last executing test programs: 44.897275842s ago: executing program 1 (id=125): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x4, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@local, @broadcast, @void, {@can={0xc, {{0x1, 0x0, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "f7b56c830c28a8cf"}}}}, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) fchdir(r1) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load2\x00', 0x2, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) mount$nfs4(0x0, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x4071, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) 43.548595213s ago: executing program 1 (id=127): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r1, 0x1, r0, 0x6}) 42.493982707s ago: executing program 1 (id=129): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = fsopen(&(0x7f0000000180)='configfs\x00', 0x1) unshare(0x8040600) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockname(r1, 0x0, &(0x7f0000000480)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x109803, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') socket$igmp6(0xa, 0x3, 0x2) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) flock(r2, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}]}], {0x14}}, 0x78}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0) fsmount(r0, 0x0, 0x0) 42.365369551s ago: executing program 1 (id=130): ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)=@raw={0xc, 0x7, "b64c7948d1ab"}) 42.349964788s ago: executing program 1 (id=131): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000001280)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000300)={0x0, 0x1, 0x7, 0x5, 0x3, [], [0xfff, 0x1, 0x7, 0xd068], [0x7, 0x7, 0x3, 0x5], [0x9, 0x1, 0x76d, 0x4]}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) socket(0x10, 0x2, 0x0) setresgid(0x0, 0x0, 0x0) keyctl$chown(0x4, r4, 0xee00, 0x0) keyctl$setperm(0x5, r4, 0x1100100) keyctl$chown(0x6, r4, 0x0, 0x0) (fail_nth: 2) keyctl$instantiate(0xc, r3, 0x0, 0x0, r4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000280)=""/4096, 0x1000, 0x0) 41.601077007s ago: executing program 1 (id=134): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = io_uring_setup(0xc20, &(0x7f0000002000)={0x0, 0x0, 0x40, 0xffffffff, 0x80001}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x7439806b6184efab, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r9}, 0x10) read$nci(r5, &(0x7f0000000200)=""/100, 0x64) sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14002000e888478fd6671af38c0dc219c69d8e7fce3e538c3367404e6316f6948dce28829b059ac9d55d6f5fb020cca3fa3358e26fadac3043e1fdb17f2fd61a8b1c51a1dca41d71d784e9aacfd316e4d5520ef1082bcd0d97bd8434291f6b2fc4ec75c56ccc8bf49380e4ea024839e70952b4c760bfbbb250c328f0ccb557733f6db86481ae6cb1e5fe05023c2aa8042689411d", @ANYRES16=r8, @ANYRESDEC=r6], 0x14}}, 0x4) write$nci(r5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x11, 0x20000000, r4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="2800000000000000000000721900000000000051ea5bb9de7e1f3b936af800"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10, 0x0, 0x4}, 0x18) socket$netlink(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 31.141453609s ago: executing program 4 (id=173): bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$MSR(0x0, 0xea9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x102) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB="830fd19517f279ee81b7f8257e58f825fde2cc8ef9f210b8cef83701b86a00f5384e8882539dd955dbd1dffae32105fc75da65368bd1f1c76e72090851f72fc8208b94d157f8b0baf5bc551b20a4d5b44c4f234e5461d15f26858ca9e79cca3e8a3c6d757150e7774166c81756cf67ca02b8cfa897c4182c06dcd8b936888788f02c6631bc35a2aa8092a1aadd061155f7f25a041732ee59ecfce9e177e13dc70bc7796f23dd6749b1560851d59f1b496823a3fab219a601fef90c3e6352f319c5d3cefb7fb77ffc0e1e0026c86661fdbcdc4db723a1f16507bcb7d869a2d3def5518a4a829dca84651077525f", @ANYBLOB=',group_id=', @ANYRES32]) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x3a, 0x39, 0x0, 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2010000, &(0x7f0000000200)={'trans=unix,', {[{@aname={'aname', 0x3d, ',-,[\x01'}}, {@version_u}, {@noxattr}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]}}) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xa002c000, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x64266}}, 0x50) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) 30.387950303s ago: executing program 2 (id=174): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000001c0)=""/95, 0x5f, 0xa) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x108) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x101, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_vs\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4e, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000004000000000000000018110000", @ANYRES32, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pread64(r3, &(0x7f00000012c0)=""/4130, 0x1022, 0x8f) 29.48059558s ago: executing program 4 (id=177): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x4) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x0, 0xf, 0x2, 0x1, 0x0, 0x2, 0x0}) syz_emit_ethernet(0x6e, &(0x7f0000000480)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122a82", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7f, {0x9, 0x6, "1646bf", 0x200, 0x33, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@fragment={0x3b, 0x0, 0x40, 0x1, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000400)={&(0x7f00000000c0)="f46e6e8aff18634a907bebd1d90c4a2a2353d9ebaab070ae7b6cdbed451859b6bf4ffa4b320f0746d08ac5a57fa962ce8187663c8e429f6638037fac06dae60a1e04cda3f3c31964e9c2d78a81edf288918ff461475e4e8f479c6b838930a59873e4a667b08ecd0ec6d09e47a518e8e71c4d4bc8bc41e2940a2cdf88e8689273814f822b01b2785e141a5865c09d2ebc4eeaf2bfa923bdaa52e9c470d35fb57c7ac26f678ff682d2caa7229c6d4d5ebb0801f9eaab83c4", &(0x7f0000000180)=""/220, &(0x7f0000000280)="2bad2469a5511cd2c1138623b7017cb8615704bf97877628696533665f599ac88d27c05713911a98922ea5ab00af07cb838592e7", &(0x7f00000002c0)="9fef2355aa6195177f40a635e5a10c54208199bfb0137740f116aefe5e47893ba5d175f9603e70f4bf43bf73b8e967be4e9d0981a986199e5123ed42d7f1b52061705faaf3b836356819a92179cdc7f3628a4aad13405858b0b03ddf15d384c42d364411888b59b5cf98a3e85a74bc4b1c4aa8ac0a550862707eb70eb659023a24c31a60c8b92e154eeb7c5711f7bda79fb159f8d2bc31817a25befaed36e0ac81581d7de77dcd1ca71a00878ac489d9b1a39130555c9c837a7fa1a8e89b476a9dabde2220aba5bbe57b2151546d728bace240b0", 0x6, 0xffffffffffffffff, 0x4}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0bffffffff013dd2caf44cb2e4820000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x80000001, r2}, 0x38) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb8}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) setsockopt$packet_int(r4, 0x107, 0x9, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, &(0x7f0000000040)=r3}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0xaf02, 0x0) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x1, {}, {}, 0x1000, 0x1, {}, 0x0, 0x0, r6}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r8}, 0x10) 28.83208717s ago: executing program 2 (id=179): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x48, 0x0, 0x0, 0x2}]}) write$ppp(r2, &(0x7f0000000140)='j(', 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SET_MM(0x23, 0x2, &(0x7f000030d000/0x3000)=nil) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000), &(0x7f0000000200)=0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000200)='./bus\x00', 0x6000000b) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x1001, 0x1, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000) splice(r6, &(0x7f00000001c0)=0x1, r6, &(0x7f0000000280)=0x1, 0x99, 0x5) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 27.797085816s ago: executing program 2 (id=183): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) r1 = fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f00000002c0)) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x6, 0x4, 0x0, 0x2, 0x7, 0x400, 0x2, 0x83, 0x3bde2cdc, 0x6, 0x5, 0xfff, 0xec, 0x7fffffff, 0x0, 0x8, {0x7, 0x7}, 0x8, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) syz_open_dev$sndpcmp(0x0, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x80000) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000b00)={{0x3, 0x2, 0x1, 0x0, 0xaa}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r4, &(0x7f0000000a40)=[{&(0x7f00000000c0)=""/57, 0x39}], 0x1, 0x200, 0x2) 26.749648445s ago: executing program 4 (id=184): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={r5, 0x1, r4, 0x6}) 26.506358953s ago: executing program 32 (id=134): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = io_uring_setup(0xc20, &(0x7f0000002000)={0x0, 0x0, 0x40, 0xffffffff, 0x80001}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x7439806b6184efab, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r9}, 0x10) read$nci(r5, &(0x7f0000000200)=""/100, 0x64) sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14002000e888478fd6671af38c0dc219c69d8e7fce3e538c3367404e6316f6948dce28829b059ac9d55d6f5fb020cca3fa3358e26fadac3043e1fdb17f2fd61a8b1c51a1dca41d71d784e9aacfd316e4d5520ef1082bcd0d97bd8434291f6b2fc4ec75c56ccc8bf49380e4ea024839e70952b4c760bfbbb250c328f0ccb557733f6db86481ae6cb1e5fe05023c2aa8042689411d", @ANYRES16=r8, @ANYRESDEC=r6], 0x14}}, 0x4) write$nci(r5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x11, 0x20000000, r4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="2800000000000000000000721900000000000051ea5bb9de7e1f3b936af800"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10, 0x0, 0x4}, 0x18) socket$netlink(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 25.770613798s ago: executing program 4 (id=187): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc517, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x5609, 0x2) 24.919066165s ago: executing program 0 (id=191): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0xa8, 0x0, 0xfbffffff, 0x0, 0x140, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x2, {0x3, @empty, @local, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KDSKBLED(r0, 0x4b65, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) timer_create(0x9, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707b, 0x0, 0x1, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 23.839946691s ago: executing program 0 (id=193): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) write$ppp(r2, &(0x7f0000000140)='j(', 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SET_MM(0x23, 0x2, &(0x7f000030d000/0x3000)=nil) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000), &(0x7f0000000200)=0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000200)='./bus\x00', 0x6000000b) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x1001, 0x1, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000) splice(r6, &(0x7f00000001c0)=0x1, r6, &(0x7f0000000280)=0x1, 0x99, 0x5) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 22.705318274s ago: executing program 0 (id=195): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)=':\x00') 22.590790325s ago: executing program 0 (id=196): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={r5, 0x1, r4, 0x6}) 22.547175966s ago: executing program 2 (id=197): set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0xfffffffffffffff9) syz_open_dev$ndb(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r1, &(0x7f0000000180)=@hci, &(0x7f0000000280)=0x80) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 22.193139519s ago: executing program 4 (id=198): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1000000, 0x11, r0, 0x82000000) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='\x00') r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x8010, r1, 0x18d1d000) read$msr(r0, &(0x7f0000000100)=""/201, 0xc9) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={r2, 0x3, 0x0, [0x7, 0x8, 0x0, 0x159, 0x9], [0xfffffffffffffff8, 0x2, 0x0, 0xf7d, 0x1, 0xc59, 0x2, 0x8, 0xdd6, 0x5, 0x800, 0x9, 0xa020, 0x4, 0x5, 0xffffffffffffffff, 0xfffffffffffffff8, 0x3800000000000000, 0x800, 0x7, 0x7f, 0x5, 0x8, 0x3ff, 0x3, 0x2400000000000000, 0xa, 0x99, 0x6, 0xed87, 0xc, 0x7, 0xa, 0x3, 0x100000001, 0x9, 0x1, 0x3ff, 0xb, 0x7fff, 0x33ff, 0xfffffffffffffff3, 0x1, 0x8, 0xd, 0x38000, 0x0, 0x8, 0x97a7, 0xefb, 0x82, 0x6, 0x9, 0x5, 0x0, 0x7, 0xffffffff, 0x8, 0x6, 0x1, 0x7, 0x3, 0x3, 0x4, 0x8, 0x7, 0x3, 0xfffffffffffffff8, 0x80, 0xa, 0xa, 0xfffffffffffffffe, 0x0, 0x401, 0x2, 0x8, 0x1ff, 0x8001, 0x0, 0x81, 0xd33, 0x4, 0x4, 0x5, 0xfffffffffffffff3, 0x4, 0x6, 0x0, 0xd, 0x77d, 0xffffffffe50f1401, 0xd, 0x5, 0x5e8, 0x4, 0x7449, 0x9, 0x180000000000000, 0x200, 0x9, 0x6, 0x1ff, 0xf, 0x691e88ba, 0x9, 0x8000000000000000, 0x7, 0x9, 0xb, 0x9, 0x5, 0x6, 0x5, 0xe, 0x47c6, 0x7, 0x8001, 0xb, 0x1ff, 0x9, 0xffff]}) syz_emit_vhci(&(0x7f0000000a40)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0xff, 0xc9}}}, 0x6) iopl(0x9) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000a80)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b80), 0x2000, 0x0) getdents64(r3, &(0x7f0000000bc0)=""/4096, 0x1000) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000001bc0)) syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r3, &(0x7f0000001c00)={'#! ', './file0', [{0x20, '/proc/self/net/pfkey\x00'}], 0xa, "fcafdbcd06a665522896800005d6be6dda23b7db557398a417a2d514efa662d5f55fb21d36430d2cf619a0d000624bd82e23260ab3c36c326f76110b2e0e79fab7db4dfdd7a1a11a9c2fa0414e90792288fcc5ef685c9b090cd013e1b5e4057054a89a2f"}, 0x85) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x80010, r0, 0x0) syz_io_uring_setup(0x36bb, &(0x7f0000001cc0)={0x0, 0xec44, 0x0, 0x3, 0x3b9, 0x0, r3}, &(0x7f0000001d40), &(0x7f0000001d80)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001e40)=@IORING_OP_SYMLINKAT={0x26, 0xfdd945fdabeed60c, 0x0, r0, &(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r7}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000002240)={'wg1\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001e80)="cf4472f117fbafc95948b1851914be458f6c9cf2536f7ea957af47908a8e28f467854aef791943f5e350bdaae087318773783eb01c02462de7e974f0635f0174260de7c9548c608bf5fe60a2e4ebc17b1952b06d620f90639f446b9bda", 0x5d}, {&(0x7f0000001f00)="38736f2a9b66dd228651ba3c32dcc7743e6322dd3f795035867963e3641c40a68aefb0a41ca23dcab8ff5273da6ba943", 0x30}, {&(0x7f0000001f40)="f06249ce2df967a531a76262fa18a96cc48fee697d61113be7922cb9a4b28f05d7bd01bd08dd32200b1de7e69a4d71bbed87e73ef057e034339c7f67c53c8ce4a8d8d5dcf61755268afb00c39d2e22a71a0e953b3b6d0f87e49e1c91bf85e734fc8a449fae51c3ad099a5000ba767a77153a", 0x72}, {&(0x7f0000001fc0)="f4179050040caa8701966bf60a9fa669e46715c3889fc83d8d29424cd1f1db9fb00daf1520d2dec95a", 0x29}, {&(0x7f0000002000)="1e2892ed3b2883c74493a2ab04cd5156d19d40ca5f8aa3c0a355b64235053193ab4320d35df14839d6a716a744018beee3f0738d137b12724140e9abc6b97474005ad3b7463d2c0fb0ca81de1613781284a24f459438969a27714837c02ac0b007687a6beedf0a0536479e19b97118a1fedb44850947657dd3497cfe2ab9eaba550811f1792600a4442d35c574c671bbbcc37212b077610c108d1b3675a7474f20850f7e3694eed7b31980930d7f7dbb90c9d16c525b048d6ce0582aec051f9b1e431a3fffebbf5a0f8844e83308c9769a5594dcef5ebf060ed3aaa8836f4fc740c20e81", 0xe4}, {&(0x7f0000002100)="68afa0503dc3db562a5e07e604df6670b4faf16e3c6d2c8d1186033b64cc65fbedc2227ecfa24ca00e83eb6c7193f4efd28c77c24857a0bcef216365be148ece6e2828b28587a8f6498f5b0c791c0e76624e94", 0x53}, {&(0x7f0000002180)="e1f4df5e619aca3c5a0b9d006934513110a8ed8e", 0x14}], 0x7, &(0x7f0000002280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x94, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x96, 0x0, 0x3, [0x8, 0xf7]}, @noop, @cipso={0x86, 0x55, 0x0, [{0x0, 0x3, 'B'}, {0x5, 0x12, "055ef7cbd3f88dabf0cedb71d358caaf"}, {0x1, 0x9, "5187c82cf77739"}, {0x1, 0xf, "193e5dd6af7fb26661f7f7f0e8"}, {0x0, 0x7, "832fff3afe"}, {0x0, 0x5, "8e9d5f"}, {0x1, 0xb, "745349990a53e204b6"}, {0x2, 0x7, "3541fd8a22"}, {0x1, 0x2}, {0x1, 0x2}]}, @timestamp_prespec={0x44, 0x1c, 0xf7, 0x3, 0x5, [{@broadcast, 0xf}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xca2e}, {@empty, 0x6}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @dev={0xac, 0x14, 0x14, 0x26}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x168}, 0x840) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000002440)={r0, 0x1, 0xfffffffff0000000, 0x2000}) fstat(r3, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000002480)=@sr0, r9, &(0x7f0000002540)={0x1, 0x6deb, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000039c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 22.045014224s ago: executing program 4 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000009c0), 0x1fd481, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x20, 0x3b, 0xfb, {0xfb, 0xe, "d9bb9915beaa12e998abba2d9bea49ea9c9384140621d6c56a10dd9e84187dd4953aa462b069b8b1936a8eeaf9902e8f93e7990e44a060936bb8943c41d4062ce4fbdb72b11fd3668848bd271f145e17594b28b7ad9b2966c70d4eee49ebe6161d331992913d648e50d61c8dcea130efa51810221fcce12c8d46ff1d3daff68171116ac528240d2dd9e00b11df31503b7899df107365e90bd09129104ed608a269b95133626143c36253b0667d0323475896c13b63f887045569b517326bbe7f95af1781eb7e7c8155d26a5f2d2cdfe08c369bb2eb6ab19c51e70cddd252774e0b8f331ccb43e1a1b044e3ef093ce12b965a6f02f5abfb17fd"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}, &(0x7f00000001c0)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8, 0xd, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "1b99303a70ee1961ed16e9cf5f6c7849"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x3, "043bccc2", "e5103d8a"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x60, 0x10, 0xd, 0xa, 0x3, 0x7}}}, &(0x7f0000000900)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="20117900000002b379ccfeec3656db31d6e188b116b097c272e29b98200ab49baa53065a516b2ca2c2076055c3492d714ef336966c6a4db1acc2e8d39be8b9955324586de9f66f2d7ce9b2cb21e16a916928532e34d2c39fe60eec9a054ef22406f244c28184070f527c9ec335aca5e9b7c255bed35cdc0fdbd9881dbd1438"], &(0x7f0000000540)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xc2}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x160, 0x80}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "2101"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000740)={0x40, 0x13, 0x6, @local}, &(0x7f0000000780)={0x40, 0x17, 0x6, @random="a9d99e2156ed"}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "1010"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x14}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000008c0)={0x40, 0x21, 0x1}}) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) close_range(r1, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000002400)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x5, 0x8, 0x20, @private2, @mcast2={0xff, 0x5}, 0x0, 0x8, 0xfffffffd}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000042, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002440)=""/181, 0xb5) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 21.585785035s ago: executing program 0 (id=201): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x38}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/159) 20.955753415s ago: executing program 2 (id=205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000640)=[{0x0, 0x1, {}, {0x2, 0x1, 0x2}, 0xff, 0x2}, {0x3, 0x0, {0x0, 0xf0, 0x4}, {0x0, 0x0, 0x2}}, {0x2, 0x2, {0x1, 0x0, 0x1}, {0x1, 0xff, 0x1}, 0xfe, 0xfd}], 0x60) r3 = syz_io_uring_setup(0x3bc1, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)={0x0, 0x3938700}, 0x1, 0x4, 0x1}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000060000000070000010900010073797a30000000003c000000090a0104000000000000000007a2000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c00008008000340000000011400000010000100000000000000000000840047"], 0xc0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b66e92c9626ce721b235916a8514f26036b630c635f5", 0x1e}], 0x1}, 0x48005) r8 = socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$vcsn(&(0x7f0000000180), 0x2, 0x400400) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r9, {0xfff2, 0x4}, {0x0, 0x4}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) 19.90612656s ago: executing program 2 (id=207): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc517, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x5609, 0x2) 19.196448299s ago: executing program 0 (id=208): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1000000, 0x11, r0, 0x82000000) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='\x00') r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x8010, r1, 0x18d1d000) read$msr(r0, &(0x7f0000000100)=""/201, 0xc9) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={r2, 0x3, 0x0, [0x7, 0x8, 0x0, 0x159, 0x9], [0xfffffffffffffff8, 0x2, 0x0, 0xf7d, 0x1, 0xc59, 0x2, 0x8, 0xdd6, 0x5, 0x800, 0x9, 0xa020, 0x4, 0x5, 0xffffffffffffffff, 0xfffffffffffffff8, 0x3800000000000000, 0x800, 0x7, 0x7f, 0x5, 0x8, 0x3ff, 0x3, 0x2400000000000000, 0xa, 0x99, 0x6, 0xed87, 0xc, 0x7, 0xa, 0x3, 0x100000001, 0x9, 0x1, 0x3ff, 0xb, 0x7fff, 0x33ff, 0xfffffffffffffff3, 0x1, 0x8, 0xd, 0x38000, 0x0, 0x8, 0x97a7, 0xefb, 0x82, 0x6, 0x9, 0x5, 0x0, 0x7, 0xffffffff, 0x8, 0x6, 0x1, 0x7, 0x3, 0x3, 0x4, 0x8, 0x7, 0x3, 0xfffffffffffffff8, 0x80, 0xa, 0xa, 0xfffffffffffffffe, 0x0, 0x401, 0x2, 0x8, 0x1ff, 0x8001, 0x0, 0x81, 0xd33, 0x4, 0x4, 0x5, 0xfffffffffffffff3, 0x4, 0x6, 0x0, 0xd, 0x77d, 0xffffffffe50f1401, 0xd, 0x5, 0x5e8, 0x4, 0x7449, 0x9, 0x180000000000000, 0x200, 0x9, 0x6, 0x1ff, 0xf, 0x691e88ba, 0x9, 0x8000000000000000, 0x7, 0x9, 0xb, 0x9, 0x5, 0x6, 0x5, 0xe, 0x47c6, 0x7, 0x8001, 0xb, 0x1ff, 0x9, 0xffff]}) syz_emit_vhci(&(0x7f0000000a40)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0xff, 0xc9}}}, 0x6) iopl(0x9) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000a80)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b80), 0x2000, 0x0) getdents64(r3, &(0x7f0000000bc0)=""/4096, 0x1000) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000001bc0)) syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r3, &(0x7f0000001c00)={'#! ', './file0', [{0x20, '/proc/self/net/pfkey\x00'}], 0xa, "fcafdbcd06a665522896800005d6be6dda23b7db557398a417a2d514efa662d5f55fb21d36430d2cf619a0d000624bd82e23260ab3c36c326f76110b2e0e79fab7db4dfdd7a1a11a9c2fa0414e90792288fcc5ef685c9b090cd013e1b5e4057054a89a2f"}, 0x85) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x80010, r0, 0x0) syz_io_uring_setup(0x36bb, &(0x7f0000001cc0)={0x0, 0xec44, 0x0, 0x3, 0x3b9, 0x0, r3}, &(0x7f0000001d40), &(0x7f0000001d80)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001e40)=@IORING_OP_SYMLINKAT={0x26, 0xfdd945fdabeed60c, 0x0, r0, &(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r7}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000002240)={'wg1\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001e80)="cf4472f117fbafc95948b1851914be458f6c9cf2536f7ea957af47908a8e28f467854aef791943f5e350bdaae087318773783eb01c02462de7e974f0635f0174260de7c9548c608bf5fe60a2e4ebc17b1952b06d620f90639f446b9bda", 0x5d}, {&(0x7f0000001f00)="38736f2a9b66dd228651ba3c32dcc7743e6322dd3f795035867963e3641c40a68aefb0a41ca23dcab8ff5273da6ba943", 0x30}, {&(0x7f0000001f40)="f06249ce2df967a531a76262fa18a96cc48fee697d61113be7922cb9a4b28f05d7bd01bd08dd32200b1de7e69a4d71bbed87e73ef057e034339c7f67c53c8ce4a8d8d5dcf61755268afb00c39d2e22a71a0e953b3b6d0f87e49e1c91bf85e734fc8a449fae51c3ad099a5000ba767a77153a", 0x72}, {&(0x7f0000001fc0)="f4179050040caa8701966bf60a9fa669e46715c3889fc83d8d29424cd1f1db9fb00daf1520d2dec95a", 0x29}, {&(0x7f0000002000)="1e2892ed3b2883c74493a2ab04cd5156d19d40ca5f8aa3c0a355b64235053193ab4320d35df14839d6a716a744018beee3f0738d137b12724140e9abc6b97474005ad3b7463d2c0fb0ca81de1613781284a24f459438969a27714837c02ac0b007687a6beedf0a0536479e19b97118a1fedb44850947657dd3497cfe2ab9eaba550811f1792600a4442d35c574c671bbbcc37212b077610c108d1b3675a7474f20850f7e3694eed7b31980930d7f7dbb90c9d16c525b048d6ce0582aec051f9b1e431a3fffebbf5a0f8844e83308c9769a5594dcef5ebf060ed3aaa8836f4fc740c20e81", 0xe4}, {&(0x7f0000002100)="68afa0503dc3db562a5e07e604df6670b4faf16e3c6d2c8d1186033b64cc65fbedc2227ecfa24ca00e83eb6c7193f4efd28c77c24857a0bcef216365be148ece6e2828b28587a8f6498f5b0c791c0e76624e94", 0x53}, {&(0x7f0000002180)="e1f4df5e619aca3c5a0b9d006934513110a8ed8e", 0x14}], 0x7, &(0x7f0000002280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x94, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x96, 0x0, 0x3, [0x8, 0xf7]}, @noop, @cipso={0x86, 0x55, 0x0, [{0x0, 0x3, 'B'}, {0x5, 0x12, "055ef7cbd3f88dabf0cedb71d358caaf"}, {0x1, 0x9, "5187c82cf77739"}, {0x1, 0xf, "193e5dd6af7fb26661f7f7f0e8"}, {0x0, 0x7, "832fff3afe"}, {0x0, 0x5, "8e9d5f"}, {0x1, 0xb, "745349990a53e204b6"}, {0x2, 0x7, "3541fd8a22"}, {0x1, 0x2}, {0x1, 0x2}]}, @timestamp_prespec={0x44, 0x1c, 0xf7, 0x3, 0x5, [{@broadcast, 0xf}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xca2e}, {@empty, 0x6}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @dev={0xac, 0x14, 0x14, 0x26}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x168}, 0x840) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000002440)={r0, 0x1, 0xfffffffff0000000, 0x2000}) fstat(r3, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000002480)=@sr0, r9, &(0x7f0000002540)={0x1, 0x6deb, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000039c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 17.817171608s ago: executing program 3 (id=210): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={r5, 0x1, r4, 0x6}) 16.913275688s ago: executing program 3 (id=211): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000001c0)=""/95, 0x5f, 0xa) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x108) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x101, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_vs\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4e, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000004000000000000000018110000", @ANYRES32=r4, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pread64(r3, &(0x7f00000012c0)=""/4130, 0x1022, 0x8f) 16.378970251s ago: executing program 3 (id=212): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800"], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) socket$unix(0x1, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) 16.28917098s ago: executing program 3 (id=213): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) pread64(r0, &(0x7f0000000bc0)=""/102397, 0x18ffd, 0x30c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd26}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010101}}]}, 0x50}}, 0x0) 16.27832035s ago: executing program 3 (id=214): set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0xfffffffffffffff9) syz_open_dev$ndb(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r1, &(0x7f0000000180)=@hci, &(0x7f0000000280)=0x80) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 15.298671917s ago: executing program 3 (id=215): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000000980)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$unix(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x4005) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x2) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc517, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write(0xffffffffffffffff, &(0x7f0000000140)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0xfffffffffffffeb8) 6.999669653s ago: executing program 33 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000009c0), 0x1fd481, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x20, 0x3b, 0xfb, {0xfb, 0xe, "d9bb9915beaa12e998abba2d9bea49ea9c9384140621d6c56a10dd9e84187dd4953aa462b069b8b1936a8eeaf9902e8f93e7990e44a060936bb8943c41d4062ce4fbdb72b11fd3668848bd271f145e17594b28b7ad9b2966c70d4eee49ebe6161d331992913d648e50d61c8dcea130efa51810221fcce12c8d46ff1d3daff68171116ac528240d2dd9e00b11df31503b7899df107365e90bd09129104ed608a269b95133626143c36253b0667d0323475896c13b63f887045569b517326bbe7f95af1781eb7e7c8155d26a5f2d2cdfe08c369bb2eb6ab19c51e70cddd252774e0b8f331ccb43e1a1b044e3ef093ce12b965a6f02f5abfb17fd"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}, &(0x7f00000001c0)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8, 0xd, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "1b99303a70ee1961ed16e9cf5f6c7849"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x3, "043bccc2", "e5103d8a"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x60, 0x10, 0xd, 0xa, 0x3, 0x7}}}, &(0x7f0000000900)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="20117900000002b379ccfeec3656db31d6e188b116b097c272e29b98200ab49baa53065a516b2ca2c2076055c3492d714ef336966c6a4db1acc2e8d39be8b9955324586de9f66f2d7ce9b2cb21e16a916928532e34d2c39fe60eec9a054ef22406f244c28184070f527c9ec335aca5e9b7c255bed35cdc0fdbd9881dbd1438"], &(0x7f0000000540)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xc2}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x160, 0x80}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "2101"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000740)={0x40, 0x13, 0x6, @local}, &(0x7f0000000780)={0x40, 0x17, 0x6, @random="a9d99e2156ed"}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "1010"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x14}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000008c0)={0x40, 0x21, 0x1}}) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) close_range(r1, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000002400)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x5, 0x8, 0x20, @private2, @mcast2={0xff, 0x5}, 0x0, 0x8, 0xfffffffd}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000042, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002440)=""/181, 0xb5) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 4.498617923s ago: executing program 34 (id=207): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc517, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x5609, 0x2) 3.471779629s ago: executing program 35 (id=208): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1000000, 0x11, r0, 0x82000000) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='\x00') r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x8010, r1, 0x18d1d000) read$msr(r0, &(0x7f0000000100)=""/201, 0xc9) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={r2, 0x3, 0x0, [0x7, 0x8, 0x0, 0x159, 0x9], [0xfffffffffffffff8, 0x2, 0x0, 0xf7d, 0x1, 0xc59, 0x2, 0x8, 0xdd6, 0x5, 0x800, 0x9, 0xa020, 0x4, 0x5, 0xffffffffffffffff, 0xfffffffffffffff8, 0x3800000000000000, 0x800, 0x7, 0x7f, 0x5, 0x8, 0x3ff, 0x3, 0x2400000000000000, 0xa, 0x99, 0x6, 0xed87, 0xc, 0x7, 0xa, 0x3, 0x100000001, 0x9, 0x1, 0x3ff, 0xb, 0x7fff, 0x33ff, 0xfffffffffffffff3, 0x1, 0x8, 0xd, 0x38000, 0x0, 0x8, 0x97a7, 0xefb, 0x82, 0x6, 0x9, 0x5, 0x0, 0x7, 0xffffffff, 0x8, 0x6, 0x1, 0x7, 0x3, 0x3, 0x4, 0x8, 0x7, 0x3, 0xfffffffffffffff8, 0x80, 0xa, 0xa, 0xfffffffffffffffe, 0x0, 0x401, 0x2, 0x8, 0x1ff, 0x8001, 0x0, 0x81, 0xd33, 0x4, 0x4, 0x5, 0xfffffffffffffff3, 0x4, 0x6, 0x0, 0xd, 0x77d, 0xffffffffe50f1401, 0xd, 0x5, 0x5e8, 0x4, 0x7449, 0x9, 0x180000000000000, 0x200, 0x9, 0x6, 0x1ff, 0xf, 0x691e88ba, 0x9, 0x8000000000000000, 0x7, 0x9, 0xb, 0x9, 0x5, 0x6, 0x5, 0xe, 0x47c6, 0x7, 0x8001, 0xb, 0x1ff, 0x9, 0xffff]}) syz_emit_vhci(&(0x7f0000000a40)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0xff, 0xc9}}}, 0x6) iopl(0x9) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000a80)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b80), 0x2000, 0x0) getdents64(r3, &(0x7f0000000bc0)=""/4096, 0x1000) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000001bc0)) syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r3, &(0x7f0000001c00)={'#! ', './file0', [{0x20, '/proc/self/net/pfkey\x00'}], 0xa, "fcafdbcd06a665522896800005d6be6dda23b7db557398a417a2d514efa662d5f55fb21d36430d2cf619a0d000624bd82e23260ab3c36c326f76110b2e0e79fab7db4dfdd7a1a11a9c2fa0414e90792288fcc5ef685c9b090cd013e1b5e4057054a89a2f"}, 0x85) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x80010, r0, 0x0) syz_io_uring_setup(0x36bb, &(0x7f0000001cc0)={0x0, 0xec44, 0x0, 0x3, 0x3b9, 0x0, r3}, &(0x7f0000001d40), &(0x7f0000001d80)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001e40)=@IORING_OP_SYMLINKAT={0x26, 0xfdd945fdabeed60c, 0x0, r0, &(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r7}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000002240)={'wg1\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001e80)="cf4472f117fbafc95948b1851914be458f6c9cf2536f7ea957af47908a8e28f467854aef791943f5e350bdaae087318773783eb01c02462de7e974f0635f0174260de7c9548c608bf5fe60a2e4ebc17b1952b06d620f90639f446b9bda", 0x5d}, {&(0x7f0000001f00)="38736f2a9b66dd228651ba3c32dcc7743e6322dd3f795035867963e3641c40a68aefb0a41ca23dcab8ff5273da6ba943", 0x30}, {&(0x7f0000001f40)="f06249ce2df967a531a76262fa18a96cc48fee697d61113be7922cb9a4b28f05d7bd01bd08dd32200b1de7e69a4d71bbed87e73ef057e034339c7f67c53c8ce4a8d8d5dcf61755268afb00c39d2e22a71a0e953b3b6d0f87e49e1c91bf85e734fc8a449fae51c3ad099a5000ba767a77153a", 0x72}, {&(0x7f0000001fc0)="f4179050040caa8701966bf60a9fa669e46715c3889fc83d8d29424cd1f1db9fb00daf1520d2dec95a", 0x29}, {&(0x7f0000002000)="1e2892ed3b2883c74493a2ab04cd5156d19d40ca5f8aa3c0a355b64235053193ab4320d35df14839d6a716a744018beee3f0738d137b12724140e9abc6b97474005ad3b7463d2c0fb0ca81de1613781284a24f459438969a27714837c02ac0b007687a6beedf0a0536479e19b97118a1fedb44850947657dd3497cfe2ab9eaba550811f1792600a4442d35c574c671bbbcc37212b077610c108d1b3675a7474f20850f7e3694eed7b31980930d7f7dbb90c9d16c525b048d6ce0582aec051f9b1e431a3fffebbf5a0f8844e83308c9769a5594dcef5ebf060ed3aaa8836f4fc740c20e81", 0xe4}, {&(0x7f0000002100)="68afa0503dc3db562a5e07e604df6670b4faf16e3c6d2c8d1186033b64cc65fbedc2227ecfa24ca00e83eb6c7193f4efd28c77c24857a0bcef216365be148ece6e2828b28587a8f6498f5b0c791c0e76624e94", 0x53}, {&(0x7f0000002180)="e1f4df5e619aca3c5a0b9d006934513110a8ed8e", 0x14}], 0x7, &(0x7f0000002280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x94, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x96, 0x0, 0x3, [0x8, 0xf7]}, @noop, @cipso={0x86, 0x55, 0x0, [{0x0, 0x3, 'B'}, {0x5, 0x12, "055ef7cbd3f88dabf0cedb71d358caaf"}, {0x1, 0x9, "5187c82cf77739"}, {0x1, 0xf, "193e5dd6af7fb26661f7f7f0e8"}, {0x0, 0x7, "832fff3afe"}, {0x0, 0x5, "8e9d5f"}, {0x1, 0xb, "745349990a53e204b6"}, {0x2, 0x7, "3541fd8a22"}, {0x1, 0x2}, {0x1, 0x2}]}, @timestamp_prespec={0x44, 0x1c, 0xf7, 0x3, 0x5, [{@broadcast, 0xf}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xca2e}, {@empty, 0x6}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @dev={0xac, 0x14, 0x14, 0x26}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x168}, 0x840) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000002440)={r0, 0x1, 0xfffffffff0000000, 0x2000}) fstat(r3, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000002480)=@sr0, r9, &(0x7f0000002540)={0x1, 0x6deb, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000039c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 0s ago: executing program 36 (id=215): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000000980)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$unix(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x4005) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x2) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc517, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write(0xffffffffffffffff, &(0x7f0000000140)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0xfffffffffffffeb8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.31' (ED25519) to the list of known hosts. [ 56.218577][ T5808] cgroup: Unknown subsys name 'net' [ 56.347887][ T5808] cgroup: Unknown subsys name 'cpuset' [ 56.355820][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.624783][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.980126][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.990060][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.998827][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.010400][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.019132][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.026700][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.035035][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.037629][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.043083][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.058650][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.064971][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.075145][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.084202][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.094250][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.097754][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.110519][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.113621][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.118517][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.125914][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.132961][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.140060][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.147031][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.152388][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.160555][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.167935][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.174179][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.182257][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.190980][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.205707][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.228223][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.599625][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 60.670321][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 60.731962][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 60.773055][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.781080][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.788663][ T5822] bridge_slave_0: entered allmulticast mode [ 60.795586][ T5822] bridge_slave_0: entered promiscuous mode [ 60.835140][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.842336][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.850704][ T5822] bridge_slave_1: entered allmulticast mode [ 60.858067][ T5822] bridge_slave_1: entered promiscuous mode [ 60.873186][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 60.919241][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.932289][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 60.964507][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.030488][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.037922][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.046162][ T5834] bridge_slave_0: entered allmulticast mode [ 61.052727][ T5834] bridge_slave_0: entered promiscuous mode [ 61.091633][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.099128][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.106370][ T5834] bridge_slave_1: entered allmulticast mode [ 61.112875][ T5834] bridge_slave_1: entered promiscuous mode [ 61.132906][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.140185][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.147901][ T5818] bridge_slave_0: entered allmulticast mode [ 61.154837][ T5818] bridge_slave_0: entered promiscuous mode [ 61.165059][ T5822] team0: Port device team_slave_0 added [ 61.198666][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.208939][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.216614][ T5818] bridge_slave_1: entered allmulticast mode [ 61.223166][ T5818] bridge_slave_1: entered promiscuous mode [ 61.238634][ T5822] team0: Port device team_slave_1 added [ 61.261861][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.274289][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.306518][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.313483][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.339491][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.352268][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.362013][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.369540][ T5823] bridge_slave_0: entered allmulticast mode [ 61.376818][ T5823] bridge_slave_0: entered promiscuous mode [ 61.398270][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.405521][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.412706][ T5830] bridge_slave_0: entered allmulticast mode [ 61.419599][ T5830] bridge_slave_0: entered promiscuous mode [ 61.429702][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.439782][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.447272][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.473693][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.490789][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.498112][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.505653][ T5823] bridge_slave_1: entered allmulticast mode [ 61.512194][ T5823] bridge_slave_1: entered promiscuous mode [ 61.529800][ T5834] team0: Port device team_slave_0 added [ 61.535854][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.542945][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.550613][ T5830] bridge_slave_1: entered allmulticast mode [ 61.557636][ T5830] bridge_slave_1: entered promiscuous mode [ 61.574757][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.604478][ T5834] team0: Port device team_slave_1 added [ 61.656559][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.687286][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.694592][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.720670][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.733582][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.740647][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.766795][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.781293][ T5818] team0: Port device team_slave_0 added [ 61.789141][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.800663][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.812012][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.825705][ T5822] hsr_slave_0: entered promiscuous mode [ 61.831992][ T5822] hsr_slave_1: entered promiscuous mode [ 61.848560][ T5818] team0: Port device team_slave_1 added [ 61.880215][ T5830] team0: Port device team_slave_0 added [ 61.913036][ T5830] team0: Port device team_slave_1 added [ 61.929461][ T5823] team0: Port device team_slave_0 added [ 61.965628][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.972605][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.999135][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.011593][ T5823] team0: Port device team_slave_1 added [ 62.029424][ T5834] hsr_slave_0: entered promiscuous mode [ 62.036089][ T5834] hsr_slave_1: entered promiscuous mode [ 62.042047][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.049958][ T5834] Cannot create hsr debugfs directory [ 62.062120][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.069215][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.095331][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.107804][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.114826][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.140809][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.152984][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.160028][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.186038][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.225200][ T5828] Bluetooth: hci1: command tx timeout [ 62.230967][ T5837] Bluetooth: hci4: command tx timeout [ 62.248377][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.255689][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.281909][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.314193][ T5837] Bluetooth: hci2: command tx timeout [ 62.319839][ T5828] Bluetooth: hci3: command tx timeout [ 62.319848][ T5829] Bluetooth: hci0: command tx timeout [ 62.333285][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.340315][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.366300][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.402322][ T5830] hsr_slave_0: entered promiscuous mode [ 62.408476][ T5830] hsr_slave_1: entered promiscuous mode [ 62.415724][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.423296][ T5830] Cannot create hsr debugfs directory [ 62.469891][ T5818] hsr_slave_0: entered promiscuous mode [ 62.476326][ T5818] hsr_slave_1: entered promiscuous mode [ 62.482264][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.489995][ T5818] Cannot create hsr debugfs directory [ 62.566733][ T5823] hsr_slave_0: entered promiscuous mode [ 62.572946][ T5823] hsr_slave_1: entered promiscuous mode [ 62.579419][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.587189][ T5823] Cannot create hsr debugfs directory [ 62.808324][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.822187][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.831740][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.841522][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.911789][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.922051][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.935170][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.956210][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.003720][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.019538][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.030472][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.041179][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.100512][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.112709][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.149381][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.159581][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.236470][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.248066][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.257459][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.285413][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.325047][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.337488][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.349484][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.399556][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.419933][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.444314][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.451621][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.469787][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.487456][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.494593][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.516520][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.526551][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.533650][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.560792][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.567954][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.597208][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.604342][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.619790][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.626926][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.667448][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.709880][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.717164][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.762164][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.769417][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.880808][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.919251][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.970132][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.977323][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.056884][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.064030][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.097383][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.170086][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.210424][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.252729][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.304387][ T5837] Bluetooth: hci4: command tx timeout [ 64.309846][ T5837] Bluetooth: hci1: command tx timeout [ 64.325934][ T5834] veth0_vlan: entered promiscuous mode [ 64.342951][ T5834] veth1_vlan: entered promiscuous mode [ 64.370891][ T5822] veth0_vlan: entered promiscuous mode [ 64.384772][ T5837] Bluetooth: hci2: command tx timeout [ 64.390211][ T5837] Bluetooth: hci3: command tx timeout [ 64.395877][ T5828] Bluetooth: hci0: command tx timeout [ 64.412032][ T5818] veth0_vlan: entered promiscuous mode [ 64.450370][ T5818] veth1_vlan: entered promiscuous mode [ 64.466547][ T5822] veth1_vlan: entered promiscuous mode [ 64.481194][ T5830] veth0_vlan: entered promiscuous mode [ 64.490927][ T5834] veth0_macvtap: entered promiscuous mode [ 64.509228][ T5834] veth1_macvtap: entered promiscuous mode [ 64.518788][ T5830] veth1_vlan: entered promiscuous mode [ 64.536958][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.586279][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.603768][ T5822] veth0_macvtap: entered promiscuous mode [ 64.612710][ T5830] veth0_macvtap: entered promiscuous mode [ 64.630696][ T5818] veth0_macvtap: entered promiscuous mode [ 64.646666][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.655189][ T5830] veth1_macvtap: entered promiscuous mode [ 64.662083][ T5822] veth1_macvtap: entered promiscuous mode [ 64.669963][ T5818] veth1_macvtap: entered promiscuous mode [ 64.693045][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.715461][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.728991][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.739148][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.773647][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.787382][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.799779][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.822220][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.841252][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.852590][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.863465][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.876602][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.887904][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.900880][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.915407][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.927799][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.936895][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.946594][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.955567][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.967884][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.979108][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.989064][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.999611][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.011549][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.020421][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.031294][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.042337][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.052904][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.062957][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.073407][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.084799][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.115773][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.125323][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.134394][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.143113][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.175973][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.187689][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.198262][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.208877][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.219620][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.230287][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.242056][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.281089][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.290249][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.299105][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.307939][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.327439][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.342445][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.381304][ T5823] veth0_vlan: entered promiscuous mode [ 65.414841][ T746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.428945][ T746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.441403][ T5823] veth1_vlan: entered promiscuous mode [ 65.484748][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.492608][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.522117][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.543719][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.546279][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.591379][ T5823] veth0_macvtap: entered promiscuous mode [ 65.613648][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.622088][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.638125][ T5823] veth1_macvtap: entered promiscuous mode [ 65.699122][ T746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.699715][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.724173][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.730046][ T746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.736343][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.752285][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.762298][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.772763][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.782967][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.793549][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.815272][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.873477][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.892260][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.918475][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.918599][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.933097][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.948068][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.961486][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.042570][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.059662][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.073979][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.093621][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.116252][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.215055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.224118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 66.258757][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.272335][ T5903] fuse: Bad value for 'user_id' [ 66.277490][ T5903] fuse: Bad value for 'user_id' [ 66.316825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.400869][ T5903] 9pnet_fd: p9_fd_create_unix (5903): problem connecting socket: ./file0/../file0/file0: -2 [ 66.418781][ T5829] Bluetooth: hci4: command tx timeout [ 66.426612][ T5837] Bluetooth: hci1: command tx timeout [ 66.494722][ T5829] Bluetooth: hci3: command tx timeout [ 66.495170][ T5828] Bluetooth: hci0: command tx timeout [ 66.500900][ T5829] Bluetooth: hci2: command tx timeout [ 66.562064][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.570957][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.594047][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.602788][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.743446][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.814059][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.945954][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.963994][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.972615][ T5917] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 67.423468][ T5924] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.115084][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 68.238754][ T29] audit: type=1326 audit(1737880208.220:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5922 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a318cd29 code=0x7ffc0000 [ 68.260802][ T5934] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 68.298125][ T29] audit: type=1326 audit(1737880208.220:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5922 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a318cd29 code=0x7ffc0000 [ 68.349018][ T29] audit: type=1326 audit(1737880208.220:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5922 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa0a318cd29 code=0x7ffc0000 [ 68.392994][ T29] audit: type=1326 audit(1737880208.220:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5922 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a318cd29 code=0x7ffc0000 [ 68.426454][ T29] audit: type=1326 audit(1737880208.220:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5922 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa0a318cd29 code=0x7ffc0000 [ 68.458719][ T29] audit: type=1326 audit(1737880208.220:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5922 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a318cd29 code=0x7ffc0000 [ 68.480402][ T5829] Bluetooth: hci4: command tx timeout [ 68.500718][ T29] audit: type=1326 audit(1737880208.220:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5922 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0a318cd29 code=0x7ffc0000 [ 68.529427][ T29] audit: type=1326 audit(1737880208.220:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5922 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a318cd29 code=0x7ffc0000 [ 68.551172][ T5829] Bluetooth: hci0: command tx timeout [ 68.551215][ T5829] Bluetooth: hci1: command tx timeout [ 68.551258][ T5829] Bluetooth: hci3: command tx timeout [ 68.554369][ T5829] Bluetooth: hci2: command tx timeout [ 68.574934][ T29] audit: type=1326 audit(1737880208.220:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5922 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa0a318cd29 code=0x7ffc0000 [ 68.596649][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.604358][ T29] audit: type=1326 audit(1737880208.220:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5922 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a318cd29 code=0x7ffc0000 [ 68.629755][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 68.663789][ T5939] ipvlan2: entered promiscuous mode [ 68.791942][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.822730][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.913613][ T25] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 68.940398][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 69.003921][ T25] usb 4-1: SerialNumber: syz [ 69.322435][ T25] usb 4-1: 0:2 : does not exist [ 69.476606][ T25] usb 4-1: USB disconnect, device number 2 [ 70.704835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.954814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 71.034300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 71.234220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 71.436555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 71.587795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.744195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 72.349632][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.363839][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.396489][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.474111][ T5873] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.591788][ T5967] FAULT_INJECTION: forcing a failure. [ 72.591788][ T5967] name failslab, interval 1, probability 0, space 0, times 1 [ 72.634056][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 72.634188][ T5967] CPU: 1 UID: 0 PID: 5967 Comm: syz.1.18 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 72.634209][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 72.634222][ T5967] Call Trace: [ 72.634229][ T5967] [ 72.634236][ T5967] dump_stack_lvl+0x241/0x360 [ 72.634278][ T5967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.634301][ T5967] ? __pfx__printk+0x10/0x10 [ 72.634325][ T5967] ? fs_reclaim_acquire+0x93/0x130 [ 72.634348][ T5967] ? __pfx___might_resched+0x10/0x10 [ 72.634365][ T5967] ? dynamic_dname+0x141/0x1b0 [ 72.634389][ T5967] should_fail_ex+0x3b0/0x4e0 [ 72.634411][ T5967] should_failslab+0xac/0x100 [ 72.634431][ T5967] __kmalloc_noprof+0xdd/0x4c0 [ 72.634450][ T5967] ? tomoyo_encode+0x26f/0x540 [ 72.634475][ T5967] tomoyo_encode+0x26f/0x540 [ 72.634497][ T5967] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 72.634518][ T5967] tomoyo_realpath_from_path+0x59e/0x5e0 [ 72.634551][ T5967] tomoyo_path_number_perm+0x236/0x860 [ 72.634569][ T5967] ? __lock_acquire+0x1397/0x2100 [ 72.634591][ T5967] ? tomoyo_path_number_perm+0x206/0x860 [ 72.634613][ T5967] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 72.634671][ T5967] ? __fget_files+0x2a/0x410 [ 72.634695][ T5967] ? __fget_files+0x2a/0x410 [ 72.634719][ T5967] security_file_ioctl+0xc6/0x2a0 [ 72.634741][ T5967] __se_sys_ioctl+0x46/0x170 [ 72.634767][ T5967] do_syscall_64+0xf3/0x230 [ 72.634787][ T5967] ? clear_bhb_loop+0x35/0x90 [ 72.634811][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.634830][ T5967] RIP: 0033:0x7fd80978cd29 [ 72.634850][ T5967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.634862][ T5967] RSP: 002b:00007fd80a632038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.634880][ T5967] RAX: ffffffffffffffda RBX: 00007fd8099a5fa0 RCX: 00007fd80978cd29 [ 72.634892][ T5967] RDX: 0000000020000140 RSI: 000000008400ae8e RDI: 0000000000000008 [ 72.634908][ T5967] RBP: 00007fd80a632090 R08: 0000000000000000 R09: 0000000000000000 [ 72.634918][ T5967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.634928][ T5967] R13: 0000000000000000 R14: 00007fd8099a5fa0 R15: 00007ffd58075fc8 [ 72.634954][ T5967] [ 72.635030][ T5967] ERROR: Out of memory at tomoyo_realpath_from_path. [ 72.638878][ T5873] usb 1-1: config 3 has an invalid interface number: 212 but max is 3 [ 72.638927][ T5873] usb 1-1: config 3 has an invalid interface number: 180 but max is 3 [ 72.638947][ T5873] usb 1-1: config 3 has an invalid interface number: 113 but max is 3 [ 72.638967][ T5873] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 72.638984][ T5873] usb 1-1: config 3 has an invalid interface number: 37 but max is 3 [ 72.639002][ T5873] usb 1-1: config 3 has no interface number 0 [ 72.639018][ T5873] usb 1-1: config 3 has no interface number 1 [ 72.639033][ T5873] usb 1-1: config 3 has no interface number 2 [ 72.639049][ T5873] usb 1-1: config 3 has no interface number 3 [ 72.639098][ T5873] usb 1-1: config 3 interface 212 altsetting 11 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 72.639125][ T5873] usb 1-1: config 3 interface 212 altsetting 11 has a duplicate endpoint with address 0xB, skipping [ 72.639146][ T5873] usb 1-1: config 3 interface 212 altsetting 11 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 72.639177][ T5873] usb 1-1: config 3 interface 180 altsetting 127 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 72.639201][ T5873] usb 1-1: config 3 interface 180 altsetting 127 endpoint 0x89 has invalid maxpacket 1023, setting to 64 [ 72.639226][ T5873] usb 1-1: config 3 interface 180 altsetting 127 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 72.639250][ T5873] usb 1-1: config 3 interface 180 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 72.639272][ T5873] usb 1-1: config 3 interface 180 altsetting 127 endpoint 0xD has invalid maxpacket 329, setting to 64 [ 72.639302][ T5873] usb 1-1: config 3 interface 113 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 72.639323][ T5873] usb 1-1: config 3 interface 113 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 72.639343][ T5873] usb 1-1: config 3 interface 113 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 72.639362][ T5873] usb 1-1: config 3 interface 113 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 72.639382][ T5873] usb 1-1: config 3 interface 113 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 72.639402][ T5873] usb 1-1: config 3 interface 113 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 72.639422][ T5873] usb 1-1: config 3 interface 113 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 72.639443][ T5873] usb 1-1: config 3 interface 113 altsetting 7 endpoint 0x7 has invalid wMaxPacketSize 0 [ 72.639463][ T5873] usb 1-1: config 3 interface 113 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 72.639485][ T5873] usb 1-1: config 3 interface 113 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 72.639504][ T5873] usb 1-1: config 3 interface 113 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 72.639530][ T5873] usb 1-1: config 3 interface 37 altsetting 129 has a duplicate endpoint with address 0x6, skipping [ 72.639549][ T5873] usb 1-1: config 3 interface 37 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 72.639569][ T5873] usb 1-1: config 3 interface 37 altsetting 129 has a duplicate endpoint with address 0xE, skipping [ 72.639589][ T5873] usb 1-1: config 3 interface 37 altsetting 129 has a duplicate endpoint with address 0xD, skipping [ 72.639610][ T5873] usb 1-1: config 3 interface 37 altsetting 129 endpoint 0xF has an invalid bInterval 185, changing to 7 [ 72.639632][ T5873] usb 1-1: config 3 interface 212 has no altsetting 0 [ 72.639648][ T5873] usb 1-1: config 3 interface 180 has no altsetting 0 [ 72.639663][ T5873] usb 1-1: config 3 interface 113 has no altsetting 0 [ 72.639679][ T5873] usb 1-1: config 3 interface 37 has no altsetting 0 [ 72.642686][ T5873] usb 1-1: Dual-Role OTG device on HNP port [ 72.642979][ T5873] usb 1-1: New USB device found, idVendor=07d1, idProduct=3a07, bcdDevice=ff.3d [ 72.643003][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.643022][ T5873] usb 1-1: Product: syz [ 72.643036][ T5873] usb 1-1: Manufacturer: 閈꺀⠯䯜쇮좲쟅㒍찹氵坾ꨲ䈖뙟ꃻ䧟蟉鰯嚜䠝쭰隻꓾黿ݜ뷃젳έ翲䑰澴ꖀ譻玔ﶫ䆚霵ٶ誉䞫覣떙蓳鎮汰ꞈ讕픂ٔ霾⨅衻퀏谰䑻㴸✺磼跭謃좸齕촻볨鸏ⶾ롳⿩逄訇뚚瓅ꙙ薱犔䛞ⅎ椛ꃰ탪Ⴉ螜胗귌ጙ켛睖轡チ鯉໌扣㻪洈팽흗锾 [ 72.643063][ T5873] usb 1-1: SerialNumber: syz [ 72.888317][ T5873] usb 1-1: Could not find all expected endpoints [ 73.472496][ T5873] usb 1-1: Could not find all expected endpoints [ 73.520373][ T5873] usb 1-1: Could not find all expected endpoints [ 73.572456][ T5873] usb 1-1: Could not find all expected endpoints [ 73.648136][ T5873] usb 1-1: USB disconnect, device number 2 [ 74.132476][ T5997] fuse: Bad value for 'user_id' [ 74.138219][ T5997] fuse: Bad value for 'user_id' [ 74.164435][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.184362][ T5997] 9pnet_fd: p9_fd_create_unix (5997): problem connecting socket: ./file0/../file0/file0: -2 [ 74.752951][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 74.792424][ T25] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 74.809263][ T25] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 74.852600][ T5980] capability: warning: `syz.0.22' uses deprecated v2 capabilities in a way that may be insecure [ 74.975786][ T25] usb 3-1: config 135 has no interface number 0 [ 74.982998][ T25] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 74.996246][ T25] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 75.224139][ T25] usb 3-1: config 135 interface 230 has no altsetting 0 [ 75.323918][ T25] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 75.409923][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.510977][ T25] usb 3-1: Product: syz [ 75.525209][ T25] usb 3-1: Manufacturer: syz [ 75.530750][ T25] usb 3-1: SerialNumber: syz [ 75.607225][ T25] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 75.628524][ T25] usb 3-1: No valid video chain found. [ 75.922143][ T6014] fuse: Bad value for 'user_id' [ 75.927202][ T6014] fuse: Bad value for 'user_id' [ 76.052470][ T6015] 9pnet_fd: p9_fd_create_unix (6015): problem connecting socket: ./file0/../file0/file0: -2 [ 77.002301][ T6026] ======================================================= [ 77.002301][ T6026] WARNING: The mand mount option has been deprecated and [ 77.002301][ T6026] and is ignored by this kernel. Remove the mand [ 77.002301][ T6026] option from the mount to silence this warning. [ 77.002301][ T6026] ======================================================= [ 77.055963][ T6026] netlink: 'syz.3.32': attribute type 6 has an invalid length. [ 77.494310][ T5871] usb 3-1: USB disconnect, device number 2 [ 78.147002][ T6044] fuse: Bad value for 'user_id' [ 78.152020][ T6044] fuse: Bad value for 'user_id' [ 78.175405][ T6044] 9pnet_fd: p9_fd_create_unix (6044): problem connecting socket: ./file0/../file0/file0: -2 [ 79.613993][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 79.614013][ T29] audit: type=1326 audit(1737880219.560:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6046 comm="syz.1.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80978cd29 code=0x7fc00000 [ 79.752311][ T29] audit: type=1326 audit(1737880219.560:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6046 comm="syz.1.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd80978cd29 code=0x7fc00000 [ 80.174849][ T5913] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.344027][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 80.381184][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.433174][ T5913] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 80.442528][ T5870] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.461257][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.492266][ T5913] usb 2-1: config 0 descriptor?? [ 80.630497][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 80.659934][ T5870] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 80.669782][ T5870] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 80.779197][ T5870] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.879632][ T5913] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 80.912626][ T5870] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.949894][ T5870] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 80.977966][ T5870] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 80.986481][ T5870] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 80.997948][ T5870] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.012609][ T5870] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 81.040720][ T5870] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 81.126598][ T5870] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 81.190534][ T5870] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 81.312308][ T5870] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.333458][ T5870] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 81.352004][ T5870] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 81.368597][ T5870] usb 5-1: string descriptor 0 read error: -22 [ 81.386632][ T5870] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 81.418532][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.765879][ T5870] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 82.232463][ T80] cfg80211: failed to load regulatory.db [ 82.336358][ T5870] usb 5-1: USB disconnect, device number 2 [ 82.842972][ T6109] fuse: Bad value for 'user_id' [ 82.848209][ T6109] fuse: Bad value for 'user_id' [ 82.877557][ T6109] 9pnet_fd: p9_fd_create_unix (6109): problem connecting socket: ./file0/../file0/file0: -2 [ 82.895701][ T6087] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 82.912979][ C1] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 82.922145][ T5870] usb 2-1: USB disconnect, device number 2 [ 83.083696][ T6087] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 83.407798][ T6087] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.413762][ T6087] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 83.510668][ T6087] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.530644][ T6087] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 83.624341][ T6087] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 83.630293][ T6087] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 83.732454][ T6087] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 83.759407][ T6087] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 83.949787][ T6115] process 'syz.2.55' launched '/dev/fd/4' with NULL argv: empty string added [ 84.224213][ T80] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.931918][ T80] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 84.954515][ T80] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 84.994132][ T80] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.045749][ T80] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 85.171087][ T80] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 85.642758][ T6146] ebtables: ebtables: counters copy to user failed while replacing table [ 86.245760][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.551003][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 86.801712][ T6161] block nbd0: shutting down sockets [ 87.354251][ T5870] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.549593][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 87.764500][ T5870] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 87.848556][ T5870] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 87.920704][ T5870] usb 2-1: config 135 has no interface number 0 [ 87.960939][ T5870] usb 2-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 88.013379][ T5870] usb 2-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 88.079771][ T5870] usb 2-1: config 135 interface 230 has no altsetting 0 [ 88.101657][ T5870] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 88.137298][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.158540][ T5870] usb 2-1: Product: syz [ 88.162754][ T5870] usb 2-1: Manufacturer: syz [ 88.218841][ T5870] usb 2-1: SerialNumber: syz [ 88.261986][ T5870] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 88.290197][ T5870] usb 2-1: No valid video chain found. [ 88.538669][ T943] usb 2-1: USB disconnect, device number 3 [ 88.674086][ T5870] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.879172][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 88.890427][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.922240][ T5870] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 88.937668][ T6212] syzkaller1: entered promiscuous mode [ 88.944368][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.964069][ T6212] syzkaller1: entered allmulticast mode [ 88.976459][ T5870] usb 3-1: config 0 descriptor?? [ 89.172405][ T80] usb 5-1: USB disconnect, device number 3 [ 89.189844][ T5870] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 89.549197][ T6228] xt_CT: No such helper "syz0" [ 90.259447][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033ae1000: rx timeout, send abort [ 90.270136][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888033ae1000: 0x3ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 90.842618][ T29] audit: type=1326 audit(1737880230.850:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.4.79" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f003c58cd29 code=0x0 [ 91.175200][ T943] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 91.277892][ C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -1 [ 91.278877][ T80] usb 3-1: USB disconnect, device number 3 [ 91.551091][ T6266] netlink: 'syz.3.81': attribute type 6 has an invalid length. [ 91.976386][ T943] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 91.989743][ T943] usb 5-1: config 0 has no interface number 0 [ 92.016517][ T943] usb 5-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 92.031620][ T6263] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.101217][ T943] usb 5-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 92.340447][ T943] usb 5-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 92.373925][ T943] usb 5-1: config 0 interface 230 has no altsetting 0 [ 92.380756][ T943] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 92.403924][ T943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.444691][ T943] usb 5-1: config 0 descriptor?? [ 92.669347][ T6284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.898459][ T6290] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 92.905699][ T8] IPVS: starting estimator thread 0... [ 92.945779][ T943] uclogic 0003:5543:0781.0001: No inputs registered, leaving [ 92.998245][ T6294] IPVS: using max 24 ests per chain, 57600 per kthread [ 93.015402][ T943] uclogic 0003:5543:0781.0001: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.4-1/input230 [ 93.322575][ T29] audit: type=1326 audit(1737880233.310:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.4.79" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f003c58cd29 code=0x0 [ 93.494601][ T80] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.511156][ T5871] usb 5-1: USB disconnect, device number 4 [ 93.674044][ T80] usb 4-1: Using ep0 maxpacket: 8 [ 93.694889][ T80] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.716634][ T80] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.742708][ T80] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.762297][ T80] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.780741][ T80] usb 4-1: Product: syz [ 93.785414][ T80] usb 4-1: Manufacturer: syz [ 93.790040][ T80] usb 4-1: SerialNumber: syz [ 93.810280][ T80] usb 4-1: bad CDC descriptors [ 94.274246][ T6328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.97'. [ 94.324018][ T5871] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.521088][ T5871] usb 2-1: device descriptor read/64, error -71 [ 94.592302][ T5913] usb 4-1: USB disconnect, device number 3 [ 94.664143][ T5870] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.784077][ T5871] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.844079][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 94.865083][ T5870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 94.896918][ T5870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 94.959721][ T5870] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.009109][ T5871] usb 2-1: device descriptor read/64, error -71 [ 95.027340][ T5870] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 95.058926][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 95.091742][ T5870] usb 3-1: Product: syz [ 95.100272][ T5870] usb 3-1: Manufacturer: syz [ 95.111021][ T5870] usb 3-1: SerialNumber: syz [ 95.123761][ T6336] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 95.132741][ T5871] usb usb2-port1: attempt power cycle [ 95.159517][ T5870] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5 [ 95.444096][ T80] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.497107][ T5871] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.535500][ T5872] usb 3-1: USB disconnect, device number 4 [ 95.556359][ T5871] usb 2-1: device descriptor read/8, error -71 [ 95.562486][ T6374] netlink: 24 bytes leftover after parsing attributes in process `syz.3.110'. [ 95.585751][ T5872] appletouch 3-1:1.0: input: appletouch disconnected [ 95.615784][ T80] usb 5-1: Using ep0 maxpacket: 32 [ 95.635605][ T80] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.654413][ T80] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 95.695777][ T80] usb 5-1: New USB device found, idVendor=0eb0, idProduct=9020, bcdDevice= c.31 [ 95.712268][ T80] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.723990][ T80] usb 5-1: Product: syz [ 95.728188][ T80] usb 5-1: Manufacturer: syz [ 95.742404][ T80] usb 5-1: SerialNumber: syz [ 95.804045][ T5871] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 95.858320][ T5871] usb 2-1: device descriptor read/8, error -71 [ 95.945501][ T80] usb 5-1: config 0 descriptor?? [ 95.974545][ T5871] usb usb2-port1: unable to enumerate USB device [ 96.555563][ T80] usb 5-1: USB disconnect, device number 5 [ 97.191294][ T6391] netlink: 'syz.0.114': attribute type 6 has an invalid length. [ 98.673111][ T6415] netlink: 'syz.4.122': attribute type 1 has an invalid length. [ 98.681411][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 98.703201][ T6415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.122'. [ 98.715513][ T6415] netlink: 'syz.4.122': attribute type 7 has an invalid length. [ 98.726591][ T6415] netlink: 'syz.4.122': attribute type 8 has an invalid length. [ 98.734646][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 98.759600][ T6415] netlink: 'syz.4.122': attribute type 4 has an invalid length. [ 98.787533][ T6415] misc userio: The device must be registered before sending interrupts [ 98.964381][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.634034][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 99.652542][ T8] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 99.685443][ T8] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 99.697432][ T8] usb 4-1: config 135 has no interface number 0 [ 99.703716][ T8] usb 4-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 99.716176][ T8] usb 4-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 99.730875][ T8] usb 4-1: config 135 interface 230 has no altsetting 0 [ 99.741399][ T8] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 99.854200][ T5872] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.868646][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.033770][ T6434] netlink: 'syz.1.125': attribute type 6 has an invalid length. [ 100.794967][ T8] usb 4-1: Product: syz [ 100.916656][ T8] usb 4-1: Manufacturer: syz [ 100.973017][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 101.033919][ T8] usb 4-1: SerialNumber: syz [ 101.044542][ T5913] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.052664][ T5872] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 101.072230][ T8] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 101.078876][ T5872] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 101.092543][ T8] usb 4-1: No valid video chain found. [ 101.234106][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 101.260982][ T5872] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.288449][ T5913] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.337385][ T5913] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.348208][ T5913] usb 1-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 101.351542][ T5872] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 101.360468][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.366809][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 101.398466][ T5913] usb 1-1: config 0 descriptor?? [ 101.414349][ T5872] usb 3-1: Product: syz [ 101.418547][ T5872] usb 3-1: Manufacturer: syz [ 101.423152][ T5872] usb 3-1: SerialNumber: syz [ 101.432695][ T6426] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 101.446016][ T5872] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input6 [ 101.576279][ T6445] fuse: Bad value for 'user_id' [ 101.581185][ T6445] fuse: Bad value for 'user_id' [ 101.640842][ T6446] 9pnet_fd: p9_fd_create_unix (6446): problem connecting socket: ./file0/../file0/file0: -2 [ 101.708904][ T5872] usb 3-1: USB disconnect, device number 5 [ 101.735293][ T5872] appletouch 3-1:1.0: input: appletouch disconnected [ 101.816541][ T5913] logitech-djreceiver 0003:046D:C517.0002: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.0-1/input0 [ 101.935613][ T29] audit: type=1326 audit(1737880241.950:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6439 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80978cd29 code=0x7fc00000 [ 102.395579][ T6455] FAULT_INJECTION: forcing a failure. [ 102.395579][ T6455] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 102.409056][ T6455] CPU: 1 UID: 0 PID: 6455 Comm: syz.1.131 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 102.409078][ T6455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 102.409088][ T6455] Call Trace: [ 102.409094][ T6455] [ 102.409102][ T6455] dump_stack_lvl+0x241/0x360 [ 102.409136][ T6455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.409166][ T6455] ? __pfx__printk+0x10/0x10 [ 102.409195][ T6455] ? snprintf+0xda/0x120 [ 102.409214][ T6455] should_fail_ex+0x3b0/0x4e0 [ 102.409237][ T6455] _copy_to_user+0x31/0xb0 [ 102.409256][ T6455] simple_read_from_buffer+0xca/0x150 [ 102.409278][ T6455] proc_fail_nth_read+0x1e9/0x250 [ 102.409300][ T6455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.409321][ T6455] ? rw_verify_area+0x243/0x630 [ 102.409343][ T6455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.409363][ T6455] vfs_read+0x1f8/0xb40 [ 102.409393][ T6455] ? __pfx_vfs_read+0x10/0x10 [ 102.409414][ T6455] ? irqentry_exit+0x63/0x90 [ 102.409431][ T6455] ? lockdep_hardirqs_on+0x99/0x150 [ 102.409458][ T6455] ? ksys_read+0xfd/0x2b0 [ 102.409487][ T6455] ksys_read+0x18f/0x2b0 [ 102.409511][ T6455] ? __pfx_ksys_read+0x10/0x10 [ 102.409534][ T6455] ? do_syscall_64+0x100/0x230 [ 102.409557][ T6455] ? do_syscall_64+0xb6/0x230 [ 102.409578][ T6455] do_syscall_64+0xf3/0x230 [ 102.409597][ T6455] ? clear_bhb_loop+0x35/0x90 [ 102.409621][ T6455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.409641][ T6455] RIP: 0033:0x7fd80978b73c [ 102.409656][ T6455] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 102.409669][ T6455] RSP: 002b:00007fd80a5f0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.409686][ T6455] RAX: ffffffffffffffda RBX: 00007fd8099a6160 RCX: 00007fd80978b73c [ 102.409698][ T6455] RDX: 000000000000000f RSI: 00007fd80a5f00a0 RDI: 0000000000000008 [ 102.409708][ T6455] RBP: 00007fd80a5f0090 R08: 0000000000000000 R09: 0000000000000000 [ 102.409718][ T6455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.409727][ T6455] R13: 0000000000000000 R14: 00007fd8099a6160 R15: 00007ffd58075fc8 [ 102.409753][ T6455] [ 102.676615][ T5913] usb 4-1: USB disconnect, device number 4 [ 103.140828][ T8] usb 1-1: USB disconnect, device number 3 [ 103.759634][ T6475] netlink: 'syz.2.137': attribute type 6 has an invalid length. [ 103.777167][ T5870] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 104.561990][ T6477] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 104.812943][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 104.844153][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.855556][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 104.868560][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 104.881754][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 104.929532][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 104.978837][ T5870] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 105.003691][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 105.079802][ T5870] usb 4-1: Product: syz [ 105.101808][ T5870] usb 4-1: Manufacturer: syz [ 105.140355][ T5870] usb 4-1: SerialNumber: syz [ 105.209994][ T5870] usb 4-1: config 0 descriptor?? [ 105.248548][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 105.434228][ T8] usb 5-1: device descriptor read/64, error -71 [ 105.765529][ T5870] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 105.812587][ T5870] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 106.005801][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.171996][ T5870] usb 4-1: USB disconnect, device number 5 [ 106.184126][ T8] usb 5-1: device descriptor read/64, error -71 [ 106.190545][ T6500] netlink: 72 bytes leftover after parsing attributes in process `syz.2.142'. [ 106.321343][ T8] usb usb5-port1: attempt power cycle [ 106.667972][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 106.717501][ T8] usb 5-1: device descriptor read/8, error -71 [ 106.835630][ T6512] fuse: Bad value for 'user_id' [ 106.840521][ T6512] fuse: Bad value for 'user_id' [ 107.019809][ T6515] 9pnet_fd: p9_fd_create_unix (6515): problem connecting socket: ./file0/../file0/file0: -111 [ 107.116109][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 107.429915][ T8] usb 5-1: device descriptor read/8, error -71 [ 107.544461][ T8] usb usb5-port1: unable to enumerate USB device [ 108.164245][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.324754][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 108.384230][ T8] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.772110][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 108.779105][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 108.788538][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.843142][ T6533] netlink: 'syz.4.150': attribute type 6 has an invalid length. [ 108.860471][ T8] usb 1-1: config 0 descriptor?? [ 109.049818][ T6537] FAULT_INJECTION: forcing a failure. [ 109.049818][ T6537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.063426][ T6537] CPU: 0 UID: 0 PID: 6537 Comm: syz.2.152 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 109.063448][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 109.063458][ T6537] Call Trace: [ 109.063464][ T6537] [ 109.063471][ T6537] dump_stack_lvl+0x241/0x360 [ 109.063502][ T6537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.063529][ T6537] ? __pfx__printk+0x10/0x10 [ 109.063554][ T6537] ? __pfx_lock_release+0x10/0x10 [ 109.063581][ T6537] should_fail_ex+0x3b0/0x4e0 [ 109.063603][ T6537] _copy_from_user+0x2d/0xb0 [ 109.063620][ T6537] __sys_bpf+0x1a4/0x810 [ 109.063640][ T6537] ? __pfx___sys_bpf+0x10/0x10 [ 109.063669][ T6537] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 109.063691][ T6537] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 109.063712][ T6537] ? do_syscall_64+0x100/0x230 [ 109.063736][ T6537] __x64_sys_bpf+0x7c/0x90 [ 109.063753][ T6537] do_syscall_64+0xf3/0x230 [ 109.063772][ T6537] ? clear_bhb_loop+0x35/0x90 [ 109.063795][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.063815][ T6537] RIP: 0033:0x7fa0a318cd29 [ 109.063830][ T6537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.063842][ T6537] RSP: 002b:00007fa0a408e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 109.063860][ T6537] RAX: ffffffffffffffda RBX: 00007fa0a33a5fa0 RCX: 00007fa0a318cd29 [ 109.063870][ T6537] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 109.063879][ T6537] RBP: 00007fa0a408e090 R08: 0000000000000000 R09: 0000000000000000 [ 109.063889][ T6537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.063897][ T6537] R13: 0000000000000000 R14: 00007fa0a33a5fa0 R15: 00007ffcb0f4a2a8 [ 109.063919][ T6537] [ 109.363960][ T5870] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 109.438363][ T29] audit: type=1400 audit(1737880249.450:35): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=6540 comm="syz.2.154" dest=20000 [ 109.474512][ T8] logitech-djreceiver 0003:046D:C517.0003: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.0-1/input0 [ 109.515267][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 109.521953][ T5870] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 109.530742][ T5870] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 109.549954][ T5870] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 109.560665][ T5870] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.585260][ T5870] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.798794][ T5870] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.812854][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.360139][ T5870] usb 4-1: GET_CAPABILITIES returned 0 [ 110.387332][ T5870] usbtmc 4-1:16.0: can't read capabilities [ 110.634656][ T5870] usb 4-1: USB disconnect, device number 6 [ 110.730066][ T9] usb 1-1: USB disconnect, device number 4 [ 110.809050][ T6550] vlan2: entered promiscuous mode [ 110.816442][ T6550] vlan2: entered allmulticast mode [ 110.821678][ T6550] hsr_slave_1: entered allmulticast mode [ 110.870285][ T6555] fuse: Bad value for 'user_id' [ 110.875263][ T6555] fuse: Bad value for 'user_id' [ 110.900904][ T6550] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 110.934265][ T6557] 9pnet_fd: p9_fd_create_unix (6557): problem connecting socket: ./file0/../file0/file0: -2 [ 111.204729][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.270217][ T6495] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.663962][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 111.672373][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 111.687476][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 111.698811][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.717099][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 111.730489][ T9] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 111.741112][ T9] usb 1-1: Product: syz [ 111.759340][ T9] usb 1-1: Manufacturer: syz [ 111.765809][ T9] usb 1-1: SerialNumber: syz [ 111.787418][ T6556] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 111.794812][ T6495] usb 3-1: Using ep0 maxpacket: 8 [ 111.802869][ T6495] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 111.819839][ T9] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7 [ 111.829934][ T6495] usb 3-1: config 179 has no interface number 0 [ 111.837105][ T6495] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 111.853597][ T6495] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 111.874390][ T6495] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 111.886780][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 111.896238][ T6495] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 111.910380][ T6495] usb 3-1: config 179 interface 65 has no altsetting 0 [ 111.918287][ T6495] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 111.927678][ T6495] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.939174][ T6559] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 112.029237][ T6495] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input8 [ 112.044109][ T8] usb 4-1: device descriptor read/64, error -71 [ 112.108030][ T6495] usb 1-1: USB disconnect, device number 5 [ 112.143608][ T6495] appletouch 1-1:1.0: input: appletouch disconnected [ 112.154518][ T5181] input input8: unable to receive magic message: -110 [ 112.280062][ T6559] mkiss: ax0: crc mode is auto. [ 112.288159][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 112.295846][ T5181] input input8: unable to receive magic message: -32 [ 112.334484][ T5181] input input8: unable to receive magic message: -32 [ 112.348180][ T5181] input input8: unable to receive magic message: -32 [ 112.362533][ T5181] input input8: unable to receive magic message: -32 [ 112.425542][ T6559] Falling back ldisc for ttyS3. [ 112.434062][ T8] usb 4-1: device descriptor read/64, error -71 [ 112.436996][ T25] usb 3-1: USB disconnect, device number 6 [ 112.440361][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 112.454683][ T25] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 112.564967][ T8] usb usb4-port1: attempt power cycle [ 112.649174][ T6579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.167'. [ 112.670251][ T6579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.167'. [ 112.904056][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 112.924445][ T8] usb 4-1: device descriptor read/8, error -71 [ 113.093985][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.174029][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 113.295510][ T8] usb 4-1: device descriptor read/8, error -71 [ 113.374011][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 113.380954][ T25] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.392006][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.400427][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 113.412099][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.414204][ T6594] fuse: Bad value for 'user_id' [ 113.430761][ T6594] fuse: Bad value for 'user_id' [ 113.431326][ T25] usb 1-1: config 0 descriptor?? [ 113.440801][ T8] usb usb4-port1: unable to enumerate USB device [ 113.522114][ T6596] 9pnet_fd: p9_fd_create_unix (6596): problem connecting socket: ./file0/../file0/file0: -2 [ 113.873324][ T25] logitech-djreceiver 0003:046D:C517.0004: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.0-1/input0 [ 113.970836][ T29] audit: type=1326 audit(1737880253.980:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6589 comm="syz.2.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a318cd29 code=0x7fc00000 [ 114.094503][ T29] audit: type=1326 audit(1737880253.980:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6589 comm="syz.2.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0a318cd29 code=0x7fc00000 [ 114.134280][ T29] audit: type=1326 audit(1737880253.980:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6589 comm="syz.2.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a318cd29 code=0x7fc00000 [ 114.682140][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 115.444145][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 115.650066][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 115.656939][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 115.849199][ T8] usb 1-1: USB disconnect, device number 6 [ 115.888556][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 115.906151][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.927152][ T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 115.958844][ T25] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 116.022679][ T25] usb 5-1: Product: syz [ 116.063738][ T25] usb 5-1: Manufacturer: syz [ 116.129814][ T25] usb 5-1: SerialNumber: syz [ 116.299862][ T6614] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 116.502713][ T25] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input9 [ 116.746857][ T25] usb 5-1: USB disconnect, device number 10 [ 116.950270][ T25] appletouch 5-1:1.0: input: appletouch disconnected [ 118.668235][ T29] audit: type=1326 audit(1737880258.620:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6640 comm="syz.4.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003c58cd29 code=0x7fc00000 [ 118.717385][ T29] audit: type=1326 audit(1737880258.630:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6640 comm="syz.4.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f003c58cd29 code=0x7fc00000 [ 119.143089][ T60] tipc: Subscription rejected, illegal request [ 119.166171][ T6657] FAULT_INJECTION: forcing a failure. [ 119.166171][ T6657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.187428][ T6657] CPU: 0 UID: 0 PID: 6657 Comm: syz.0.189 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 119.187453][ T6657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 119.187463][ T6657] Call Trace: [ 119.187469][ T6657] [ 119.187476][ T6657] dump_stack_lvl+0x241/0x360 [ 119.187554][ T6657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.187601][ T6657] ? __pfx__printk+0x10/0x10 [ 119.187650][ T6657] ? snprintf+0xda/0x120 [ 119.187668][ T6657] should_fail_ex+0x3b0/0x4e0 [ 119.187690][ T6657] _copy_to_user+0x31/0xb0 [ 119.187708][ T6657] simple_read_from_buffer+0xca/0x150 [ 119.187730][ T6657] proc_fail_nth_read+0x1e9/0x250 [ 119.187752][ T6657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.187773][ T6657] ? rw_verify_area+0x243/0x630 [ 119.187795][ T6657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.187814][ T6657] vfs_read+0x1f8/0xb40 [ 119.187836][ T6657] ? fdget_pos+0x254/0x320 [ 119.187856][ T6657] ? __pfx___mutex_lock+0x10/0x10 [ 119.187876][ T6657] ? __pfx_vfs_read+0x10/0x10 [ 119.187901][ T6657] ? __fget_files+0x2a/0x410 [ 119.187921][ T6657] ? __fget_files+0x395/0x410 [ 119.187939][ T6657] ? __fget_files+0x2a/0x410 [ 119.187966][ T6657] ksys_read+0x18f/0x2b0 [ 119.187990][ T6657] ? __pfx_ksys_read+0x10/0x10 [ 119.188013][ T6657] ? do_syscall_64+0x100/0x230 [ 119.188035][ T6657] ? do_syscall_64+0xb6/0x230 [ 119.188056][ T6657] do_syscall_64+0xf3/0x230 [ 119.188074][ T6657] ? clear_bhb_loop+0x35/0x90 [ 119.188098][ T6657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.188118][ T6657] RIP: 0033:0x7fd3f2d8b73c [ 119.188133][ T6657] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 119.188145][ T6657] RSP: 002b:00007fd3f3b18030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.188163][ T6657] RAX: ffffffffffffffda RBX: 00007fd3f2fa5fa0 RCX: 00007fd3f2d8b73c [ 119.188174][ T6657] RDX: 000000000000000f RSI: 00007fd3f3b180a0 RDI: 0000000000000004 [ 119.188184][ T6657] RBP: 00007fd3f3b18090 R08: 0000000000000000 R09: 0000000000000000 [ 119.188194][ T6657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.188203][ T6657] R13: 0000000000000000 R14: 00007fd3f2fa5fa0 R15: 00007ffcf5fdc9d8 [ 119.188229][ T6657] [ 119.404037][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 119.755269][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 119.763256][ T25] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.774338][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.618117][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 120.627498][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.649179][ T25] usb 5-1: config 0 descriptor?? [ 121.357468][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 121.714664][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 121.724993][ T25] usb 5-1: USB disconnect, device number 11 [ 121.784092][ T8] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 121.959547][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.982329][ T8] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 121.992699][ T8] usb 4-1: can't read configurations, error -71 [ 122.714043][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 122.766011][ T29] audit: type=1326 audit(1737880262.780:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f2d8cd29 code=0x7fc00000 [ 122.796791][ T29] audit: type=1326 audit(1737880262.780:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd3f2d8cd29 code=0x7fc00000 [ 122.840733][ T29] audit: type=1326 audit(1737880262.780:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f2d8cd29 code=0x7fc00000 [ 122.930337][ T29] audit: type=1326 audit(1737880262.780:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f2d8cd29 code=0x7fc00000 [ 123.011665][ T29] audit: type=1326 audit(1737880262.780:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f2d8cd29 code=0x7fc00000 [ 123.018698][ T6696] netlink: 2 bytes leftover after parsing attributes in process `syz.3.202'. [ 123.034681][ T29] audit: type=1326 audit(1737880262.780:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f2d8cd29 code=0x7fc00000 [ 123.063687][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 123.069747][ T29] audit: type=1326 audit(1737880262.780:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f2d8cd29 code=0x7fc00000 [ 123.093419][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.114509][ T25] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 123.154159][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.162455][ T29] audit: type=1326 audit(1737880262.780:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f2d8cd29 code=0x7fc00000 [ 123.191021][ T25] usb 5-1: config 0 descriptor?? [ 123.192242][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.203'. [ 123.230870][ T6698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.203'. [ 123.244104][ T5873] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 123.561897][ T25] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 123.580264][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.594455][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 123.604136][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.643517][ C0] vcan0: j1939_session_tx_dat: 0xffff88807e541400: queue data error: -100 [ 123.646207][ T5873] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 123.758663][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.939057][ T5873] usb 1-1: config 0 descriptor?? [ 124.465046][ T5873] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 124.473666][ T5873] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 124.508208][ T5873] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0005/input/input10 [ 124.572545][ T5873] cm6533_jd 0003:0D8C:0022.0005: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 124.679778][ T8] usb 1-1: USB disconnect, device number 7 [ 125.437398][ C1] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 125.449672][ T5873] usb 5-1: USB disconnect, device number 12 [ 125.957631][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 125.957669][ T29] audit: type=1400 audit(1737880265.970:50): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=6715 comm="syz.3.209" daddr=::30:0:0:0:1 dest=20003 [ 125.987850][ T29] audit: type=1400 audit(1737880266.000:51): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=6715 comm="syz.3.209" dest=20000 [ 126.039755][ T29] audit: type=1400 audit(1737880266.020:52): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=6715 comm="syz.3.209" daddr=fc00:: dest=20002 [ 127.524101][ T29] audit: type=1326 audit(1737880267.490:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6719 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8511f8cd29 code=0x7fc00000 [ 133.028932][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.035330][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 165.284563][ T5196] udevd[5196]: worker [6420] /devices/virtual/nfc/nfc2 is taking a long time [ 194.470480][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.482100][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.907398][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.913729][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.674155][ T30] INFO: task kworker/0:3:5871 blocked for more than 143 seconds. [ 261.681927][ T30] Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 261.689425][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 261.698395][ T30] task:kworker/0:3 state:D stack:22712 pid:5871 tgid:5871 ppid:2 flags:0x00004000 [ 261.708679][ T30] Workqueue: events rfkill_sync_work [ 261.714303][ T30] Call Trace: [ 261.717596][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 261.720519][ T30] __schedule+0x181a/0x4b90 [ 261.725092][ T30] ? try_to_wake_up+0x959/0x1470 [ 261.730067][ T30] ? schedule+0x90/0x320 [ 261.734410][ T30] ? __pfx___schedule+0x10/0x10 [ 261.739286][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 261.745611][ T30] ? __pfx_lock_release+0x10/0x10 [ 261.751211][ T30] ? kick_pool+0x45c/0x620 [ 261.773926][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.779164][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 261.800137][ T30] ? schedule+0x90/0x320 [ 261.805393][ T30] schedule+0x14b/0x320 [ 261.809594][ T30] schedule_preempt_disabled+0x13/0x30 [ 261.819041][ T30] __mutex_lock+0x817/0x1010 [ 261.823683][ T30] ? __mutex_lock+0x602/0x1010 [ 261.828576][ T30] ? nfc_rfkill_set_block+0x50/0x310 [ 261.833975][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 261.839787][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 261.845768][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 261.852106][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 261.857222][ T30] nfc_rfkill_set_block+0x50/0x310 [ 261.862350][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 261.868136][ T30] rfkill_set_block+0x1f1/0x440 [ 261.873011][ T30] rfkill_sync_work+0x12a/0x220 [ 261.877996][ T30] ? process_scheduled_works+0x976/0x1840 [ 261.883760][ T30] process_scheduled_works+0xa66/0x1840 [ 261.889389][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 261.895524][ T30] ? assign_work+0x364/0x3d0 [ 261.900151][ T30] worker_thread+0x870/0xd30 [ 261.905205][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 261.911135][ T30] ? __kthread_parkme+0x169/0x1d0 [ 261.916717][ T30] ? __pfx_worker_thread+0x10/0x10 [ 261.921854][ T30] kthread+0x7a9/0x920 [ 261.926059][ T30] ? __pfx_kthread+0x10/0x10 [ 261.930667][ T30] ? __pfx_worker_thread+0x10/0x10 [ 261.935841][ T30] ? __pfx_kthread+0x10/0x10 [ 261.940441][ T30] ? __pfx_kthread+0x10/0x10 [ 261.945115][ T30] ? __pfx_kthread+0x10/0x10 [ 261.949722][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.955018][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 261.960241][ T30] ? __pfx_kthread+0x10/0x10 [ 261.964927][ T30] ret_from_fork+0x4b/0x80 [ 261.969361][ T30] ? __pfx_kthread+0x10/0x10 [ 261.974012][ T30] ret_from_fork_asm+0x1a/0x30 [ 261.978985][ T30] [ 261.982020][ T30] INFO: task kworker/0:4:5872 blocked for more than 143 seconds. [ 261.989867][ T30] Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 261.997250][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 262.005962][ T30] task:kworker/0:4 state:D stack:21112 pid:5872 tgid:5872 ppid:2 flags:0x00004000 [ 262.016216][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 262.022912][ T30] Call Trace: [ 262.026223][ T30] [ 262.029159][ T30] __schedule+0x181a/0x4b90 [ 262.033646][ T30] ? try_to_wake_up+0x959/0x1470 [ 262.038701][ T30] ? schedule+0x90/0x320 [ 262.042955][ T30] ? __pfx___schedule+0x10/0x10 [ 262.047947][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.054009][ T30] ? __pfx_lock_release+0x10/0x10 [ 262.059054][ T30] ? kick_pool+0x45c/0x620 [ 262.063566][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 262.068877][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 262.074247][ T30] ? schedule+0x90/0x320 [ 262.078510][ T30] schedule+0x14b/0x320 [ 262.082689][ T30] schedule_preempt_disabled+0x13/0x30 [ 262.088218][ T30] __mutex_lock+0x817/0x1010 [ 262.092844][ T30] ? __mutex_lock+0x602/0x1010 [ 262.097692][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 262.103991][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 262.109010][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.115110][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.121469][ T30] ? process_scheduled_works+0x976/0x1840 [ 262.127257][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 262.133322][ T30] process_scheduled_works+0xa66/0x1840 [ 262.138978][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 262.145045][ T30] ? assign_work+0x364/0x3d0 [ 262.149628][ T30] worker_thread+0x870/0xd30 [ 262.154320][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 262.160224][ T30] ? __kthread_parkme+0x169/0x1d0 [ 262.165316][ T30] ? __pfx_worker_thread+0x10/0x10 [ 262.170432][ T30] kthread+0x7a9/0x920 [ 262.174552][ T30] ? __pfx_kthread+0x10/0x10 [ 262.179162][ T30] ? __pfx_worker_thread+0x10/0x10 [ 262.184379][ T30] ? __pfx_kthread+0x10/0x10 [ 262.188975][ T30] ? __pfx_kthread+0x10/0x10 [ 262.193551][ T30] ? __pfx_kthread+0x10/0x10 [ 262.198223][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 262.203426][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 262.208704][ T30] ? __pfx_kthread+0x10/0x10 [ 262.213314][ T30] ret_from_fork+0x4b/0x80 [ 262.217859][ T30] ? __pfx_kthread+0x10/0x10 [ 262.222480][ T30] ret_from_fork_asm+0x1a/0x30 [ 262.227387][ T30] [ 262.230432][ T30] INFO: task udevd:6420 blocked for more than 143 seconds. [ 262.237748][ T30] Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 262.245106][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 262.253774][ T30] task:udevd state:D stack:25440 pid:6420 tgid:6420 ppid:5196 flags:0x00004002 [ 262.264013][ T30] Call Trace: [ 262.267472][ T30] [ 262.270412][ T30] __schedule+0x181a/0x4b90 [ 262.275039][ T30] ? __pfx___schedule+0x10/0x10 [ 262.279899][ T30] ? __pfx_lock_release+0x10/0x10 [ 262.284974][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 262.290877][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 262.296826][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 262.303161][ T30] ? schedule+0x90/0x320 [ 262.307815][ T30] schedule+0x14b/0x320 [ 262.311991][ T30] schedule_preempt_disabled+0x13/0x30 [ 262.317549][ T30] __mutex_lock+0x817/0x1010 [ 262.322151][ T30] ? __mutex_lock+0x602/0x1010 [ 262.326982][ T30] ? uevent_show+0x17d/0x340 [ 262.331592][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 262.336722][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 262.341497][ T30] ? uevent_show+0x163/0x340 [ 262.346151][ T30] uevent_show+0x17d/0x340 [ 262.350579][ T30] dev_attr_show+0x55/0xc0 [ 262.355093][ T30] ? __pfx_dev_attr_show+0x10/0x10 [ 262.360230][ T30] sysfs_kf_seq_show+0x331/0x4c0 [ 262.365228][ T30] seq_read_iter+0x43f/0xd70 [ 262.369851][ T30] vfs_read+0x975/0xb40 [ 262.374061][ T30] ? __pfx_vfs_read+0x10/0x10 [ 262.378740][ T30] ksys_read+0x18f/0x2b0 [ 262.382979][ T30] ? __pfx_ksys_read+0x10/0x10 [ 262.387824][ T30] ? do_syscall_64+0x100/0x230 [ 262.392599][ T30] ? do_syscall_64+0xb6/0x230 [ 262.397376][ T30] do_syscall_64+0xf3/0x230 [ 262.401896][ T30] ? clear_bhb_loop+0x35/0x90 [ 262.406630][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.412531][ T30] RIP: 0033:0x7fb935b16b6a [ 262.416968][ T30] RSP: 002b:00007fff0f142348 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 262.425451][ T30] RAX: ffffffffffffffda RBX: 00005584ea9468f0 RCX: 00007fb935b16b6a [ 262.433437][ T30] RDX: 0000000000001000 RSI: 00005584ea91d620 RDI: 0000000000000008 [ 262.441492][ T30] RBP: 00005584ea9468f0 R08: 0000000000000008 R09: 0000000000008000 [ 262.449523][ T30] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 262.457554][ T30] R13: 0000000000003fff R14: 00007fff0f142828 R15: 000000000000000a [ 262.465613][ T30] [ 262.468670][ T30] INFO: task syz.1.134:6458 blocked for more than 144 seconds. [ 262.478283][ T30] Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 262.485834][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 262.494945][ T30] task:syz.1.134 state:D stack:24128 pid:6458 tgid:6458 ppid:5818 flags:0x00004006 [ 262.505382][ T30] Call Trace: [ 262.508681][ T30] [ 262.511624][ T30] __schedule+0x181a/0x4b90 [ 262.516248][ T30] ? __pfx___schedule+0x10/0x10 [ 262.521117][ T30] ? __pfx_lock_release+0x10/0x10 [ 262.526220][ T30] ? schedule+0x90/0x320 [ 262.530471][ T30] schedule+0x14b/0x320 [ 262.534713][ T30] schedule_timeout+0xb0/0x290 [ 262.539492][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 262.544986][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.551002][ T30] ? wait_for_completion+0x2fe/0x620 [ 262.556420][ T30] ? wait_for_completion+0x2fe/0x620 [ 262.561814][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 262.567106][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 262.572324][ T30] ? wait_for_completion+0x2fe/0x620 [ 262.577714][ T30] wait_for_completion+0x355/0x620 [ 262.582846][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 262.588543][ T30] __flush_work+0xa47/0xc60 [ 262.593069][ T30] ? __flush_work+0xe9/0xc60 [ 262.597815][ T30] ? __pfx___flush_work+0x10/0x10 [ 262.602872][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 262.608235][ T30] ? __pfx___cancel_work+0x10/0x10 [ 262.613383][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 262.618458][ T30] ? nfc_genl_device_removed+0x25c/0x380 [ 262.624905][ T30] __cancel_work_sync+0xbc/0x110 [ 262.629883][ T30] rfkill_unregister+0x96/0x230 [ 262.634855][ T30] nfc_unregister_device+0x96/0x2a0 [ 262.640078][ T30] virtual_ncidev_close+0x56/0x90 [ 262.645174][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 262.650904][ T30] __fput+0x3e9/0x9f0 [ 262.655009][ T30] task_work_run+0x24f/0x310 [ 262.659619][ T30] ? _raw_spin_unlock+0x28/0x50 [ 262.664519][ T30] ? __pfx_task_work_run+0x10/0x10 [ 262.669673][ T30] ? syscall_exit_to_user_mode+0xa3/0x340 [ 262.675499][ T30] syscall_exit_to_user_mode+0x13f/0x340 [ 262.681144][ T30] do_syscall_64+0x100/0x230 [ 262.685783][ T30] ? clear_bhb_loop+0x35/0x90 [ 262.690474][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.696409][ T30] RIP: 0033:0x7fd80978cd29 [ 262.700832][ T30] RSP: 002b:00007ffd58076128 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 262.709537][ T30] RAX: 0000000000000000 RBX: 00007fd8099a7ba0 RCX: 00007fd80978cd29 [ 262.717653][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 262.725736][ T30] RBP: 00007fd8099a7ba0 R08: 0000000000000d74 R09: 00007ffd5807641f [ 262.733739][ T30] R10: 00007fd8099a7ac0 R11: 0000000000000246 R12: 0000000000019511 [ 262.741766][ T30] R13: 00007fd8099a6160 R14: 0000000000000032 R15: ffffffffffffffff [ 262.749776][ T30] [ 262.752810][ T30] [ 262.752810][ T30] Showing all locks held in the system: [ 262.760636][ T30] 1 lock held by khungtaskd/30: [ 262.765547][ T30] #0: ffffffff8e93a020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 262.775576][ T30] 2 locks held by kworker/u8:2/35: [ 262.780686][ T30] #0: ffff8880b873e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 262.790669][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 262.802235][ T30] 2 locks held by getty/5577: [ 262.808934][ T30] #0: ffff88803188e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 262.818848][ T30] #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 262.829143][ T30] 4 locks held by kworker/0:3/5871: [ 262.834495][ T30] #0: ffff88801ac80d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 262.845568][ T30] #1: ffffc9000480fc60 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 262.858011][ T30] #2: ffffffff8ff872c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x23/0x220 [ 262.868132][ T30] #3: ffff888026e20100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x310 [ 262.877960][ T30] 3 locks held by kworker/0:4/5872: [ 262.883161][ T30] #0: ffff88801ac80d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 262.894272][ T30] #1: ffffc9000481fc60 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 262.908043][ T30] #2: ffffffff8ff872c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 262.919535][ T30] 4 locks held by udevd/6420: [ 262.924297][ T30] #0: ffff8880342c7c30 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 [ 262.933151][ T30] #1: ffff88805c3b2888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 [ 262.942661][ T30] #2: ffff888024444788 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 262.952139][ T30] #3: ffff888026e20100 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 [ 262.961282][ T30] 1 lock held by syz.1.134/6458: [ 262.966299][ T30] #0: ffff888026e20100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 262.976170][ T30] 2 locks held by syz-executor/6651: [ 262.981462][ T30] #0: ffff8880217af918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6a0 [ 262.991586][ T30] #1: ffffffff8ff872c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 263.001653][ T30] 2 locks held by syz.4.199/6705: [ 263.006739][ T30] #0: ffffffff8f182ee8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 263.016120][ T30] #1: ffffffff8ff872c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x131/0x850 [ 263.026647][ T30] 1 lock held by syz.2.207/6711: [ 263.031611][ T30] #0: ffffffff8f182ee8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 263.040205][ T30] 1 lock held by syz.0.208/6713: [ 263.045278][ T30] #0: ffffffff8f182ee8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 263.053772][ T30] 1 lock held by syz.3.215/6742: [ 263.058743][ T30] #0: ffffffff8f182ee8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 263.067375][ T30] 1 lock held by syz-executor/6744: [ 263.072578][ T30] #0: ffffffff8f182ee8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 263.081095][ T30] 1 lock held by syz-executor/6746: [ 263.086413][ T30] #0: ffffffff8f182ee8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 263.095051][ T30] 1 lock held by syz-executor/6748: [ 263.100251][ T30] #0: ffffffff8f182ee8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 263.108921][ T30] 1 lock held by syz-executor/6750: [ 263.114206][ T30] #0: ffffffff8f182ee8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 263.122746][ T30] 1 lock held by syz-executor/6752: [ 263.128755][ T30] #0: ffffffff8f182ee8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 263.137357][ T30] 1 lock held by syz-executor/6755: [ 263.142567][ T30] #0: ffffffff8f182ee8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 263.151185][ T30] 1 lock held by syz-executor/6757: [ 263.156467][ T30] #0: ffffffff8f182ee8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 263.165066][ T30] 1 lock held by syz-executor/6759: [ 263.170288][ T30] #0: ffffffff8f182ee8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 263.178865][ T30] 1 lock held by syz-executor/6761: [ 263.184146][ T30] #0: ffffffff8f182ee8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 263.192634][ T30] 1 lock held by syz-executor/6767: [ 263.197901][ T30] #0: ffffffff8f182ee8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 263.206421][ T30] 1 lock held by syz-executor/6769: [ 263.211622][ T30] #0: ffffffff8f182ee8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 263.220125][ T30] 1 lock held by syz-executor/6771: [ 263.225394][ T30] #0: ffffffff8f182ee8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 263.233969][ T30] 1 lock held by syz-executor/6773: [ 263.239195][ T30] #0: ffffffff8f182ee8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 263.247819][ T30] [ 263.250165][ T30] ============================================= [ 263.250165][ T30] [ 263.259107][ T30] NMI backtrace for cpu 0 [ 263.259120][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 263.259138][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 263.259162][ T30] Call Trace: [ 263.259167][ T30] [ 263.259173][ T30] dump_stack_lvl+0x241/0x360 [ 263.259200][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.259220][ T30] ? __pfx__printk+0x10/0x10 [ 263.259248][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 263.259269][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 263.259299][ T30] ? _printk+0xd5/0x120 [ 263.259319][ T30] ? __pfx__printk+0x10/0x10 [ 263.259338][ T30] ? __wake_up_klogd+0xcc/0x110 [ 263.259355][ T30] ? __pfx__printk+0x10/0x10 [ 263.259376][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 263.259396][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 263.259414][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 263.259442][ T30] watchdog+0xff6/0x1040 [ 263.259463][ T30] ? watchdog+0x1ea/0x1040 [ 263.259486][ T30] ? __pfx_watchdog+0x10/0x10 [ 263.259505][ T30] kthread+0x7a9/0x920 [ 263.259524][ T30] ? __pfx_kthread+0x10/0x10 [ 263.259544][ T30] ? __pfx_watchdog+0x10/0x10 [ 263.259563][ T30] ? __pfx_kthread+0x10/0x10 [ 263.259579][ T30] ? __pfx_kthread+0x10/0x10 [ 263.259600][ T30] ? __pfx_kthread+0x10/0x10 [ 263.259617][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 263.259633][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 263.259649][ T30] ? __pfx_kthread+0x10/0x10 [ 263.259668][ T30] ret_from_fork+0x4b/0x80 [ 263.259684][ T30] ? __pfx_kthread+0x10/0x10 [ 263.259704][ T30] ret_from_fork_asm+0x1a/0x30 [ 263.259732][ T30] [ 263.259738][ T30] Sending NMI from CPU 0 to CPUs 1: [ 263.428177][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 263.429242][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 263.444206][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 263.454348][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 263.464394][ T30] Call Trace: [ 263.467666][ T30] [ 263.470586][ T30] dump_stack_lvl+0x241/0x360 [ 263.475272][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.480470][ T30] ? __pfx__printk+0x10/0x10 [ 263.485052][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 263.491029][ T30] ? vscnprintf+0x5d/0x90 [ 263.495351][ T30] panic+0x349/0x880 [ 263.499249][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 263.505407][ T30] ? __pfx_panic+0x10/0x10 [ 263.509822][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 263.515188][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 263.521337][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 263.527487][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 263.533641][ T30] watchdog+0x1035/0x1040 [ 263.537984][ T30] ? watchdog+0x1ea/0x1040 [ 263.542409][ T30] ? __pfx_watchdog+0x10/0x10 [ 263.547088][ T30] kthread+0x7a9/0x920 [ 263.551160][ T30] ? __pfx_kthread+0x10/0x10 [ 263.555753][ T30] ? __pfx_watchdog+0x10/0x10 [ 263.560428][ T30] ? __pfx_kthread+0x10/0x10 [ 263.565011][ T30] ? __pfx_kthread+0x10/0x10 [ 263.569599][ T30] ? __pfx_kthread+0x10/0x10 [ 263.574183][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 263.579380][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 263.584573][ T30] ? __pfx_kthread+0x10/0x10 [ 263.589191][ T30] ret_from_fork+0x4b/0x80 [ 263.593601][ T30] ? __pfx_kthread+0x10/0x10 [ 263.598186][ T30] ret_from_fork_asm+0x1a/0x30 [ 263.602953][ T30] [ 263.606232][ T30] Kernel Offset: disabled [ 263.610546][ T30] Rebooting in 86400 seconds..