last executing test programs: 9m14.763994035s ago: executing program 32 (id=203): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x33) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x8, 0x700, 0xd, 0x4, {{0x13, 0x4, 0x0, 0x34, 0x4c, 0x68, 0x0, 0x3, 0x4, 0x0, @multicast2, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x1c, 0x34, 0x3, 0x6, [{@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@empty, 0x8001}]}, @lsrr={0x83, 0x1b, 0x5, [@broadcast, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x13}, @remote, @remote]}, @noop]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0xa6, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xfb, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000005c0), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_cmd={0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000040)={[{@huge_within_size}, {@noswap}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r4, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r4}, 0x38) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x2000, 0x0) r7 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r8 = dup(r7) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x1, 0x6, 0xa, 0x6, 0x4, 0xfffffffffffffff0}]}, &(0x7f0000000100)='syzkaller\x00', 0xffffffff, 0x72, &(0x7f0000000140)=""/114, 0x41000, 0x38, '\x00', r1, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r2, r3, 0x0, &(0x7f0000000640)=[r4, r6, r9], 0x0, 0x10, 0x2, @void, @value}, 0x94) 4m0.035486872s ago: executing program 33 (id=1336): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000c83000000000002e000000080003", @ANYRES32=r1, @ANYBLOB="0a00340002020202020200000800490009ac0f00040008010400cc"], 0x38}}, 0x8d0) 2m20.299734677s ago: executing program 34 (id=1640): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000080)={{r2}, 0x4, 0x8, 0x800}) syz_emit_vhci(0x0, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0xa) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 2m7.543429168s ago: executing program 0 (id=1743): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x8, 0x3a, '@]-$\xb4', 0x3a, ',', 0x3a, './file0', 0x3a, [0x0, 0x43, 0x4f, 0x43]}, 0x31) r1 = socket(0x1e, 0x2, 0x40) setsockopt$inet6_int(r1, 0x29, 0x34, &(0x7f0000000080), 0x4) recvmsg$inet_nvme(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/86, 0x56}], 0x5, &(0x7f00000012c0)=""/12, 0xc}, 0x40010063) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000001340)={0x79, 0x0, 0x1}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001440)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in=@multicast2}}, &(0x7f0000001540)=0xe8) lstat(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001640)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000001740)=0xe8) r5 = getuid() mount$bpf(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000001400), 0x100000, &(0x7f0000001780)={[{@uid={'uid', 0x3d, r2}}, {@gid={'gid', 0x3d, r3}}, {@mode={'mode', 0x3d, 0x2}}, {@uid={'uid', 0x3d, r4}}], [{@obj_user={'obj_user', 0x3d, 'syz2'}}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0xff}}, {@fowner_lt={'fowner<', r5}}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000018c0)=0x100) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000001900)={0x80, @tick=0x5, 0x1, {0xc, 0x6}, 0x0, 0x1, 0x20}) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000001980)={0x2, 0x2, 0x5, {0x5, 0x6, 0x28aa, 0x3ff}}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000019c0)=0x0) sched_setscheduler(r8, 0x5, &(0x7f0000001a00)=0x60e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000001a80), 0x101801, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)={{0x0, 0x2710}, {0x77359400}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000001b40)={'vxcan0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x14, 0x7, 0x1, 0x0, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000001c80)) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001cc0), 0x100, 0x0) ioctl$VT_OPENQRY(r10, 0x5600, &(0x7f0000001d00)) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000001d40)='./file0\x00', 0x802, 0x80) faccessat(r11, &(0x7f0000001d80)='./file0\x00', 0x1aa) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001dc0), 0x42, 0x0) 2m7.192604917s ago: executing program 0 (id=1745): iopl(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a40)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10012, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="480100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="02000200a80006004c0012800b00010062726964676500003c00028005002b00690000000c001e0000000000000000000c001f005c0c0000000000000c002000"], 0x148}}, 0x24008040) 2m6.883215642s ago: executing program 0 (id=1747): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8001) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x30, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001e40)=[{{&(0x7f0000000400)=@can, 0x80, &(0x7f0000001680)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000480)=""/70, 0x46}, {&(0x7f0000000240)}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/249, 0xf9}], 0x5, &(0x7f0000001700)=""/211, 0xd3}, 0x75}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000500)=""/26, 0x1a}], 0x1, &(0x7f0000001840)=""/216, 0xd8}, 0xb4db}, {{&(0x7f0000001940)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001d00)=[{&(0x7f00000019c0)=""/123, 0x7b}, {&(0x7f0000001a40)=""/118, 0x76}, {&(0x7f0000001ac0)=""/255, 0xff}, {&(0x7f0000001bc0)=""/5, 0x5}, {&(0x7f0000001f00)=""/214, 0xd6}], 0x5, &(0x7f0000001d80)=""/134, 0x86}, 0x2}], 0x3, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x340000, &(0x7f0000002140)=ANY=[]) capset(0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x10, 0x101, 0x1, 0xfffc, 0x101d45}}, 0x50) syz_fuse_handle_req(r6, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{0x0}], 0x1) close(r6) r8 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r8, 0x541c, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4800) 2m6.608709325s ago: executing program 0 (id=1751): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x62, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000050000fe8000000000000000000000000000aa3a020201"], 0x0) 2m5.687530772s ago: executing program 0 (id=1752): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@func={0xd, 0x0, 0x0, 0xc, 0x2}, @fwd={0xc}]}, {0x0, [0x0, 0x61, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000280)=""/104, 0x37, 0x68, 0x1, 0x7, 0x10000, @value}, 0x28) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000045090100ef0000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(&(0x7f00000001c0)) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) times(&(0x7f0000000100)) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x1) close(r5) 2m4.10726142s ago: executing program 0 (id=1754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x57}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) r4 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x26c901, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="08000300", @ANYRESDEC=r3, @ANYBLOB="04000a00"], 0x20}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3], 0x8000000, 0x41901}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10}) 2m2.134860934s ago: executing program 6 (id=1759): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20}, {0x6}]}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x60004ce) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) 1m59.408628266s ago: executing program 5 (id=1761): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) r2 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40}) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000002540)) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x8000, &(0x7f0000000240)) 1m53.111971246s ago: executing program 6 (id=1762): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (fail_nth: 1) 1m52.143152664s ago: executing program 6 (id=1765): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{&(0x7f0000001140)={0xa, 0x4e24, 0x0, @private2, 0x4000000}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000011c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000001080)="b5a714a7", 0x4}], 0x1}}], 0x2, 0x0) (async) shutdown(r0, 0x1) (async) getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) 1m51.903312388s ago: executing program 7 (id=1766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x100000003, 0x200400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0xfffffffffffffde1, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000300)={0x11, r5, r4}) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x19) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x86ec}) close_range(r7, r6, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r8, 0xc02864c3, &(0x7f00000002c0)={0x0}) 1m51.758370597s ago: executing program 6 (id=1767): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f870c0000002a9000070900be0083000000000b09007a150b5d8c3dda6cf0b34a33f0e496dbb964077c8a230a9e414442b3869b46659c87379fd1b3a53e073a8f7a4d49a142330b1dd13504c33bd372d76c81284e469bd145e661491e7eb3a2c40dd3f7f68b276ba2cb763c037ff0db305a280a97d7943170b9a5dc1d8a46f5f29d395429d5be32d275bebfe563af31b484baf48854643074cc49bbbb7cbcdcfe951724e4cb44d29ad7c85a0dc231159843145c02177c14b6626ca1eb39deab9d6ab363eb833a43ba821e2a"], 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000180)=""/69, 0x45}], 0x1, 0xfffff77c, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0xe0001, 0x0, [0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x2, 0x7]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e066f30fa7c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1, 0x0, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@remote, @multicast2}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 1m50.84169216s ago: executing program 7 (id=1768): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x800) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'wg1\x00', {0x2, 0xfffe, @empty}}) 1m50.590427113s ago: executing program 7 (id=1769): openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x3c}}, 0x0) io_uring_enter(r0, 0x5113, 0x0, 0x0, 0x0, 0x0) 1m44.407980109s ago: executing program 35 (id=1754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x57}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) r4 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x26c901, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="08000300", @ANYRESDEC=r3, @ANYBLOB="04000a00"], 0x20}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3], 0x8000000, 0x41901}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10}) 1m44.289323467s ago: executing program 5 (id=1773): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1807, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xfe, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x44}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4]}}, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x1a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000640)="ca", 0x1}], 0x1}}], 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="201400002000"], 0x0, 0x0, 0x0, 0x0}) 1m44.284035786s ago: executing program 6 (id=1775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000000000000000140004800800024000000004080001400000200005000300210000000000000000000079841b9d1fd74f5cae8e08a864538b234440c869a10ddb06fbf057cbf8a298e465ca58641e6e7d3bc03947bfe4ca20ac68b85efc7db7d7163cfe6d69a7656fe7d65950a553aa64fc18b31a2be522a5c78a1e60"], 0x30}}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async, rerun: 32) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) (rerun: 32) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) (async) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000003c0), 0x4) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000016c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001680)={&(0x7f0000003c00)={0x100, 0x1, 0x9, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_TUPLE={0xa4, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2b}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x100}, 0x1, 0x0, 0x0, 0x840}, 0x40000) (rerun: 64) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 64) setreuid(0xffffffffffffffff, 0xee00) (async, rerun: 32) setfsuid(0x0) (async, rerun: 32) setresuid(0x0, 0xee00, 0xee00) (async) r4 = getpid() (async) recvmmsg$unix(r3, &(0x7f00000037c0)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000000)=""/51, 0x33}, {&(0x7f0000000240)=""/115, 0x73}], 0x3, &(0x7f0000000300)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f00000003c0), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000440)=""/210, 0xd2}, {&(0x7f0000000a40)=""/103, 0x67}, {&(0x7f00000005c0)=""/86, 0x56}, {&(0x7f0000000640)=""/19, 0x13}, {&(0x7f0000000680)=""/157, 0x9d}], 0x5, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000000a00)=""/56, 0x38}, {&(0x7f0000000900)=""/247, 0xf7}, {&(0x7f0000003a80)=""/172, 0xac}, {&(0x7f0000000ac0)=""/216, 0xd8}, {&(0x7f0000000bc0)=""/197, 0xc5}, {&(0x7f0000000cc0)=""/83, 0x53}, {&(0x7f0000000d40)=""/42, 0x2a}, {&(0x7f0000000d80)=""/228, 0xe4}, {&(0x7f0000000e80)=""/92, 0x5c}], 0x9, &(0x7f0000000fc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001000), 0x6e, &(0x7f0000001400)=[{&(0x7f0000001080)=""/136, 0x88}, {&(0x7f0000001140)=""/46, 0x2e}, {&(0x7f0000001180)=""/74, 0x4a}, {&(0x7f0000001200)=""/127, 0x7f}, {&(0x7f0000001280)=""/153, 0x99}, {&(0x7f0000001340)=""/118, 0x76}, {&(0x7f00000013c0)=""/58, 0x3a}], 0x7}}, {{&(0x7f0000001480)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001500)=""/24, 0x18}, {&(0x7f0000001540)=""/17, 0x11}, {&(0x7f0000001580)=""/133, 0x85}], 0x3, &(0x7f0000000f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001740)=""/169, 0xa9}, {&(0x7f0000001800)=""/155, 0x9b}, {&(0x7f00000018c0)=""/223, 0xdf}, {&(0x7f00000019c0)=""/3, 0x3}, {&(0x7f0000001a00)=""/33, 0x21}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/129, 0x81}, {&(0x7f0000002b00)=""/19, 0x13}, {&(0x7f0000002b40)=""/132, 0x84}, {&(0x7f0000002c00)=""/22, 0x16}], 0xa, &(0x7f0000002d00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000002dc0)=@abs, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000002e40)=""/113, 0x71}], 0x1, &(0x7f0000002f00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002f80)=""/159, 0x9f}, {&(0x7f0000003040)=""/209, 0xd1}, {&(0x7f0000003140)=""/233, 0xe9}, {&(0x7f0000003240)=""/247, 0xf7}, {&(0x7f0000003340)=""/112, 0x70}, {&(0x7f00000033c0)=""/30, 0x1e}, {&(0x7f0000003400)=""/70, 0x46}, {&(0x7f0000003480)=""/160, 0xa0}, {&(0x7f0000003540)=""/229, 0xe5}], 0x9, &(0x7f0000003700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}], 0x8, 0x40000000, &(0x7f00000039c0)) sched_setscheduler(r4, 0x2, &(0x7f0000003a40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = epoll_create1(0x0) epoll_wait(r7, &(0x7f000000affb)=[{}], 0x1, 0x7fff) (async) r8 = syz_open_procfs(0x0, &(0x7f0000002700)='net/ip_mr_cache\x00') pread64(r8, &(0x7f0000003d00)=""/12, 0xc, 0x6) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001700)='./binderfs2/binder1\x00', 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000003a00)=0xd, 0x4) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000040)={0x20000007}) (rerun: 32) 1m44.282471073s ago: executing program 7 (id=1776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bind$bt_l2cap(r4, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5, 0xaf, 0x51, 0x8, 0xfe6, 0x9700, 0x6f22, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x48, 0xe0, 0x35}}]}}]}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x30, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2d2e}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 1m41.447200855s ago: executing program 6 (id=1778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x40400, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) tkill(r3, 0xb) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x144}}, 0x4810) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="410f3266ba2100edc4a1a8594554d867060fc79a0e0000002e994a0fc76b7fe22ef3e735f22667f4", 0x28}], 0x1, 0x30, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a8e000/0x2000)=nil, 0x2000, 0xc) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m40.723939421s ago: executing program 5 (id=1779): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = io_uring_setup(0x63d6, &(0x7f0000000240)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x2, 0x3, @dev={0xfe, 0x80, '\x00', 0x2}, 0x4}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) close(0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0xfff) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x17}, 0x8}}, 0x0, 0x0, 0x39, 0x0, "a09368aa323944f80e6b1458e67f744d556133ef0160b1f004fe99a5ce227ef7cbe11d0277ccc0470e9a03d11ed6c7c3e8c2e4bb356dac2480241ed05bfe1b5f66f2d61b31b71e8371c4dfbe6d259272"}, 0xd8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x3, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x20}}, 0x20000880) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000b80)=[{0x4, 0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r6, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) prctl$PR_SET_THP_DISABLE(0x41, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000003c0)={0x60, 0x0, 0x0, [{0x2, 0x7, 0x7, 0x0, ']]-\'/]!'}, {0x2, 0x6, 0x0, 0x8}, {0x6, 0x6}]}, 0x60) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1m37.523965549s ago: executing program 7 (id=1780): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x10c, 0x16, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local}, {@in=@loopback, 0x0, 0x6c}, @in=@remote}, [@replay_esn_val={0x1c, 0x17, {0x400002e2}}]}, 0x10c}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "d9cb3d1c"}]}}, 0x0}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1781, 0x898, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0xa29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb9, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xee, 0x40, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xb, 0xd, 0x80}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x2, 0x24, 0xac, 0x40, 0x7}, 0x2b, &(0x7f0000000080)=ANY=[@ANYBLOB="050f2b0005071002181405000b100104000001b00710020485050003100b0a1003000a00c00007ca"], 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x459}}, {0x34, &(0x7f0000000100)=@string={0x34, 0x3, "4b050e65410db72f9a2e4cb7be9f46ee0fe35891ae945aaddad7abb0f1ebd315b2eb2dfcb64a0d4e8e3da8ce55e4ee72b2a5"}}, {0x42, &(0x7f0000000140)=@string={0x42, 0x3, "a77ba9917f562369d8f11d79762bb84d84e69f291a0b0cbf2054c1b9b8cce8dddfd5ea9d9d1be93009122536a9c444ccd7229ddf632740d5185b640fc3032e32"}}]}) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000200), &(0x7f0000000240)=0x4) 1m37.345056241s ago: executing program 5 (id=1781): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) unlink(0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r2, @ANYBLOB="000000000420040014002b8008000800", @ANYRES16=r1, @ANYBLOB="080003001900000008001b1000000000"], 0x3c}}, 0x0) 1m35.823779959s ago: executing program 5 (id=1783): openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000280)=0x0) io_submit(r0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = creat(0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, 0x0, 0x24008040) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e06006220"], 0x9) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x9, 0x2, 0x1, 0x2}, 0x9, 0x0, 0x3, 0x7, 0xc, 0x1a, 0x12, 0x7, 0x5, 0x3ff, {0xe, 0x9, 0x2, 0x7, 0x6, 0x7ff}}}}]}, 0x78}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) (async) io_setup(0x202, &(0x7f0000000280)) (async) io_submit(r0, 0x0, 0x0) (async) syz_open_procfs(0x0, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) creat(0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r1, 0x0, 0x24008040) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e06006220"], 0x9) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x9, 0x2, 0x1, 0x2}, 0x9, 0x0, 0x3, 0x7, 0xc, 0x1a, 0x12, 0x7, 0x5, 0x3ff, {0xe, 0x9, 0x2, 0x7, 0x6, 0x7ff}}}}]}, 0x78}}, 0x0) (async) 1m35.253341633s ago: executing program 5 (id=1784): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x0}}, './file0\x00'}) r2 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) getresuid(0x0, &(0x7f00000006c0), &(0x7f0000000580)) mount$nfs4(&(0x7f00000001c0)='!\x9d\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300), 0x2000000, &(0x7f00000005c0)={[], [{@uid_eq={'uid', 0x3d, r1}}, {@subj_type={'subj_type', 0x3d, 'GPL\x00'}}, {@obj_type={'obj_type', 0x3d, 'syz'}}, {@subj_type={'subj_type', 0x3d, '.}#]'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@euid_lt={'euid<', r3}}, {@uid_lt}, {@fowner_lt}]}) write$binfmt_script(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = memfd_create(&(0x7f0000000000)='kfree\x00', 0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) fchown(r5, r7, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0xffffffffffffffd2, 0x10, 0x0, 0x38, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m34.63349523s ago: executing program 1 (id=1785): openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x3c}}, 0x0) io_uring_enter(r0, 0x5113, 0x0, 0x0, 0x0, 0x0) 1m33.799850477s ago: executing program 1 (id=1786): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000540)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@void, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @void, {@can={0xc, {{0x3}, 0x0, 0x2, 0x0, 0x0, "cf4b1686dd170311"}}}}}, 0x1e) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000de1afbede6cf7cff000008000300", @ANYRES32=r2], 0x2c}}, 0x8048000) 1m33.545731938s ago: executing program 7 (id=1787): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) io_uring_setup(0x26c7, &(0x7f0000000100)={0x0, 0x4e06, 0x1, 0xfffffffe, 0x0, 0x0, r2}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044055}, 0x40040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="f1e305704412d86ad761f566d83fcc79229711b65009569896fc0929eb4481400b355846a5e4e944f39665560121c4edf47f67a1b7cfb1bb5bc05f8ad8e019c4ad7310ce63f1f45e25de0788cc6526ad5a751b1548a0382c44924a9cb6b198a9fb5c139abdd4e581079bcd394df718ab3f84b5ca4fbd98415f16661da83648e04bf3e83b31f1fba67d426dca4438a098818a6a3279a2e1356051dda0a689c5ede8a0d6ba9c584db56e5552a4983eed89ad32cfb36d9a8f11cdbe2198663588b088", 0xc1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m26.39600054s ago: executing program 1 (id=1788): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = io_uring_setup(0x63d6, &(0x7f0000000240)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x2, 0x3, @dev={0xfe, 0x80, '\x00', 0x2}, 0x4}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) close(0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0xfff) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x17}, 0x8}}, 0x0, 0x0, 0x39, 0x0, "a09368aa323944f80e6b1458e67f744d556133ef0160b1f004fe99a5ce227ef7cbe11d0277ccc0470e9a03d11ed6c7c3e8c2e4bb356dac2480241ed05bfe1b5f66f2d61b31b71e8371c4dfbe6d259272"}, 0xd8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x3, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x20}}, 0x20000880) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000b80)=[{0x4, 0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r5, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) prctl$PR_SET_THP_DISABLE(0x41, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000003c0)={0x60, 0x0, 0x0, [{0x2, 0x7, 0x7, 0x0, ']]-\'/]!'}, {0x2, 0x6, 0x0, 0x8}, {0x6, 0x6}]}, 0x60) 1m26.286871543s ago: executing program 36 (id=1778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x40400, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) tkill(r3, 0xb) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x144}}, 0x4810) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="410f3266ba2100edc4a1a8594554d867060fc79a0e0000002e994a0fc76b7fe22ef3e735f22667f4", 0x28}], 0x1, 0x30, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a8e000/0x2000)=nil, 0x2000, 0xc) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m21.080640984s ago: executing program 1 (id=1790): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x207, 0x0, 0x0, 0xfcb, 0x7}, 0x20) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0x1}], 0x1}}], 0x1, 0x0) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711215"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x60442, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@directio}, {@cache_loose}, {@nodevmap}, {@cache_mmap}, {@noxattr}]}}) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r1 = getpid() (rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x28) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) creat(0x0, 0x101) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x80000000}) memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9c?\xf2\xe7}\ra\x97F\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 1m20.636574451s ago: executing program 1 (id=1791): ioctl$EVIOCGABS20(0xffffffffffffffff, 0x40044591, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x4c000) r6 = socket(0x1d, 0x2, 0x6) close_range(r6, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x1, 0x1, 0x2e}, @l2cap_cid_signaling={{0x2a}, [@l2cap_conf_rsp={{0x5, 0xff, 0x18}, {0x4, 0xfffe, 0x2, [@l2cap_conf_efs={0x6, 0x10, {0x8, 0x0, 0xfff7, 0xa}}]}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x200}}, @l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0xef97, 0x5}}]}}, 0x33) 1m18.631547478s ago: executing program 37 (id=1784): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x0}}, './file0\x00'}) r2 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) getresuid(0x0, &(0x7f00000006c0), &(0x7f0000000580)) mount$nfs4(&(0x7f00000001c0)='!\x9d\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300), 0x2000000, &(0x7f00000005c0)={[], [{@uid_eq={'uid', 0x3d, r1}}, {@subj_type={'subj_type', 0x3d, 'GPL\x00'}}, {@obj_type={'obj_type', 0x3d, 'syz'}}, {@subj_type={'subj_type', 0x3d, '.}#]'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@euid_lt={'euid<', r3}}, {@uid_lt}, {@fowner_lt}]}) write$binfmt_script(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = memfd_create(&(0x7f0000000000)='kfree\x00', 0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) fchown(r5, r7, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0xffffffffffffffd2, 0x10, 0x0, 0x38, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m18.601198267s ago: executing program 1 (id=1793): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) mount(&(0x7f0000000040)=@md0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ocfs2\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x800) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40, 0x4, 0xc}, 0x18) mkdirat(r1, &(0x7f00000001c0)='./file0\x00', 0x4) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) sendto$packet(r2, &(0x7f0000000280)="d4069093866fada8e6f0a3003b599ec66a794eae31584d03d413f0de9c42baae872b72d199fddf87db4dfd1bbf5a641ba635fb49e76e8d8afb3e1c6daa3271db59b7be8839733963ed8a30d2392735b6d6da286355f076f12021dc886b6e816ab649d77469c6095642c6b8379c49f7cdee402b782a8a6c1a45481a729818f99ec8", 0x81, 0x8000080, &(0x7f0000000340)={0x11, 0x1, 0x0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000380), 0x202000, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f00000003c0)) r5 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x4000) ioctl$SG_SET_COMMAND_Q(r5, 0x2271, &(0x7f0000000440)=0x1) write(r5, &(0x7f0000000480)="885f88d4f6050af9aaacd7a760b42d06c0867fb4ca0eae972ec7416d8c3fc9b5092c19f06f368863f8a0ea6f59465b6fdcef3668f23a34770535c7aff57015ff399c2261140122ffe00998441926c52a7cf73cd15583e796c3abdea23556236f39f1894fcfa2b0c5a537a12256d77d5a762400b07f21890c996204320b39df792b047a96c922810a09c7cf0dc461b0a3da0f6e87cf0e75377af9032beb42d0d6cf7d32339f708d223c266068623320954f35c9c2f69c8fa1531943dc2bb481af601192ccc143b8cf89191639d774b43220ab74", 0xd3) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$caif_stream(0x25, 0x1, 0x9) listen(r7, 0x3d7f48a4) sendmsg$nl_route_sched(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@getqdisc={0x44, 0x26, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0x5}, {0xc, 0x1}, {0xfff2, 0xe}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4085}, 0x4) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x200000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r8) ioctl$SIOCGETNODEID(r8, 0x89e1, &(0x7f00000007c0)={0x4}) r9 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r9, &(0x7f0000000800)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010101}}, 0x24) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000840)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6e, "25c7f998adbdfa"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r10, 0xc0709411, &(0x7f0000001840)={{r11, 0x9, 0x4, 0xd41, 0x7ff, 0x4, 0x1, 0x7, 0xffffffd3, 0x0, 0x4, 0x1, 0x7fffffff, 0xfffffffffffffffb, 0x7f}, 0x10, [0x0, 0x0]}) ioperm(0xffffffffffffffff, 0x200, 0x4) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00000018c0)=0x0) sched_setscheduler(r12, 0x5, &(0x7f0000001900)=0xc) 1m9.528482286s ago: executing program 38 (id=1787): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) io_uring_setup(0x26c7, &(0x7f0000000100)={0x0, 0x4e06, 0x1, 0xfffffffe, 0x0, 0x0, r2}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044055}, 0x40040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="f1e305704412d86ad761f566d83fcc79229711b65009569896fc0929eb4481400b355846a5e4e944f39665560121c4edf47f67a1b7cfb1bb5bc05f8ad8e019c4ad7310ce63f1f45e25de0788cc6526ad5a751b1548a0382c44924a9cb6b198a9fb5c139abdd4e581079bcd394df718ab3f84b5ca4fbd98415f16661da83648e04bf3e83b31f1fba67d426dca4438a098818a6a3279a2e1356051dda0a689c5ede8a0d6ba9c584db56e5552a4983eed89ad32cfb36d9a8f11cdbe2198663588b088", 0xc1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m2.506181435s ago: executing program 39 (id=1793): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) mount(&(0x7f0000000040)=@md0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ocfs2\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x800) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40, 0x4, 0xc}, 0x18) mkdirat(r1, &(0x7f00000001c0)='./file0\x00', 0x4) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) sendto$packet(r2, &(0x7f0000000280)="d4069093866fada8e6f0a3003b599ec66a794eae31584d03d413f0de9c42baae872b72d199fddf87db4dfd1bbf5a641ba635fb49e76e8d8afb3e1c6daa3271db59b7be8839733963ed8a30d2392735b6d6da286355f076f12021dc886b6e816ab649d77469c6095642c6b8379c49f7cdee402b782a8a6c1a45481a729818f99ec8", 0x81, 0x8000080, &(0x7f0000000340)={0x11, 0x1, 0x0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000380), 0x202000, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f00000003c0)) r5 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x4000) ioctl$SG_SET_COMMAND_Q(r5, 0x2271, &(0x7f0000000440)=0x1) write(r5, &(0x7f0000000480)="885f88d4f6050af9aaacd7a760b42d06c0867fb4ca0eae972ec7416d8c3fc9b5092c19f06f368863f8a0ea6f59465b6fdcef3668f23a34770535c7aff57015ff399c2261140122ffe00998441926c52a7cf73cd15583e796c3abdea23556236f39f1894fcfa2b0c5a537a12256d77d5a762400b07f21890c996204320b39df792b047a96c922810a09c7cf0dc461b0a3da0f6e87cf0e75377af9032beb42d0d6cf7d32339f708d223c266068623320954f35c9c2f69c8fa1531943dc2bb481af601192ccc143b8cf89191639d774b43220ab74", 0xd3) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$caif_stream(0x25, 0x1, 0x9) listen(r7, 0x3d7f48a4) sendmsg$nl_route_sched(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@getqdisc={0x44, 0x26, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0x5}, {0xc, 0x1}, {0xfff2, 0xe}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4085}, 0x4) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x200000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r8) ioctl$SIOCGETNODEID(r8, 0x89e1, &(0x7f00000007c0)={0x4}) r9 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r9, &(0x7f0000000800)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010101}}, 0x24) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000840)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6e, "25c7f998adbdfa"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r10, 0xc0709411, &(0x7f0000001840)={{r11, 0x9, 0x4, 0xd41, 0x7ff, 0x4, 0x1, 0x7, 0xffffffd3, 0x0, 0x4, 0x1, 0x7fffffff, 0xfffffffffffffffb, 0x7f}, 0x10, [0x0, 0x0]}) ioperm(0xffffffffffffffff, 0x200, 0x4) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00000018c0)=0x0) sched_setscheduler(r12, 0x5, &(0x7f0000001900)=0xc) 19.237957627s ago: executing program 3 (id=1864): r0 = socket$pppoe(0x18, 0x1, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/current\x00') r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x2}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040001000000fcdbca020000000008000100", @ANYRES32=0x0, @ANYBLOB="06001400287d0000"], 0x24}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r5 = syz_io_uring_setup(0x4076, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2}) io_uring_enter(r5, 0x567, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0xc7ce) 18.676487068s ago: executing program 3 (id=1866): r0 = socket$packet(0x11, 0x2, 0x300) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000020"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close_range(r0, r1, 0x2) 14.948420229s ago: executing program 9 (id=1877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bind$bt_l2cap(r2, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5, 0xaf, 0x51, 0x8, 0xfe6, 0x9700, 0x6f22, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x48, 0xe0, 0x35}}]}}]}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x30, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2d2e}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 12.40895805s ago: executing program 3 (id=1878): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001240)='net/wireless\x00') preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0xf2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="88000000200004002bbd7000fddbdf0000000006080000080000010014000100058100000000000000000000000000bb08000a00000001001400020000000000000000000000000000000000140000000014000100ff01000005000000d54300000000000114000100fe8000000000000000000000000000bb"], 0x88}, 0x1, 0x0, 0x0, 0x20000051}, 0x200448c4) 11.014294482s ago: executing program 9 (id=1889): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x55) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') getdents64(r0, &(0x7f0000000080)=""/46, 0x2e) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x0, 0x0) getdents64(r0, 0xffffffffffffffff, 0x43) r2 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) 9.39162836s ago: executing program 9 (id=1896): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="05003400d2000000080026006c090000080027000300ff"], 0x34}}, 0x0) 9.234258219s ago: executing program 9 (id=1897): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0xd, "625e81abf2f5246c2f97ff767a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000000)={0xfc, {"a2e3ad0e090d07f91b5e1a1887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f32356c030890e0879b0a4cc6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ff056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde7d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffffe20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b7794035f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x34c) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="200119"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bpf$TOKEN_CREATE(0x24, &(0x7f00000011c0), 0x8) r4 = socket$packet(0x11, 0xa, 0x300) getsockname$packet(r4, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x7, 0x1ffffffffffffe4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) syz_usb_control_io(r0, 0x0, &(0x7f00000013c0)={0x84, &(0x7f0000000580)={0x20, 0x17, 0x5, "7e6d74029d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.884401726s ago: executing program 3 (id=1899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bind$bt_l2cap(r2, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5, 0xaf, 0x51, 0x8, 0xfe6, 0x9700, 0x6f22, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x48, 0xe0, 0x35}}]}}]}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x30, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2d2e}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 8.708822634s ago: executing program 2 (id=1900): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000dc0), 0x0) syz_clone(0x4005400, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) r0 = socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x9, [], 0x4, [0x1]}}}}]}, 0x88}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r3, 0x4) (async) listen(r3, 0x4) mknod(&(0x7f0000000080)='./file0\x00', 0x0, 0x6) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x0, 0x6) ioprio_set$uid(0x3, 0x0, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(r4, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendfile(r5, 0xffffffffffffffff, 0x0, 0x9) accept(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x1, &(0x7f0000000040)) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x1, &(0x7f0000000040)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000300)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r6, &(0x7f0000000300)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r7 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) fcntl$addseals(r7, 0x409, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd4, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd4, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 7.15271461s ago: executing program 2 (id=1902): syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x181000, 0x12) r4 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pread64(r4, &(0x7f0000000300)=""/115, 0x73, 0x7) 6.39306875s ago: executing program 8 (id=1905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f0000001400078008000200010000000800010001000000"], 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES16=r3, @ANYRES32=r3], 0x0) 6.152601811s ago: executing program 2 (id=1906): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001640)=@newchain={0x24, 0x64, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0x0, 0xfff1}, {0x4, 0x6}}}, 0x24}}, 0x40000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003d40), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000003d80)=ANY=[@ANYBLOB="4d00000006000000000000000000000000000000000000002c000000000000002f7379732f6b65726e656c2f64656275672f626c7565746f6f74682f367c6f7770616e5f636f6e74726f6c0000"], 0x4d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x244, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {}, {0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x214, 0x2, [@TCA_ROUTE4_ACT={0x200, 0x6, [@m_csum={0x1fc, 0x12, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x4, 0x8, 0x5, 0x8}, 0x51}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x20000000, 0x2c, 0x7}, 0x62}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9b8, 0x40, 0x1, 0x10001, 0x100}, 0x29}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x10000000, 0xf58, 0x9}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x20000000, 0xfff, 0xfffffffb}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x6, 0x7, 0x6, 0x1}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7, 0xffffffffffffffff, 0x2a, 0x2}, 0x15}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x0, 0x8, 0x5ae7}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x8, 0xff, 0x4d9d}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1c000000, 0x1ff, 0x2, 0x0, 0x3}, 0x52}}]}, {0xb5, 0x6, "b9555bd9de67cc5718ee0ef36e0fbc9b310e8b8830dcb08998488989037082d21455aff778b1cd211def278969f54a6543050432b360cb9e7e5368579ec46e9fd30c65512637c07dbc7ef6a47c69cee987299964f560a4fa4c3c66adbd36c0a9f6bb6fcb3104e6f7040915311a033873bc2288dab3ce18da754c341ff6d882d2c305432e6712271c7c7feea81508a9e83f21e33b2730603467399860ef4374e9fee3a5c4e5f941b8a56679b2c7a9d3bcd8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r1}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x2}}]}}]}, 0x244}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r4, 0x89a3, &(0x7f0000000200)='bridge0\x00') sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.176386355s ago: executing program 3 (id=1907): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2800) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d02"], 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/80, 0x50}, {&(0x7f00000003c0)=""/140, 0x8c}], 0x2}, 0x40002001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder1\x00', 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000300)=[@acquire_done], 0x0, 0x0, 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, 0x3e9, 0x100, 0x70bd25, 0x25dfdbfc, {0x72, 0x1, 0x1, r1, 0x7, 0x4, 0x3, 0x7, 0x0, 0x100, 0x4fdc}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040880}, 0x8800) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r8, 0xc01864b0, &(0x7f00000015c0)={0x0, 0x0, 0xb, 0x8b22}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0xfff8}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10, 0x80000) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) readlink(&(0x7f0000000280)='./file1\x00', 0x0, 0x1b) 4.781494616s ago: executing program 2 (id=1910): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000006c0)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x6401013f}, @rand_addr=' \x01\x00', @private1, 0xfffffffc, 0x7ff, 0x4, 0x500, 0x80, 0x7000080}) 4.547535917s ago: executing program 2 (id=1911): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x7fffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2e9c8f856eb8cee6}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x4}}, 0xe8) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x8ec0}], 0x1}, 0x0) (async, rerun: 64) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) (rerun: 64) 4.109029379s ago: executing program 9 (id=1912): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x92c}, 0x1c) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_012={0x1, 0x1, 0x8, 'T'}, @local=@item_012={0x2, 0x2, 0x2, "0004"}, @local=@item_4={0x3, 0x2, 0x3, "be2db99c"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0xb, "a1930b0c"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r1, 0x20eec000) 3.964800198s ago: executing program 8 (id=1913): openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x3c}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x5113, 0x0, 0x0, 0x0, 0x0) 3.923671976s ago: executing program 8 (id=1914): r0 = syz_create_resource$binfmt(&(0x7f0000000380)='./file1\x00') r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)=@multiplanar_fd={0x10, 0x3, 0x4, 0x70000, 0x4, {0x0, 0x2710}, {0x2, 0xc, 0x9, 0x7, 0x3, 0x3, "6a70c56c"}, 0x1e, 0x4, {0x0}, 0x4}) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7}, @mdlm_detail={0x4}, @mdlm_detail={0x4}]}}}]}}]}}, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score_adj\x00') preadv(r2, &(0x7f00000008c0)=[{&(0x7f0000000940)=""/170, 0xaa}, {0x0}], 0x2, 0x100000c, 0xea) (async) mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x1000, &(0x7f0000000200)={0x100004, 0x100000, 0x20000, {r2}}, 0x20) (async) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r3, &(0x7f0000000180)="01", 0x1) (async) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x6, 0x300) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x0) (async) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (async) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) (async) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) (async) prctl$PR_SET_PTRACER(0x59616d61, 0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr\x00') fchdir(r5) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) execve(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)={[&(0x7f0000000080)='\\dev/net/tun\x7f']}, 0x0) 3.837228308s ago: executing program 8 (id=1915): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@deltaction={0x14c, 0x31, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x3fff, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x720}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3c0f}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2bdd}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff95e}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x14c}}, 0x8000000) r0 = socket(0x10, 0x803, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000690000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x4b52, &(0x7f0000000040)) r6 = socket$netlink(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000c00)=@name={0x1e, 0x2, 0x2, {{0x1}, 0x2}}, 0x10, &(0x7f0000000340)}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r7) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) socket$inet6(0x10, 0x6, 0x0) sendto(r0, &(0x7f00000001c0)="120000001200e701217b00967076f9b16bfa4f22000000005800a1", 0x1b, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x1, 0x0, &(0x7f0000000100)={0x77359400}) 3.54468128s ago: executing program 2 (id=1917): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bind$bt_l2cap(r2, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5, 0xaf, 0x51, 0x8, 0xfe6, 0x9700, 0x6f22, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x48, 0xe0, 0x35}}]}}]}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x30, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2d2e}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 2.675870461s ago: executing program 8 (id=1918): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x200b) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004001400000000c910"], 0x0) r1 = inotify_init() ioctl$int_in(r1, 0x5452, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000a6ff0540cda9eecdb9050000000109022b0001000000000904000002010351000905031300000000000725010800000009050f"], 0x0) 690.796865ms ago: executing program 3 (id=1919): syz_usb_disconnect(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000003600)=""/120) 648.829685ms ago: executing program 4 (id=1920): socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x10, 0x803, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000080)) 565.847892ms ago: executing program 4 (id=1921): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000006c0)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x640101fd}, @rand_addr=' \x01\x00', @private1, 0xfffffffc, 0x7ff, 0x4, 0x500, 0x80, 0x7000080}) 507.527644ms ago: executing program 4 (id=1922): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) r3 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) unshare(0x22020400) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c0001800800010003000100100001800c0004800800020000000000100001"], 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0xc}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmmsg$alg(r1, &(0x7f00000057c0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="32b972", 0x3}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x20000000) r8 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r8, 0x47ba, 0x0, 0x0, 0x0, 0x0) 232.778144ms ago: executing program 4 (id=1923): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000000)) syz_open_dev$media(&(0x7f0000000480), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000000800010001080000"], 0x20}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xf67c, 0x8}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0xa}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 169.000679ms ago: executing program 4 (id=1924): r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x3c}}, 0x0) io_uring_enter(r0, 0x5113, 0x0, 0x0, 0x0, 0x0) 57.777732ms ago: executing program 8 (id=1925): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0115c8cd040001800500"/26], 0x20}, 0x1, 0x0, 0x0, 0x2000cc04}, 0x8) (async) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010000840f21074d46fa91df8600", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb"], 0x3c}, 0x1, 0x2}, 0x0) (async, rerun: 64) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000002c0)={@loopback, 0x0, r5}) (async, rerun: 64) r6 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) timerfd_create(0x9, 0x0) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') pread64(r7, &(0x7f0000000140)=""/216, 0xd8, 0x0) (async, rerun: 32) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b408000000000000731123000000000085100000020000007158e217000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x688080, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r12, @ANYBLOB="0200180003005a801800018014000500c73100410700008084ea197456a7c80c0000000000000000"], 0x44}}, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) fchdir(r9) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) syz_open_procfs(r8, &(0x7f0000000240)='fd/4\x00') (async, rerun: 64) process_vm_readv(r6, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/210, 0xd2}], 0x1, &(0x7f0000000200)=[{&(0x7f0000000480)=""/159, 0x9f}], 0x1, 0x0) (rerun: 64) 42.362718ms ago: executing program 9 (id=1926): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x11500}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x3938700}}) io_uring_enter(r0, 0x6b4d, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x3, 0x7, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000887000/0x10000)=nil, &(0x7f0000e64000/0x1000)=nil, &(0x7f0000000140)="bf7f88297a7312529af6df7d23c2e5298f80df094575f94bbbe29b1f05891547be92f092f5a93b5e3462fa595513faaf37ae5953e8c77f82e686fdaa78f20e054e137611d5788c7d7aa193c2ba408d5deec98585a06ad52813273d6b3491fa5207eb0af87e205883ddd31606eec434a82028f742357335bfc7893bfdee7b394a3fbeb593ff2827ad1499c9436d9d93a57e28948c90487dccb75f6a8130c9ba1c3655492362c693ee4d7568f9dd4f0f6b96c60975a7efcee1c5f5f514ecc78239", 0xc0, r3}, 0x68) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000780)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x48}}, 0x0) 0s ago: executing program 4 (id=1927): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000ff7f010300000000000000000a000000300001802c0001aa0fce8014399500fc010000000000000000000000ebff0014000400ff01a600"/68], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff4, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xf7}}]}, 0x2c}}, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000080)={0x3, @raw_data="49cd4db81a5c260700000000000000ecc20604812ca95e9fa50210e08bf08fe0a30044124efea76d04ec5eafd0360c90ac8472d70c7bcb7be7a92477c3f83bf4088c70d79f8eb68b0a244cb6118213e07124b501e6c3d6b51e73f51c9d3e8cff07c8898a5c29a64c32ab248172603592153717e4d798f3ee5d7ab907a440cfae1425a654877156901ee4f7bb15775e301709db0aa23ee93b1cc5f466829bd14f50fb385449ca56a9063bcf1b0f006d3000"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002a80)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xc, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x44050) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bdf2fb440013030e", 0x21}], 0x1}, 0x4040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @remote}, {0x0, @multicast}, 0x0, {0x2, 0x4e23, @loopback}, 'wg1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000072d20000040000000300000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000fcff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000072d20000040000000300000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000fcff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) kernel console output (not intermixed with test programs): dom: crng reseeded on system resumption [ 576.151672][T11881] bridge0: entered allmulticast mode [ 576.174947][T11881] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 576.197200][ T3660] usb 1-1: USB disconnect, device number 69 [ 576.407267][ T46] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 576.421504][ T46] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 576.438215][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1558'. [ 576.447268][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 576.471175][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 576.482633][ T46] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 576.503613][ T46] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 576.512998][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.536693][ T46] usb 7-1: config 0 descriptor?? [ 576.551501][T11887] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 576.787105][T11908] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1559'. [ 576.807767][ T5892] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 577.032379][ T5892] usb 2-1: config 1 interface 0 has no altsetting 0 [ 577.138538][ T5892] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 577.433937][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.442274][ T5892] usb 2-1: Product: syz [ 577.498138][ T5892] usb 2-1: Manufacturer: syz [ 577.502840][ T5892] usb 2-1: SerialNumber: syz [ 577.555841][ T46] plantronics 0003:047F:FFFF.001A: unknown main item tag 0xd [ 577.565774][ T46] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 577.583626][ T46] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 577.786884][T11897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.822861][T11897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.856211][ T5915] usb 7-1: USB disconnect, device number 12 [ 578.013881][ T46] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 578.160452][T11897] 9pnet_fd: Insufficient options for proto=fd [ 578.184590][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 578.190434][ T5892] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 68 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 578.200208][ T46] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 578.220274][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.233389][ T46] usb 1-1: Product: syz [ 578.241882][ T46] usb 1-1: Manufacturer: syz [ 578.252255][ T46] usb 1-1: SerialNumber: syz [ 578.271408][ T5892] usb 2-1: USB disconnect, device number 68 [ 578.289599][ T5892] usblp0: removed [ 578.336990][ T46] r8152-cfgselector 1-1: Unknown version 0x0000 [ 578.358622][ T46] r8152-cfgselector 1-1: config 0 descriptor?? [ 578.593459][ T46] r8152-cfgselector 1-1: Needed 2 retries to read version [ 578.807495][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 579.042757][T11938] overlayfs: failed to resolve './file1/file0': -2 [ 579.439911][T11951] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1570'. [ 579.462339][T11951] ntfs3(nullb0): Primary boot signature is not NTFS. [ 579.469766][T11951] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 580.299606][T11958] kvm: kvm [11957]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x20000100 [ 580.673404][ T29] audit: type=1326 audit(1732521195.160:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11915 comm="syz.0.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5797e819 code=0x7fc00000 [ 580.830908][ T5915] r8152-cfgselector 1-1: USB disconnect, device number 70 [ 580.900730][T11970] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1577'. [ 580.985160][T11973] netlink: 'syz.0.1578': attribute type 1 has an invalid length. [ 581.068598][T11975] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1578'. [ 581.146774][T11973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 581.926187][T11981] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 581.946060][T11981] bond1: (slave batadv1): making interface the new active one [ 581.961953][T11981] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 581.980225][T11983] lo: entered promiscuous mode [ 581.989575][T11983] netlink: 'syz.1.1580': attribute type 2 has an invalid length. [ 581.998008][T11983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 582.072830][T11973] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 582.150097][T11973] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 582.739039][T12000] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1585'. [ 583.444253][T12028] batadv_slave_1: entered promiscuous mode [ 583.476673][T12029] batadv_slave_1: left promiscuous mode [ 584.462374][ T3660] IPVS: starting estimator thread 0... [ 584.560113][T12050] input: syz0 as /devices/virtual/input/input51 [ 584.595083][T12047] IPVS: using max 24 ests per chain, 57600 per kthread [ 584.974070][ T3660] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 585.054452][T12065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.095030][T12065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.284316][ T46] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 585.453951][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 585.471385][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.504880][ T46] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 585.522236][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.542824][ T46] usb 1-1: Product: syz [ 585.566657][ T46] usb 1-1: Manufacturer: syz [ 585.582961][ T46] usb 1-1: SerialNumber: syz [ 585.612866][ T46] usb 1-1: config 0 descriptor?? [ 585.618189][ T3660] usb 6-1: device descriptor read/64, error -71 [ 585.646625][ T46] pvrusb2: Hardware description: Terratec Grabster AV400 [ 585.662717][ T46] pvrusb2: ********** [ 585.683084][ T46] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 585.697474][ T46] pvrusb2: Important functionality might not be entirely working. [ 585.711223][ T46] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 585.725333][ T46] pvrusb2: ********** [ 585.846761][ T46] usb 1-1: USB disconnect, device number 72 [ 585.849875][ T2336] pvrusb2: Invalid write control endpoint [ 585.867972][ T3660] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 585.957090][ T2336] pvrusb2: Invalid write control endpoint [ 585.965200][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 585.977850][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 585.986317][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 586.009337][ T2336] pvrusb2: Device being rendered inoperable [ 586.020743][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 586.029990][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 586.057443][ T2336] pvrusb2: Attached sub-driver cx25840 [ 586.063568][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 586.080806][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 586.091475][ T3660] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.139009][ T3660] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.192078][ T3660] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 586.239970][ T3660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.281641][ T3660] usb 6-1: config 0 descriptor?? [ 586.721279][ T3660] elo 0003:04E7:0030.001B: unknown main item tag 0xd [ 586.771953][ T3660] elo 0003:04E7:0030.001B: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.5-1/input0 [ 586.923131][T12068] netlink: 'syz.5.1602': attribute type 10 has an invalid length. [ 587.543588][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1605'. [ 587.595538][T12068] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 587.674018][T12077] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 587.743218][ T3660] usb 6-1: USB disconnect, device number 61 [ 588.144190][ T46] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 588.706025][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.750906][ T46] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 588.814670][T12097] trusted_key: syz.1.1610 sent an empty control message without MSG_MORE. [ 588.954016][ T46] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 588.989813][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 588.999101][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.007463][ T46] usb 1-1: Product: syz [ 589.011909][ T46] usb 1-1: Manufacturer: syz [ 589.017449][ T46] usb 1-1: SerialNumber: syz [ 589.094262][ T970] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 589.223989][ T3660] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 589.282071][ T970] usb 7-1: Using ep0 maxpacket: 8 [ 589.290787][ T970] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 589.300288][ T970] usb 7-1: config 0 has no interface number 0 [ 589.311695][ T970] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 589.340180][ T970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.360119][ T970] usb 7-1: Product: syz [ 589.370051][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1616'. [ 589.386814][ T3660] usb 6-1: unable to get BOS descriptor or descriptor too short [ 589.387409][ T970] usb 7-1: Manufacturer: syz [ 589.412060][ T3660] usb 6-1: config 1 has an invalid interface number: 222 but max is 0 [ 589.418962][ T970] usb 7-1: SerialNumber: syz [ 589.431996][ T970] usb 7-1: config 0 descriptor?? [ 589.444457][ T970] radio-usb-si4713 7-1:0.128: Si4713 development board discovered: (10C4:8244) [ 589.451681][ T3660] usb 6-1: config 1 has no interface number 0 [ 589.473673][ T3660] usb 6-1: config 1 interface 222 has no altsetting 0 [ 589.500874][ T3660] usb 6-1: string descriptor 0 read error: -22 [ 589.508237][ T3660] usb 6-1: New USB device found, idVendor=19d2, idProduct=1057, bcdDevice= 9.6c [ 589.517880][ T3660] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.586670][ T3660] option 6-1:1.222: GSM modem (1-port) converter detected [ 589.694202][ T5959] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 589.801621][T12103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.816656][T12103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.853970][ T5959] usb 2-1: Using ep0 maxpacket: 16 [ 589.861596][ T5892] usb 6-1: USB disconnect, device number 62 [ 589.869821][ T5892] option 6-1:1.222: device disconnected [ 589.901388][ T5959] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.929454][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 589.963015][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 589.987293][ T5959] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 589.997668][ T5959] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.021113][ T5959] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 590.030728][ T5959] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 590.039613][ T5959] usb 2-1: Manufacturer: syz [ 590.055267][T12098] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1611'. [ 590.056561][ T5959] usb 2-1: config 0 descriptor?? [ 590.074073][T12084] netlink: 'syz.0.1607': attribute type 4 has an invalid length. [ 590.081658][T12098] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1611'. [ 590.114844][ T970] radio-usb-si4713 7-1:0.128: probe with driver radio-usb-si4713 failed with error -71 [ 590.131489][ T970] usbhid 7-1:0.128: couldn't find an input interrupt endpoint [ 590.195656][ T970] usb 7-1: USB disconnect, device number 13 [ 590.454044][ T5959] rc_core: IR keymap rc-hauppauge not found [ 590.492442][ T5959] Registered IR keymap rc-empty [ 590.522130][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 590.568693][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 590.595341][ T5959] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 590.642370][ T5959] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input52 [ 590.707521][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 590.988029][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 591.072494][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 591.126000][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 591.175087][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 591.224126][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 591.286959][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 591.314273][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 591.354030][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 591.407701][ T46] cdc_ncm 1-1:1.0: bind() failure [ 591.416230][ T5959] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 591.476308][ T46] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 591.495565][ T5959] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 591.505346][ T5959] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 591.525318][ T46] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 591.543648][ T5959] usb 2-1: USB disconnect, device number 69 [ 591.549899][ T46] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 591.764463][ T46] usb 1-1: USB disconnect, device number 73 [ 591.961325][T12136] trusted_key: encrypted_key: keylen parameter is missing [ 592.184183][ T46] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 592.261830][T12138] afs: Unknown parameter 'dyn ' [ 592.335584][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 592.348490][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 592.358403][ T46] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 592.544115][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 592.589246][ T46] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 592.602294][ T46] usb 1-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=8f.af [ 592.612119][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.630515][ T46] usb 1-1: Product: syz [ 592.639890][ T46] usb 1-1: Manufacturer: syz [ 592.657134][ T46] usb 1-1: SerialNumber: syz [ 592.666548][ T46] usb 1-1: config 0 descriptor?? [ 592.679185][ T46] iuu_phoenix 1-1:0.0: iuu_phoenix converter detected [ 592.702383][ T46] usb 1-1: iuu_phoenix converter now attached to ttyUSB0 [ 593.019444][ T5892] usb 1-1: USB disconnect, device number 74 [ 593.040967][ T5892] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 593.097251][ T5892] iuu_phoenix 1-1:0.0: device disconnected [ 594.130331][T12161] netlink: 'syz.3.1630': attribute type 5 has an invalid length. [ 595.684029][ T5892] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 595.854039][ T8] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 595.887798][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.913978][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.924208][ T5892] usb 2-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 595.933407][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.946687][ T5892] usb 2-1: config 0 descriptor?? [ 595.973927][T12193] nbd3: detected capacity change from 0 to 20 [ 596.014436][T12195] block nbd3: Send control failed (result -89) [ 596.034237][T12195] block nbd3: Request send failed, requeueing [ 596.054105][ T8] usb 1-1: device descriptor read/64, error -71 [ 596.061259][ T5843] block nbd3: Receive control failed (result -32) [ 596.066698][T11429] block nbd3: Dead connection, failed to find a fallback [ 596.076000][T11429] block nbd3: shutting down sockets [ 596.082508][T11429] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 596.095274][T11429] Buffer I/O error on dev nbd3, logical block 0, async page read [ 596.192957][T12181] fuse: blksize only supported for fuseblk [ 596.214779][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 596.220898][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 596.232054][ T5892] usb 2-1: USB disconnect, device number 70 [ 596.355661][ T8] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 596.512436][ T8] usb 1-1: device descriptor read/64, error -71 [ 596.644408][ T8] usb usb1-port1: attempt power cycle [ 596.984097][ T8] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 597.004700][ T8] usb 1-1: device descriptor read/8, error -71 [ 597.183262][T12223] 9pnet_fd: Insufficient options for proto=fd [ 597.304296][ T8] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 597.350111][ T46] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 597.374383][ T8] usb 1-1: device descriptor read/8, error -71 [ 597.484131][ T8] usb usb1-port1: unable to enumerate USB device [ 597.542299][T12238] netlink: 'syz.5.1651': attribute type 1 has an invalid length. [ 597.583731][T12238] 8021q: adding VLAN 0 to HW filter on device bond3 [ 597.593895][ T46] usb 7-1: Using ep0 maxpacket: 32 [ 597.603106][ T46] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 597.616145][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 597.622390][T12238] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 597.627649][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 597.627706][ T46] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 597.627734][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.645061][ T46] usb 7-1: config 0 descriptor?? [ 597.657539][T12238] bond3: (slave batadv2): making interface the new active one [ 597.678733][T12238] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 597.703008][T12226] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 597.711956][ T46] hub 7-1:0.0: USB hub found [ 597.913245][ T46] hub 7-1:0.0: 2 ports detected [ 598.164151][ T5915] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 598.283980][ T46] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 598.296222][ T46] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 598.330287][ T46] usbhid 7-1:0.0: can't add hid device: -71 [ 598.343957][ T5915] usb 6-1: device descriptor read/64, error -71 [ 598.350513][ T46] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 598.395183][ T46] usb 7-1: USB disconnect, device number 14 [ 598.513059][T12246] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1653'. [ 598.763970][ T5915] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 598.900249][ T5915] usb 6-1: device descriptor read/64, error -71 [ 598.909473][T12255] : renamed from ipvlan1 [ 599.014227][ T5915] usb usb6-port1: attempt power cycle [ 599.303929][ T46] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 599.384490][ T5915] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 599.420811][ T5915] usb 6-1: device descriptor read/8, error -71 [ 599.434006][ T46] usb 7-1: device descriptor read/64, error -71 [ 599.485563][T12259] netlink: 'syz.1.1658': attribute type 1 has an invalid length. [ 599.493357][T12259] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1658'. [ 599.663882][ T5915] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 599.684867][ T5915] usb 6-1: device descriptor read/8, error -71 [ 599.701937][ T46] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 599.799847][ T5915] usb usb6-port1: unable to enumerate USB device [ 599.834299][ T46] usb 7-1: device descriptor read/64, error -71 [ 599.844020][ T5959] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 599.882423][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1662'. [ 599.957787][ T46] usb usb7-port1: attempt power cycle [ 600.036384][ T5959] usb 2-1: Using ep0 maxpacket: 16 [ 600.043587][ T5959] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.069464][ T5959] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 600.084139][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.092198][ T5959] usb 2-1: Product: syz [ 600.103841][ T5959] usb 2-1: Manufacturer: syz [ 600.108494][ T5959] usb 2-1: SerialNumber: syz [ 600.121896][ T5959] usb 2-1: config 0 descriptor?? [ 600.136773][ T5959] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 600.334179][ T46] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 600.348045][T12264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.355024][ T46] usb 7-1: device descriptor read/8, error -71 [ 600.364214][T12264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.378420][ T5959] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 600.391944][ T5959] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 600.413256][ T5959] usb 2-1: USB disconnect, device number 71 [ 600.594852][ T46] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 600.614778][ T46] usb 7-1: device descriptor read/8, error -71 [ 600.724253][ T46] usb usb7-port1: unable to enumerate USB device [ 600.762205][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1665'. [ 601.166489][T12289] netlink: 'syz.0.1667': attribute type 4 has an invalid length. [ 601.209308][T12289] netlink: 'syz.0.1667': attribute type 4 has an invalid length. [ 601.699756][T12291] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1668'. [ 602.356432][T12297] overlayfs: failed to resolve './file1': -2 [ 602.727206][T12310] hsr0 speed is unknown, defaulting to 1000 [ 603.774210][ T46] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 603.926204][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.945413][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.972054][ T46] usb 1-1: New USB device found, idVendor=056a, idProduct=0ebc, bcdDevice= 0.00 [ 604.025418][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.057337][ T46] usb 1-1: config 0 descriptor?? [ 604.291890][T12329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.304438][T12329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.590801][ T46] wacom 0003:056A:0EBC.001C: unknown main item tag 0x0 [ 604.598568][ T46] wacom 0003:056A:0EBC.001C: unknown main item tag 0x0 [ 604.619698][ T46] wacom 0003:056A:0EBC.001C: Unknown device_type for 'HID 056a:0ebc'. Ignoring. [ 604.817527][ T46] usb 1-1: USB disconnect, device number 79 [ 606.052968][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1684'. [ 606.134513][ T58] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 606.144589][ T58] Buffer I/O error on dev nbd3, logical block 0, async page read [ 606.283944][ T5892] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 606.454352][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 606.469311][ T5892] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 606.483928][ T5892] usb 2-1: can't read configurations, error -61 [ 606.485050][T12371] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1689'. [ 606.533987][ T8] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 606.613944][ T5892] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 606.670298][T12373] Option ' ' to dns_resolver key: bad/missing value [ 606.691856][ T8] usb 1-1: config 0 has an invalid interface number: 121 but max is 0 [ 606.704159][ T8] usb 1-1: config 0 has no interface number 0 [ 606.710825][ T8] usb 1-1: config 0 interface 121 altsetting 0 has an endpoint descriptor with address 0x45, changing to 0x5 [ 606.722844][ T8] usb 1-1: config 0 interface 121 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 606.734467][ T8] usb 1-1: config 0 interface 121 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 606.761146][ T8] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=8a.3d [ 606.770579][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 606.776154][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.786496][ T8] usb 1-1: Product: syz [ 606.794231][ T8] usb 1-1: Manufacturer: syz [ 606.799450][ T5892] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 606.814325][ T8] usb 1-1: SerialNumber: syz [ 606.820551][ T5892] usb 2-1: can't read configurations, error -61 [ 606.831024][ T8] usb 1-1: config 0 descriptor?? [ 606.844102][ T5892] usb usb2-port1: attempt power cycle [ 607.046301][ T9] usb 1-1: USB disconnect, device number 80 [ 607.194057][ T5892] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 607.214850][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 607.223692][ T5892] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 607.231808][ T5892] usb 2-1: can't read configurations, error -61 [ 607.238951][ T8] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 607.384111][ T5892] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 607.414140][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 607.419988][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 607.428022][ T5892] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 607.438885][ T8] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 607.470418][ T5892] usb 2-1: can't read configurations, error -61 [ 607.476921][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.487702][ T5892] usb usb2-port1: unable to enumerate USB device [ 607.494358][ T8] usb 7-1: Product: syz [ 607.498756][ T8] usb 7-1: Manufacturer: syz [ 607.504523][ T8] usb 7-1: SerialNumber: syz [ 607.514766][ T8] usb 7-1: config 0 descriptor?? [ 607.525664][ T8] ums-onetouch 7-1:0.0: USB Mass Storage device detected [ 607.783303][ T8] usb 7-1: USB disconnect, device number 19 [ 608.114096][ T5892] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 608.405961][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.419185][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.429767][ T5892] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 608.439104][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.456024][T12394] netlink: 'syz.5.1695': attribute type 1 has an invalid length. [ 608.468608][ T5892] usb 1-1: config 0 descriptor?? [ 608.474141][T12394] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1695'. [ 608.592290][T12396] serio: Serial port ptm0 [ 608.689120][T12382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.700064][T12382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.928352][T12382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.941479][T12382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.034263][ T8] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 609.204071][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 609.214760][ T8] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 609.233919][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.242059][ T8] usb 7-1: Product: syz [ 609.263895][ T8] usb 7-1: Manufacturer: syz [ 609.268656][ T8] usb 7-1: SerialNumber: syz [ 609.291109][ T8] r8152-cfgselector 7-1: Unknown version 0x0000 [ 609.297716][ T8] r8152-cfgselector 7-1: config 0 descriptor?? [ 609.792744][T12411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1699'. [ 610.391752][ T9] r8152-cfgselector 7-1: USB disconnect, device number 20 [ 610.605111][T12419] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1701'. [ 610.737670][ T5892] usbhid 1-1:0.0: can't add hid device: -71 [ 610.744063][ T5892] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 610.768742][ T5892] usb 1-1: USB disconnect, device number 81 [ 612.338680][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 612.353959][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 612.363477][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1711'. [ 612.385844][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 612.490897][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 612.506091][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 612.515070][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 612.686658][T12443] hsr0 speed is unknown, defaulting to 1000 [ 613.209800][T12443] chnl_net:caif_netlink_parms(): no params data found [ 613.435512][T12443] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.444703][T12443] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.476385][T12443] bridge_slave_0: entered allmulticast mode [ 613.485291][T12443] bridge_slave_0: entered promiscuous mode [ 613.496077][T12443] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.503514][T12443] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.511795][T12443] bridge_slave_1: entered allmulticast mode [ 613.520318][T12443] bridge_slave_1: entered promiscuous mode [ 613.601506][T12443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.614148][T12443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.624648][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 613.649524][T12468] netdevsim netdevsim5 : set [0, 0] type 1 family 0 port 8472 - 0 [ 613.658301][T12468] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.667164][T12468] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.675928][T12468] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.780764][T12443] team0: Port device team_slave_0 added [ 613.787377][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 613.795705][ T9] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 613.809128][T12443] team0: Port device team_slave_1 added [ 613.817933][ T9] usb 7-1: config 179 has no interface number 0 [ 613.824997][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 613.845704][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 613.867818][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 613.880014][T12443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.887652][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.914211][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 613.926487][ T9] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 613.940425][T12443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.952045][ T9] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 613.962378][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.971644][T12443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.980497][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.006484][ C0] vkms_vblank_simulate: vblank timer overrun [ 614.014049][T12443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.029613][T12461] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 614.277050][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input56 [ 614.312713][T12443] hsr_slave_0: entered promiscuous mode [ 614.445579][T12461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.454461][T12461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.477947][T12443] hsr_slave_1: entered promiscuous mode [ 614.584045][ T5842] Bluetooth: hci4: command tx timeout [ 614.594970][T12443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 614.602791][T12443] Cannot create hsr debugfs directory [ 616.164036][ T58] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 616.173312][ T58] Buffer I/O error on dev nbd3, logical block 0, async page read [ 616.364430][T12443] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 616.375655][T12443] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 616.486244][T12443] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 616.497383][T12443] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 616.627823][T12443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.666265][ T5842] Bluetooth: hci4: command tx timeout [ 616.684581][T12443] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.752686][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.759915][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.784384][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.791556][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.164500][ T3660] usb 7-1: USB disconnect, device number 21 [ 617.164513][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 617.164657][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 617.214726][ T3660] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 617.326273][T12443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.890928][T12443] veth0_vlan: entered promiscuous mode [ 617.902980][T12443] veth1_vlan: entered promiscuous mode [ 618.596459][T12443] veth0_macvtap: entered promiscuous mode [ 618.647462][T12443] veth1_macvtap: entered promiscuous mode [ 618.744327][ T5842] Bluetooth: hci4: command tx timeout [ 618.819332][T12505] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1722'. [ 618.834410][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.880583][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.890481][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.901504][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.914202][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.929171][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.950692][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.035410][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.064152][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.094173][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.133074][T12443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.163123][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.173830][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.183672][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.198785][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.208950][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.219992][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.230375][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.241778][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.251771][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.263207][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.274866][T12443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.290307][T12443] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.299355][T12443] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.308485][T12443] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.318310][T12443] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.464980][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.480850][ T6516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.499741][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.570367][T12520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.582041][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1727'. [ 619.619282][ T6516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.824922][ T5842] Bluetooth: hci4: command tx timeout [ 622.584402][ T3660] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 622.785088][ T3660] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.903838][ T3660] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 622.977272][ T3660] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.030214][ T3660] usb 7-1: config 0 descriptor?? [ 623.081834][ T3660] pwc: Askey VC010 type 2 USB webcam detected. [ 623.128874][ T5891] IPVS: starting estimator thread 0... [ 623.223921][T12562] IPVS: using max 18 ests per chain, 43200 per kthread [ 623.640447][ T3660] pwc: send_video_command error -71 [ 623.646210][ T3660] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 623.654580][ T3660] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 623.682178][ T3660] usb 7-1: USB disconnect, device number 22 [ 623.834402][T12571] 9pnet_fd: Insufficient options for proto=fd [ 624.111845][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.280576][T12582] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1745'. [ 624.293837][ T3660] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 624.303950][T12582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1745'. [ 624.472752][ T3660] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 624.539616][ T3660] usb 8-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 624.555546][T12587] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1746'. [ 624.576386][ T3660] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.620000][ T3660] usb 8-1: Product: syz [ 624.648450][ T3660] usb 8-1: Manufacturer: syz [ 624.672787][ T3660] usb 8-1: SerialNumber: syz [ 624.734301][ T3660] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input58 [ 624.886531][ T5891] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 624.917182][T12574] binder_alloc: 12572: binder_alloc_buf size 8 failed, no address space [ 624.926877][T12574] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 625.096682][ T5891] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 625.106797][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.117010][ T5891] usb 7-1: Product: syz [ 625.121478][ T5891] usb 7-1: Manufacturer: syz [ 625.126368][ T5891] usb 7-1: SerialNumber: syz [ 625.150960][ T5196] bcm5974 8-1:1.0: could not read from device [ 625.292906][ T5196] bcm5974 8-1:1.0: could not read from device [ 625.424762][ T5891] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 625.649967][ T5892] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 625.796992][ T5196] bcm5974 8-1:1.0: could not read from device [ 625.827204][ T3660] usb 8-1: USB disconnect, device number 2 [ 625.844460][ T5196] bcm5974 8-1:1.0: could not read from device [ 626.374486][ T58] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 626.384031][ T58] Buffer I/O error on dev nbd3, logical block 0, async page read [ 629.320132][ T29] audit: type=1326 audit(1732521243.810:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12626 comm="syz.6.1759" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd92fd7e819 code=0x0 [ 629.341351][ C1] vkms_vblank_simulate: vblank timer overrun [ 629.414945][ T25] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 629.590705][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 629.613454][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.642526][ T25] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 629.690436][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.727910][ T25] usb 2-1: config 0 descriptor?? [ 629.874237][ T5892] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 629.913930][ T5892] ath9k_htc: Failed to initialize the device [ 629.926352][ T3660] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 629.942656][ T5843] Bluetooth: hci6: sending frame failed (-49) [ 629.954233][ T5842] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 630.114240][ T3660] usb 8-1: Using ep0 maxpacket: 16 [ 630.133587][ T3660] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 630.152490][ T3660] usb 8-1: New USB device strings: Mfr=1, Product=58, SerialNumber=231 [ 630.182739][ T3660] usb 8-1: Product: syz [ 630.193602][ T3660] usb 8-1: Manufacturer: syz [ 630.206906][ T3660] usb 8-1: SerialNumber: syz [ 630.252269][ T3660] usb 8-1: config 0 descriptor?? [ 630.271541][ T3660] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 630.301615][ T3660] usb 8-1: Detected FT232H [ 630.674182][ T3660] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 630.687035][ T3660] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 631.703627][ T3660] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 632.031036][ T3660] usb 8-1: USB disconnect, device number 3 [ 637.964483][ C0] sched: DL replenish lagged too much [ 638.155942][ T25] usbhid 2-1:0.0: can't add hid device: -32 [ 638.162413][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 638.322377][ T3660] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 638.486014][ T3660] ftdi_sio 8-1:0.0: device disconnected [ 638.505409][ T25] usb 2-1: USB disconnect, device number 77 [ 638.718080][T12641] FAULT_INJECTION: forcing a failure. [ 638.718080][T12641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.835630][T12641] CPU: 1 UID: 0 PID: 12641 Comm: syz.6.1762 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 638.846219][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 638.856310][T12641] Call Trace: [ 638.859621][T12641] [ 638.862582][T12641] dump_stack_lvl+0x241/0x360 [ 638.867316][T12641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 638.872556][T12641] ? __pfx__printk+0x10/0x10 [ 638.877196][T12641] ? __pfx_lock_release+0x10/0x10 [ 638.882278][T12641] should_fail_ex+0x3b0/0x4e0 [ 638.887009][T12641] _copy_from_user+0x2f/0xc0 [ 638.891638][T12641] copy_msghdr_from_user+0xae/0x680 [ 638.896890][T12641] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 638.902748][T12641] ? __fget_files+0x2a/0x410 [ 638.907381][T12641] ? __fget_files+0x2a/0x410 [ 638.912017][T12641] __sys_sendmsg+0x209/0x350 [ 638.916651][T12641] ? __pfx_lock_release+0x10/0x10 [ 638.921718][T12641] ? __pfx___sys_sendmsg+0x10/0x10 [ 638.926882][T12641] ? __pfx_vfs_write+0x10/0x10 [ 638.931731][T12641] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 638.938111][T12641] ? do_syscall_64+0x100/0x230 [ 638.942928][T12641] ? do_syscall_64+0xb6/0x230 [ 638.947663][T12641] do_syscall_64+0xf3/0x230 [ 638.952207][T12641] ? clear_bhb_loop+0x35/0x90 [ 638.956926][T12641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.962867][T12641] RIP: 0033:0x7fd92fd7e819 [ 638.967331][T12641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.986997][T12641] RSP: 002b:00007fd930b7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.995477][T12641] RAX: ffffffffffffffda RBX: 00007fd92ff35fa0 RCX: 00007fd92fd7e819 [ 639.003497][T12641] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 639.011504][T12641] RBP: 00007fd930b7b090 R08: 0000000000000000 R09: 0000000000000000 [ 639.019513][T12641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.027515][T12641] R13: 0000000000000000 R14: 00007fd92ff35fa0 R15: 00007fff15b9b8a8 [ 639.035539][T12641] [ 639.324646][ T25] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 639.509670][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.551333][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.596151][ T25] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 639.649815][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.707633][ T25] usb 2-1: config 0 descriptor?? [ 640.172735][ T25] uclogic 0003:5543:0781.001D: item fetching failed at offset 5/7 [ 640.203675][ T25] uclogic 0003:5543:0781.001D: parse failed [ 640.220231][ T25] uclogic 0003:5543:0781.001D: probe with driver uclogic failed with error -22 [ 640.382767][ T25] usb 2-1: USB disconnect, device number 78 [ 641.127994][T12666] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1770'. [ 641.167928][T12666] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1770'. [ 641.364278][T12668] nfs4: Unknown parameter 'uid' [ 647.347378][T12674] netlink: 'syz.1.1774': attribute type 7 has an invalid length. [ 648.087202][ T5959] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 648.557082][ T25] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 648.720991][ T5959] usb 8-1: Using ep0 maxpacket: 8 [ 649.896382][ T5959] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=6f.22 [ 649.956891][ T5959] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.974475][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 68, changing to 10 [ 650.023243][ T5959] usb 8-1: Product: syz [ 650.045884][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.058664][ T5959] usb 8-1: Manufacturer: syz [ 650.082531][ T5959] usb 8-1: SerialNumber: syz [ 650.123611][ T5959] usb 8-1: config 0 descriptor?? [ 650.130120][ T25] usb 6-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 650.177948][ T5959] dm9601 8-1:0.0: probe with driver dm9601 failed with error -22 [ 650.206719][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.285000][ T5959] sr9700 8-1:0.0: probe with driver sr9700 failed with error -22 [ 650.293274][ T25] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 650.357483][ T25] usb 6-1: no configuration chosen from 1 choice [ 650.420695][ T5959] usb 8-1: USB disconnect, device number 4 [ 650.614652][ T25] usb 6-1: USB disconnect, device number 67 [ 650.702775][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 650.761767][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 650.832305][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 650.858316][T12686] ceph: No mds server is up or the cluster is laggy [ 650.899697][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 653.851220][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 653.986273][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 654.198023][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 654.211574][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 654.224589][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 654.236704][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 654.267944][ T5843] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 654.275892][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 654.559863][T12694] hsr0 speed is unknown, defaulting to 1000 [ 654.726636][T12700] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1780'. [ 655.306345][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1781'. [ 655.315595][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1781'. [ 655.823972][ T25] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 655.974013][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 655.981576][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.020329][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.044154][ T25] usb 8-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 656.084232][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.136290][ T25] usb 8-1: config 0 descriptor?? [ 656.322219][T12711] nfs4: Unknown parameter 'uid' [ 656.344295][ T5843] Bluetooth: hci6: command tx timeout [ 656.929177][ T25] mcp2200 0003:04D8:00DF.001E: unknown main item tag 0x0 [ 656.949260][T12713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.982806][T12713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.994907][ T25] mcp2200 0003:04D8:00DF.001E: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.7-1/input0 [ 657.050010][T12713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.096867][T12713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.207454][ T25] usb 8-1: USB disconnect, device number 5 [ 657.615390][T12694] chnl_net:caif_netlink_parms(): no params data found [ 658.423867][ T5843] Bluetooth: hci6: command tx timeout [ 660.503869][ T5843] Bluetooth: hci6: command tx timeout [ 664.304927][ T5843] Bluetooth: hci6: command tx timeout [ 664.965565][T12694] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.972853][T12694] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.017953][T12694] bridge_slave_0: entered allmulticast mode [ 665.092196][T12694] bridge_slave_0: entered promiscuous mode [ 665.156830][T12694] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.205414][T12694] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.253063][T12694] bridge_slave_1: entered allmulticast mode [ 665.309628][T12694] bridge_slave_1: entered promiscuous mode [ 665.597504][T12694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.651523][T12694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.966982][T12694] team0: Port device team_slave_0 added [ 666.044836][T12694] team0: Port device team_slave_1 added [ 666.199260][T12694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.233528][T12694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.353924][T12694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.421559][T12694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.456585][ T5842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 666.469475][ T5842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 666.495357][ T5842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 666.506956][ T5842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 666.518762][ T5842] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 666.534114][ T5842] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 666.588597][T12694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.679949][T12694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.887964][T12694] hsr_slave_0: entered promiscuous mode [ 666.900141][T12694] hsr_slave_1: entered promiscuous mode [ 666.911632][T12694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 666.925603][T12694] Cannot create hsr debugfs directory [ 666.950553][T12738] hsr0 speed is unknown, defaulting to 1000 [ 667.734770][T12694] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 667.777524][T12694] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 667.831209][T12694] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 667.872355][T12694] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 668.155707][T12738] chnl_net:caif_netlink_parms(): no params data found [ 668.482846][T12738] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.502561][T12738] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.520104][T12738] bridge_slave_0: entered allmulticast mode [ 668.551279][T12738] bridge_slave_0: entered promiscuous mode [ 668.584151][ T5842] Bluetooth: hci7: command tx timeout [ 668.597661][T12738] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.614159][T12738] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.625750][T12738] bridge_slave_1: entered allmulticast mode [ 668.637724][T12738] bridge_slave_1: entered promiscuous mode [ 668.665627][T12694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.759303][T12738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.802277][T12738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.948199][T12738] team0: Port device team_slave_0 added [ 668.991243][T12738] team0: Port device team_slave_1 added [ 669.032969][T12694] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.122859][T12738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.140342][T12738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.250227][T12738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.307733][ T3423] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.314944][ T3423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.357449][T12738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.372642][T12738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.429233][T12738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.638422][T12738] hsr_slave_0: entered promiscuous mode [ 669.654761][T12738] hsr_slave_1: entered promiscuous mode [ 669.661530][T12738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.673033][T12738] Cannot create hsr debugfs directory [ 669.692037][ T6512] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.699240][ T6512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.936110][T12694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 670.564801][T12738] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 670.619544][T12738] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 670.665692][ T5842] Bluetooth: hci7: command tx timeout [ 670.691349][T12738] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 670.735724][T12738] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 670.818464][T12694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.744332][ T5842] Bluetooth: hci7: command tx timeout [ 672.978383][T12738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.125554][ T58] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 673.135913][ T58] Buffer I/O error on dev nbd3, logical block 0, async page read [ 679.503925][ T5842] Bluetooth: hci7: command tx timeout [ 682.768696][T12738] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.820323][T12738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 682.831198][T12738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 683.534830][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 683.549079][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 683.558343][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 683.573665][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 683.584524][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 683.591919][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 683.659445][T12771] hsr0 speed is unknown, defaulting to 1000 [ 684.080221][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 684.230563][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 684.247080][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 684.260024][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 684.269191][ T5842] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 684.276777][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 684.341312][T12694] veth0_vlan: entered promiscuous mode [ 684.353528][T12694] veth1_vlan: entered promiscuous mode [ 684.378272][T12694] veth0_macvtap: entered promiscuous mode [ 684.388064][T12694] veth1_macvtap: entered promiscuous mode [ 684.408755][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.419800][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.454139][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.551813][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.564626][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.618306][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.633944][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.652569][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.681833][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.703383][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.724589][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.735303][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.750997][T12694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.761649][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.772750][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.783128][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.793901][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.843297][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.888564][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.959057][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.998621][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.098612][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.139897][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.163286][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.174892][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.186511][T12694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.256787][T12694] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.277268][T12694] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.304013][T12694] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.312784][T12694] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.565251][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.701377][T12727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.709721][ T5842] Bluetooth: hci0: command tx timeout [ 685.718612][T12727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.727642][T12727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.737643][T12727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.344507][ T5842] Bluetooth: hci5: command tx timeout [ 687.790439][ T5842] Bluetooth: hci0: command tx timeout [ 688.424160][ T5842] Bluetooth: hci5: command tx timeout [ 689.453989][T11429] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 689.464760][T11429] Buffer I/O error on dev nbd3, logical block 0, async page read [ 689.679642][ T5843] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 689.690832][ T5843] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 689.711344][ T5843] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 689.719679][ T5843] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 689.735701][ T5843] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 689.743149][ T5843] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 689.868146][ T5843] Bluetooth: hci0: command tx timeout [ 689.888285][T12791] hsr0 speed is unknown, defaulting to 1000 [ 690.504257][ T5843] Bluetooth: hci5: command tx timeout [ 691.391610][T12791] chnl_net:caif_netlink_parms(): no params data found [ 691.810450][ T5843] Bluetooth: hci8: command tx timeout [ 691.944947][ T5843] Bluetooth: hci0: command tx timeout [ 691.994673][T12791] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.012195][T12791] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.022420][T12791] bridge_slave_0: entered allmulticast mode [ 692.036358][T12791] bridge_slave_0: entered promiscuous mode [ 692.079750][T12791] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.087452][T12791] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.095112][T12791] bridge_slave_1: entered allmulticast mode [ 692.103022][T12791] bridge_slave_1: entered promiscuous mode [ 692.197881][T12791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.220309][T12791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.328695][T12791] team0: Port device team_slave_0 added [ 692.367195][T12791] team0: Port device team_slave_1 added [ 692.713944][ T5843] Bluetooth: hci5: command tx timeout [ 692.844780][T12791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.851794][T12791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.925197][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1801'. [ 692.985002][T12791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.057087][T12791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.084381][T12791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.204348][T12791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.599281][T12791] hsr_slave_0: entered promiscuous mode [ 693.606917][T12791] hsr_slave_1: entered promiscuous mode [ 693.694363][T12791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 693.701996][T12791] Cannot create hsr debugfs directory [ 693.864103][ T5843] Bluetooth: hci8: command tx timeout [ 694.188132][T12791] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.436582][T12791] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.599925][T12791] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.816966][T12791] bond0: (slave netdevsim0): Releasing backup interface [ 694.838153][T12791] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.052087][T12791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 695.082415][T12791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 695.094142][T12791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 695.107020][T12791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 695.149784][T12791] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.157027][T12791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.164586][T12791] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.171733][T12791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.356134][T12791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.377934][T12791] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.777597][T12791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.823281][T12791] veth0_vlan: entered promiscuous mode [ 695.888963][T12791] veth1_vlan: entered promiscuous mode [ 695.924631][T12791] veth0_macvtap: entered promiscuous mode [ 695.937775][T12791] veth1_macvtap: entered promiscuous mode [ 695.944399][ T5843] Bluetooth: hci8: command tx timeout [ 695.978148][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.989493][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.000149][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.011377][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.023457][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.079391][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.089809][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.100942][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.113130][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.124961][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.135560][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.146996][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.158243][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.169668][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.195030][T12791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.206513][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.217327][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.229712][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.240740][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.251384][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.262743][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.363227][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.383952][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.410831][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.446123][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.474072][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.501166][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.610324][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.633928][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.659756][T12791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.671316][T12791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.680497][T12791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.689280][T12791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.698096][T12791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.910502][ T6514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.920681][ T6518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.930008][ T6514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.944788][ T6518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.243953][ T9] usb 7-1: USB disconnect, device number 23 [ 697.312003][ T9] usb 7-1: ath9k_htc: USB layer deinitialized [ 697.447810][T12822] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1802'. [ 697.677019][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.684237][ T6524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.695659][ T6524] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.702834][ T6524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.834670][T12738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.024920][ T5843] Bluetooth: hci8: command tx timeout [ 698.453080][ T1896] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.506773][ T1896] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.614038][T12776] hsr0 speed is unknown, defaulting to 1000 [ 698.775211][ T1896] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.803081][ T1896] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.364564][ T1896] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.485829][T11429] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 699.495463][T11429] Buffer I/O error on dev nbd3, logical block 0, async page read [ 699.506571][T12195] ldm_validate_partition_table(): Disk read failed. [ 699.507427][ T1896] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.588657][T12771] chnl_net:caif_netlink_parms(): no params data found [ 699.731014][T12844] netlink: 'syz.3.1806': attribute type 11 has an invalid length. [ 699.739154][T12844] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1806'. [ 699.756751][ T1896] bond0: (slave ): Releasing backup interface [ 699.768409][ T1896] netdevsim netdevsim5  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.778286][ T1896] netdevsim netdevsim5  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.028332][T12858] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 700.188234][T12771] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.196222][T12771] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.205808][T12771] bridge_slave_0: entered allmulticast mode [ 700.213127][T12771] bridge_slave_0: entered promiscuous mode [ 700.228244][T12771] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.244163][T12771] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.251482][T12771] bridge_slave_1: entered allmulticast mode [ 700.272363][T12771] bridge_slave_1: entered promiscuous mode [ 700.342513][T12771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.372514][T12771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.470646][T12738] veth0_vlan: entered promiscuous mode [ 700.513931][ T1896] erspan0: left allmulticast mode [ 700.519022][ T1896] erspan0: left promiscuous mode [ 700.534364][ T1896] bridge0: port 3(erspan0) entered disabled state [ 700.542795][ T1896] bridge_slave_1: left allmulticast mode [ 700.560135][ T1896] bridge_slave_1: left promiscuous mode [ 700.571438][ T1896] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.586208][ T1896] bridge_slave_0: left allmulticast mode [ 700.591890][ T1896] bridge_slave_0: left promiscuous mode [ 700.598254][ T1896] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.245113][ T1896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.256793][ T1896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.267992][ T1896] bond0 (unregistering): Released all slaves [ 701.286794][ T1896] bond1 (unregistering): Released all slaves [ 701.300654][ T1896] bond2 (unregistering): Released all slaves [ 701.494653][ T1896] bond3 (unregistering): (slave batadv2): Releasing active interface [ 701.509023][ T1896] bond3 (unregistering): Released all slaves [ 701.570424][T12771] team0: Port device team_slave_0 added [ 701.685971][T12738] veth1_vlan: entered promiscuous mode [ 701.706536][T12771] team0: Port device team_slave_1 added [ 701.909199][T12879] syz.8.1813: attempt to access beyond end of device [ 701.909199][T12879] nbd8: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 701.925321][T12879] SQUASHFS error: Failed to read block 0x0: -5 [ 701.931668][T12879] unable to read squashfs_super_block [ 701.970127][T12771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.987789][T12771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.048690][T12771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.080979][T12776] chnl_net:caif_netlink_parms(): no params data found [ 702.094800][T12771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.101945][T12771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.186088][T12771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.209570][T12883] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1814'. [ 703.418282][ T1896] hsr_slave_0: left promiscuous mode [ 703.477852][ T1896] hsr_slave_1: left promiscuous mode [ 703.526556][ T1896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.543920][ T1896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.577101][ T1896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.584867][ T1896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.665405][ T1896] veth0_macvtap: left promiscuous mode [ 703.671105][ T1896] veth1_vlan: left promiscuous mode [ 703.687346][ T1896] veth0_vlan: left promiscuous mode [ 704.005625][ T1896] pim6reg (unregistering): left allmulticast mode [ 704.544394][ T9] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 704.738009][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 704.751806][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 704.783787][ T9] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 704.792903][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.802129][ T9] usb 9-1: Product: syz [ 704.825470][ T9] usb 9-1: Manufacturer: syz [ 704.830153][ T9] usb 9-1: SerialNumber: syz [ 704.863369][ T9] usb 9-1: config 0 descriptor?? [ 704.885752][ T9] streamzap 9-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 705.041976][ T1896] team0 (unregistering): Port device team_slave_1 removed [ 705.129628][ T1896] team0 (unregistering): Port device team_slave_0 removed [ 705.951558][T12771] hsr_slave_0: entered promiscuous mode [ 705.968737][T12771] hsr_slave_1: entered promiscuous mode [ 705.978010][T12771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 705.986751][T12771] Cannot create hsr debugfs directory [ 705.994453][T12738] veth0_macvtap: entered promiscuous mode [ 706.049500][T12738] veth1_macvtap: entered promiscuous mode [ 706.051461][ T9] usb 9-1: USB disconnect, device number 2 [ 706.157544][T12776] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.173928][T12776] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.181530][T12776] bridge_slave_0: entered allmulticast mode [ 706.205280][T12776] bridge_slave_0: entered promiscuous mode [ 706.266426][T12776] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.273669][T12776] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.282042][T12776] bridge_slave_1: entered allmulticast mode [ 706.298974][T12776] bridge_slave_1: entered promiscuous mode [ 706.407756][T12776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.420225][T12776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.549767][T12776] team0: Port device team_slave_0 added [ 706.595133][T12776] team0: Port device team_slave_1 added [ 706.627597][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.668040][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.678228][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.688812][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.698823][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.709775][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.720068][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.730654][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.740767][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.752112][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.762390][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.773377][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.783737][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.794293][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.806977][T12738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.816911][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.827684][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.837776][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.848334][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.858488][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.869239][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.879642][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.890468][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.900344][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.911085][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.921169][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.931658][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.941584][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.952066][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.966493][T12738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.033966][ T3660] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 707.035545][T12738] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.059304][T12738] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.069513][T12738] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.079567][T12738] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.121308][T12776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.141876][T12776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.175856][T12776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.201062][ T3660] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.231467][ T3660] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 707.258109][ T3660] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 707.276577][ T3660] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 707.283843][T12776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.286451][ T3660] usb 9-1: SerialNumber: syz [ 707.314109][T12776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.341369][T12776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.430690][T12776] hsr_slave_0: entered promiscuous mode [ 707.448716][T12776] hsr_slave_1: entered promiscuous mode [ 707.456953][T12776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 707.465992][T12776] Cannot create hsr debugfs directory [ 707.550026][ T3660] usb 9-1: 0:2 : does not exist [ 707.563510][ T3660] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 707.585541][ T3660] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5) [ 707.600990][ T3660] usb 9-1: 5:0: cannot get min/max values for control 4 (id 5) [ 707.624677][ T3660] usb 9-1: USB disconnect, device number 3 [ 707.781603][ T1896] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.814786][ T6514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.822668][ T6514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.841399][T10101] udevd[10101]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 707.948422][ T1896] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.048482][ T1896] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.128254][ T3423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.160093][ T3423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.211302][ T1896] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.269365][T12771] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 708.326284][T12771] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 708.396684][T12771] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 708.417528][T12771] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 708.884910][T12814] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 709.097598][T12814] usb 10-1: Using ep0 maxpacket: 8 [ 709.171585][T12814] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=6f.22 [ 709.211432][T12814] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.274850][T12814] usb 10-1: Product: syz [ 709.310157][T12814] usb 10-1: Manufacturer: syz [ 709.336147][T12814] usb 10-1: SerialNumber: syz [ 709.390275][T12814] usb 10-1: config 0 descriptor?? [ 709.419477][ T1896] bridge_slave_1: left allmulticast mode [ 709.428843][T12814] dm9601 10-1:0.0: probe with driver dm9601 failed with error -22 [ 709.456263][ T1896] bridge_slave_1: left promiscuous mode [ 709.462165][ T1896] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.480865][T12814] sr9700 10-1:0.0: probe with driver sr9700 failed with error -22 [ 709.490397][ T3660] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 709.515402][T11429] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 709.525008][T11429] Buffer I/O error on dev nbd3, logical block 0, async page read [ 709.571092][ T1896] bridge_slave_0: left allmulticast mode [ 709.601451][ T1896] bridge_slave_0: left promiscuous mode [ 709.624524][ T1896] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.684184][ T3660] usb 9-1: Using ep0 maxpacket: 16 [ 709.701530][ T3660] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 709.734023][ T3660] usb 9-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 709.767972][ T3660] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.808585][ T3660] usb 9-1: Product: syz [ 709.812825][ T3660] usb 9-1: Manufacturer: syz [ 709.861393][ T3660] usb 9-1: SerialNumber: syz [ 709.896377][ T3660] usb 9-1: config 0 descriptor?? [ 709.923092][ T3660] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 710.136710][ T3660] usb 9-1: USB disconnect, device number 4 [ 710.175858][ T9] usb 10-1: USB disconnect, device number 2 [ 711.162010][ T1896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.197850][ T1896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.213272][ T1896] bond0 (unregistering): Released all slaves [ 711.231942][ T1896] bond1 (unregistering): Released all slaves [ 712.233321][T12776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 712.292705][T12776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 712.331936][T12771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.430100][T12776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 712.449532][T12776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 712.741857][T12771] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.758553][T12965] fuse: Bad value for 'user_id' [ 712.763639][T12965] fuse: Bad value for 'user_id' [ 712.848057][T12727] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.855317][T12727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.010321][T12727] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.017541][T12727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.164544][T12776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.206483][T12776] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.281974][T12851] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.289324][T12851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.336072][T12851] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.343199][T12851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.482215][ T1896] hsr_slave_0: left promiscuous mode [ 713.529722][ T1896] hsr_slave_1: left promiscuous mode [ 713.550435][ T1896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.554083][ T3660] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 713.563818][ T1896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.585983][ T1896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.593486][ T1896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.649954][ T1896] veth1_macvtap: left promiscuous mode [ 713.663801][ T1896] veth0_macvtap: left promiscuous mode [ 713.669661][ T1896] veth1_vlan: left promiscuous mode [ 713.698215][ T1896] veth0_vlan: left promiscuous mode [ 714.665520][ T3660] usb 9-1: Using ep0 maxpacket: 8 [ 714.675532][ T3660] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 69, changing to 10 [ 714.690028][ T3660] usb 9-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 714.700134][ T3660] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.708474][ T3660] usb 9-1: Product: syz [ 714.712689][ T3660] usb 9-1: Manufacturer: syz [ 714.722944][ T3660] usb 9-1: SerialNumber: syz [ 715.194070][ T46] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 715.823972][ T46] usb 10-1: Using ep0 maxpacket: 8 [ 716.236160][ T46] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=6f.22 [ 716.245840][ T46] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.254936][ T46] usb 10-1: Product: syz [ 716.259427][ T46] usb 10-1: Manufacturer: syz [ 716.266074][ T46] usb 10-1: SerialNumber: syz [ 716.282268][ T46] usb 10-1: config 0 descriptor?? [ 716.298301][ T46] dm9601 10-1:0.0: probe with driver dm9601 failed with error -22 [ 716.309297][ T46] sr9700 10-1:0.0: probe with driver sr9700 failed with error -22 [ 717.227009][ T8] usb 10-1: USB disconnect, device number 3 [ 717.720496][ T3660] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input60 [ 717.736485][ T5196] bcm5974 9-1:1.0: could not read from device [ 717.758436][ T5196] bcm5974 9-1:1.0: could not read from device [ 717.765129][ T3660] usb 9-1: USB disconnect, device number 5 [ 718.224833][ T3660] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 718.414088][ T3660] usb 9-1: Using ep0 maxpacket: 16 [ 718.421299][ T3660] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.432545][ T3660] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.444068][ T3660] usb 9-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 718.453236][ T3660] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.466184][ T3660] usb 9-1: config 0 descriptor?? [ 718.563428][ T1896] team0 (unregistering): Port device team_slave_1 removed [ 718.633964][ T46] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 718.667622][ T1896] team0 (unregistering): Port device team_slave_0 removed [ 718.784097][ T46] usb 10-1: Using ep0 maxpacket: 32 [ 718.804757][ T46] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 718.818583][ T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 718.835805][ T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 718.847388][ T46] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 718.857664][ T46] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.875095][ T46] usb 10-1: config 0 descriptor?? [ 718.886907][ T3660] apple 0003:05AC:0246.001F: unknown main item tag 0xd [ 718.894704][ T3660] apple 0003:05AC:0246.001F: unexpected long global item [ 718.902278][T13009] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 718.910561][ T3660] apple 0003:05AC:0246.001F: parse failed [ 718.918149][ T46] hub 10-1:0.0: USB hub found [ 718.923107][ T3660] apple 0003:05AC:0246.001F: probe with driver apple failed with error -22 [ 719.147045][ T46] hub 10-1:0.0: config failed, can't read hub descriptor (err -22) [ 719.187431][ T3660] usb 9-1: USB disconnect, device number 6 [ 719.373586][ T46] hid-generic 0003:046D:C314.0020: unknown main item tag 0x0 [ 719.404614][ T46] hid-generic 0003:046D:C314.0020: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.9-1/input0 [ 719.537078][T11429] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 719.546769][T11429] Buffer I/O error on dev nbd3, logical block 0, async page read [ 719.755422][ T8] usb 10-1: USB disconnect, device number 4 [ 719.794819][T12776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 719.820105][T12776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 720.106992][T12771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.450434][T12776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.465795][T13029] xt_hashlimit: size too large, truncated to 1048576 [ 720.888083][T12776] veth0_vlan: entered promiscuous mode [ 720.960123][ T1896] IPVS: stop unused estimator thread 0... [ 721.014455][T12776] veth1_vlan: entered promiscuous mode [ 721.257210][T12776] veth0_macvtap: entered promiscuous mode [ 721.335943][T12776] veth1_macvtap: entered promiscuous mode [ 722.414532][T12771] veth0_vlan: entered promiscuous mode [ 722.766523][T13048] fuse: Unknown parameter '•.uÀZDmò»ø[££' [ 723.544312][ T46] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 723.561018][T12776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.632634][T12776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.665621][T12776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.701207][T12776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.726628][T12776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.749270][T12776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.782510][ T29] audit: type=1400 audit(1732521338.270:260): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=13049 comm="syz.9.1849" daddr=::20:0:0 dest=10 [ 723.811334][T12776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.832457][T12776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.847572][T12776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.872226][T12776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.907249][T12776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.928648][T12776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.953786][T12776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.980317][T12776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.999461][T12776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.032763][T12771] veth1_vlan: entered promiscuous mode [ 724.039114][ T970] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 724.086911][T12776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.112667][T12776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.132936][T12776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.160316][T12776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.178009][T12776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.199834][T12776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.223377][T12776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.244043][ T970] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 724.263593][ T970] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.275779][T12776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.284023][ T46] usb 9-1: Using ep0 maxpacket: 8 [ 724.310436][T12776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.315736][ T46] usb 9-1: device descriptor read/all, error -71 [ 724.329972][ T970] usb 10-1: config 0 descriptor?? [ 724.340946][T12776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.342620][ T970] cp210x 10-1:0.0: cp210x converter detected [ 724.354335][T12776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.368073][T12776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.378170][T12776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.390155][T12776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.401888][T12776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.426333][T12776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.444020][T12776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.452764][T12776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.484732][T12776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.661474][T12771] veth0_macvtap: entered promiscuous mode [ 724.700871][T12771] veth1_macvtap: entered promiscuous mode [ 724.852372][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.853065][ T970] cp210x 10-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 724.884581][ T970] cp210x 10-1:0.0: GPIO initialisation failed: -524 [ 724.896284][ T970] usb 10-1: cp210x converter now attached to ttyUSB0 [ 724.905271][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.953729][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.973778][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.983779][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.000730][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.028609][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.053091][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.082168][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.133070][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.143512][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.192064][T13057] Bluetooth: MGMT ver 1.23 [ 725.199733][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.414649][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.425436][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.435804][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.446453][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.580082][T12771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.700782][T13054] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.1850'. [ 725.712753][T13053] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.1850'. [ 725.726193][T12851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.804280][T12851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.896063][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.907418][T13059] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1849'. [ 725.922762][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.973215][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.984008][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.993972][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.004668][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.014551][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.025324][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.035469][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.046176][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.056066][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.066607][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.076488][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.087000][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.096883][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.107359][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.118371][T12771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.140307][ T6518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.148163][T13062] binder: BINDER_SET_CONTEXT_MGR already set [ 726.148238][T13062] binder: 13061:13062 ioctl 4018620d 20000040 returned -16 [ 726.196867][ T6518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.211197][T12771] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.248629][T12771] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.267240][T12771] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.276359][T12771] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.638339][T12851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.666754][T12851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.799770][T12727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.813717][T12727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.935504][ T5892] usb 10-1: USB disconnect, device number 5 [ 727.956699][ T5892] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 728.030589][T13076] Invalid source name [ 728.046492][T13076] UBIFS error (pid: 13076): cannot open "/dev/sg0", error -22 [ 728.046775][ T5892] cp210x 10-1:0.0: device disconnected [ 729.716602][T11429] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 729.725922][T11429] Buffer I/O error on dev nbd3, logical block 0, async page read [ 730.989318][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 731.014439][T13095] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 731.477607][T13111] hsr0 speed is unknown, defaulting to 1000 [ 731.854020][ T3660] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 732.224067][ T3660] usb 10-1: Using ep0 maxpacket: 8 [ 732.233498][ T3660] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=6f.22 [ 732.242891][ T3660] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.253845][ T3660] usb 10-1: Product: syz [ 732.258212][ T3660] usb 10-1: Manufacturer: syz [ 732.263006][ T3660] usb 10-1: SerialNumber: syz [ 732.376414][ T3660] usb 10-1: config 0 descriptor?? [ 732.383396][ T3660] dm9601 10-1:0.0: probe with driver dm9601 failed with error -22 [ 732.392742][ T3660] sr9700 10-1:0.0: probe with driver sr9700 failed with error -22 [ 732.512456][ T3660] kernel write not supported for file /79/attr/current (pid: 3660 comm: kworker/1:2) [ 733.283844][ T9] usb 10-1: USB disconnect, device number 6 [ 733.461352][ T970] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 733.624171][T12814] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 733.856247][T12814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.866720][T12814] usb 5-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 733.884192][T12814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.914209][T12814] usb 5-1: config 0 descriptor?? [ 733.935587][ T970] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 734.366677][T12814] nzxt-smart2 0003:1E71:200E.0022: hidraw1: USB HID v0.00 Device [HID 1e71:200e] on usb-dummy_hcd.4-1/input0 [ 734.378843][T12645] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 734.636001][T12645] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.659825][T12645] usb 3-1: config 0 interface 0 has no altsetting 0 [ 735.152019][T12645] usb 3-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 735.161254][T12645] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.172786][T12645] usb 3-1: config 0 descriptor?? [ 735.387133][T13158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.396230][T13158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.888859][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1871'. [ 735.919206][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1871'. [ 735.947432][T13158] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1871'. [ 735.968305][T12645] wacom 0003:056A:0003.0023: unknown main item tag 0x0 [ 735.975418][T12645] wacom 0003:056A:0003.0023: unknown main item tag 0x0 [ 735.982853][T12645] wacom 0003:056A:0003.0023: unknown main item tag 0x0 [ 735.989967][T12645] wacom 0003:056A:0003.0023: unknown main item tag 0x0 [ 735.997295][T12645] wacom 0003:056A:0003.0023: unknown main item tag 0x0 [ 736.005033][T12645] wacom 0003:056A:0003.0023: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 736.007309][ T5843] block nbd0: Receive control failed (result -107) [ 736.016153][T12645] wacom 0003:056A:0003.0023: hidraw2: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.2-1/input0 [ 736.036999][T12645] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0003.0023/input/input61 [ 736.113859][ T970] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 736.214217][ T5892] usb 3-1: USB disconnect, device number 74 [ 736.303997][ T970] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.331693][ T970] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.388943][ T970] usb 9-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 736.408756][ T970] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.431595][ T970] usb 9-1: config 0 descriptor?? [ 737.540451][T12814] usb 5-1: USB disconnect, device number 8 [ 737.694338][T13190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1876'. [ 739.073864][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 739.194804][T13200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 739.233918][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 739.274319][ T9] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=6f.22 [ 739.298315][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.329670][ T9] usb 10-1: Product: syz [ 739.343949][ T9] usb 10-1: Manufacturer: syz [ 739.354603][ T9] usb 10-1: SerialNumber: syz [ 739.380863][ T9] usb 10-1: config 0 descriptor?? [ 739.405997][ T970] hid-retrode 0003:0403:97C1.0024: unknown main item tag 0x0 [ 739.414078][ T970] hid-retrode 0003:0403:97C1.0024: unbalanced collection at end of report description [ 739.444845][ T9] dm9601 10-1:0.0: probe with driver dm9601 failed with error -22 [ 739.453093][ T9] sr9700 10-1:0.0: probe with driver sr9700 failed with error -22 [ 739.467465][ T970] hid-retrode 0003:0403:97C1.0024: probe with driver hid-retrode failed with error -22 [ 739.628615][ T9] usb 9-1: USB disconnect, device number 9 [ 739.744005][T11429] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 739.761961][T11429] Buffer I/O error on dev nbd3, logical block 0, async page read [ 739.770931][T12195] Dev nbd3: unable to read RDB block 0 [ 739.797393][T13219] FAULT_INJECTION: forcing a failure. [ 739.797393][T13219] name failslab, interval 1, probability 0, space 0, times 0 [ 739.811743][T13219] CPU: 0 UID: 0 PID: 13219 Comm: syz.4.1886 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 739.822183][T13219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 739.832249][T13219] Call Trace: [ 739.835532][T13219] [ 739.838468][T13219] dump_stack_lvl+0x241/0x360 [ 739.843170][T13219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 739.848387][T13219] ? __pfx__printk+0x10/0x10 [ 739.853003][T13219] ? fs_reclaim_acquire+0x93/0x130 [ 739.858131][T13219] ? __pfx___might_resched+0x10/0x10 [ 739.863440][T13219] should_fail_ex+0x3b0/0x4e0 [ 739.868136][T13219] ? tomoyo_encode+0x26f/0x540 [ 739.872914][T13219] should_failslab+0xac/0x100 [ 739.877599][T13219] ? tomoyo_encode+0x26f/0x540 [ 739.882392][T13219] __kmalloc_noprof+0xd8/0x400 [ 739.887163][T13219] tomoyo_encode+0x26f/0x540 [ 739.891765][T13219] tomoyo_realpath_from_path+0x59e/0x5e0 [ 739.897420][T13219] tomoyo_path_number_perm+0x236/0x860 [ 739.902887][T13219] ? __lock_acquire+0x1397/0x2100 [ 739.907920][T13219] ? tomoyo_path_number_perm+0x206/0x860 [ 739.913567][T13219] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 739.919591][T13219] ? __fget_files+0x2a/0x410 [ 739.924195][T13219] ? __fget_files+0x2a/0x410 [ 739.928803][T13219] security_file_ioctl+0xc6/0x2a0 [ 739.933855][T13219] __se_sys_ioctl+0x46/0x170 [ 739.938465][T13219] do_syscall_64+0xf3/0x230 [ 739.942997][T13219] ? clear_bhb_loop+0x35/0x90 [ 739.947721][T13219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.953631][T13219] RIP: 0033:0x7fc13d37e819 [ 739.958055][T13219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.977694][T13219] RSP: 002b:00007fc13e154038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 739.986131][T13219] RAX: ffffffffffffffda RBX: 00007fc13d535fa0 RCX: 00007fc13d37e819 [ 739.994119][T13219] RDX: 0000000020003600 RSI: 0000000080dc5521 RDI: 0000000000000003 [ 740.002097][T13219] RBP: 00007fc13e154090 R08: 0000000000000000 R09: 0000000000000000 [ 740.010074][T13219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.018053][T13219] R13: 0000000000000000 R14: 00007fc13d535fa0 R15: 00007fff7297ede8 [ 740.026051][T13219] [ 740.029195][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.029409][T12814] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 740.080205][T13219] ERROR: Out of memory at tomoyo_realpath_from_path. [ 740.203927][T12814] usb 3-1: Using ep0 maxpacket: 32 [ 740.210684][T12814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 740.225655][T12814] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 740.235120][T12814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.243287][T12814] usb 3-1: Product: syz [ 740.248074][T12814] usb 3-1: Manufacturer: syz [ 740.252715][T12814] usb 3-1: SerialNumber: syz [ 740.262023][T12814] usb 3-1: config 0 descriptor?? [ 740.271716][T12814] pvrusb2: Hardware description: Terratec Grabster AV400 [ 740.278913][T12814] pvrusb2: ********** [ 740.283297][T12814] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 740.294144][T12814] pvrusb2: Important functionality might not be entirely working. [ 740.301981][T12814] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 740.313929][T12814] pvrusb2: ********** [ 740.369128][ T46] usb 10-1: USB disconnect, device number 7 [ 740.480280][ T2336] pvrusb2: Invalid write control endpoint [ 740.716916][ T2336] pvrusb2: Invalid write control endpoint [ 740.883928][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 740.893296][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 740.927375][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 741.325780][ T2336] pvrusb2: Device being rendered inoperable [ 741.348672][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 741.361527][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 741.374230][ T2336] pvrusb2: Attached sub-driver cx25840 [ 741.385791][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 741.401837][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 741.675161][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 742.043883][ T970] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 742.229980][T13252] binder: 13247:13252 ioctl c0046209 0 returned -22 [ 742.246564][T13241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.336725][ T9] usb 3-1: USB disconnect, device number 75 [ 742.398176][T13241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.561352][T13241] netlink: 'syz.4.1892': attribute type 11 has an invalid length. [ 742.594134][T13241] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1892'. [ 743.621994][ T5891] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 743.930998][ T970] usb 5-1: unable to get BOS descriptor or descriptor too short [ 743.940349][ T970] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 743.948430][ T970] usb 5-1: can't read configurations, error -71 [ 743.954828][ T5891] usb 10-1: Using ep0 maxpacket: 32 [ 743.961930][ T5891] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.973093][ T5891] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.984507][ T5891] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 743.999376][ T5891] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.013477][ T5891] usb 10-1: config 0 descriptor?? [ 744.344547][ T5842] Bluetooth: hci8: command 0x0405 tx timeout [ 744.508153][ T5891] ft260 0003:0403:6030.0025: unknown main item tag 0x0 [ 744.717571][ T5891] ft260 0003:0403:6030.0025: chip code: 5e81 abf2 [ 745.167564][T13283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1904'. [ 745.276649][ T5891] ft260 0003:0403:6030.0025: failed to retrieve system status [ 745.278029][ T5891] ft260 0003:0403:6030.0025: probe with driver ft260 failed with error -5 [ 746.294163][T12645] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 746.412240][T13295] bridge0: port 3(gretap0) entered blocking state [ 746.433915][T13295] bridge0: port 3(gretap0) entered disabled state [ 746.440845][T13295] gretap0: entered allmulticast mode [ 746.448207][T13295] gretap0: entered promiscuous mode [ 746.454760][T13295] bridge0: port 3(gretap0) entered blocking state [ 746.461906][T13295] bridge0: port 3(gretap0) entered forwarding state [ 746.476271][T13296] gretap0: left allmulticast mode [ 746.481488][T13296] gretap0: left promiscuous mode [ 746.481700][T12645] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 746.490604][T13296] bridge0: port 3(gretap0) entered disabled state [ 746.521620][T12645] usb 9-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 746.553920][T12645] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.561971][T12645] usb 9-1: Product: syz [ 746.583993][T12645] usb 9-1: Manufacturer: syz [ 746.588676][T12645] usb 9-1: SerialNumber: syz [ 746.609649][T12645] usb 9-1: config 0 descriptor?? [ 746.627490][T12645] powermate 9-1:0.0: probe with driver powermate failed with error -5 [ 746.636287][ T46] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 746.804128][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 746.815251][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 746.831154][ T970] usb 9-1: USB disconnect, device number 10 [ 746.834212][ T46] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 746.880757][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6B, changing to 0xB [ 746.907803][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 746.919634][ T46] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 746.932214][ T46] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 746.945440][ T46] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 746.954116][ T46] usb 5-1: Product: syz [ 746.958325][ T46] usb 5-1: Manufacturer: syz [ 746.962952][ T46] usb 5-1: SerialNumber: syz [ 746.979070][ T46] usb 5-1: config 0 descriptor?? [ 746.988299][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.002208][ T46] usb 5-1: NFC: intf ffff888021b6d000 id ffffffff8f30a400 [ 747.209897][ T970] usb 5-1: USB disconnect, device number 11 [ 747.270151][ T5891] usb 10-1: USB disconnect, device number 8 [ 747.836958][ T5891] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 748.185843][ T5891] usb 10-1: Using ep0 maxpacket: 16 [ 748.360057][ T5891] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.727234][ T5891] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.737768][ T5891] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 749.496283][ T5891] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 749.505727][ T5891] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.534664][ T5891] usb 10-1: config 0 descriptor?? [ 749.763838][T11429] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 749.772961][T11429] Buffer I/O error on dev nbd3, logical block 0, async page read [ 750.200330][T13326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1916'. [ 750.212115][T13326] ntfs3(nullb0): Primary boot signature is not NTFS. [ 750.219164][T13326] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 750.754098][ T46] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 750.760003][ T5891] usbhid 10-1:0.0: can't add hid device: -71 [ 750.793966][ T5891] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 750.815026][ T5891] usb 10-1: USB disconnect, device number 9 [ 750.913834][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 750.923319][ T46] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=6f.22 [ 750.932662][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.941215][ T46] usb 3-1: Product: syz [ 750.958608][ T46] usb 3-1: Manufacturer: syz [ 750.963248][ T46] usb 3-1: SerialNumber: syz [ 750.975544][ T46] usb 3-1: config 0 descriptor?? [ 750.984834][ T46] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22 [ 750.993115][ T46] sr9700 3-1:0.0: probe with driver sr9700 failed with error -22 [ 751.187312][T13323] tipc: Started in network mode [ 751.192305][T13323] tipc: Node identity , cluster identity 4711 [ 751.466982][ T30] INFO: task udevd:9592 blocked for more than 143 seconds. [ 751.475051][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 751.482373][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 751.518674][ T30] task:udevd state:D stack:24160 pid:9592 tgid:9592 ppid:5211 flags:0x00000002 [ 751.545475][ T30] Call Trace: [ 751.556427][ T30] [ 751.565109][ T30] __schedule+0x17fb/0x4be0 [ 751.575396][ T30] ? __pfx___schedule+0x10/0x10 [ 751.596740][ T30] ? __pfx_lock_release+0x10/0x10 [ 751.614166][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 751.632403][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 751.642042][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 751.648832][ T30] ? schedule+0x90/0x320 [ 751.653227][ T30] schedule+0x14b/0x320 [ 751.658990][ T30] schedule_preempt_disabled+0x13/0x30 [ 751.665102][ T30] __mutex_lock+0x7e7/0xee0 [ 751.669826][ T30] ? __mutex_lock+0x5ef/0xee0 [ 751.675772][ T30] ? bdev_open+0xf0/0xc50 [ 751.680313][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 751.685928][ T30] ? wait_on_inode+0xc1/0x230 [ 751.690800][ T30] ? __pfx_wait_on_inode+0x10/0x10 [ 751.696876][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 751.726580][ T46] usb 3-1: USB disconnect, device number 76 [ 751.760266][ T30] ? disk_block_events+0xa9/0x120 [ 751.766209][ T30] ? bdev_open+0xb1/0xc50 [ 751.770735][ T30] bdev_open+0xf0/0xc50 [ 751.775465][ T30] ? iput+0x3be/0xa50 [ 751.779631][ T30] blkdev_open+0x389/0x4f0 [ 751.785154][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 751.790275][ T30] do_dentry_open+0xbe1/0x1b70 [ 751.797492][ T30] vfs_open+0x3e/0x330 [ 751.801752][ T30] path_openat+0x2c84/0x3590 [ 751.807094][ T30] ? __pfx_path_openat+0x10/0x10 [ 751.812242][ T30] do_filp_open+0x27f/0x4e0 [ 751.817419][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 751.822628][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 751.829764][ T30] do_sys_openat2+0x13e/0x1d0 [ 751.835242][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 751.840609][ T30] __x64_sys_openat+0x247/0x2a0 [ 751.846055][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 751.851587][ T30] ? do_syscall_64+0x100/0x230 [ 751.857197][ T30] ? do_syscall_64+0xb6/0x230 [ 751.862057][ T30] do_syscall_64+0xf3/0x230 [ 751.867307][ T30] ? clear_bhb_loop+0x35/0x90 [ 751.872174][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.879001][ T30] RIP: 0033:0x7f775d5169a4 [ 751.883592][ T30] RSP: 002b:00007ffcdece5890 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 751.892940][ T30] RAX: ffffffffffffffda RBX: 00005602c5240630 RCX: 00007f775d5169a4 [ 751.902211][ T30] RDX: 00000000000a0800 RSI: 00005602c51dab80 RDI: 00000000ffffff9c [ 751.911332][ T30] RBP: 00005602c51dab80 R08: 0000000000000001 R09: 7fffffffffffffff [ 751.920554][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 751.931493][ T30] R13: 00005602c51db320 R14: 0000000000000001 R15: 00005602c51ba910 [ 751.940010][ T30] [ 751.948162][ T30] INFO: task syz.3.1640:12192 blocked for more than 143 seconds. [ 751.963797][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 751.973443][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 751.994913][ T30] task:syz.3.1640 state:D stack:24128 pid:12192 tgid:12192 ppid:5847 flags:0x00000004 [ 752.013399][ T30] Call Trace: [ 752.021487][ T30] [ 752.028192][ T30] __schedule+0x17fb/0x4be0 [ 752.040864][ T30] ? __pfx___schedule+0x10/0x10 [ 752.050611][ T30] ? __pfx_lock_release+0x10/0x10 [ 752.056337][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 752.062417][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 752.069240][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 752.076070][ T30] ? schedule+0x90/0x320 [ 752.080432][ T30] schedule+0x14b/0x320 [ 752.085217][ T30] schedule_preempt_disabled+0x13/0x30 [ 752.090849][ T30] __mutex_lock+0x7e7/0xee0 [ 752.096181][ T30] ? __mutex_lock+0x5ef/0xee0 [ 752.101055][ T30] ? bdev_release+0x17e/0x700 [ 752.120249][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 752.130378][ T30] ? __fsnotify_parent+0x20c/0x5e0 [ 752.142568][ T30] bdev_release+0x17e/0x700 [ 752.153411][ T30] blkdev_release+0x15/0x20 [ 752.158836][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 752.164909][ T30] __fput+0x23c/0xa50 [ 752.169089][ T30] task_work_run+0x24f/0x310 [ 752.174211][ T30] ? _raw_spin_unlock+0x28/0x50 [ 752.179232][ T30] ? __pfx_task_work_run+0x10/0x10 [ 752.185650][ T30] ? syscall_exit_to_user_mode+0xa3/0x340 [ 752.191551][ T30] syscall_exit_to_user_mode+0x13f/0x340 [ 752.197753][ T30] do_syscall_64+0x100/0x230 [ 752.202538][ T30] ? clear_bhb_loop+0x35/0x90 [ 752.207916][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.214567][ T30] RIP: 0033:0x7f306f77e819 [ 752.219098][ T30] RSP: 002b:00007ffce1209548 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 752.229250][ T30] RAX: 0000000000000000 RBX: 00007f306f937ba0 RCX: 00007f306f77e819 [ 752.238908][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 752.247728][ T30] RBP: 00007f306f937ba0 R08: 00000000000119f4 R09: 00007ffce120983f [ 752.256430][ T30] R10: 00007f306f937ac0 R11: 0000000000000246 R12: 0000000000091c67 [ 752.264858][ T30] R13: 00007ffce1209650 R14: 0000000000000032 R15: ffffffffffffffff [ 752.273024][ T30] [ 752.277081][ T30] [ 752.277081][ T30] Showing all locks held in the system: [ 752.285413][ T30] 1 lock held by ksoftirqd/0/16: [ 752.290462][ T30] #0: ffff8880b863e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 752.301040][ T30] 1 lock held by khungtaskd/30: [ 752.306590][ T30] #0: ffffffff8e93c520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 752.328104][ T30] 2 locks held by kworker/u8:5/1896: [ 752.343972][ T30] 2 locks held by getty/5598: [ 752.353255][ T30] #0: ffff8880357a10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 752.373852][ T30] #1: ffffc900033132f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 752.395189][ T30] 1 lock held by udevd/9592: [ 752.405493][ T30] #0: ffff8880258cf4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 752.425320][ T30] 1 lock held by syz.3.1640/12192: [ 752.430474][ T30] #0: ffff8880258cf4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x17e/0x700 [ 752.464989][ T30] 2 locks held by syz.3.1640/12195: [ 752.481419][ T30] #0: ffff8880574080e0 (&type->s_umount_key#90/1){+.+.}-{4:4}, at: alloc_super+0x221/0x9d0 [ 752.516135][ T30] #1: ffff8880258cf4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 752.543777][ T30] 5 locks held by syz.8.1925/13354: [ 752.549352][ T30] [ 752.551785][ T30] ============================================= [ 752.551785][ T30] [ 752.560572][ T30] NMI backtrace for cpu 1 [ 752.564930][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 752.575113][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 752.585189][ T30] Call Trace: [ 752.588495][ T30] [ 752.591457][ T30] dump_stack_lvl+0x241/0x360 [ 752.596174][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 752.601402][ T30] ? __pfx__printk+0x10/0x10 [ 752.606031][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 752.610981][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 752.616446][ T30] ? _printk+0xd5/0x120 [ 752.620613][ T30] ? __pfx__printk+0x10/0x10 [ 752.625217][ T30] ? __wake_up_klogd+0xcc/0x110 [ 752.630083][ T30] ? __pfx__printk+0x10/0x10 [ 752.634686][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 752.639716][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 752.645708][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 752.651700][ T30] watchdog+0xff4/0x1040 [ 752.655950][ T30] ? watchdog+0x1ea/0x1040 [ 752.660375][ T30] ? __pfx_watchdog+0x10/0x10 [ 752.665057][ T30] kthread+0x2f0/0x390 [ 752.669132][ T30] ? __pfx_watchdog+0x10/0x10 [ 752.673813][ T30] ? __pfx_kthread+0x10/0x10 [ 752.678417][ T30] ret_from_fork+0x4b/0x80 [ 752.682841][ T30] ? __pfx_kthread+0x10/0x10 [ 752.687439][ T30] ret_from_fork_asm+0x1a/0x30 [ 752.692221][ T30] [ 752.696681][ T30] Sending NMI from CPU 1 to CPUs 0: [ 752.701958][ C0] NMI backtrace for cpu 0 [ 752.701971][ C0] CPU: 0 UID: 0 PID: 1896 Comm: kworker/u8:5 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 752.701990][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 752.702001][ C0] Workqueue: bat_events batadv_mcast_mla_update [ 752.702022][ C0] RIP: 0010:__asan_memset+0x33/0x50 [ 752.702044][ C0] Code: 89 d3 41 89 f6 48 89 fd 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 fd e5 ff ff 84 c0 74 12 48 89 ef 44 89 f6 48 89 da 5b 41 5e <5d> e9 57 71 c1 09 31 c0 5b 41 5e 5d c3 cc cc cc cc 66 2e 0f 1f 84 [ 752.702059][ C0] RSP: 0018:ffffc90005e8f440 EFLAGS: 00000202 [ 752.702071][ C0] RAX: ffffc90005e8f501 RBX: ffffc90005e8f5b8 RCX: ffffffff8142257b [ 752.702084][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90005e8f5d0 [ 752.702100][ C0] RBP: ffffc90005e8f5d0 R08: ffffc90005e8f5df R09: 1ffff92000bd1ebb [ 752.702111][ C0] R10: dffffc0000000000 R11: fffff52000bd1ebc R12: ffffc90005e90000 [ 752.702124][ C0] R13: ffffc90005e8f580 R14: ffffffff81387015 R15: ffffc90005e8f5d0 [ 752.702136][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 752.702149][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 752.702160][ C0] CR2: 00007f8b43308ab8 CR3: 000000000e738000 CR4: 00000000003526f0 [ 752.702173][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 752.702183][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 752.702193][ C0] Call Trace: [ 752.702199][ C0] [ 752.702206][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 752.702225][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 752.702243][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 752.702262][ C0] ? nmi_handle+0x2a/0x5a0 [ 752.702286][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 752.702308][ C0] ? nmi_handle+0x14f/0x5a0 [ 752.702324][ C0] ? nmi_handle+0x2a/0x5a0 [ 752.702341][ C0] ? __asan_memset+0x33/0x50 [ 752.702360][ C0] ? default_do_nmi+0x63/0x160 [ 752.702380][ C0] ? exc_nmi+0x123/0x1f0 [ 752.702398][ C0] ? end_repeat_nmi+0xf/0x53 [ 752.702414][ C0] ? arch_stack_walk+0xe5/0x150 [ 752.702433][ C0] ? unwind_next_frame+0xcfb/0x22d0 [ 752.702450][ C0] ? __asan_memset+0x33/0x50 [ 752.702470][ C0] ? __asan_memset+0x33/0x50 [ 752.702490][ C0] ? __asan_memset+0x33/0x50 [ 752.702509][ C0] [ 752.702515][ C0] [ 752.702520][ C0] unwind_next_frame+0xcfb/0x22d0 [ 752.702540][ C0] ? __unwind_start+0xf8/0x740 [ 752.702558][ C0] __unwind_start+0x59a/0x740 [ 752.702575][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 752.702599][ C0] arch_stack_walk+0xe5/0x150 [ 752.702619][ C0] ? arch_stack_walk+0xe5/0x150 [ 752.702638][ C0] stack_trace_save+0x118/0x1d0 [ 752.702659][ C0] ? __lock_acquire+0x1397/0x2100 [ 752.702676][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 752.702704][ C0] kasan_save_track+0x3f/0x80 [ 752.702749][ C0] __kasan_kmalloc+0x98/0xb0 [ 752.702771][ C0] ? batadv_mcast_mla_update+0x19f1/0x4030 [ 752.702786][ C0] __kmalloc_cache_noprof+0x19c/0x2c0 [ 752.702806][ C0] batadv_mcast_mla_update+0x19f1/0x4030 [ 752.702823][ C0] ? batadv_mcast_mla_update+0x1a5/0x4030 [ 752.702844][ C0] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 752.702861][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 752.702894][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 752.702919][ C0] ? process_scheduled_works+0x976/0x1850 [ 752.702945][ C0] process_scheduled_works+0xa63/0x1850 [ 752.702982][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 752.703011][ C0] ? assign_work+0x364/0x3d0 [ 752.703037][ C0] worker_thread+0x870/0xd30 [ 752.703056][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 752.703082][ C0] ? __kthread_parkme+0x169/0x1d0 [ 752.703105][ C0] ? __pfx_worker_thread+0x10/0x10 [ 752.703121][ C0] kthread+0x2f0/0x390 [ 752.703138][ C0] ? __pfx_worker_thread+0x10/0x10 [ 752.703153][ C0] ? __pfx_kthread+0x10/0x10 [ 752.703171][ C0] ret_from_fork+0x4b/0x80 [ 752.703185][ C0] ? __pfx_kthread+0x10/0x10 [ 752.703203][ C0] ret_from_fork_asm+0x1a/0x30 [ 752.703234][ C0] [ 752.809833][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 752.809859][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 752.809887][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 752.809903][ T30] Call Trace: [ 752.809913][ T30] [ 752.809924][ T30] dump_stack_lvl+0x241/0x360 [ 752.809957][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 752.809981][ T30] ? __pfx__printk+0x10/0x10 [ 752.810013][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 752.810046][ T30] ? vscnprintf+0x5d/0x90 [ 752.810074][ T30] panic+0x349/0x880 [ 752.810108][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 752.810138][ T30] ? __pfx_panic+0x10/0x10 [ 752.810169][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 752.810200][ T30] ? __irq_work_queue_local+0x137/0x410 [ 752.810227][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 752.810251][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 752.810278][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 752.810308][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 752.810339][ T30] watchdog+0x1033/0x1040 [ 752.810366][ T30] ? watchdog+0x1ea/0x1040 [ 752.810396][ T30] ? __pfx_watchdog+0x10/0x10 [ 752.810419][ T30] kthread+0x2f0/0x390 [ 752.810445][ T30] ? __pfx_watchdog+0x10/0x10 [ 752.810468][ T30] ? __pfx_kthread+0x10/0x10 [ 752.810493][ T30] ret_from_fork+0x4b/0x80 [ 752.810513][ T30] ? __pfx_kthread+0x10/0x10 [ 752.810538][ T30] ret_from_fork_asm+0x1a/0x30 [ 752.810582][ T30] [ 753.250075][ T30] Kernel Offset: disabled [ 753.254394][ T30] Rebooting in 86400 seconds..