064120][T10941] input: syz1 as /devices/virtual/input/input49 [ 613.189661][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 613.361360][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 613.381458][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 613.393047][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.401476][ T9] usb 3-1: Product: syz [ 613.406303][ T9] usb 3-1: Manufacturer: syz [ 613.411375][ T9] usb 3-1: SerialNumber: syz [ 613.638671][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input50 [ 613.684203][ T5179] bcm5974 3-1:1.0: could not read from device [ 613.701902][ T5179] bcm5974 3-1:1.0: could not read from device [ 613.718913][ T9] usb 3-1: USB disconnect, device number 40 [ 613.726579][ T5179] bcm5974 3-1:1.0: could not read from device [ 613.901958][T10976] cgroup: Unknown subsys name 'cpuset' [ 615.462649][T10998] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 615.633948][ T5904] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 615.789543][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 615.797104][ T5904] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 615.805786][ T5904] usb 2-1: config 0 has no interface number 0 [ 615.812379][ T5904] usb 2-1: config 0 interface 231 has no altsetting 0 [ 615.829463][ T5904] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=21.78 [ 615.838588][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.861611][ T5904] usb 2-1: Product: syz [ 615.865878][ T5904] usb 2-1: Manufacturer: syz [ 615.877589][ T5904] usb 2-1: SerialNumber: syz [ 615.886482][ T5904] usb 2-1: config 0 descriptor?? [ 615.890275][T11009] netlink: 'syz.8.1556': attribute type 3 has an invalid length. [ 615.903684][T11009] netlink: 'syz.8.1556': attribute type 3 has an invalid length. [ 616.112184][ T5904] asix 2-1:0.231 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 616.123142][ T5904] asix 2-1:0.231: probe with driver asix failed with error -71 [ 616.135179][ T5904] usb 2-1: USB disconnect, device number 40 [ 616.189565][ T9633] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 616.381120][ T9633] usb 3-1: Using ep0 maxpacket: 16 [ 616.392321][ T9633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.406159][ T9633] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 616.417224][ T9633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.443471][ T9633] usb 3-1: config 0 descriptor?? [ 617.320848][ T8797] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 617.325422][T11007] x_tables: duplicate entry at hook 2 [ 617.347830][ T8797] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 617.360814][ T8797] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 617.397219][ T8797] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 617.500063][ T8797] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 617.507511][ T8797] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 618.067904][ T9633] usbhid 3-1:0.0: can't add hid device: -71 [ 618.081078][ T9633] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 618.156642][ T9633] usb 3-1: USB disconnect, device number 41 [ 618.561773][T11018] chnl_net:caif_netlink_parms(): no params data found [ 618.739402][ T5893] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 620.044550][ T5893] usb 9-1: config 0 has an invalid interface number: 23 but max is 0 [ 620.053995][ T5893] usb 9-1: config 0 has no interface number 0 [ 620.066603][ T5893] usb 9-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 620.075729][ T54] Bluetooth: hci6: command tx timeout [ 620.284196][T11018] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.309597][T11018] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.440442][T11018] bridge_slave_0: entered allmulticast mode [ 620.460996][T11018] bridge_slave_0: entered promiscuous mode [ 620.771667][ T5893] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.779834][ T5893] usb 9-1: Product: syz [ 620.784034][ T5893] usb 9-1: Manufacturer: syz [ 620.788666][ T5893] usb 9-1: SerialNumber: syz [ 620.795564][ T5893] usb 9-1: config 0 descriptor?? [ 620.802873][ T5893] ftdi_sio 9-1:0.23: FTDI USB Serial Device converter detected [ 620.818291][T11018] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.825921][T11018] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.833946][ T5893] usb 9-1: Detected SIO [ 620.839535][ T5893] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 620.848015][T11018] bridge_slave_1: entered allmulticast mode [ 620.855816][T11018] bridge_slave_1: entered promiscuous mode [ 620.960641][T11018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.996896][T11048] netlink: 'syz.1.1567': attribute type 3 has an invalid length. [ 621.017344][T11018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.043622][ T5893] usb 9-1: USB disconnect, device number 9 [ 621.062394][ T5893] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 621.127169][ T5893] ftdi_sio 9-1:0.23: device disconnected [ 621.133665][T11048] netlink: 'syz.1.1567': attribute type 3 has an invalid length. [ 621.187147][T11018] team0: Port device team_slave_0 added [ 621.218869][T11018] team0: Port device team_slave_1 added [ 621.280228][T11018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.296128][T11018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.328465][T11018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.342367][T11018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.351448][T11018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.379849][T11018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.493651][T11018] hsr_slave_0: entered promiscuous mode [ 621.664578][T11018] hsr_slave_1: entered promiscuous mode [ 621.679771][T11018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 621.706389][T11018] Cannot create hsr debugfs directory [ 622.098832][ T54] Bluetooth: hci6: command tx timeout [ 624.258218][ T54] Bluetooth: hci6: command tx timeout [ 625.485050][T11018] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 625.506098][T11018] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 625.701141][T11018] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 625.745509][T11018] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 626.162236][T11018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.216630][T11018] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.320345][T11018] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 626.331109][T11018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 626.360944][ T54] Bluetooth: hci6: command tx timeout [ 627.356690][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.365394][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.429985][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.438737][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.191254][T11018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.207125][T11104] netlink: 'syz.8.1581': attribute type 3 has an invalid length. [ 629.218439][T11104] netlink: 'syz.8.1581': attribute type 3 has an invalid length. [ 629.291116][ T9] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 629.484492][ T9] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 629.520427][ T9] usb 3-1: config 0 has no interface number 0 [ 629.635984][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 629.827864][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.945562][ T9] usb 3-1: Product: syz [ 630.002119][ T9] usb 3-1: Manufacturer: syz [ 630.069604][ T9] usb 3-1: SerialNumber: syz [ 630.264563][ T9] usb 3-1: config 0 descriptor?? [ 630.299639][ T9] ftdi_sio 3-1:0.23: FTDI USB Serial Device converter detected [ 630.338942][ T9] usb 3-1: Detected SIO [ 630.345088][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 630.701041][ T9] usb 3-1: USB disconnect, device number 42 [ 630.710543][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 630.720539][ T9] ftdi_sio 3-1:0.23: device disconnected [ 630.860988][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.867372][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.857396][T11018] veth0_vlan: entered promiscuous mode [ 632.012408][T11018] veth1_vlan: entered promiscuous mode [ 632.088414][T11018] veth0_macvtap: entered promiscuous mode [ 632.130937][T11018] veth1_macvtap: entered promiscuous mode [ 632.921008][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.001095][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.012185][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.038422][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.061584][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.131533][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.171780][T11018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.212459][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.239733][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.258264][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.331201][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.371107][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.542333][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.561277][T11018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.264930][T11018] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.379429][T11018] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.437956][T11018] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.457404][T11018] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.650342][ T7162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.660059][ T7162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.718779][ T7162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.737451][ T7162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.745009][ T3073] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 635.861940][T11147] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 635.922489][ T3073] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 635.936637][ T3073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 635.961083][ T3073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 635.981641][ T3073] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 636.010738][ T3073] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 636.021557][ T3073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.049494][T11147] usb 9-1: Using ep0 maxpacket: 16 [ 636.136259][T11147] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.157369][T11147] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 636.399090][T11147] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.477190][ T3073] usb 2-1: config 0 descriptor?? [ 636.596145][T11147] usb 9-1: config 0 descriptor?? [ 637.261582][T11147] hid (null): invalid report_size 12903 [ 637.272678][T11147] kye 0003:0458:5016.001A: control desc unexpectedly large [ 637.292212][T11147] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.001A/input/input52 [ 637.308707][ T3073] plantronics 0003:047F:FFFF.001B: ignoring exceeding usage max [ 637.320094][ T3073] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 637.337720][ T3073] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 637.386347][T11164] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 637.401203][T11147] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.001A/input/input53 [ 637.422839][T11147] kye 0003:0458:5016.001A: input,hiddev1,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.8-1/input0 [ 637.505251][T11140] x_tables: duplicate entry at hook 2 [ 637.569651][T11147] usb 9-1: USB disconnect, device number 10 [ 637.839631][ T3073] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 638.679490][ T3073] usb 3-1: Using ep0 maxpacket: 16 [ 638.826235][ T3073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.902430][ T3073] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 638.944691][ T3073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.272865][ T3073] usb 3-1: config 0 descriptor?? [ 639.773118][ T5905] usb 2-1: USB disconnect, device number 41 [ 639.795628][T11170] x_tables: duplicate entry at hook 2 [ 639.828350][ T3073] usbhid 3-1:0.0: can't add hid device: -71 [ 639.855657][ T3073] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 639.911897][ T3073] usb 3-1: USB disconnect, device number 43 [ 639.994197][T11185] netlink: 'syz.1.1604': attribute type 3 has an invalid length. [ 640.757157][T11185] netlink: 'syz.1.1604': attribute type 3 has an invalid length. [ 643.849748][T11216] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 643.873655][T11216] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 645.669560][ T5875] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 645.859523][ T5875] usb 9-1: Using ep0 maxpacket: 16 [ 645.882356][ T5875] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.895779][ T5959] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 645.904541][ T5875] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 645.916426][ T5875] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.951822][ T5875] usb 9-1: config 0 descriptor?? [ 646.105229][ T5959] usb 3-1: unable to get BOS descriptor or descriptor too short [ 646.116562][ T5959] usb 3-1: config 1 has an invalid descriptor of length 5, skipping remainder of the config [ 646.128708][ T5959] usb 3-1: config 1 interface 1 has no altsetting 0 [ 646.129361][ T5905] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 646.146459][ T5959] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 646.158203][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.168007][ T5959] usb 3-1: Product: syz [ 646.185891][ T5959] usb 3-1: Manufacturer: syz [ 646.193507][ T5959] usb 3-1: SerialNumber: syz [ 646.302088][ T5905] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 646.314368][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 646.325494][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 646.335603][ T5905] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 646.337355][ T9633] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 646.348767][ T5905] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 646.348806][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.351033][ T5905] usb 2-1: config 0 descriptor?? [ 646.396543][ T5875] hid (null): invalid report_size 12903 [ 646.420870][ T5875] kye 0003:0458:5016.001C: control desc unexpectedly large [ 646.441169][ T5959] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 646.453887][ T5875] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.001C/input/input56 [ 646.468158][ T5959] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 646.479390][ T5959] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 646.524411][ T5959] usb 3-1: USB disconnect, device number 44 [ 646.546896][ T5875] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.001C/input/input57 [ 646.589417][ T9633] usb 10-1: Using ep0 maxpacket: 16 [ 646.597361][T11232] x_tables: duplicate entry at hook 2 [ 646.599904][ T9633] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.642086][ T5875] kye 0003:0458:5016.001C: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.8-1/input0 [ 646.657847][ T9633] usb 10-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 646.687270][ T9633] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.713880][ T5875] usb 9-1: USB disconnect, device number 11 [ 646.740417][ T9633] usb 10-1: config 0 descriptor?? [ 646.803853][ T5905] plantronics 0003:047F:FFFF.001D: ignoring exceeding usage max [ 646.826753][ T5905] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 646.847412][ T5905] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 647.252865][T11242] x_tables: duplicate entry at hook 2 [ 648.192415][ T9633] usbhid 10-1:0.0: can't add hid device: -71 [ 648.205278][ T9633] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 648.206462][T11254] netlink: 'syz.8.1621': attribute type 3 has an invalid length. [ 648.217926][ T9633] usb 10-1: USB disconnect, device number 2 [ 648.236144][T11254] netlink: 'syz.8.1621': attribute type 3 has an invalid length. [ 650.298366][ T25] usb 2-1: USB disconnect, device number 42 [ 651.191266][T11277] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 654.559444][T11147] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 654.803225][T11147] usb 2-1: Using ep0 maxpacket: 16 [ 655.325971][T11147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.337206][T11147] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 655.347045][T11147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.357553][T11147] usb 2-1: config 0 descriptor?? [ 657.576196][T11147] hid (null): invalid report_size 12903 [ 657.589083][T11147] kye 0003:0458:5016.001E: control desc unexpectedly large [ 657.605616][T11147] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.001E/input/input60 [ 659.370954][T11147] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.001E/input/input61 [ 659.517196][T11334] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 659.545594][T11147] kye 0003:0458:5016.001E: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 659.588073][T11334] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 659.611055][T11147] usb 2-1: USB disconnect, device number 43 [ 665.319570][T11147] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 665.339310][ T5905] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 666.350992][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 666.356499][T11147] usb 9-1: Using ep0 maxpacket: 16 [ 666.447657][T11147] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.501269][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.588043][ T5905] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 667.019360][T11147] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 667.061293][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.079029][T11147] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.131437][ T5905] usb 3-1: config 0 descriptor?? [ 667.142183][T11147] usb 9-1: config 0 descriptor?? [ 667.567560][T11147] hid (null): invalid report_size 12903 [ 667.577258][T11388] x_tables: duplicate entry at hook 2 [ 668.362361][T11147] kye 0003:0458:5016.001F: control desc unexpectedly large [ 668.377520][T11147] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.001F/input/input63 [ 668.405003][T11147] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.001F/input/input64 [ 668.437576][T11384] x_tables: duplicate entry at hook 2 [ 668.462365][ T5905] usbhid 3-1:0.0: can't add hid device: -71 [ 668.499575][T11147] kye 0003:0458:5016.001F: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.8-1/input0 [ 668.639374][ T5905] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 669.039338][ T5905] usb 3-1: USB disconnect, device number 45 [ 669.046119][T11147] usb 9-1: USB disconnect, device number 12 [ 670.769119][T11410] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 671.401594][T11147] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 671.941168][T11147] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 672.491318][T11147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 672.502928][T11147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 672.514188][T11147] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 672.527554][T11147] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 672.537370][T11147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.549050][ T8797] Bluetooth: hci1: command 0x0c1a tx timeout [ 672.594721][T11147] usb 2-1: config 0 descriptor?? [ 673.510787][T11147] plantronics 0003:047F:FFFF.0020: ignoring exceeding usage max [ 673.862583][T11147] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 674.006167][T11147] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 674.568813][T11441] usb usb7: usbfs: process 11441 (syz.9.1666) did not claim interface 0 before use [ 674.878326][T11147] usb 2-1: USB disconnect, device number 44 [ 675.378971][T11442] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 675.713576][T11456] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 675.879799][T11147] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 676.185642][T11147] usb 9-1: Using ep0 maxpacket: 16 [ 676.205522][T11147] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.255703][T11147] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 676.952204][T11147] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.990510][T11147] usb 9-1: config 0 descriptor?? [ 677.570959][T11452] x_tables: duplicate entry at hook 2 [ 677.614537][T11147] usbhid 9-1:0.0: can't add hid device: -71 [ 677.621088][T11147] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 677.646663][T11147] usb 9-1: USB disconnect, device number 13 [ 677.833431][T11476] netlink: 'syz.9.1675': attribute type 3 has an invalid length. [ 677.841857][T11476] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.1675'. [ 677.890050][T11470] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 680.058123][ T8797] Bluetooth: hci1: command 0x0c1a tx timeout [ 681.709742][T11496] input: syz1 as /devices/virtual/input/input67 [ 682.119466][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 682.120136][ T46] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 682.278378][ T9] usb 2-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 682.288396][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.313654][ T9] usb 2-1: Product: syz [ 682.338029][ T9] usb 2-1: Manufacturer: syz [ 682.357432][ T9] usb 2-1: SerialNumber: syz [ 682.367851][ T9] usb 2-1: config 0 descriptor?? [ 682.398604][ T9] usb 2-1: selecting invalid altsetting 1 [ 682.415241][ T9] comedi comedi0: could not switch to alternate setting 1 [ 682.424453][ T9] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 682.626017][T11499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.638260][T11499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.670509][T11147] usb 2-1: USB disconnect, device number 45 [ 684.288077][ T46] usb 9-1: device descriptor read/all, error -71 [ 685.079869][ T5815] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 685.274317][ T5815] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 685.320789][ T5815] usb 2-1: config 0 has no interface number 0 [ 685.373287][ T5815] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 685.387913][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.400834][ T5815] usb 2-1: Product: syz [ 685.407545][ T5815] usb 2-1: Manufacturer: syz [ 685.414747][ T5815] usb 2-1: SerialNumber: syz [ 685.426315][ T5815] usb 2-1: config 0 descriptor?? [ 685.445558][ T5815] ftdi_sio 2-1:0.23: FTDI USB Serial Device converter detected [ 685.457647][ T5815] usb 2-1: Detected SIO [ 685.459490][T11524] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 685.468479][ T5815] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 685.711555][ T9] usb 2-1: USB disconnect, device number 46 [ 685.771307][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 685.781292][ T9] ftdi_sio 2-1:0.23: device disconnected [ 687.315374][ T8797] Bluetooth: hci1: command 0x0c1a tx timeout [ 687.613269][T11535] netlink: 'syz.8.1695': attribute type 3 has an invalid length. [ 687.632310][T11535] netlink: 'syz.8.1695': attribute type 3 has an invalid length. [ 687.810047][T11535] bridge_slave_0: left allmulticast mode [ 687.815784][T11535] bridge_slave_0: left promiscuous mode [ 687.822090][T11535] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.360285][T11546] input: syz1 as /devices/virtual/input/input68 [ 689.397455][T11535] bridge_slave_1: left allmulticast mode [ 689.549384][T11535] bridge_slave_1: left promiscuous mode [ 689.555325][T11535] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.693339][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.699997][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.232229][T11565] input: syz1 as /devices/virtual/input/input69 [ 694.310531][T11535] bond0: (slave bond_slave_0): Releasing backup interface [ 694.341801][T11535] bond0: (slave bond_slave_1): Releasing backup interface [ 695.321015][T11535] team0: Port device team_slave_0 removed [ 695.543810][T11535] team0: Port device team_slave_1 removed [ 695.649849][T11535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.657702][T11535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.719743][T11535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.727289][T11535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.289381][ T9] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 700.474368][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 700.505539][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.541252][ T9] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 700.588915][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.664745][ T9] usb 9-1: config 0 descriptor?? [ 702.018143][T11621] FAULT_INJECTION: forcing a failure. [ 702.018143][T11621] name failslab, interval 1, probability 0, space 0, times 0 [ 702.039655][T11621] CPU: 0 UID: 0 PID: 11621 Comm: syz.9.1714 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 702.050514][T11621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 702.060637][T11621] Call Trace: [ 702.063954][T11621] [ 702.066919][T11621] dump_stack_lvl+0x241/0x360 [ 702.071677][T11621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 702.076952][T11621] ? __pfx__printk+0x10/0x10 [ 702.081616][T11621] ? __kmalloc_noprof+0xb5/0x4c0 [ 702.086601][T11621] ? __pfx___might_resched+0x10/0x10 [ 702.092042][T11621] should_fail_ex+0x3b0/0x4e0 [ 702.096808][T11621] should_failslab+0xac/0x100 [ 702.101549][T11621] __kmalloc_noprof+0xdd/0x4c0 [ 702.106376][T11621] ? security_sk_alloc+0x53/0x360 [ 702.111438][T11621] ? rcu_is_watching+0x15/0xb0 [ 702.116268][T11621] security_sk_alloc+0x53/0x360 [ 702.121174][T11621] sk_prot_alloc+0xfa/0x210 [ 702.125736][T11621] sk_alloc+0x38/0x370 [ 702.129870][T11621] inet_create+0x648/0xea0 [ 702.134355][T11621] ? inet_create+0x94/0xea0 [ 702.138933][T11621] __sock_create+0x4c0/0xa30 [ 702.143720][T11621] udp_sock_create4+0xda/0x670 [ 702.148640][T11621] ? genl_rcv+0x28/0x40 [ 702.152862][T11621] ? __pfx_udp_sock_create4+0x10/0x10 [ 702.158304][T11621] fou_nl_add_doit+0x1b9/0xdd0 [ 702.163136][T11621] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 702.168578][T11621] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 702.174977][T11621] genl_rcv_msg+0xb14/0xec0 [ 702.179555][T11621] ? __pfx_genl_rcv_msg+0x10/0x10 [ 702.184715][T11621] ? __pfx_lock_acquire+0x10/0x10 [ 702.189794][T11621] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 702.195138][T11621] ? __pfx___might_resched+0x10/0x10 [ 702.200583][T11621] netlink_rcv_skb+0x1e3/0x430 [ 702.205445][T11621] ? __pfx_genl_rcv_msg+0x10/0x10 [ 702.210712][T11621] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 702.216068][T11621] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 702.221696][T11621] genl_rcv+0x28/0x40 [ 702.225731][T11621] netlink_unicast+0x7f6/0x990 [ 702.230563][T11621] ? __pfx_netlink_unicast+0x10/0x10 [ 702.235909][T11621] ? __virt_addr_valid+0x45f/0x530 [ 702.241077][T11621] ? __phys_addr_symbol+0x2f/0x70 [ 702.246159][T11621] ? __check_object_size+0x47a/0x730 [ 702.251508][T11621] netlink_sendmsg+0x8e4/0xcb0 [ 702.256339][T11621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 702.261784][T11621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 702.267119][T11621] __sock_sendmsg+0x221/0x270 [ 702.271875][T11621] ____sys_sendmsg+0x52a/0x7e0 [ 702.276969][T11621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 702.282318][T11621] ? __fget_files+0x2a/0x410 [ 702.286983][T11621] ? __fget_files+0x2a/0x410 [ 702.291721][T11621] __sys_sendmsg+0x269/0x350 [ 702.296456][T11621] ? __pfx_lock_release+0x10/0x10 [ 702.301540][T11621] ? __pfx___sys_sendmsg+0x10/0x10 [ 702.306721][T11621] ? __pfx_vfs_write+0x10/0x10 [ 702.311657][T11621] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 702.318045][T11621] ? do_syscall_64+0x100/0x230 [ 702.322973][T11621] ? do_syscall_64+0xb6/0x230 [ 702.327707][T11621] do_syscall_64+0xf3/0x230 [ 702.332267][T11621] ? clear_bhb_loop+0x35/0x90 [ 702.336999][T11621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.342953][T11621] RIP: 0033:0x7f308fb85d29 [ 702.347420][T11621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.367084][T11621] RSP: 002b:00007f3090a4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 702.375997][T11621] RAX: ffffffffffffffda RBX: 00007f308fd75fa0 RCX: 00007f308fb85d29 [ 702.384023][T11621] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 702.392048][T11621] RBP: 00007f3090a4a090 R08: 0000000000000000 R09: 0000000000000000 [ 702.400077][T11621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 702.408192][T11621] R13: 0000000000000000 R14: 00007f308fd75fa0 R15: 00007ffe79c0b2c8 [ 702.416358][T11621] [ 702.478249][T11618] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 702.491595][T11623] x_tables: duplicate entry at hook 2 [ 702.704616][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 703.310517][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 703.320442][ T9] usb 9-1: USB disconnect, device number 16 [ 703.579547][ T5893] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 703.945321][ T8797] Bluetooth: hci1: command 0x0c1a tx timeout [ 704.289546][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 704.296836][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.316073][ T5893] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 704.369314][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.486094][ T5893] usb 3-1: config 0 descriptor?? [ 705.129275][ T5893] hid (null): invalid report_size 12903 [ 705.141101][ T5893] kye 0003:0458:5016.0021: control desc unexpectedly large [ 705.152375][ T5893] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0021/input/input70 [ 705.169894][ T5893] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0021/input/input71 [ 705.759877][T11622] x_tables: duplicate entry at hook 2 [ 707.880476][ T5893] kye 0003:0458:5016.0021: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 708.055192][ T5893] usb 3-1: USB disconnect, device number 46 [ 712.696881][T11694] input: syz1 as /devices/virtual/input/input72 [ 712.719964][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 713.009778][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 713.027467][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.077394][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 713.124938][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.302001][ T9] usb 2-1: config 0 descriptor?? [ 713.489050][T11699] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 713.989384][ T5904] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 714.066040][T11681] x_tables: duplicate entry at hook 2 [ 714.182552][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 714.197695][ T5904] usb 10-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 714.215045][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 714.250386][ T5904] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.299197][ T9] usb 2-1: USB disconnect, device number 47 [ 714.326274][ T5904] usb 10-1: Product: syz [ 714.368800][ T5904] usb 10-1: Manufacturer: syz [ 714.455765][ T5904] usb 10-1: SerialNumber: syz [ 714.543004][ T5904] usb 10-1: config 0 descriptor?? [ 714.658316][ T5904] usb 10-1: selecting invalid altsetting 1 [ 714.731869][ T5904] comedi comedi0: could not switch to alternate setting 1 [ 714.816086][T11701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.832378][ T8797] Bluetooth: hci0: command 0x0c1a tx timeout [ 714.863794][ T5904] usbduxfast 10-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 714.957185][T11701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.053518][ T5904] usb 10-1: USB disconnect, device number 3 [ 715.213042][ T8797] Bluetooth: hci1: command 0x0c1a tx timeout [ 719.226627][T11735] dccp_close: ABORT with 50 bytes unread [ 719.364166][T11747] FAULT_INJECTION: forcing a failure. [ 719.364166][T11747] name failslab, interval 1, probability 0, space 0, times 0 [ 719.397475][T11747] CPU: 0 UID: 0 PID: 11747 Comm: syz.9.1745 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 719.408328][T11747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 719.418434][T11747] Call Trace: [ 719.421754][T11747] [ 719.424718][T11747] dump_stack_lvl+0x241/0x360 [ 719.429449][T11747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 719.434741][T11747] ? __pfx__printk+0x10/0x10 [ 719.439383][T11747] ? ref_tracker_alloc+0x332/0x490 [ 719.444540][T11747] should_fail_ex+0x3b0/0x4e0 [ 719.449272][T11747] should_failslab+0xac/0x100 [ 719.454006][T11747] ? skb_clone+0x20c/0x390 [ 719.458474][T11747] kmem_cache_alloc_noprof+0x70/0x380 [ 719.463913][T11747] skb_clone+0x20c/0x390 [ 719.468210][T11747] __netlink_deliver_tap+0x3cc/0x7f0 [ 719.473564][T11747] ? netlink_deliver_tap+0x2e/0x1b0 [ 719.478961][T11747] netlink_deliver_tap+0x19d/0x1b0 [ 719.484140][T11747] netlink_sendskb+0x68/0x140 [ 719.488879][T11747] netlink_unicast+0x39d/0x990 [ 719.493716][T11747] ? __pfx_netlink_unicast+0x10/0x10 [ 719.499112][T11747] netlink_rcv_skb+0x262/0x430 [ 719.503955][T11747] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 719.509461][T11747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 719.514806][T11747] ? netlink_deliver_tap+0x2e/0x1b0 [ 719.520046][T11747] netlink_unicast+0x7f6/0x990 [ 719.524862][T11747] ? __pfx_netlink_unicast+0x10/0x10 [ 719.530199][T11747] ? __virt_addr_valid+0x45f/0x530 [ 719.535347][T11747] ? __phys_addr_symbol+0x2f/0x70 [ 719.540405][T11747] ? __check_object_size+0x47a/0x730 [ 719.545748][T11747] netlink_sendmsg+0x8e4/0xcb0 [ 719.550644][T11747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.555979][T11747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.561302][T11747] __sock_sendmsg+0x221/0x270 [ 719.566028][T11747] ____sys_sendmsg+0x52a/0x7e0 [ 719.571884][T11747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 719.577296][T11747] ? __fget_files+0x2a/0x410 [ 719.581966][T11747] ? __fget_files+0x2a/0x410 [ 719.586643][T11747] __sys_sendmsg+0x269/0x350 [ 719.591283][T11747] ? __pfx_lock_release+0x10/0x10 [ 719.596366][T11747] ? __pfx___sys_sendmsg+0x10/0x10 [ 719.601545][T11747] ? __pfx_vfs_write+0x10/0x10 [ 719.606952][T11747] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 719.613408][T11747] ? do_syscall_64+0x100/0x230 [ 719.618218][T11747] ? do_syscall_64+0xb6/0x230 [ 719.622942][T11747] do_syscall_64+0xf3/0x230 [ 719.627582][T11747] ? clear_bhb_loop+0x35/0x90 [ 719.632293][T11747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.638237][T11747] RIP: 0033:0x7f308fb85d29 [ 719.642691][T11747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.662505][T11747] RSP: 002b:00007f3090a4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.670960][T11747] RAX: ffffffffffffffda RBX: 00007f308fd75fa0 RCX: 00007f308fb85d29 [ 719.678993][T11747] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 719.687005][T11747] RBP: 00007f3090a4a090 R08: 0000000000000000 R09: 0000000000000000 [ 719.695013][T11747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.703018][T11747] R13: 0000000000000000 R14: 00007f308fd75fa0 R15: 00007ffe79c0b2c8 [ 719.711040][T11747] [ 719.714125][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.046362][T11758] befs: (nullb0): No write support. Marking filesystem read-only [ 721.060561][T11147] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 721.356470][T11758] befs: (nullb0): invalid magic header [ 722.189416][T11147] usb 2-1: Using ep0 maxpacket: 16 [ 722.230771][T11147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.369283][T11147] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 722.431435][T11147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.494327][T11147] usb 2-1: config 0 descriptor?? [ 724.441213][T11147] usbhid 2-1:0.0: can't add hid device: -71 [ 724.447432][T11147] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 724.945354][T11778] 9pnet_fd: Insufficient options for proto=fd [ 725.036197][ T54] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 725.930066][T11147] usb 2-1: USB disconnect, device number 48 [ 726.117736][T11782] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 727.090813][T11793] netlink: 'syz.7.1756': attribute type 3 has an invalid length. [ 727.119564][T11793] netlink: 'syz.7.1756': attribute type 3 has an invalid length. [ 727.157636][T11793] bridge_slave_0: left allmulticast mode [ 727.167188][T11793] bridge_slave_0: left promiscuous mode [ 727.181820][T11793] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.107675][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 728.277503][T11793] bridge_slave_1: left allmulticast mode [ 729.225879][T11793] bridge_slave_1: left promiscuous mode [ 729.328938][T11147] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 729.402583][T11793] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.549300][T11147] usb 9-1: Using ep0 maxpacket: 16 [ 729.805688][T11147] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.819593][T11793] bond0: (slave bond_slave_0): Releasing backup interface [ 730.367704][T11147] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 730.377303][T11147] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.411326][T11147] usb 9-1: config 0 descriptor?? [ 730.629421][T11793] bond0: (slave bond_slave_1): Releasing backup interface [ 730.742459][T11793] team0: Port device team_slave_0 removed [ 730.788913][T11793] team0: Port device team_slave_1 removed [ 730.854387][T11807] x_tables: duplicate entry at hook 2 [ 730.869413][ T29] audit: type=1326 audit(1736675129.848:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11815 comm="syz.2.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf3f85d29 code=0x7ffc0000 [ 730.897082][T11793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.907094][T11793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.917997][T11147] usbhid 9-1:0.0: can't add hid device: -71 [ 730.926015][T11147] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 730.945396][T11793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.954445][T11147] usb 9-1: USB disconnect, device number 17 [ 730.969192][ T29] audit: type=1326 audit(1736675129.848:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11815 comm="syz.2.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0bf3f84690 code=0x7ffc0000 [ 730.994025][T11793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.034944][ T29] audit: type=1326 audit(1736675129.848:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11815 comm="syz.2.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bf3f8592b code=0x7ffc0000 [ 731.068517][ T29] audit: type=1326 audit(1736675129.918:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11815 comm="syz.2.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bf3f8592b code=0x7ffc0000 [ 731.102247][ T29] audit: type=1326 audit(1736675129.918:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11815 comm="syz.2.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bf3f8592b code=0x7ffc0000 [ 731.202405][ T29] audit: type=1326 audit(1736675129.918:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11815 comm="syz.2.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bf3f8592b code=0x7ffc0000 [ 731.224745][ T29] audit: type=1326 audit(1736675130.078:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11815 comm="syz.2.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bf3f8592b code=0x7ffc0000 [ 731.246800][ T29] audit: type=1326 audit(1736675130.198:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11815 comm="syz.2.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bf3f8592b code=0x7ffc0000 [ 731.290370][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 731.549605][ T29] audit: type=1326 audit(1736675130.298:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11815 comm="syz.2.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bf3f8592b code=0x7ffc0000 [ 731.640020][ T29] audit: type=1326 audit(1736675130.308:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11815 comm="syz.2.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bf3f8592b code=0x7ffc0000 [ 731.663923][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 731.674354][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 731.683164][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 731.691887][ T9] usb 3-1: can't read configurations, error -71 [ 733.282837][T11834] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 734.903068][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 738.861706][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 739.546625][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 739.612150][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.669197][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 739.706827][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.765368][ T9] usb 2-1: config 0 descriptor?? [ 740.353834][T11867] x_tables: duplicate entry at hook 2 [ 740.415454][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 740.425546][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 741.138175][T11896] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 741.411445][ T9] usb 2-1: USB disconnect, device number 49 [ 741.529348][ T8797] Bluetooth: hci6: command 0x0406 tx timeout [ 743.451747][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 743.619244][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 744.079987][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 744.119436][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.250942][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 744.304129][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.370689][ T9] usb 2-1: config 0 descriptor?? [ 745.334997][ T9] hid (null): invalid report_size 12903 [ 745.441952][ T9] kye 0003:0458:5016.0022: control desc unexpectedly large [ 745.503450][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0022/input/input76 [ 745.766810][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0022/input/input77 [ 745.983888][T11912] x_tables: duplicate entry at hook 2 [ 747.333908][ T9] kye 0003:0458:5016.0022: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 748.305948][ T9] usb 2-1: USB disconnect, device number 50 [ 751.535386][T11963] netlink: 'syz.8.1799': attribute type 3 has an invalid length. [ 752.411667][ T30] INFO: task syz.3.1467:10769 blocked for more than 144 seconds. [ 752.422577][ T30] Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 752.433241][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 752.445275][ T30] task:syz.3.1467 state:D stack:27360 pid:10769 tgid:10768 ppid:5825 flags:0x00004006 [ 752.467636][ T30] Call Trace: [ 752.473261][ T30] [ 752.477713][ T30] __schedule+0x17fb/0x4be0 [ 752.484771][ T30] ? __pfx___schedule+0x10/0x10 [ 752.496389][ T30] ? __pfx_lock_release+0x10/0x10 [ 752.503881][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 752.799347][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 752.925907][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 752.951676][ T30] ? schedule+0x90/0x320 [ 753.074502][ T30] schedule+0x14b/0x320 [ 753.078882][ T30] ? down_read+0x6a5/0xa40 [ 753.083480][ T30] schedule_preempt_disabled+0x13/0x30 [ 753.089049][ T30] down_read+0x705/0xa40 [ 753.093640][ T30] ? __pfx_down_read+0x10/0x10 [ 753.098798][ T30] super_lock+0x27c/0x400 [ 753.103311][ T30] ? __pfx_lock_release+0x10/0x10 [ 753.108390][ T30] ? __pfx_super_lock+0x10/0x10 [ 753.113405][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 753.119016][ T30] iterate_supers+0x8c/0x190 [ 754.035173][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 754.042882][ T30] ksys_sync+0xbd/0x1c0 [ 754.048679][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 754.056623][ T30] ? do_syscall_64+0x100/0x230 [ 754.063665][ T30] ? do_syscall_64+0xb6/0x230 [ 754.070349][ T30] __do_sys_sync+0xe/0x20 [ 754.076330][ T30] do_syscall_64+0xf3/0x230 [ 754.082591][ T30] ? clear_bhb_loop+0x35/0x90 [ 754.089508][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.199250][ T30] RIP: 0033:0x7fb107185d29 [ 754.204013][ T30] RSP: 002b:00007fb107f68038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 754.212770][ T30] RAX: ffffffffffffffda RBX: 00007fb107375fa0 RCX: 00007fb107185d29 [ 754.222838][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 754.231122][ T30] RBP: 00007fb107375fa0 R08: 0000000000000000 R09: 0000000000000000 [ 754.239626][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.253460][ T30] R13: 0000000000000000 R14: 00007fb107375fa0 R15: 00007fff604323d8 [ 754.263825][ T30] [ 754.267842][ T30] INFO: task syz.3.1467:10774 blocked for more than 145 seconds. [ 754.276888][ T30] Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 754.284919][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 754.294776][ T30] task:syz.3.1467 state:D stack:27360 pid:10774 tgid:10768 ppid:5825 flags:0x00004004 [ 754.306108][ T30] Call Trace: [ 754.309754][ T30] [ 754.312967][ T30] __schedule+0x17fb/0x4be0 [ 754.317793][ T30] ? __pfx___schedule+0x10/0x10 [ 754.323058][ T30] ? __pfx_lock_release+0x10/0x10 [ 754.328370][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 754.334820][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 754.341646][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 754.347085][ T30] ? schedule+0x90/0x320 [ 754.351786][ T30] schedule+0x14b/0x320 [ 754.356280][ T30] ? down_read+0x6a5/0xa40 [ 754.360939][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 754.369661][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.374133][ T30] schedule_preempt_disabled+0x13/0x30 [ 754.381937][ T30] down_read+0x705/0xa40 [ 754.386260][ T30] ? __pfx_down_read+0x10/0x10 [ 754.391307][ T30] super_lock+0x27c/0x400 [ 754.396870][ T30] ? __pfx_lock_release+0x10/0x10 [ 754.402091][ T30] ? __pfx_super_lock+0x10/0x10 [ 754.407002][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 754.412422][ T30] iterate_supers+0x8c/0x190 [ 754.417073][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 754.422827][ T30] ksys_sync+0xbd/0x1c0 [ 754.430814][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 754.435678][ T30] ? do_syscall_64+0x100/0x230 [ 754.440657][ T30] ? do_syscall_64+0xb6/0x230 [ 754.445398][ T30] __do_sys_sync+0xe/0x20 [ 754.449952][ T30] do_syscall_64+0xf3/0x230 [ 754.454785][ T30] ? clear_bhb_loop+0x35/0x90 [ 754.459656][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.465638][ T30] RIP: 0033:0x7fb107185d29 [ 754.470222][ T30] RSP: 002b:00007fb107f47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 754.478784][ T30] RAX: ffffffffffffffda RBX: 00007fb107376080 RCX: 00007fb107185d29 [ 754.486980][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 754.495835][ T30] RBP: 00007fb107376080 R08: 0000000000000000 R09: 0000000000000000 [ 754.504733][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.512960][ T30] R13: 0000000000000000 R14: 00007fb107376080 R15: 00007fff604323d8 [ 754.521154][ T30] [ 754.524218][ T30] INFO: task syz.3.1467:10776 blocked for more than 146 seconds. [ 754.532393][ T30] Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 754.540232][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 754.548943][ T30] task:syz.3.1467 state:D stack:27296 pid:10776 tgid:10768 ppid:5825 flags:0x00004004 [ 754.559574][ T30] Call Trace: [ 754.562900][ T30] [ 754.565877][ T30] __schedule+0x17fb/0x4be0 [ 754.570629][ T30] ? __pfx___schedule+0x10/0x10 [ 754.575553][ T30] ? __pfx_lock_release+0x10/0x10 [ 754.580919][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 754.586964][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 754.593524][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 754.599440][ T30] ? schedule+0x90/0x320 [ 754.603745][ T30] schedule+0x14b/0x320 [ 754.607957][ T30] ? down_read+0x6a5/0xa40 [ 754.613237][ T30] schedule_preempt_disabled+0x13/0x30 [ 754.618761][ T30] down_read+0x705/0xa40 [ 754.623248][ T30] ? __pfx_down_read+0x10/0x10 [ 754.628085][ T30] super_lock+0x27c/0x400 [ 754.632662][ T30] ? __pfx_lock_release+0x10/0x10 [ 754.637741][ T30] ? __pfx_super_lock+0x10/0x10 [ 754.642945][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 754.648226][ T30] iterate_supers+0x8c/0x190 [ 754.653178][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 754.658811][ T30] ksys_sync+0xbd/0x1c0 [ 754.663189][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 754.668016][ T30] ? do_syscall_64+0x100/0x230 [ 754.673070][ T30] ? do_syscall_64+0xb6/0x230 [ 754.677902][ T30] __do_sys_sync+0xe/0x20 [ 754.682576][ T30] do_syscall_64+0xf3/0x230 [ 754.687248][ T30] ? clear_bhb_loop+0x35/0x90 [ 754.692265][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.698249][ T30] RIP: 0033:0x7fb107185d29 [ 754.703652][ T30] RSP: 002b:00007fb107f26038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 754.712927][ T30] RAX: ffffffffffffffda RBX: 00007fb107376160 RCX: 00007fb107185d29 [ 754.721162][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 754.729706][ T30] RBP: 00007fb107376160 R08: 0000000000000000 R09: 0000000000000000 [ 754.738166][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.746577][ T30] R13: 0000000000000000 R14: 00007fb107376160 R15: 00007fff604323d8 [ 754.755069][ T30] [ 754.758372][ T30] INFO: task syz.3.1467:10780 blocked for more than 146 seconds. [ 754.766550][ T30] Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 754.774512][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 754.783454][ T30] task:syz.3.1467 state:D stack:27360 pid:10780 tgid:10768 ppid:5825 flags:0x00004006 [ 754.794199][ T30] Call Trace: [ 754.797520][ T30] [ 754.800740][ T30] __schedule+0x17fb/0x4be0 [ 754.806473][ T30] ? __pfx___schedule+0x10/0x10 [ 754.811701][ T30] ? __pfx_lock_release+0x10/0x10 [ 754.816921][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 754.823387][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 754.829920][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 754.835119][ T30] ? schedule+0x90/0x320 [ 754.839540][ T30] schedule+0x14b/0x320 [ 754.843803][ T30] ? down_read+0x6a5/0xa40 [ 754.848363][ T30] schedule_preempt_disabled+0x13/0x30 [ 754.854047][ T30] down_read+0x705/0xa40 [ 754.858382][ T30] ? __pfx_down_read+0x10/0x10 [ 754.863308][ T30] super_lock+0x27c/0x400 [ 754.867713][ T30] ? __pfx_lock_release+0x10/0x10 [ 754.872936][ T30] ? __pfx_super_lock+0x10/0x10 [ 754.877894][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 754.883312][ T30] iterate_supers+0x8c/0x190 [ 754.887984][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 754.893741][ T30] ksys_sync+0xbd/0x1c0 [ 754.898266][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 754.903253][ T30] ? do_syscall_64+0xb6/0x230 [ 754.909319][ T30] __do_sys_sync+0xe/0x20 [ 754.913777][ T30] do_syscall_64+0xf3/0x230 [ 754.918403][ T30] ? clear_bhb_loop+0x35/0x90 [ 754.923440][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.929589][ T30] RIP: 0033:0x7fb107185d29 [ 754.934156][ T30] RSP: 002b:00007fb107f05038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 754.943140][ T30] RAX: ffffffffffffffda RBX: 00007fb107376240 RCX: 00007fb107185d29 [ 754.951305][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 754.959481][ T30] RBP: 00007fb107376240 R08: 0000000000000000 R09: 0000000000000000 [ 754.967577][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.978268][ T30] R13: 0000000000000001 R14: 00007fb107376240 R15: 00007fff604323d8 [ 754.978318][ T30] [ 754.978337][ T30] INFO: task syz.3.1467:10786 blocked for more than 146 seconds. [ 754.978357][ T30] Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 754.978373][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 754.978385][ T30] task:syz.3.1467 state:D stack:27360 pid:10786 tgid:10768 ppid:5825 flags:0x00000004 [ 754.978450][ T30] Call Trace: [ 754.978459][ T30] [ 754.978476][ T30] __schedule+0x17fb/0x4be0 [ 754.978557][ T30] ? __pfx___schedule+0x10/0x10 [ 754.978591][ T30] ? __pfx_lock_release+0x10/0x10 [ 754.978624][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 754.978660][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 754.978687][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 754.978723][ T30] ? schedule+0x90/0x320 [ 754.978753][ T30] schedule+0x14b/0x320 [ 754.978786][ T30] ? down_read+0x6a5/0xa40 [ 754.978810][ T30] schedule_preempt_disabled+0x13/0x30 [ 754.978843][ T30] down_read+0x705/0xa40 [ 754.978877][ T30] ? __pfx_down_read+0x10/0x10 [ 754.978924][ T30] super_lock+0x27c/0x400 [ 754.978955][ T30] ? __pfx_lock_release+0x10/0x10 [ 754.978984][ T30] ? __pfx_super_lock+0x10/0x10 [ 754.979019][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 754.979064][ T30] iterate_supers+0x8c/0x190 [ 754.979205][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 754.979250][ T30] ksys_sync+0xbd/0x1c0 [ 754.979286][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 754.979330][ T30] ? do_syscall_64+0xb6/0x230 [ 754.979369][ T30] __do_sys_sync+0xe/0x20 [ 754.979392][ T30] do_syscall_64+0xf3/0x230 [ 754.979430][ T30] ? clear_bhb_loop+0x35/0x90 [ 754.979459][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.979496][ T30] RIP: 0033:0x7fb107185d29 [ 754.979519][ T30] RSP: 002b:00007fb107ee4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 754.979549][ T30] RAX: ffffffffffffffda RBX: 00007fb107376320 RCX: 00007fb107185d29 [ 754.979569][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 754.979586][ T30] RBP: 00007fb107376320 R08: 0000000000000000 R09: 0000000000000000 [ 754.979604][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.979621][ T30] R13: 0000000000000001 R14: 00007fb107376320 R15: 00007fff604323d8 [ 754.979663][ T30] [ 754.979676][ T30] INFO: task syz.3.1467:10787 blocked for more than 146 seconds. [ 754.979696][ T30] Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 754.979712][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 754.979724][ T30] task:syz.3.1467 state:D stack:27360 pid:10787 tgid:10768 ppid:5825 flags:0x00004004 [ 754.979792][ T30] Call Trace: [ 754.979802][ T30] [ 754.979817][ T30] __schedule+0x17fb/0x4be0 [ 754.979877][ T30] ? __pfx___schedule+0x10/0x10 [ 754.979914][ T30] ? __pfx_lock_release+0x10/0x10 [ 754.979944][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 754.979975][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 754.980002][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 754.980038][ T30] ? schedule+0x90/0x320 [ 754.980070][ T30] schedule+0x14b/0x320 [ 754.980103][ T30] ? down_read+0x6a5/0xa40 [ 754.980127][ T30] schedule_preempt_disabled+0x13/0x30 [ 754.980158][ T30] down_read+0x705/0xa40 [ 754.980193][ T30] ? __pfx_down_read+0x10/0x10 [ 754.980239][ T30] super_lock+0x27c/0x400 [ 754.980269][ T30] ? __pfx_lock_release+0x10/0x10 [ 754.980297][ T30] ? __pfx_super_lock+0x10/0x10 [ 754.980333][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 754.980379][ T30] iterate_supers+0x8c/0x190 [ 754.980407][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 754.980449][ T30] ksys_sync+0xbd/0x1c0 [ 754.980485][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 754.980530][ T30] ? do_syscall_64+0xb6/0x230 [ 754.980569][ T30] __do_sys_sync+0xe/0x20 [ 754.980591][ T30] do_syscall_64+0xf3/0x230 [ 754.980626][ T30] ? clear_bhb_loop+0x35/0x90 [ 754.980662][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.980697][ T30] RIP: 0033:0x7fb107185d29 [ 754.980718][ T30] RSP: 002b:00007fb1043f0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 754.980744][ T30] RAX: ffffffffffffffda RBX: 00007fb107376400 RCX: 00007fb107185d29 [ 754.980763][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 754.980780][ T30] RBP: 00007fb107376400 R08: 0000000000000000 R09: 0000000000000000 [ 754.980797][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.980812][ T30] R13: 0000000000000001 R14: 00007fb107376400 R15: 00007fff604323d8 [ 754.980848][ T30] [ 754.980860][ T30] INFO: task syz.3.1467:10793 blocked for more than 146 seconds. [ 754.980877][ T30] Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 754.980892][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 754.980905][ T30] task:syz.3.1467 state:D stack:24792 pid:10793 tgid:10768 ppid:5825 flags:0x00004004 [ 754.980967][ T30] Call Trace: [ 754.980978][ T30] [ 754.980993][ T30] __schedule+0x17fb/0x4be0 [ 754.981052][ T30] ? __pfx___schedule+0x10/0x10 [ 754.981088][ T30] ? __pfx_lock_release+0x10/0x10 [ 754.981130][ T30] ? schedule+0x90/0x320 [ 754.981162][ T30] schedule+0x14b/0x320 [ 754.981195][ T30] ? down_read+0x6a5/0xa40 [ 754.981218][ T30] schedule_preempt_disabled+0x13/0x30 [ 754.981249][ T30] down_read+0x705/0xa40 [ 754.981279][ T30] ? __pfx_down_read+0x10/0x10 [ 754.981323][ T30] super_lock+0x27c/0x400 [ 754.981351][ T30] ? __pfx_lock_release+0x10/0x10 [ 754.981380][ T30] ? __pfx_super_lock+0x10/0x10 [ 754.981415][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 754.981459][ T30] iterate_supers+0x8c/0x190 [ 754.981484][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 754.981524][ T30] ksys_sync+0xbd/0x1c0 [ 754.981559][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 754.981603][ T30] ? do_syscall_64+0xb6/0x230 [ 754.981650][ T30] __do_sys_sync+0xe/0x20 [ 754.981671][ T30] do_syscall_64+0xf3/0x230 [ 754.981705][ T30] ? clear_bhb_loop+0x35/0x90 [ 754.981733][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.981770][ T30] RIP: 0033:0x7fb107185d29 [ 754.981790][ T30] RSP: 002b:00007fb103fcd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 754.981817][ T30] RAX: ffffffffffffffda RBX: 00007fb1073764e0 RCX: 00007fb107185d29 [ 754.981835][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 754.981851][ T30] RBP: 00007fb1073764e0 R08: 0000000000000000 R09: 0000000000000000 [ 754.981869][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.981886][ T30] R13: 0000000000000001 R14: 00007fb1073764e0 R15: 00007fff604323d8 [ 754.981918][ T30] [ 754.981929][ T30] INFO: task syz.3.1467:10796 blocked for more than 146 seconds. [ 754.981948][ T30] Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 754.981965][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 754.981976][ T30] task:syz.3.1467 state:D stack:25496 pid:10796 tgid:10768 ppid:5825 flags:0x00004004 [ 754.982037][ T30] Call Trace: [ 754.982047][ T30] [ 754.982062][ T30] __schedule+0x17fb/0x4be0 [ 754.982121][ T30] ? __pfx___schedule+0x10/0x10 [ 754.982158][ T30] ? __pfx_lock_release+0x10/0x10 [ 754.982186][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 754.982218][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 754.982243][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 754.982277][ T30] ? schedule+0x90/0x320 [ 754.982308][ T30] schedule+0x14b/0x320 [ 754.982342][ T30] ? down_read+0x6a5/0xa40 [ 754.982366][ T30] schedule_preempt_disabled+0x13/0x30 [ 754.982397][ T30] down_read+0x705/0xa40 [ 754.982432][ T30] ? __pfx_down_read+0x10/0x10 [ 754.982479][ T30] super_lock+0x27c/0x400 [ 754.982509][ T30] ? __pfx_lock_release+0x10/0x10 [ 754.982538][ T30] ? __pfx_super_lock+0x10/0x10 [ 754.982574][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 754.982617][ T30] iterate_supers+0x8c/0x190 [ 754.982654][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 754.982696][ T30] ksys_sync+0xbd/0x1c0 [ 754.982731][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 754.982780][ T30] __do_sys_sync+0xe/0x20 [ 754.982804][ T30] do_syscall_64+0xf3/0x230 [ 754.982842][ T30] ? clear_bhb_loop+0x35/0x90 [ 754.982870][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.982906][ T30] RIP: 0033:0x7fb107185d29 [ 754.982927][ T30] RSP: 002b:00007fb103baa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 754.982956][ T30] RAX: ffffffffffffffda RBX: 00007fb1073765c0 RCX: 00007fb107185d29 [ 754.982977][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 754.982993][ T30] RBP: 00007fb1073765c0 R08: 0000000000000000 R09: 0000000000000000 [ 754.983011][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.983028][ T30] R13: 0000000000000001 R14: 00007fb1073765c0 R15: 00007fff604323d8 [ 754.983064][ T30] [ 754.983083][ T30] [ 754.983083][ T30] Showing all locks held in the system: [ 754.983096][ T30] 3 locks held by kworker/u8:1/12: [ 754.983116][ T30] 1 lock held by khungtaskd/30: [ 754.983131][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 754.983208][ T30] 2 locks held by kworker/u8:2/35: [ 754.983265][ T30] 2 locks held by getty/5577: [ 754.983280][ T30] #0: ffff8880357720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 754.983359][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 754.983438][ T30] 1 lock held by syz-executor/7425: [ 754.983454][ T30] #0: ffff88805d7d80e0 (&type->s_umount_key#57){++++}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 754.983536][ T30] 1 lock held by syz-executor/9523: [ 754.983552][ T30] #0: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 754.983640][ T30] 1 lock held by syz.3.1467/10769: [ 754.983664][ T30] #0: ffff88805d7d80e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 754.983745][ T30] 1 lock held by syz.3.1467/10774: [ 754.983762][ T30] #0: ffff88805d7d80e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 754.983844][ T30] 1 lock held by syz.3.1467/10776: [ 754.983860][ T30] #0: ffff88805d7d80e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 754.983940][ T30] 1 lock held by syz.3.1467/10780: [ 754.983956][ T30] #0: ffff88805d7d80e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 754.984036][ T30] 1 lock held by syz.3.1467/10786: [ 754.984053][ T30] #0: ffff88805d7d80e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 754.984133][ T30] 1 lock held by syz.3.1467/10787: [ 754.984149][ T30] #0: ffff88805d7d80e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 754.984229][ T30] 1 lock held by syz.3.1467/10793: [ 754.984246][ T30] #0: ffff88805d7d80e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 754.984327][ T30] 1 lock held by syz.3.1467/10796: [ 754.984343][ T30] #0: ffff88805d7d80e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 754.984426][ T30] 1 lock held by syz.2.1801/11978: [ 754.984443][ T30] 1 lock held by syz.2.1801/11979: [ 754.984459][ T30] 2 locks held by syz.2.1801/11981: [ 754.984475][ T30] 2 locks held by syz.1.1802/11972: [ 754.984492][ T30] 1 lock held by syz.7.1804/11974: [ 754.984507][ T30] #0: ffff8880119b9e60 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x17c/0x3d0 [ 754.984582][ T30] 1 lock held by syz.7.1804/11975: [ 754.984599][ T30] [ 754.984608][ T30] ============================================= [ 754.984608][ T30] [ 754.984636][ T30] NMI backtrace for cpu 0 [ 754.984656][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 754.984684][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 754.984699][ T30] Call Trace: [ 754.984710][ T30] [ 754.984721][ T30] dump_stack_lvl+0x241/0x360 [ 754.984757][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.984791][ T30] ? __pfx__printk+0x10/0x10 [ 754.984834][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 754.984887][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 754.984916][ T30] ? _printk+0xd5/0x120 [ 754.984944][ T30] ? __pfx__printk+0x10/0x10 [ 754.984973][ T30] ? __wake_up_klogd+0xcc/0x110 [ 754.985010][ T30] ? __pfx__printk+0x10/0x10 [ 754.985045][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 754.985082][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 754.985118][ T30] watchdog+0xff6/0x1040 [ 754.985147][ T30] ? watchdog+0x1ea/0x1040 [ 754.985180][ T30] ? __pfx_watchdog+0x10/0x10 [ 754.985206][ T30] kthread+0x2f0/0x390 [ 754.985235][ T30] ? __pfx_watchdog+0x10/0x10 [ 754.985261][ T30] ? __pfx_kthread+0x10/0x10 [ 754.985291][ T30] ret_from_fork+0x4b/0x80 [ 754.985315][ T30] ? __pfx_kthread+0x10/0x10 [ 754.985343][ T30] ret_from_fork_asm+0x1a/0x30 [ 754.985392][ T30] [ 754.985403][ T30] Sending NMI from CPU 0 to CPUs 1: [ 754.985440][ C1] NMI backtrace for cpu 1 [ 754.985454][ C1] CPU: 1 UID: 0 PID: 11979 Comm: syz.2.1801 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 754.985479][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 754.985490][ C1] RIP: 0010:__local_bh_disable_ip+0x136/0x220 [ 754.985521][ C1] Code: 45 89 fc 4d 89 f7 49 89 fe e8 b6 89 a1 00 4c 89 f7 4d 89 fe 45 89 e7 49 bc 00 00 00 00 00 fc ff df 48 c7 44 24 40 00 00 00 00 <9c> 8f 44 24 40 42 80 3c 23 00 74 05 e8 99 88 a1 00 f6 44 24 41 02 [ 754.985537][ C1] RSP: 0018:ffffc90000a18d40 EFLAGS: 00000046 [ 754.985554][ C1] RAX: 9d618c20d6aec800 RBX: 1ffff920001431b0 RCX: ffffffff9a378903 [ 754.985570][ C1] RDX: 1ffff11006767b45 RSI: 0000000000000100 RDI: ffffc90000a18d80 [ 754.985583][ C1] RBP: ffffc90000a18e10 R08: ffffffff813fe031 R09: 1ffffffff2030b0e [ 754.985598][ C1] R10: dffffc0000000000 R11: fffffbfff2030b0f R12: dffffc0000000000 [ 754.985613][ C1] R13: 1ffff920001431ac R14: 0000000000000046 R15: 0000000000000100 [ 754.985626][ C1] FS: 00007f0bf4dfc6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 754.985643][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 754.985656][ C1] CR2: 0000001b2fc14ff8 CR3: 000000004878c000 CR4: 00000000003526f0 [ 754.985674][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 754.985685][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 754.985698][ C1] Call Trace: [ 754.985705][ C1] [ 754.985713][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 754.985736][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 754.985758][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 754.985780][ C1] ? nmi_handle+0x2a/0x5a0 [ 754.985809][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 754.985836][ C1] ? nmi_handle+0x14f/0x5a0 [ 754.985856][ C1] ? nmi_handle+0x2a/0x5a0 [ 754.985877][ C1] ? __local_bh_disable_ip+0x136/0x220 [ 754.985903][ C1] ? default_do_nmi+0x63/0x160 [ 754.985926][ C1] ? exc_nmi+0x123/0x1f0 [ 754.985946][ C1] ? end_repeat_nmi+0xf/0x53 [ 754.985967][ C1] ? sched_clock+0x41/0x70 [ 754.985993][ C1] ? __local_bh_disable_ip+0x136/0x220 [ 754.986019][ C1] ? __local_bh_disable_ip+0x136/0x220 [ 754.986046][ C1] ? __local_bh_disable_ip+0x136/0x220 [ 754.986073][ C1] [ 754.986079][ C1] [ 754.986086][ C1] ? ktime_get+0x3e/0x1f0 [ 754.986111][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 754.986136][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 754.986162][ C1] ? seqcount_lockdep_reader_access+0x1c1/0x220 [ 754.986190][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 754.986218][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 754.986250][ C1] handle_softirqs+0x128/0x9b0 [ 754.986278][ C1] ? lapic_next_event+0x11/0x20 [ 754.986296][ C1] ? clockevents_program_event+0x240/0x350 [ 754.986344][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 754.986371][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 754.986407][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 754.986431][ C1] __irq_exit_rcu+0xf7/0x220 [ 754.986456][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 754.986487][ C1] irq_exit_rcu+0x9/0x30 [ 754.986511][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 754.986537][ C1] [ 754.986544][ C1] [ 754.986551][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 754.986581][ C1] RIP: 0010:mod_objcg_state+0x5d9/0x930 [ 754.986605][ C1] Code: 3c 23 00 74 08 4c 89 f7 e8 94 e0 f7 ff f6 84 24 81 00 00 00 02 0f 85 89 00 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 8b 7c 24 28 <48> 85 ff 74 05 e8 bd 85 00 00 48 c7 44 24 60 0e 36 e0 45 48 8b 44 [ 754.986620][ C1] RSP: 0018:ffffc90004ec76e0 EFLAGS: 00000206 [ 754.986636][ C1] RAX: 9d618c20d6aec800 RBX: 1ffff920009d8eec RCX: ffffffff817b27ea [ 754.986651][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: 0000000000000000 [ 754.986665][ C1] RBP: ffffc90004ec7800 R08: ffffffff9427198f R09: 1ffffffff284e331 [ 754.986679][ C1] R10: dffffc0000000000 R11: fffffbfff284e332 R12: dffffc0000000000 [ 754.986694][ C1] R13: 0000000000000058 R14: ffffc90004ec7760 R15: 0000000000000246 [ 754.986711][ C1] ? mark_lock+0x9a/0x360 [ 754.986736][ C1] ? percpu_ref_get_many+0x19/0x140 [ 754.986765][ C1] ? mod_objcg_state+0x125/0x930 [ 754.986788][ C1] ? __pfx_mod_objcg_state+0x10/0x10 [ 754.986816][ C1] ? percpu_ref_get_many+0x19/0x140 [ 754.986844][ C1] __memcg_slab_post_alloc_hook+0x20f/0x7e0 [ 754.986875][ C1] kmem_cache_alloc_bulk_noprof+0x57e/0x7c0 [ 754.986901][ C1] __io_alloc_req_refill+0xa3/0x310 [ 754.986931][ C1] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 754.986963][ C1] ? rcu_is_watching+0x15/0xb0 [ 754.986990][ C1] io_submit_sqes+0xc70/0x1d60 [ 754.987030][ C1] __se_sys_io_uring_enter+0x2c8/0x33b0 [ 754.987054][ C1] ? futex_hash+0x1e/0x1f0 [ 754.987084][ C1] ? __pfx_futex_wait+0x10/0x10 [ 754.987117][ C1] ? __mm_populate+0x39a/0x460 [ 754.987142][ C1] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 754.987165][ C1] ? do_futex+0x33b/0x560 [ 754.987195][ C1] ? __pfx_do_futex+0x10/0x10 [ 754.987222][ C1] ? vm_mmap_pgoff+0x2c3/0x3d0 [ 754.987251][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 754.987273][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 754.987293][ C1] ? do_syscall_64+0x100/0x230 [ 754.987323][ C1] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 754.987348][ C1] do_syscall_64+0xf3/0x230 [ 754.987375][ C1] ? clear_bhb_loop+0x35/0x90 [ 754.987401][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.987429][ C1] RIP: 0033:0x7f0bf3f85d29 [ 754.987446][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.987462][ C1] RSP: 002b:00007f0bf4dfc038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 754.987480][ C1] RAX: ffffffffffffffda RBX: 00007f0bf4176160 RCX: 00007f0bf3f85d29 [ 754.987495][ C1] RDX: 0000000000000000 RSI: 00000000000047f9 RDI: 0000000000000008 [ 754.987507][ C1] RBP: 00007f0bf4001b08 R08: 0000000000000000 R09: 0000000000000000 [ 754.987519][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.987531][ C1] R13: 0000000000000000 R14: 00007f0bf4176160 R15: 00007ffe7142de08 [ 754.987553][ C1] [ 754.988449][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 754.988466][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 754.988493][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 754.988508][ T30] Call Trace: [ 754.988518][ T30] [ 754.988529][ T30] dump_stack_lvl+0x241/0x360 [ 754.988565][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.988597][ T30] ? __pfx__printk+0x10/0x10 [ 754.988623][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 754.988674][ T30] ? vscnprintf+0x5d/0x90 [ 754.988706][ T30] panic+0x349/0x880 [ 754.988737][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 754.988769][ T30] ? __pfx_panic+0x10/0x10 [ 754.988795][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 754.988831][ T30] ? __irq_work_queue_local+0x137/0x410 [ 754.988860][ T30] ? irq_work_queue+0xca/0x150 [ 754.988884][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 754.988920][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 754.988955][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 754.988990][ T30] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 754.989024][ T30] watchdog+0x1035/0x1040 [ 754.989052][ T30] ? watchdog+0x1ea/0x1040 [ 754.989085][ T30] ? __pfx_watchdog+0x10/0x10 [ 754.989113][ T30] kthread+0x2f0/0x390 [ 754.989137][ T30] ? __pfx_watchdog+0x10/0x10 [ 754.989160][ T30] ? __pfx_kthread+0x10/0x10 [ 754.989186][ T30] ret_from_fork+0x4b/0x80 [ 754.989208][ T30] ? __pfx_kthread+0x10/0x10 [ 754.989233][ T30] ret_from_fork_asm+0x1a/0x30 [ 754.989277][ T30] [ 754.989701][ T30] Kernel Offset: disabled