last executing test programs: 2m51.78768142s ago: executing program 2 (id=72): syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000070fb44eca9b89078bfee3cb995a5d6dc4ac376d764fef73384b526a8d2c8c940"], 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'lo\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)='=', 0x1}], 0x1}, 0x20000001) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002cbd7000fbdbdf2507000000050006000a00000014001f00ff02000000000000000000000000000108000b000200000006001c00040000003edfa56be078abb9d62800187f8865a87176c7b19f1fc6d08416534393e0ce32caaf1fe5776899065d5f1ba1a4bf4d169479c0e0ee6ff4486df2fed18e9f4a6c898056b3732a39ddee2fe702beb2e4a1d9bc5f037c02cf2ea24cf334cb28b1c8ed70667ade8ba07dbd8e016a45ed698e9b4d20298dc9d430b49ad858f8f629f4f7a1908ab489559e48b1c075c2b7d22c722ee1623c754d6cc41cdc0da997731889522a669a0c4a24dfde11fe24b99d33906b42d019303cca9a794c9abb95df"], 0x40}, 0x1, 0x0, 0x0, 0x44005}, 0x8050) 2m49.927504233s ago: executing program 2 (id=77): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x8008) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$smackfs_cipso(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x400502, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r5, 0x4004510f, &(0x7f00000000c0)=0x6) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) r8 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r8, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x4, @time={0x401, 0x9e8b}, {0x0, 0xb8}, {0x4, 0x6}, @control={0x9, 0x0, 0xb}}, {0x0, 0x0, 0x0, 0xf, @time={0x10001, 0x3ff}, {0xf9, 0x4}, {}, @result={0xd, 0x4}}], 0x38) (fail_nth: 1) 2m48.536718005s ago: executing program 2 (id=80): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) 2m48.085016511s ago: executing program 2 (id=83): openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e5c}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r2, &(0x7f00000000c0)={0x0, 0x2b, 0x0, @tid=0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_io_uring_setup(0x2f0f, &(0x7f0000000200)={0x0, 0x8599, 0x2, 0x0, 0x13e, 0x0, r0}, &(0x7f0000000080), &(0x7f00000002c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) syz_emit_vhci(0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000340)) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r7, 0x0, 0x0) 2m47.197716396s ago: executing program 2 (id=86): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r2, 0x4004510f, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f0000000100), &(0x7f0000000140)=[{{}, {0x80000000}}]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x42002, 0x0) pselect6(0x40, &(0x7f0000000080)={0x4, 0x1, 0x2000000501, 0x1, 0x9, 0x9, 0x5bcc0b61, 0x32b93999}, &(0x7f00000000c0)={0xb, 0x6, 0x41, 0x800000000000000, 0x100000000, 0x1, 0x5, 0x6}, 0x0, 0x0, 0x0) listen(r1, 0x8) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000000)={r3, 0x0, &(0x7f0000000080)}) 2m45.617448583s ago: executing program 2 (id=89): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x22020600) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsopen(&(0x7f0000000040)='devpts\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) alarm(0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x4001, &(0x7f0000000240)=ANY=[@ANYBLOB="736d61636b6673666c0000000000000000726432b32c736d61636b00736465663d776f726b6469722c008f6391f67d16d8e1d04f143a6ea3667a8ca996bd8accb37f6a55247ed3f67a880d6b0b861bec6db613835b92c8b09fdb431979423084d98ea9eb21316096c38b8c00000000000000"]) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000440)='syzkaller\x00', 0xbafe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5) open(0x0, 0x143142, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={'\x00', 0x7ff, 0x15555555, 0xc, 0xb, 0x59f, 0xffffffffffffffff}) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) close(r4) 2m29.515601879s ago: executing program 32 (id=89): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x22020600) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsopen(&(0x7f0000000040)='devpts\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) alarm(0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x4001, &(0x7f0000000240)=ANY=[@ANYBLOB="736d61636b6673666c0000000000000000726432b32c736d61636b00736465663d776f726b6469722c008f6391f67d16d8e1d04f143a6ea3667a8ca996bd8accb37f6a55247ed3f67a880d6b0b861bec6db613835b92c8b09fdb431979423084d98ea9eb21316096c38b8c00000000000000"]) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000440)='syzkaller\x00', 0xbafe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5) open(0x0, 0x143142, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={'\x00', 0x7ff, 0x15555555, 0xc, 0xb, 0x59f, 0xffffffffffffffff}) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) close(r4) 1m54.098630527s ago: executing program 0 (id=202): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x40000, @private0}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)='P', 0x1}], 0x1}}], 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) connect$inet(r5, 0x0, 0x0) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4) recvmmsg(r6, &(0x7f0000002880)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)=""/170, 0xaa}, {&(0x7f0000000440)=""/184, 0xb8}, {&(0x7f0000000900)=""/243, 0xf3}, {&(0x7f0000000280)=""/56, 0x38}, {&(0x7f0000000640)=""/156, 0x9c}, {&(0x7f0000000a00)=""/249, 0xf9}], 0x6, &(0x7f0000000bc0)=""/4096, 0x1000}, 0x3ff}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/219, 0xdb}, {&(0x7f0000000b00)=""/74, 0x4a}], 0x2, &(0x7f0000001d00)=""/146, 0x92}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001dc0)=""/158, 0x9e}, {&(0x7f0000001e80)=""/141, 0x8d}, {&(0x7f0000001f40)=""/18, 0x12}, {&(0x7f0000001f80)=""/25, 0x19}], 0x4, &(0x7f0000002000)=""/117, 0x75}, 0x7fffffff}, {{&(0x7f0000002080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002100)=""/32, 0x20}, {&(0x7f0000002140)=""/96, 0x60}, {&(0x7f00000021c0)=""/41, 0x29}, {&(0x7f0000002200)=""/200, 0xc8}, {&(0x7f0000002300)=""/108, 0x6c}, {&(0x7f0000002380)=""/97, 0x61}, {&(0x7f0000002400)}], 0x7}, 0x5}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000024c0)=""/63, 0x3f}, {&(0x7f0000002500)=""/83, 0x53}, {&(0x7f0000002580)=""/237, 0xed}, {&(0x7f0000002680)=""/85, 0x55}, {&(0x7f0000002700)=""/58, 0x3a}, {&(0x7f0000002740)}], 0x6, &(0x7f0000002800)=""/116, 0x74}, 0x90e}], 0x5, 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x33, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @call={0x85, 0x0, 0x0, 0xaf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m51.919010726s ago: executing program 0 (id=206): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe01, 0x7aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45e3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffff7ffc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe]}) 1m50.912278042s ago: executing program 0 (id=208): syz_usb_connect(0x6, 0x24, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) chdir(0x0) sendmsg$kcm(r0, 0x0, 0x404c080) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x32315852}}) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r2, &(0x7f0000000ec0)={0x2020, 0x0, 0x0}, 0xfc3d) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x20}}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mlockall(0x2) ioctl$int_in(r5, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000340)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1m49.498394023s ago: executing program 0 (id=213): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x17, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0xffffffff, {}, 0x5, 0x5}}}, 0x90) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0x88, @multicast2, 0x0, 0x0, 'ovf\x00', 0x0, 0xfffffffd}, {@private=0xa010100, 0x0, 0x0, 0x0, 0xffffffff}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f0000000040), 0x81, 0x94c5462ed40d63d7) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xc, 0x0, 0x0, @generic=0x2, 0x8}) r4 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000100)=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="05000b00000000007111a80000020000851059000002000000850000003208000000000000000000009500a505000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) 1m48.025046118s ago: executing program 0 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x1) connect$bt_rfcomm(r2, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r6, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r7, 0x0, 0x81, 0xf7f, &(0x7f0000000700)="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", 0x4}) 1m37.34958423s ago: executing program 0 (id=244): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) (async) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1803000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8401000000000000280012800900010076657468000000001800028014000100000000", @ANYRES32=0x0, @ANYBLOB="8004"], 0x318}}, 0x0) (async) r2 = dup2(r0, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={'\x00', 0x0, 0xd, 0x1, 0x7b}) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000400)={0x6, 0x8000, 0x0, 0x0, 0x0}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000005c0)=@sack_info={r4, 0x1c}, &(0x7f0000000600)=0xc) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000340)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="140000a34bd310ceedc8e8003e000000fffa000000000fb8"], 0x18}}], 0x1, 0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120141015f59e2207c2c0e03fcd3010203010902240003000010000904c80702ffffff00090506020002c60006090582020002"], 0x0) (async) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000640)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r9, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xdc, 0x19, 0xb, 0x0, 0x0, {0x9}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x9}, @nested={0xb8, 0x1, 0x0, 0x1, [@typed={0xb1, 0x0, 0x0, 0x0, @str='\x1eH)R\xc1\xd4\x11o\xfb\xa2\x85\x1d\xc7\xac \x0e\xbd.\t\xdfq\x8b\xa0&\xf1\x1d\x94j\xdc\x92\xa6 \xc5P%\xe7\x1e\xf4\'\r\x98\xcf\x14\xb3\xb7\x90\x9dZl\xd5\xb8\xaa\vJV^\xaeq7\'\xfc]e\x19*Y\xcc\xcf:\xb3T\xdf\xe4\x99UW\f\x14\xc3\xd2\f\xb1\xdc\xc5\x91\xc0\x11\xea\xd6\xee\x8d\x9c\xe5\x1cC\x1c\xbbr\xd7V\x90\x91\x8f\xf7\x8f\nD|\xa5\x8b\x9e\xc3x\'9\xf0=u7\xa2\x9cK6\x06\xcb\xd4\x04\xe71\xbf\xf4|.\xb4\x99\x15\xb2\x91\x14\xed!\xecP\xe4\xc2h[\x00.Q\x96\xda\'\xd4}\xe1\xa4`\x87\x95=d\x80yi\x8d\xda\x89\x1bC\x16~\xb2'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r6}]}, 0xdc}}, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="687567653d77697468696e5f73697a652c6e725f626c6f416b733d20352c6e725f696e6f6465733d38393421f5aa6a706b33336d2c6d6f64653d30303030303030303030303030303030303030303031302c726f6f74636f6e746578743d73746166665f"]) 1m21.622910217s ago: executing program 33 (id=244): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) (async) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1803000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8401000000000000280012800900010076657468000000001800028014000100000000", @ANYRES32=0x0, @ANYBLOB="8004"], 0x318}}, 0x0) (async) r2 = dup2(r0, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={'\x00', 0x0, 0xd, 0x1, 0x7b}) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000400)={0x6, 0x8000, 0x0, 0x0, 0x0}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000005c0)=@sack_info={r4, 0x1c}, &(0x7f0000000600)=0xc) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000340)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="140000a34bd310ceedc8e8003e000000fffa000000000fb8"], 0x18}}], 0x1, 0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120141015f59e2207c2c0e03fcd3010203010902240003000010000904c80702ffffff00090506020002c60006090582020002"], 0x0) (async) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000640)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r9, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xdc, 0x19, 0xb, 0x0, 0x0, {0x9}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x9}, @nested={0xb8, 0x1, 0x0, 0x1, [@typed={0xb1, 0x0, 0x0, 0x0, @str='\x1eH)R\xc1\xd4\x11o\xfb\xa2\x85\x1d\xc7\xac \x0e\xbd.\t\xdfq\x8b\xa0&\xf1\x1d\x94j\xdc\x92\xa6 \xc5P%\xe7\x1e\xf4\'\r\x98\xcf\x14\xb3\xb7\x90\x9dZl\xd5\xb8\xaa\vJV^\xaeq7\'\xfc]e\x19*Y\xcc\xcf:\xb3T\xdf\xe4\x99UW\f\x14\xc3\xd2\f\xb1\xdc\xc5\x91\xc0\x11\xea\xd6\xee\x8d\x9c\xe5\x1cC\x1c\xbbr\xd7V\x90\x91\x8f\xf7\x8f\nD|\xa5\x8b\x9e\xc3x\'9\xf0=u7\xa2\x9cK6\x06\xcb\xd4\x04\xe71\xbf\xf4|.\xb4\x99\x15\xb2\x91\x14\xed!\xecP\xe4\xc2h[\x00.Q\x96\xda\'\xd4}\xe1\xa4`\x87\x95=d\x80yi\x8d\xda\x89\x1bC\x16~\xb2'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r6}]}, 0xdc}}, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="687567653d77697468696e5f73697a652c6e725f626c6f416b733d20352c6e725f696e6f6465733d38393421f5aa6a706b33336d2c6d6f64653d30303030303030303030303030303030303030303031302c726f6f74636f6e746578743d73746166665f"]) 16.659282584s ago: executing program 6 (id=384): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x145, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xa0}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20080}, 0x4040040) sendmsg$kcm(r2, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000480)) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x1, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2a, r1, 0x8, &(0x7f0000000240)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x2, 0x6, 0xe3a}, 0x10, 0x0, r1, 0x5, &(0x7f0000000380)=[r1, r1, r1, r1, r1, r6], &(0x7f0000000400)=[{0x2, 0x5, 0xf, 0x9}, {0x5, 0x3, 0x6, 0xb}, {0x4, 0x5, 0x7, 0x5}, {0x3, 0x1, 0x9, 0xb}, {0x0, 0x1, 0x3, 0xa}], 0x10, 0x7, @void, @value}, 0x94) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) delete_module(0x0, 0xa00) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r8, 0x80184151, &(0x7f0000000000)={0x0, 0x0}) 16.512267967s ago: executing program 1 (id=385): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x18, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x5, 0x2}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x20001) socket$inet_udp(0x2, 0x2, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)) write$dsp(r3, &(0x7f00000001c0)="5cba91", 0x3) write$dsp(r3, &(0x7f0000000080)="cd", 0x1) write$dsp(r3, 0x0, 0x0) close(r3) fcntl$setsig(r2, 0xa, 0x21) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xc, @remote, 'ip6tnl0\x00'}}, 0x1e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b83e93405820051075090102030109021b0001000000000904000001a0"], 0x0) fanotify_init(0x0, 0x0) 13.715795661s ago: executing program 4 (id=388): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4622, 0x1000000080000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000000000002900000032000000000001b800000000"], 0x18}, 0x20004040) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) r3 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x16c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_open_dev$dri(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x8, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b193d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca41f80026d1a8554fe581b59ded130e04d528539f3d34fd7e3120715b88d64a02447045df87f9ea917de000000003edf72fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x16) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x59) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 13.271085824s ago: executing program 6 (id=390): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 12.355165896s ago: executing program 6 (id=393): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4622, 0x1000000080000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000000000002900000032000000000001b800000000"], 0x18}, 0x20004040) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) r3 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x16c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_open_dev$dri(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x8, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b193d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca41f80026d1a8554fe581b59ded130e04d528539f3d34fd7e3120715b88d64a02447045df87f9ea917de000000003edf72fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x16) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x59) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 12.224039143s ago: executing program 1 (id=394): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4622, 0x1000000080000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000000000002900000032000000000001b800000000"], 0x18}, 0x20004040) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) r3 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x16c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_open_dev$dri(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x8, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b193d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca41f80026d1a8554fe581b59ded130e04d528539f3d34fd7e3120715b88d64a02447045df87f9ea917de000000003edf72fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x16) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x59) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 11.04493769s ago: executing program 4 (id=396): read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002040)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000002140)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000041c0)={0x8, 0x0, {}, {0xee00}, 0xf, 0x80000001}) newfstatat(0xffffffffffffff9c, &(0x7f0000004200)='./file0\x00', &(0x7f0000004240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000042c0)={0x0, 0x0, 0x0}, &(0x7f0000004300)=0xc) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000004340)={0x328, 0x0, r0, [{{0x3, 0x0, 0x401, 0x5, 0x5, 0x3, {0x5, 0x0, 0x3, 0x3, 0x8, 0xfffffffffffffff8, 0x5088, 0x9, 0xfff, 0x2000, 0x5, 0x0, 0xffffffffffffffff, 0x8001, 0x6}}, {0x4, 0x7, 0x1, 0xe, ':'}}, {{0x4, 0x2, 0x4, 0x6b3e, 0x49ca, 0x9, {0x3, 0xfffffffffffffffd, 0x4, 0xfffffffffffffff9, 0x8000000000000001, 0x5, 0x3, 0x5, 0xe, 0xc000, 0x7c2, r1, r2, 0x6, 0xd7}}, {0x5, 0xaf38, 0x0, 0x40}}, {{0x2, 0x3, 0x1, 0x0, 0x8, 0x6, {0x5, 0x7, 0x2, 0x80, 0x80000001, 0x5, 0x80, 0x9, 0xc, 0x2000, 0x2, 0x0, 0xffffffffffffffff, 0x5}}, {0x4, 0xbc45, 0x5, 0x3, 'j(^[]'}}, {{0x4, 0x3, 0x3, 0x2, 0x9, 0x6, {0x2, 0x2, 0x401, 0x4, 0x7, 0x8, 0x8, 0x9, 0x4, 0x8000, 0x80000001, r3, 0xffffffffffffffff, 0x401, 0x1}}, {0x2, 0x7fffffffffffffff, 0x1, 0xa, ':'}}, {{0x6, 0x2, 0x8, 0x6, 0x5, 0x7, {0x0, 0xfffffffffffffc00, 0x1, 0x200, 0x401, 0x236, 0x8, 0x5, 0xffffffc0, 0xc000, 0x725, r4, r6, 0xf782, 0x8001}}, {0x6, 0x1, 0x3, 0x4, '+-}'}}]}, 0x328) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000004680), 0xc8001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000004700)=@filter={'filter\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x138, 0x258, 0x258, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, &(0x7f00000046c0), {[{{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0xff000000, 0xff000000, 0xffffff, 0xffffff00], 'ip6_vti0\x00', 'pimreg\x00', {}, {}, 0x84, 0x40, 0x4, 0x2}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x80, 0x2, 0x0, [0xff80, 0x4d, 0x5, 0x6, 0x6, 0x1, 0xffff, 0x4, 0xd9cd, 0x1, 0xfffb, 0xea, 0xb7, 0x1, 0x40, 0xa0], 0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'macvlan0\x00', {0x7}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0xfc}}, @common=@hl={{0x28}, {0x3, 0xdc}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xff000000, 0xff000000, 0xffffff00], 'gre0\x00', 'tunl0\x00', {}, {}, 0x62, 0x5, 0x3, 0x59}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "d98d", 0x1}}, @common=@icmp6={{0x28}, {0xe, 'B=', 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000004bc0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x4e22, 0x0, 0x4e22, 0x43, 0x2, 0x80, 0x0, 0x6, 0x0, r1}, {0x2, 0x8000000000000000, 0x0, 0x5, 0x10001, 0xd, 0x0, 0x2}, {0x7, 0x3, 0x1, 0x8001}, 0xfffffffb, 0x6e6bbc, 0x2, 0x1, 0x2, 0x1}, {{@in6=@private0, 0x4d6, 0xff}, 0xa, @in=@empty, 0x3507, 0x4, 0x2, 0x5, 0x6, 0x0, 0xc6}}, 0xe8) sendmsg$nl_xfrm(r8, &(0x7f0000004e80)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004e40)={&(0x7f0000004d00)=@newsa={0x11c, 0x10, 0x200, 0x70bd29, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4e23, 0x0, 0x4e23, 0x6, 0xa, 0x20, 0x20, 0xc, 0x0, r4}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x6c}, @in=@broadcast, {0x50f, 0x1, 0x8, 0x9, 0x7, 0x4, 0x7, 0x9}, {0x8, 0x6, 0xb5dc, 0x7fffffff}, {0x669a, 0x2, 0x20}, 0x70bd25, 0x3502, 0xa, 0x1, 0x67, 0x6}, [@user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x31}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4}, 0xa4d2cf2d7c7a69e2) write$binfmt_script(r8, &(0x7f0000004ec0)={'#! ', './file0', [{0x20, '\xff\xff'}, {}, {0x20, '\xff*\''}, {0x20, 'j(^[]'}, {0x20, 'ip6_vti0\x00'}, {0x20, '9'}, {0x20, '\x8d%'}, {0x20, '\xff\xff'}, {0x20, '&\'&@!{&@-!@^'}], 0xa, "5d4737bb7effa9db462ff210dbc5e1724fb5015e253e04fe1023a521f32586e542b44e20d414f9ed07c2a0e241c2a06e460de7abb4c727a90b60d371fe3acd42bcb120b92797decd6e42c8014295af3572cc8677fe28087f06556ccb1dd9dc809f5c5e6194a2acd724cf630ec4d806b6175d9791f15e04b3718fa505"}, 0xb4) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000005100)={0x24, &(0x7f0000004f80)={0x20, 0x4, 0x36, {0x36, 0x2, "b2d7e2cca031bba29791ca53e69d925eaa6a8804642dd75811857b8c78d3f5f4888e29ee117f848b9e41f861d7d3bf01f0dc4b62"}}, &(0x7f0000004fc0)={0x0, 0x3, 0xb0, @string={0xb0, 0x3, "4e7a3e249c07e4b54618c429553e6fe31dbcd9a28a2e39e0af70fb165e827a930233fbbaf590e45a24a00bc28df8f06d7fca0c1636a4c6e24b49c3ba9fde983987b5ebc73acb0874f1483c6f73c9142e97061b490090b9fb68e7b10279c213d150314a363c04c5d8566b450b118395df466ab25785e3528fe9bbfb6ffbf64d16c969b8d6d8b8f44f22c8f6e0e043e55827ab5153658de56dc4c670df531bc17535fd6ee99fecafc937a49e397cb1"}}, &(0x7f0000005080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "6d911938"}]}}, &(0x7f00000050c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0xc24}}}}, &(0x7f00000052c0)={0x2c, &(0x7f0000005140)={0x0, 0xf, 0x28, "56f21c82911073f70602c0160b0d92e4947396279390217790843a2576ed5e08a09ba5b4f5ec5524"}, &(0x7f0000005180)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000051c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000005200)={0x20, 0x1, 0x70, "46e4ec130ad2189f99fb3aa5fc19afae159bb6963009fddce6a5dc733bab3e7f577ca1932d7b65dae9334823f08b291684cd0a83aa159cdcf5f0ea06b3749f65d41bdbd15700eac6f16f9dd5adf99479bbe1fb122d91e77c2155350288cf0aa0bf28396eb255293237db9ddbd215a584"}, &(0x7f0000005280)={0x20, 0x3, 0x1, 0xc}}) sendto(r8, &(0x7f0000005300)="fe06cac8d014043a4595e1a10a962ca962770baed9924aacb294a23b95892feb75ac40cff08bd813e447635cc1a3d3810d8ab79ff4018faf4ecb58a2ece73f2ab972ecae5f", 0x45, 0x8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r5, 0x0, &(0x7f0000005380)) ioctl$TCXONC(r8, 0x540a, 0x0) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f00000053c0)=0x1, 0x4) r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000005400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0x284, &(0x7f0000005480)={[{0x69, 0x4e00, "13215aa27416c7577c2fe25669178db841526b58268376b34f59006d5ee59f0d0934c62aeb68789777ba9d9c5bcbc82c92504b600b4a9ea3f324f464433a8456d7e66069cb061303c944b6ae39e6467af309e2d7374e6b3981003980c90e3fb9195073ae0faa103910"}, {0x75, 0x4e00, "aaf2300617c1444d2575a7738cc6d365277a7218255cd1e32567dc42a22b562b06f0dd4788b0fcfeab45186f6b559f160372673bd127a833f163f954186c3503aceafca129a99d272aac3a5527a1848d7d133f4351760924c63c019ad05981a62824bf913e60e9ec7591b124cc83f0d82cf5463df0"}, {0xfc, 0x4e00, "eb1c1a21f8fef960fa99feb40b35cd6ee55c68c82e3f46e2aeb33ecffb8cdae2406833a324c79558433fde10cdf609afc70e97616bec9f8bbbafbf2c2517ca50a6ed38bac95ba06364d286fe7e9b47af31e0da997d134e0deaa79a37b16d09058cf69e8ba11a4586526fca1d24b79efad6eb92e28ae10d4defcc4b16dc3664f9bd57779c23871452573a6b90ffae56eefd6c438865f13423de07916f525c4cc3cd1d2f16679cc53586bb51aca9f4c337a4f9cbebdb7a43a4ec4b6a1e868db1e855b4def7e484de9b9d1ccd3a3850d562eec8d20504eb4416977ab899d53474554fbbcce8d0de578cf939bde230ce2989ee6b2a98c33da4da8e31dfc4"}, {0x92, 0x4e00, "cd1037b8ce339d0b0baeaa4a19a4a5f044391c00180be2dcae40bd10cd6397387da3ff5e3c5a6c44e224083e2d58a16677256e35275825a443d94e0c0a5a0324c94758b3e202871195a7d4e5d00b7a74bb70f1052b8febd49472c9538a5075fa642286e99c22d95e02eb41ad10437e20174aa69ffaee9075245fee75deb88637d8f89c4b025a390710f0a459e3d8cf1d89d0"}]}) pwritev2(r8, &(0x7f0000005a00)=[{&(0x7f0000005740)="19e8d5bc1fdcacd2bf3ad2599be4ac9823d867ceb95ac0ba9ac9f5d503", 0x1d}, {&(0x7f0000005780)}, {&(0x7f00000057c0)="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", 0xff}, {&(0x7f00000058c0)="fee1132964e6198da17ab10f32518abffdf2aec69d3c0ee7fd7454eb382827d146b8dc5386f72abb4a3f9eb55485d8d473387cc152f9fd1bfd5946dfabdbc9dc3acc3878062055cacbc34406794224e77f937f1b4a9c95b4fe4de3809973b5c17e8e483e7e57eaa54b2f8640fd85fe586765a92da541e2a3019625609a956970d99bc2a960fead3fd2a15f081643fafece58b31be137802e6674456e8a1d0112dab8adb8ed6ed1fe40dd8ea7a51709003c25f29fd92c9ecf03e668a8bb491e0f444549efccd81e72477e718eda3268c3f8ff1c75aa2789d179d83f53ea36347fdb8067b1706e007dab", 0xe9}, {&(0x7f00000059c0)="e91a8a78dd63a09972972a980a083efd9a175cb1d2592b44899df1a5deee90d889b0f47e0d5ecf88071d6d50669a16fc118d8b91cfed", 0x36}], 0x5, 0x2000, 0x2, 0x5) io_uring_enter(r8, 0x145d, 0xae36, 0x20, &(0x7f0000005a80)={[0x2]}, 0x8) recvmmsg(r7, &(0x7f000000b3c0)=[{{&(0x7f0000005ac0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000006d80)=[{&(0x7f0000005b40)=""/165, 0xa5}, {&(0x7f0000005c00)=""/150, 0x96}, {&(0x7f0000005cc0)=""/4096, 0x1000}, {&(0x7f0000006cc0)=""/60, 0x3c}, {&(0x7f0000006d00)=""/65, 0x41}], 0x5, &(0x7f0000006e00)=""/196, 0xc4}, 0x1ff}, {{&(0x7f0000006f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000009480)=[{&(0x7f0000006f80)=""/1, 0x1}, {&(0x7f0000006fc0)=""/80, 0x50}, {&(0x7f0000007040)=""/4096, 0x1000}, {&(0x7f0000008040)=""/224, 0xe0}, {&(0x7f0000008140)=""/181, 0xb5}, {&(0x7f0000008200)=""/127, 0x7f}, {&(0x7f0000008280)=""/157, 0x9d}, {&(0x7f0000008340)=""/4096, 0x1000}, {&(0x7f0000009340)=""/229, 0xe5}, {&(0x7f0000009440)=""/47, 0x2f}], 0xa, &(0x7f0000009540)=""/188, 0xbc}, 0x6e51}, {{0x0, 0x0, &(0x7f000000a9c0)=[{&(0x7f0000009600)=""/161, 0xa1}, {&(0x7f00000096c0)=""/88, 0x58}, {&(0x7f0000009740)=""/18, 0x12}, {&(0x7f0000009780)=""/72, 0x48}, {&(0x7f0000009800)=""/165, 0xa5}, {&(0x7f00000098c0)=""/21, 0x15}, {&(0x7f0000009900)=""/4096, 0x1000}, {&(0x7f000000a900)=""/179, 0xb3}], 0x8, &(0x7f000000aa40)=""/61, 0x3d}, 0x5}, {{&(0x7f000000aa80)=@rc, 0x80, &(0x7f000000ad80)=[{&(0x7f000000ab00)=""/144, 0x90}, {&(0x7f000000abc0)=""/191, 0xbf}, {&(0x7f000000ac80)=""/48, 0x30}, {&(0x7f000000acc0)=""/183, 0xb7}], 0x4, &(0x7f000000adc0)=""/130, 0x82}, 0x6}, {{&(0x7f000000ae80)=@hci, 0x80, &(0x7f000000b0c0)=[{&(0x7f000000af00)=""/93, 0x5d}, {&(0x7f000000af80)=""/111, 0x6f}, {&(0x7f000000b000)=""/111, 0x6f}, {&(0x7f000000b080)=""/9, 0x9}], 0x4, &(0x7f000000b100)=""/84, 0x54}, 0x9}, {{&(0x7f000000b180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f000000b200)}, 0x7fff}, {{&(0x7f000000b240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f000000b2c0), 0x0, &(0x7f000000b300)=""/180, 0xb4}, 0x3}], 0x7, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r10, 0x894b, &(0x7f000000b580)) writev(r7, &(0x7f000000c8c0)=[{&(0x7f000000b5c0)="dde0129e17bf52291973", 0xa}, {&(0x7f000000b600)}, {&(0x7f000000b640)="4f629405b01dcbe78668c44f56fe970690182ebc543f83e25ce33284a07e4698acb4ebd322ea31a79247967ce54995098bb5374c71e3792dd580f0d263a2bec78cb644ce5a0f5656aa01d1fd24e6c9f7756afe7c11b984cfc0bd8332a1b2c935f5893a84063be82255e72fcf1ef80694a06ca3bebb1bb8dc8eebbb76cb094eaaacbea5", 0x83}, {&(0x7f000000b700)="47631a7d54d642ec7f5fbf9b2a409cfee3c7c2752662249f1f46b903dff72f01429fb07eab817dfa3d84670ee495a00c48953ed8215369fd4376ce74bdc23a72c584df07b5c81ac57c9d836b5e1a68eba9c3988546d677598c80ddffaf", 0x5d}, {&(0x7f000000b780)}, {&(0x7f000000b7c0)="3111b0fad8746b61e44ecd1491b55571aa43842ab00064668eb26bca5c48f01abe52285cd8aeef77ce70f3d43825e855d7ce5f665310249122e81b525be9faee8955004bd8456c124867464cb55dc33dc6e6ffd56dd4a6af3f367d44287826c2b748855083e9385cb05338355c7c317980a7c062d9ec22283f107762b7068004d10816401137acdb10d0d12eb6", 0x8d}, {&(0x7f000000b880)="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", 0x1000}, {&(0x7f000000c880)="5a123121bf1e57c158385c8dbf815dbe444cc8253f79b852bebc2684ccc5bba3e7fd5ef23038415753b360f986aedc811267b6ff55230869fa53007f2075c5", 0x3f}], 0x8) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0x10d8, &(0x7f000000c940)={[{0x14, 0x4e00, "63f3d28393fee59ebada91df66764494d614b4de"}, {0x1000, 0x4e00, "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"}, {0x72, 0x4e00, "60ab516d3fd4a4abfcd8252eb8d2f9db1798b5f5f0c862b3f532dd490bc89ece22c4510b4aeec1f265a9380b007d3c5027ba21f9c19e728b6f2e94eeb25eeeef24beee2c0b7fea47115d0ddd174a617786a4af198d724df60d5ea9eee016a9ab7eb108e73f14db31dba71d82f1218201a7ef"}, {0x40, 0x4e00, "c2fa133363a6afbf055ba1d4813ad18f1787ce90b1414b0db96862840c189940b6dd99f65ade98313d8aab903ca303f156d105ad29231d1f027ce583b4a40c98"}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x10, r8, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000000da40), 0xd4000, 0x0) getsockopt$MRT6(r10, 0x29, 0xd0, &(0x7f000000da80), &(0x7f000000dac0)=0x4) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f000000db40)={0x1, 0x9}, 0x2) 10.47784704s ago: executing program 6 (id=398): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) keyctl$setperm(0x5, 0x0, 0xfe70445d293c881) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x40) r7 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) r8 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffe, 0x1, 0x0, 0x1}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x21, &(0x7f0000000000)=r9, 0x1) 9.671557921s ago: executing program 1 (id=399): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x44010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) stat(0x0, &(0x7f00000006c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004900003800000000000690780a010102ac1414aa070b0441b613a31ed707e2440406010000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c2300009078000063c537f58223ab252cac5bf5408d0bd601ff213c8e6ae891e5d1f188127194f4d47ddaa44a32eece56030155407624b734feef1200"], 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="12010300a6ff0540cdabeecdb905000000010902220001000000000904000001010351000905f6fefffffff000072501"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) 7.909683446s ago: executing program 3 (id=401): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) 7.763716202s ago: executing program 4 (id=402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x10, 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000003c0)=0x9, 0x4) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) (async) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = fsmount(r0, 0x1, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x16, 0x0, 0x0, 0x8000, 0x0, r3, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0xb6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x800) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = accept4(0xffffffffffffffff, &(0x7f0000000700)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f00000006c0)=0xfffffffffffffec9, 0x0) recvfrom(r6, &(0x7f00000002c0)=""/131, 0x83, 0x10003, &(0x7f0000000200)=@llc={0x1a, 0x313, 0x4, 0x4, 0x2, 0x4, @multicast}, 0x80) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x0, &(0x7f0000000200)=0x23) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 7.704708439s ago: executing program 5 (id=403): r0 = socket$inet6(0xa, 0x2, 0x3a) recvmmsg(r0, 0x0, 0x0, 0x10102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x800) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_deladdr={0x34, 0x15, 0x200, 0x70bd26, 0x25dfdbfc, {0xa, 0x20, 0x4, 0xfe}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}]}, 0x34}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB="08001f0005000000050011000100000008001f000800000008002300010000000a"], 0x70}}, 0x0) 7.390006881s ago: executing program 3 (id=404): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x0, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x7fff, 0xffff2d37, 0xffffff01, 0x7, 0x86c4, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffdfff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0xfffffffe, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x3, 0x8, 0xfffffffe, 0x40], [0x10000007, 0x4, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x20000d, 0xea4, 0xffffffff, 0x4, 0x4, 0x7fff, 0x5a7c, 0x2e, 0x400, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0x18000, 0xffff, 0xfffffffe, 0x6, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x405, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0xfffc, 0x3, 0x5, 0x4003e7, 0xb, 0x5, 0x2, 0xffffffff, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x4, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x10000, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x8, 0x10000, 0x4, 0x7fff, 0x3, 0x2000a620, 0x5, 0x5, 0x1, 0x5, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x61fc, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x2, 0x9000000000400300, 0x8000000000000000, 0x6, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.835043333s ago: executing program 5 (id=405): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x3102810, &(0x7f0000000380)={'trans=unix,', {[{@noextend}, {@privport}, {@cache_readahead}, {@aname={'aname', 0x3d, '/proc/self\x00'}}, {@access_uid={'access', 0x3d, r1}}, {@directio}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@audit}, {@appraise_type}]}}) fchdir(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x10000, 0x0, 0x0, 0xc, 0x6, 0x72}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/205, 0xcd) 6.329259979s ago: executing program 1 (id=406): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0xfffffffffffffc47) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4844}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x2, 0x1b, &(0x7f0000000140)=ANY=[@ANYBLOB="120100030b5ec11003010902090000810930030000000000000000bb7e4bb256b1845e6bd4b25cc9d03ff881ce36de907fc11d84461c4c5f46b6ebd8487309b8a2d550a2b06eb3424a2be0a927c0e7c447cb6408ad9ed6ede524d23f1381e143801645d75343d631aa5ae6f13222e91e62cd135167b52062dffb5064241398c2c014f9bdf7d8affebe75af9829f9d5e44b595be004d4e30236ed55c105aa9f731c0283008f2a8f34404b3a5cff340d82159fbbc40c6811a446d556e9cc95688df6181a6cd6ef8e92317983b7ddb5053b52e4eeeb3fb987a903a249dcc07882"], &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x20000000) 5.977653614s ago: executing program 5 (id=407): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r0, 0x8921, &(0x7f0000000040)="a5b8039d") 5.850563582s ago: executing program 3 (id=408): semget(0x1, 0x3, 0x319) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000300)='veth0_to_team\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @loopback}]}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="be", 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r6}}], 0x20, 0x6044}, 0x6) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000900)={r6, 0x2c5, "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"}, &(0x7f0000000580)=0x2cd) sendmsg$inet_sctp(r3, &(0x7f0000000740)={&(0x7f0000000380)=@in={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000500)="a515fb9a86ab", 0x6}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000840000000700009a781a93c37ffa773687d011ec00ac1414bb000000003000000000000000840000000100000017b543060800000002000000ff7f00", @ANYRES32=r7, @ANYBLOB="20000000000000008400000008000000ff020000000000000000000000000001"], 0x68, 0xc0}, 0x2000c010) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019400)=""/102397, 0x18ffd) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x4c, 0x2a, &(0x7f00000000c0)="ab73f4c5d55e31e6975b06e39a9a55118431d84d7f2745861dc9b52315e1e1e7c3fe1a1eab6d969c3b8f2e8cea916f1b59ed525f661ec2b6ebe7ec8a7ef7b7efa9cc878e7be699bbe1f0166e", &(0x7f0000000180)=""/42, 0xfffffffc, 0x0, 0x35, 0xee, &(0x7f0000000200)="69947f76c45cff0b29c82f6bbd92db2a54668354dafb0140fbdd4b00f10e6fd595cde87f02c2306fb0f13e0b4b50e008d1dc23e688", &(0x7f0000000400)="eec664c9c454e5ea9c550a4185ef47f604cc1cf7ad3082e5db4b1492e104512700b0366447f5779a53a0c14d28fe11f1ddc63f9afa2ddc50c62516b62c38b294b342d0f8cb954160466686bd9f47b655f50046e227a230b8fac01125427bbe6ab70652c2c296a20e3a86c8141a7cfe7e4ccdaf4215fe6f3c1908dfc87e486689314b1f470daaaa3c1e71f019099e21b1298f7107a9b657f00a014a749100b2000b40a3c2dac77ec700806201684a89e13290670dfca4df595fb82329020def26ded4fe9085df4658b0a9b6bda4e54d0760577905531e8e69730da3fb74c38c739c2f72c5ef19cc788513858ddf99", 0x0, 0x0, 0x6}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) 5.509448045s ago: executing program 4 (id=409): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000080000000000000001000008b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000a50000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x2, 0x2, 0x0, 0xc}, {0x4, 0x5, 0x10}, {0x0, 0x5, 0xf, 0x1}, {0x1, 0x2, 0x5, 0xc}], 0x10, 0xfffff000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e24, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) sendmmsg(r5, 0x0, 0x0, 0x0) request_key(&(0x7f0000000040)='logon\x00', 0x0, &(0x7f00000002c0)='\xa2\\\x04\xe9\x178\x1b\xda<\x95\x82o\xf8\x06\x1e\xfbPm\x87\xa0E<\x99b\xc2\x9c\xfd\xb5T\xfd\x1e\x82\x83\xbc\xd9\a\xd5\xd3\x88\xe3D~\xbd\xe8\xaa\xfe>\xd8\xa1\xb3M\x00\t\x00\x00\x00\x00\x00\xe5\xff\x00\x00\a\x00\x00\x00\x00\x00\xf0\x00\x00\\Ak\xbe\xec\x0e\x19\xe1\xca@\xb2\xf1', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005100)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300030000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054dedbb92f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74d3c89b3c95437bf06da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77f0100000000000000216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd1000080000c4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c181e00000000000000e2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000e96eb315fd324df2618c0b36d6dddbc70c12522ffa75582869dc76d46f87e43824394c5cdacc799bc0354a1cee908124b6ac5d9319c735e9996fee816a99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r7}, 0x8) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x101a02, 0x0) sendfile(r8, r8, 0x0, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 4.058172476s ago: executing program 4 (id=410): unshare(0x28020480) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004082, 0x0) fadvise64(r0, 0x4, 0x0, 0x1) 3.958579965s ago: executing program 3 (id=411): pipe2(0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2a, 0x2, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x1000000000, 0xc0500) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x50}}, 0x4048010) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) eventfd(0x0) ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_ipv6host(r4, &(0x7f0000000040)=@l1={{0x3, 0x3a, 0x9, 0x3a, 0x200, 0x3a, 0x8001, 0x3a, 0x8000, 0x3a, 0x9bdc, 0x3a, 0x1, 0x3a, 0x1}, 0x20, '\\x#'}, 0x9c) socket$nl_netfilter(0x10, 0x3, 0xc) 3.830340029s ago: executing program 5 (id=412): syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = add_key(&(0x7f0000000340)='cifs.spnego\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)=@keyring={'key_or_keyring:', r4}) r5 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000140)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x10}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) r6 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r6, 0x4, 0x8000000000000000, r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071120f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0c01000027000100001b6f4a6a5c5a72721e0101000000000000000000000000ac14140d0000000000000000000000000000000000000000020000002c000000", @ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="0000000000000000bb0012006d6f72757331323830000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007803000000010000ae1aa9830a2450db2610b50f293fdded0a20782252142d16f3e40f6c9f62f41861999ceab913edc8b6d62cd384608e4d0aee191de80882acefef4e6f69d3415ec6e3586d5a977932017f77a545c38bbc53d5df7a86a986b4c45f1f8245045a7ddfe4684e"], 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x0) close_range(r7, r7, 0x2) 3.651310713s ago: executing program 6 (id=413): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0, 0x180f}, 0x101}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001280)=""/4119, 0x1017}, {&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f0000000580)=""/129, 0x81}, {&(0x7f00000022c0)=""/4081, 0xff1}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000380)=""/165, 0xa5}], 0x6}, 0x6}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) 3.645005575s ago: executing program 4 (id=414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200006b80", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32], 0x48) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, 0x0}], 0x1, 0x67, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="12010802000000086a0536034000010203010902"], &(0x7f0000000780)={0x0, 0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="050f050018"]}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000640)=0xdddd1000) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x40, 0x3, 0x4, '\x00', 0x8}) ioctl$KVM_RUN(r7, 0xae80, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000008462718d501551287c0042b519100000090000003c000380140002007663616e3000000000000000000000000800030002000000080001000100000014000600ff010000040000000000000000000001"], 0x50}}, 0x48000) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xfffffeff}, {0x6, 0xa, 0x0, 0x8eb6}]}) write$ppp(r8, &(0x7f0000000440)='\x00\x00', 0x2) 2.51238697s ago: executing program 5 (id=415): r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r2}) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x0, 0x1}}}}}}}}}, 0x0) 1.901469375s ago: executing program 6 (id=416): sendmmsg(0xffffffffffffffff, &(0x7f00000057c0), 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xdc3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 1.887255762s ago: executing program 1 (id=417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'axA\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x10c) (async) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0) (async) statx(0xffffffffffffffff, &(0x7f00000027c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3100, 0x2, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003800)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x16b8, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x167c, 0x3, 0x0, 0x1, [{0x1678, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x13fc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "611f407e94fa710949d8b8ac23477088a42d44c10378092f449b1a19ab255088a7e68a5d7fed4f238fa6701d40581d7128ed3841a419659030f969a50358598e291816e92f8f9319d5605f99e36d0f79c09281b3e53c7721300ec65d918fba902c2f6ad0a159047a389dfadcd33bc87dc9987bc8c8e8da4a3896e1a5de87b65da63618e1ea646079853b6b53b1f9c5955b43568f0eb9dda2064acd3463dab88c491be3962057371bef1bb1649f65e52632b3b2ddba6b710a485a40f2c20237fda0f2a3f79185ec93ac2f5bb3"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xc0, 0x1, "931af8bef1239bf8892d8e7e32c5c5a73d082253cb973ad01b899489e6346ff0c81a065a39cac7171bc7349465507d312c429bea3322a0a52fd436750ca270809bb2fc240baa0a0ef7b4d00595167b72cd1457a7a7a07de8cd3b694f13952e43aba3c58c75b979af224ca40ef1fd4c1eb624a007854f611c014031533aa8545509d8f109c7717e032f89f49062750cba1273bfdaaa1ee758efff2ef5442bc5ffa3b145827e9e29f9e12ad655e88accf075584f3eb01444f55861a19f"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xa9, 0x1, "bba008470a2d6e7eb85b247bfe3a918235fa51dba38feeaaed5ff3cefdd3d13a35626e414d490b4a964a7f0e9413a94b6f17673c35bdc44ab368c1f4d9081f0b989d69a21298c1cd3aec5aa05f6b5e40a058e9cac7fcf3b9e2afbfd2a898bec7b9132ac114ad5fb0ca3007ca6f5313c23e1dad0e652e669cf693d4493c36be5096bf53e4a39f680d4151c8d839c505d44259fc81b0378fbf5b4dfb1c7d9ab6b1d47704f0d3"}, @NFTA_DATA_VALUE={0x91, 0x1, "570d5b15f58e37ca1ae2de380c67f1a397e76a3db12cec79804c7671d68512f1cdce07d62a5889325922a803cb7e4d4e5a88dc36b037fc178b50e5222907da6d88825886424190af164eca7b63c0472dcd6475db33e2215cd3ee65fee173314485056358b7fcf3bbf763bb910de39d82572eb0174beea7049a35e381b0ad245d94c1a1cb62c021f61a71a8fd08"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_USERDATA={0x37, 0x6, 0x1, 0x0, "2df1976d40fbcfdc67f5584e7e7a395fbaeeffde44dbdc4578e6d92c4581642b283a9ab967eb9232a98707434498e177c7d47a"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_USERDATA={0xc4, 0x6, 0x1, 0x0, "1998a1ec3c9fc09954c33fd45c8e5b580c0094943488f3d5cdf4ffcfad937216b6652c76235ce0034a93facba0ac335473ddb0cf95974824f6d6c1a9373d122935cfb2b348572af386132eb577c45d8d979c16573166518c325f0de7325b564314d0e18c8d63dd6f1e78691d5aff16de738de3c516ff3a18406108177f63a4c08e709c38197dfa9852345642236f7ea027581b43f4dfc2f25f4b4027356d94add86297c0b1a8c2c3d3f2bb03cbda2f8481af0c2632a15debad74b969dc0de2dc"}, @NFTA_SET_ELEM_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x9c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x85, 0x1, "94e3933e06b2ac835809e06935e29fe863b8bb67a2789b1221267e632dce16bffcc736362fccb1ee39a96b7f2e16f3f5bf5bbf8b47688320be8730c5cef4bd901f28c2e44f3239a52617e0c6f15e68fa1869a5b57ecb557695d8bdcc06d8debd3e7e8f04ef47a99deb8cba063a6e01cc90cb689755588f5d3c6c4e4bc1b03d0580"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_FLAGS={0x8}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x1740}}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x1054c2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x48, 0x140c, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc}, 0x40000c0) 1.694333734s ago: executing program 5 (id=418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x67fd, &(0x7f0000000400)={0x0, 0xfffffffc, 0x0, 0xfffffffc}, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2ea6, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2}) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x1f) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) clock_gettime(0xb, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/dev\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1004}], 0x1, 0x239, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES8=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xac3, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) dup(r8) 1.592925071s ago: executing program 1 (id=419): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b5", 0x1, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900), 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e31, 0x4, @empty, 0x3}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a80a0000060001000500000008000b000417005afeef092c000000"], 0x34}}, 0x0) r8 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x18, &(0x7f0000000280)=0x3, 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r9, 0x400, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000000)=0x3, 0x4) 1.533718039s ago: executing program 3 (id=420): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x1, 0xfffd}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) mmap(&(0x7f000039c000/0x3000)=nil, 0x3000, 0x1000006, 0x11012, r4, 0x0) dup3(r1, r2, 0x6700000000000000) ioctl$TIOCMBIS(r0, 0x5416, 0x0) 0s ago: executing program 3 (id=421): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000100)=0xd) r1 = socket$pppoe(0x18, 0x1, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x40001043, r2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0x6, 0x0) write$binfmt_misc(r5, &(0x7f0000000180)="7d33f89bb99c051493cab2037ccb611d26ad", 0x12) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000000)=0x5) r7 = syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r8, 0x1, 0x3d, &(0x7f0000002500)=0x96c, 0x4) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) r9 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r9, 0x0, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x1) kernel console output (not intermixed with test programs): _slave_0: entered promiscuous mode [ 82.658709][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.665864][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.673257][ T5830] bridge_slave_1: entered allmulticast mode [ 82.681362][ T5830] bridge_slave_1: entered promiscuous mode [ 82.714683][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.721981][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.729772][ T5819] bridge_slave_0: entered allmulticast mode [ 82.736540][ T5819] bridge_slave_0: entered promiscuous mode [ 82.765961][ T5833] team0: Port device team_slave_0 added [ 82.774333][ T5833] team0: Port device team_slave_1 added [ 82.789015][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.796175][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.804046][ T5819] bridge_slave_1: entered allmulticast mode [ 82.811675][ T5819] bridge_slave_1: entered promiscuous mode [ 82.825633][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.832937][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.840221][ T5825] bridge_slave_0: entered allmulticast mode [ 82.847147][ T5825] bridge_slave_0: entered promiscuous mode [ 82.856079][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.883884][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.895030][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.902462][ T5824] bridge_slave_0: entered allmulticast mode [ 82.909782][ T5824] bridge_slave_0: entered promiscuous mode [ 82.924600][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.932802][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.940217][ T5825] bridge_slave_1: entered allmulticast mode [ 82.947364][ T5825] bridge_slave_1: entered promiscuous mode [ 82.955989][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.973841][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.981155][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.007235][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.019835][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.029583][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.038281][ T5824] bridge_slave_1: entered allmulticast mode [ 83.045216][ T5824] bridge_slave_1: entered promiscuous mode [ 83.064550][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.104125][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.111983][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.138569][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.162163][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.173036][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.194892][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.206613][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.218556][ T5830] team0: Port device team_slave_0 added [ 83.234774][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.262785][ T5830] team0: Port device team_slave_1 added [ 83.300933][ T5819] team0: Port device team_slave_0 added [ 83.309575][ T5819] team0: Port device team_slave_1 added [ 83.336194][ T5825] team0: Port device team_slave_0 added [ 83.372407][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.379616][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.407066][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.420639][ T5825] team0: Port device team_slave_1 added [ 83.427094][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.434118][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.460551][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.472501][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.479628][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.505668][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.529523][ T5824] team0: Port device team_slave_0 added [ 83.561738][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.568971][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.595462][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.614254][ T5824] team0: Port device team_slave_1 added [ 83.624006][ T5833] hsr_slave_0: entered promiscuous mode [ 83.631822][ T5833] hsr_slave_1: entered promiscuous mode [ 83.638147][ T5826] Bluetooth: hci3: command tx timeout [ 83.638154][ T5823] Bluetooth: hci0: command tx timeout [ 83.666078][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.673256][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.699426][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.712196][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.719400][ T5826] Bluetooth: hci4: command tx timeout [ 83.722756][ T5829] Bluetooth: hci1: command tx timeout [ 83.725276][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.730913][ T5823] Bluetooth: hci2: command tx timeout [ 83.756603][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.825929][ T5830] hsr_slave_0: entered promiscuous mode [ 83.832333][ T5830] hsr_slave_1: entered promiscuous mode [ 83.839778][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.848373][ T5830] Cannot create hsr debugfs directory [ 83.854308][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.861582][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.888440][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.902282][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.909330][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.936023][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.977682][ T5819] hsr_slave_0: entered promiscuous mode [ 83.984064][ T5819] hsr_slave_1: entered promiscuous mode [ 83.991898][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.999623][ T5819] Cannot create hsr debugfs directory [ 84.107815][ T5825] hsr_slave_0: entered promiscuous mode [ 84.114269][ T5825] hsr_slave_1: entered promiscuous mode [ 84.121755][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.129539][ T5825] Cannot create hsr debugfs directory [ 84.190556][ T5824] hsr_slave_0: entered promiscuous mode [ 84.197560][ T5824] hsr_slave_1: entered promiscuous mode [ 84.203772][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.211539][ T5824] Cannot create hsr debugfs directory [ 84.517266][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.534403][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.546438][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.562830][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.615278][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.626193][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.652037][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.663469][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.728252][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.744865][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.767486][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.782314][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.845924][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.872730][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.883393][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.913060][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.985673][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.008531][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.031811][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.039576][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.064361][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.137633][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.150101][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.187501][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.195321][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.236520][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.243695][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.256534][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.272081][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.295546][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.302752][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.341981][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.349152][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.402741][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.431108][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.438245][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.449179][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.456311][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.475627][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.546292][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.562743][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.606075][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.622827][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.630019][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.656389][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.663606][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.691793][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.699023][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.718541][ T5829] Bluetooth: hci3: command tx timeout [ 85.726981][ T5823] Bluetooth: hci0: command tx timeout [ 85.776640][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.783855][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.796920][ T5823] Bluetooth: hci2: command tx timeout [ 85.802400][ T5823] Bluetooth: hci1: command tx timeout [ 85.810861][ T5829] Bluetooth: hci4: command tx timeout [ 85.943080][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.034466][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.140234][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.214723][ T5819] veth0_vlan: entered promiscuous mode [ 86.271075][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.305526][ T5833] veth0_vlan: entered promiscuous mode [ 86.333706][ T5833] veth1_vlan: entered promiscuous mode [ 86.355648][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.374736][ T5819] veth1_vlan: entered promiscuous mode [ 86.448080][ T5833] veth0_macvtap: entered promiscuous mode [ 86.471928][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.501101][ T5833] veth1_macvtap: entered promiscuous mode [ 86.517741][ T5819] veth0_macvtap: entered promiscuous mode [ 86.546450][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.571648][ T5819] veth1_macvtap: entered promiscuous mode [ 86.596423][ T5825] veth0_vlan: entered promiscuous mode [ 86.612709][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.634341][ T5824] veth0_vlan: entered promiscuous mode [ 86.645273][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.655490][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.664442][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.673369][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.697954][ T5825] veth1_vlan: entered promiscuous mode [ 86.713109][ T5824] veth1_vlan: entered promiscuous mode [ 86.738959][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.750611][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.764394][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.806516][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.817398][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.829797][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.850283][ T5825] veth0_macvtap: entered promiscuous mode [ 86.861289][ T5825] veth1_macvtap: entered promiscuous mode [ 86.899572][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.909724][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.919309][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.928697][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.960576][ T5824] veth0_macvtap: entered promiscuous mode [ 86.977197][ T5830] veth0_vlan: entered promiscuous mode [ 86.991562][ T5824] veth1_macvtap: entered promiscuous mode [ 87.016004][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.028365][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.038350][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.049240][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.060721][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.119341][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.141845][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.164827][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.177471][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.188702][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.202714][ T5830] veth1_vlan: entered promiscuous mode [ 87.213485][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.231769][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.252900][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.263508][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.279574][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.294305][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.307366][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.333352][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.355026][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.367162][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.375915][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.420379][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.439273][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.455534][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.473149][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.493136][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.503732][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.521297][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.575562][ T5824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.595940][ T5824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.606352][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.622180][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.655088][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.668838][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.746365][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.778327][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.786226][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.798964][ T5823] Bluetooth: hci0: command tx timeout [ 87.798975][ T5826] Bluetooth: hci3: command tx timeout [ 87.805359][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.819005][ T5830] veth0_macvtap: entered promiscuous mode [ 87.847934][ T5830] veth1_macvtap: entered promiscuous mode [ 87.878320][ T5826] Bluetooth: hci1: command tx timeout [ 87.878345][ T5823] Bluetooth: hci4: command tx timeout [ 87.883773][ T5826] Bluetooth: hci2: command tx timeout [ 87.916274][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.934522][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.986346][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.003375][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.021442][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.033270][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.049453][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.061036][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.072192][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.082409][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.093216][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.105402][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.183940][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.187257][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.209204][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.224037][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.239966][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.246928][ T5907] PKCS8: Unsupported PKCS#8 version [ 88.253621][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.273124][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.285168][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.295329][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.306295][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.323791][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.365317][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.373569][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.398764][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.411704][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.443773][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.466523][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.578189][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.588951][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.621964][ T3020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.659287][ T3020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.841550][ T47] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.099434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.201893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.274968][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.304173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.311274][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 89.333068][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.365941][ T47] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 89.399045][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.457404][ T47] usb 1-1: config 0 descriptor?? [ 89.470333][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.497078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.499837][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.508984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 89.569575][ T47] as10x_usb: device has been detected [ 89.592684][ T47] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 89.600629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.678120][ T5924] syz_tun: entered allmulticast mode [ 89.697333][ T47] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 89.790603][ T5930] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.828588][ T5931] syz_tun: left allmulticast mode [ 89.834295][ T47] as10x_usb: error during firmware upload part1 [ 89.844431][ T47] Registered device nBox DVB-T Dongle [ 89.863706][ T5931] syz_tun: entered allmulticast mode [ 89.882130][ T5826] Bluetooth: hci3: command tx timeout [ 89.882149][ T5823] Bluetooth: hci0: command tx timeout [ 89.958355][ T5826] Bluetooth: hci4: command tx timeout [ 89.959612][ T5823] Bluetooth: hci1: command tx timeout [ 89.963808][ T5826] Bluetooth: hci2: command tx timeout [ 90.281603][ T5943] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.291447][ T5820] usb 1-1: USB disconnect, device number 2 [ 90.332822][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 90.374781][ T5820] Unregistered device nBox DVB-T Dongle [ 90.386543][ T5820] as10x_usb: device has been disconnected [ 90.676321][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 90.689135][ T5951] ip6_vti0: entered promiscuous mode [ 90.694848][ T5951] ip6_vti0: entered allmulticast mode [ 90.872393][ T5953] veth0_vlan: entered allmulticast mode [ 90.947697][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.968196][ T5955] fuse: Bad value for 'fd' [ 91.095722][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 91.127488][ T5953] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.145891][ T9] usb 3-1: config 6 has an invalid interface number: 57 but max is 0 [ 91.150555][ T5957] bridge_slave_1: left allmulticast mode [ 91.170271][ T9] usb 3-1: config 6 has no interface number 0 [ 91.179090][ T5957] bridge_slave_1: left promiscuous mode [ 91.183704][ T9] usb 3-1: config 6 interface 57 has no altsetting 0 [ 91.186150][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.233686][ T9] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.00 [ 91.269910][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.280005][ T5957] bridge_slave_0: left allmulticast mode [ 91.285946][ T5957] bridge_slave_0: left promiscuous mode [ 91.287041][ T9] usb 3-1: Product: syz [ 91.308091][ T9] usb 3-1: Manufacturer: syz [ 91.310090][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.312737][ T9] usb 3-1: SerialNumber: syz [ 91.543475][ T9] usb-storage 3-1:6.57: USB Mass Storage device detected [ 91.816524][ T9] usb 3-1: USB disconnect, device number 2 [ 92.116983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.237110][ T976] cfg80211: failed to load regulatory.db [ 92.268597][ T1206] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.517046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.580780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.610343][ T1206] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 92.626906][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.650237][ T1206] usb 1-1: Product: syz [ 92.660370][ T1206] usb 1-1: Manufacturer: syz [ 92.683490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 92.694027][ T1206] usb 1-1: SerialNumber: syz [ 93.417813][ T1206] usb 1-1: config 0 descriptor?? [ 93.524642][ T1206] usb 1-1: interface 1 not found [ 93.541361][ T30] audit: type=1326 audit(1742921922.787:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5978 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4059d8d169 code=0x7ffc0000 [ 93.665390][ T30] audit: type=1326 audit(1742921922.787:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5978 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4059d8d169 code=0x7ffc0000 [ 93.729189][ T5982] netlink: 248 bytes leftover after parsing attributes in process `syz.1.20'. [ 93.739026][ T5982] unsupported nlmsg_type 40 [ 94.416225][ T30] audit: type=1326 audit(1742921922.797:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5978 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4059d8d169 code=0x7ffc0000 [ 94.528616][ T30] audit: type=1326 audit(1742921922.797:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5978 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4059d8d169 code=0x7ffc0000 [ 94.592535][ T30] audit: type=1326 audit(1742921922.797:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5978 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4059d8d169 code=0x7ffc0000 [ 94.634651][ T62] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 94.683973][ T30] audit: type=1326 audit(1742921922.797:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5978 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4059d8d169 code=0x7ffc0000 [ 94.738430][ T5922] usb 1-1: USB disconnect, device number 3 [ 94.778547][ T30] audit: type=1326 audit(1742921922.797:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5978 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4059d8d169 code=0x7ffc0000 [ 95.034704][ T30] audit: type=1326 audit(1742921922.997:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5978 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f4059d8d169 code=0x7ffc0000 [ 95.127705][ T30] audit: type=1326 audit(1742921922.997:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5978 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4059d8d169 code=0x7ffc0000 [ 95.150555][ T30] audit: type=1326 audit(1742921922.997:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5978 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4059d8d169 code=0x7ffc0000 [ 96.288511][ T6015] syz_tun: entered allmulticast mode [ 96.392577][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.485687][ T6016] batadv_slave_1: entered promiscuous mode [ 97.092644][ T6012] syz_tun: left allmulticast mode [ 98.686885][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 98.700260][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 99.441382][ T6050] IPv6: addrconf: prefix option has invalid lifetime [ 101.597513][ T6070] FAULT_INJECTION: forcing a failure. [ 101.597513][ T6070] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 101.630440][ T6062] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 101.677216][ T6070] CPU: 1 UID: 0 PID: 6070 Comm: syz.2.49 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 101.677250][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.677269][ T6070] Call Trace: [ 101.677276][ T6070] [ 101.677286][ T6070] dump_stack_lvl+0x241/0x360 [ 101.677341][ T6070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.677375][ T6070] ? __pfx__printk+0x10/0x10 [ 101.677408][ T6070] ? __pfx_lock_release+0x10/0x10 [ 101.677447][ T6070] should_fail_ex+0x40a/0x550 [ 101.677479][ T6070] _copy_from_user+0x2d/0xb0 [ 101.677514][ T6070] copy_msghdr_from_user+0xae/0x680 [ 101.677545][ T6070] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 101.677567][ T6070] ? __fget_files+0x2a/0x420 [ 101.677593][ T6070] ? __fget_files+0x2a/0x420 [ 101.677623][ T6070] __sys_sendmsg+0x209/0x350 [ 101.677659][ T6070] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.677703][ T6070] ? do_sys_openat2+0x155/0x1c0 [ 101.677751][ T6070] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.677783][ T6070] ? do_syscall_64+0x100/0x230 [ 101.677814][ T6070] ? do_syscall_64+0xb6/0x230 [ 101.677845][ T6070] do_syscall_64+0xf3/0x230 [ 101.677873][ T6070] ? clear_bhb_loop+0x35/0x90 [ 101.677906][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.677934][ T6070] RIP: 0033:0x7f64ca98d169 [ 101.677958][ T6070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.677975][ T6070] RSP: 002b:00007f64cb8c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.677998][ T6070] RAX: ffffffffffffffda RBX: 00007f64caba5fa0 RCX: 00007f64ca98d169 [ 101.678013][ T6070] RDX: 0000000000040004 RSI: 0000200000000480 RDI: 0000000000000004 [ 101.678027][ T6070] RBP: 00007f64cb8c9090 R08: 0000000000000000 R09: 0000000000000000 [ 101.678040][ T6070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.678052][ T6070] R13: 0000000000000000 R14: 00007f64caba5fa0 R15: 00007ffdbfa22e48 [ 101.678082][ T6070] [ 101.883594][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.121567][ T6088] tipc: Started in network mode [ 103.157241][ T6088] tipc: Node identity 40000001, cluster identity 4711 [ 103.186020][ T6088] tipc: Node number set to 1073741825 [ 103.549869][ T6087] mmap: syz.2.54 (6087) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.614161][ T6099] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 103.621068][ T6099] PKCS7: Only support pkcs7_signedData type [ 104.546862][ T5874] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.760335][ T6105] openvswitch: netlink: IPv4 tunnel dst address is zero [ 104.781706][ T6105] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 104.790014][ T5874] usb 5-1: config 0 has no interfaces? [ 104.795563][ T5874] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 104.856077][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.886152][ T5874] usb 5-1: config 0 descriptor?? [ 105.200623][ T6091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.230636][ T6091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.254662][ T6091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.272863][ T6091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.303460][ T5922] usb 5-1: USB disconnect, device number 2 [ 105.559777][ T6117] netlink: 'syz.3.59': attribute type 4 has an invalid length. [ 105.582737][ T6117] netlink: 'syz.3.59': attribute type 4 has an invalid length. [ 106.166536][ T6121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.167148][ T5922] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.395116][ T5922] usb 5-1: config 0 has no interfaces? [ 106.402370][ T5922] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e4.df [ 106.420818][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.449449][ T5922] usb 5-1: config 0 descriptor?? [ 106.730571][ T5922] usb 5-1: can't set config #0, error -71 [ 106.745395][ T5922] usb 5-1: USB disconnect, device number 3 [ 107.476859][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 107.906219][ T5874] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.086910][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 108.095841][ T5874] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 108.928317][ T6142] Cannot find add_set index 0 as target [ 109.055055][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.063259][ T5874] usb 1-1: Product: syz [ 109.070037][ T5874] usb 1-1: Manufacturer: syz [ 109.074703][ T5874] usb 1-1: SerialNumber: syz [ 109.088701][ T5874] usb 1-1: config 0 descriptor?? [ 109.353238][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.393433][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.431906][ T6132] netlink: 'syz.0.68': attribute type 1 has an invalid length. [ 109.455356][ T6132] ipip0: entered promiscuous mode [ 109.466287][ T6132] ipip0: entered allmulticast mode [ 109.595946][ T6156] netlink: 'syz.1.74': attribute type 4 has an invalid length. [ 109.615302][ T6156] netlink: 'syz.1.74': attribute type 4 has an invalid length. [ 109.699466][ T5874] gspca_main: sq930x-2.14.0 probing 2770:930c [ 109.708685][ T5874] gspca_sq930x: reg_r 001f failed -71 [ 109.730865][ T5874] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 109.758885][ T5874] usb 1-1: USB disconnect, device number 4 [ 110.307319][ T5874] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 110.481189][ T5874] usb 4-1: device descriptor read/64, error -71 [ 110.846116][ T6171] FAULT_INJECTION: forcing a failure. [ 110.846116][ T6171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.859499][ T6171] CPU: 1 UID: 0 PID: 6171 Comm: syz.2.77 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 110.859526][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.859538][ T6171] Call Trace: [ 110.859546][ T6171] [ 110.859554][ T6171] dump_stack_lvl+0x241/0x360 [ 110.859597][ T6171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.859630][ T6171] ? __pfx__printk+0x10/0x10 [ 110.859662][ T6171] ? scsi_block_when_processing_errors+0x37c/0x460 [ 110.859697][ T6171] ? __pfx_lock_release+0x10/0x10 [ 110.859736][ T6171] should_fail_ex+0x40a/0x550 [ 110.859767][ T6171] _copy_from_user+0x2d/0xb0 [ 110.859792][ T6171] sg_write+0x350/0xf20 [ 110.859816][ T6171] ? __lock_acquire+0x1397/0x2100 [ 110.859853][ T6171] ? __pfx_sg_write+0x10/0x10 [ 110.859881][ T6171] ? mark_lock+0x9a/0x360 [ 110.859941][ T6171] ? bpf_lsm_file_permission+0x9/0x10 [ 110.859969][ T6171] ? rw_verify_area+0x243/0x630 [ 110.859995][ T6171] ? __pfx_sg_write+0x10/0x10 [ 110.860021][ T6171] vfs_write+0x29f/0xd10 [ 110.860050][ T6171] ? __schedule+0x18c4/0x4c40 [ 110.860078][ T6171] ? __pfx_vfs_write+0x10/0x10 [ 110.860108][ T6171] ? __fget_files+0x2a/0x420 [ 110.860132][ T6171] ? __fget_files+0x39d/0x420 [ 110.860152][ T6171] ? __fget_files+0x2a/0x420 [ 110.860182][ T6171] ksys_write+0x18f/0x2b0 [ 110.860211][ T6171] ? __pfx_ksys_write+0x10/0x10 [ 110.860239][ T6171] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.860272][ T6171] ? do_syscall_64+0xb6/0x230 [ 110.860312][ T6171] do_syscall_64+0xf3/0x230 [ 110.860340][ T6171] ? clear_bhb_loop+0x35/0x90 [ 110.860373][ T6171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.860401][ T6171] RIP: 0033:0x7f64ca98d169 [ 110.860420][ T6171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.860436][ T6171] RSP: 002b:00007f64cb887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.860459][ T6171] RAX: ffffffffffffffda RBX: 00007f64caba6160 RCX: 00007f64ca98d169 [ 110.860474][ T6171] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000007 [ 110.860487][ T6171] RBP: 00007f64cb887090 R08: 0000000000000000 R09: 0000000000000000 [ 110.860500][ T6171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.860512][ T6171] R13: 0000000000000000 R14: 00007f64caba6160 R15: 00007ffdbfa22e48 [ 110.860541][ T6171] [ 110.861922][ T5874] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 111.363034][ T6152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.607367][ T5874] usb 4-1: device descriptor read/64, error -71 [ 111.678005][ T6177] netlink: 'syz.1.81': attribute type 10 has an invalid length. [ 111.803625][ T5874] usb usb4-port1: attempt power cycle [ 111.895452][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 112.239170][ T5874] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 112.627467][ T5874] usb 4-1: device descriptor read/8, error -71 [ 112.876862][ T5874] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 113.209619][ T5874] usb 4-1: device not accepting address 5, error -71 [ 113.217236][ T5874] usb usb4-port1: unable to enumerate USB device [ 115.870772][ T5872] IPVS: starting estimator thread 0... [ 116.256857][ T6212] IPVS: using max 28 ests per chain, 67200 per kthread [ 116.661182][ T6221] batadv_slave_1: entered promiscuous mode [ 116.802253][ T6221] batadv_slave_1: left promiscuous mode [ 117.067313][ T6224] FAULT_INJECTION: forcing a failure. [ 117.067313][ T6224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.208291][ T6224] CPU: 1 UID: 0 PID: 6224 Comm: syz.1.93 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 117.208322][ T6224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.208334][ T6224] Call Trace: [ 117.208341][ T6224] [ 117.208355][ T6224] dump_stack_lvl+0x241/0x360 [ 117.208396][ T6224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.208427][ T6224] ? __pfx__printk+0x10/0x10 [ 117.208455][ T6224] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 117.208482][ T6224] ? __pfx_lock_release+0x10/0x10 [ 117.208509][ T6224] ? _raw_spin_lock_irq+0xdf/0x120 [ 117.208536][ T6224] should_fail_ex+0x40a/0x550 [ 117.208567][ T6224] _copy_from_user+0x2d/0xb0 [ 117.208591][ T6224] restore_altstack+0x99/0x150 [ 117.208617][ T6224] ? __pfx_restore_altstack+0x10/0x10 [ 117.208646][ T6224] ? __task_pid_nr_ns+0x28/0x450 [ 117.208681][ T6224] __do_sys_rt_sigreturn+0x194/0x280 [ 117.208708][ T6224] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 117.208733][ T6224] ? do_syscall_64+0x100/0x230 [ 117.208762][ T6224] ? do_syscall_64+0xb6/0x230 [ 117.208791][ T6224] do_syscall_64+0xf3/0x230 [ 117.208818][ T6224] ? clear_bhb_loop+0x35/0x90 [ 117.208859][ T6224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.208886][ T6224] RIP: 0033:0x7fb148729359 [ 117.208904][ T6224] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 117.208920][ T6224] RSP: 002b:00007fb1496c0a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 117.208941][ T6224] RAX: ffffffffffffffda RBX: 00007fb1489a5fa0 RCX: 00007fb148729359 [ 117.208956][ T6224] RDX: 00007fb1496c0a80 RSI: 00007fb1496c0bb0 RDI: 0000000000000021 [ 117.208970][ T6224] RBP: 00007fb1496c1090 R08: 0000000000000000 R09: 0000000000000000 [ 117.208982][ T6224] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 117.208993][ T6224] R13: 0000000000000000 R14: 00007fb1489a5fa0 R15: 00007ffc847f83a8 [ 117.209022][ T6224] [ 117.637655][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 117.649811][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 117.663231][ T6242] veth1_to_batadv: entered promiscuous mode [ 118.870570][ T6248] netlink: 224 bytes leftover after parsing attributes in process `syz.3.100'. [ 123.044649][ T6290] netlink: 32 bytes leftover after parsing attributes in process `syz.4.112'. [ 123.207637][ T5872] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.327241][ T6292] netlink: 76 bytes leftover after parsing attributes in process `syz.3.113'. [ 123.386799][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 123.421564][ T5872] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 123.452854][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.467075][ T5872] usb 1-1: Product: syz [ 123.471344][ T5872] usb 1-1: Manufacturer: syz [ 123.476347][ T5872] usb 1-1: SerialNumber: syz [ 123.553971][ T5872] usb 1-1: config 0 descriptor?? [ 123.754053][ T6296] 9pnet: Could not find request transport: f~ [ 123.855696][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 124.126877][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 124.606858][ T5872] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 124.637517][ T5872] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 124.665201][ T5872] usb 1-1: USB disconnect, device number 5 [ 126.776961][ T47] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 126.786102][ T6338] netlink: 'syz.4.127': attribute type 4 has an invalid length. [ 126.803975][ T6338] netlink: 'syz.4.127': attribute type 4 has an invalid length. [ 126.977291][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 127.012073][ T47] usb 1-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 127.056441][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.065525][ T47] usb 1-1: Product: syz [ 127.075549][ T47] usb 1-1: Manufacturer: syz [ 127.085784][ T47] usb 1-1: SerialNumber: syz [ 127.126140][ T47] usb 1-1: config 0 descriptor?? [ 127.165021][ T47] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 127.443956][ T47] usb 1-1: USB disconnect, device number 6 [ 130.663455][ T6367] ubi31: attaching mtd0 [ 130.710375][ T6367] ubi31: scanning is finished [ 130.715364][ T6367] ubi31: empty MTD device detected [ 131.366883][ T6367] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 131.447765][ T6367] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 131.477232][ T47] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 131.526989][ T6367] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 131.547895][ T6367] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 131.590343][ T6367] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 131.636294][ T6367] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 131.648014][ T6367] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3730105047 [ 131.666904][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 131.689790][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.708920][ T6367] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 131.738872][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.748068][ T6376] ubi31: background thread "ubi_bgt31d" started, PID 6376 [ 131.791319][ T47] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.859048][ T47] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 131.885746][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.951666][ T47] usb 2-1: config 0 descriptor?? [ 131.973446][ T47] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 132.044137][ T5182] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 132.147939][ T5182] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 132.213710][ T6373] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 132.294507][ T5182] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 132.358838][ T6373] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 132.408557][ T6373] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 132.428760][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 132.442407][ T5182] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 132.452656][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 132.461636][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 132.470246][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 132.478832][ T5829] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 132.486170][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 132.540408][ T5182] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 132.767670][ T5821] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 132.786253][ T6373] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 132.798118][ T6373] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 133.083966][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.603598][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.622637][ T6373] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 133.814113][ T5182] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 133.937445][ T6373] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 134.175821][ T5182] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 134.547809][ T5823] Bluetooth: hci5: command tx timeout [ 135.032974][ T9] usb 2-1: USB disconnect, device number 2 [ 135.161538][ T6382] chnl_net:caif_netlink_parms(): no params data found [ 135.408410][ T6403] netlink: 'syz.0.145': attribute type 4 has an invalid length. [ 135.444463][ T6403] netlink: 'syz.0.145': attribute type 4 has an invalid length. [ 135.859810][ T6402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.976083][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.037241][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.148958][ T6382] bridge_slave_0: entered allmulticast mode [ 136.164460][ T6382] bridge_slave_0: entered promiscuous mode [ 136.198681][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.224984][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.389688][ T6382] bridge_slave_1: entered allmulticast mode [ 136.403082][ T6382] bridge_slave_1: entered promiscuous mode [ 136.597822][ T5823] Bluetooth: hci5: command tx timeout [ 137.372734][ T6421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.380746][ T6421] team0: Port device bond0 added [ 137.486601][ T6382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.557095][ T5876] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 137.569424][ T6382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.768259][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 137.803876][ T5876] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 137.853348][ T5876] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 137.880092][ T6382] team0: Port device team_slave_0 added [ 137.880974][ T5876] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 137.939500][ T5876] usb 4-1: config 1 has no interface number 0 [ 137.941507][ T6382] team0: Port device team_slave_1 added [ 137.989160][ T5876] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.310416][ T5876] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 138.415509][ T5876] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 138.452203][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.463342][ T6433] netlink: 'syz.0.154': attribute type 10 has an invalid length. [ 138.498837][ T5876] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 138.746991][ T5823] Bluetooth: hci5: command tx timeout [ 138.848712][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.855127][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.154'. [ 138.856494][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.904766][ T5876] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 139.037348][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.044478][ T6433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.052337][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.059531][ T6433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.085831][ T6433] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 139.109292][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.129983][ T5876] usb 4-1: USB disconnect, device number 6 [ 139.143654][ T5876] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 139.155562][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.244747][ T6382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.274417][ T6437] bridge_slave_1: left allmulticast mode [ 139.336944][ T6437] bridge_slave_1: left promiscuous mode [ 139.383309][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.507846][ T6437] bridge_slave_0: left allmulticast mode [ 139.513575][ T6437] bridge_slave_0: left promiscuous mode [ 139.528359][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.768602][ T6437] bond0: (slave bridge0): Releasing backup interface [ 140.636984][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.653817][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.745483][ T6445] netlink: 'syz.4.156': attribute type 10 has an invalid length. [ 140.767278][ T6382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.768797][ T5823] Bluetooth: hci5: command tx timeout [ 140.887912][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.156'. [ 140.948303][ T6445] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.955719][ T6445] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.994831][ T6445] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.002070][ T6445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.009570][ T6445] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.016798][ T6445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.040736][ T6453] FAULT_INJECTION: forcing a failure. [ 141.040736][ T6453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.079762][ T6445] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 141.089367][ T6449] bridge_slave_1: left allmulticast mode [ 141.096729][ T6449] bridge_slave_1: left promiscuous mode [ 141.119623][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.140877][ T6453] CPU: 0 UID: 0 PID: 6453 Comm: syz.0.158 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 141.140908][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.140921][ T6453] Call Trace: [ 141.140929][ T6453] [ 141.140937][ T6453] dump_stack_lvl+0x241/0x360 [ 141.140981][ T6453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.141019][ T6453] ? __pfx__printk+0x10/0x10 [ 141.141051][ T6453] ? __pfx_lock_release+0x10/0x10 [ 141.141090][ T6453] should_fail_ex+0x40a/0x550 [ 141.141123][ T6453] _copy_from_user+0x2d/0xb0 [ 141.141147][ T6453] copy_msghdr_from_user+0xae/0x680 [ 141.141178][ T6453] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 141.141209][ T6453] ? __fget_files+0x2a/0x420 [ 141.141234][ T6453] ? __fget_files+0x2a/0x420 [ 141.141264][ T6453] __sys_sendmsg+0x209/0x350 [ 141.141301][ T6453] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.141342][ T6453] ? do_sys_openat2+0x155/0x1c0 [ 141.141388][ T6453] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.141418][ T6453] ? do_syscall_64+0x100/0x230 [ 141.141448][ T6453] ? do_syscall_64+0xb6/0x230 [ 141.141477][ T6453] do_syscall_64+0xf3/0x230 [ 141.141503][ T6453] ? clear_bhb_loop+0x35/0x90 [ 141.141534][ T6453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.141562][ T6453] RIP: 0033:0x7fec5c98d169 [ 141.141579][ T6453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.141595][ T6453] RSP: 002b:00007fec5d8a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.141619][ T6453] RAX: ffffffffffffffda RBX: 00007fec5cba5fa0 RCX: 00007fec5c98d169 [ 141.141634][ T6453] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 141.141646][ T6453] RBP: 00007fec5d8a4090 R08: 0000000000000000 R09: 0000000000000000 [ 141.141659][ T6453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.141670][ T6453] R13: 0000000000000000 R14: 00007fec5cba5fa0 R15: 00007ffc6cbc68d8 [ 141.141700][ T6453] [ 141.360668][ T6449] bridge_slave_0: left allmulticast mode [ 141.366542][ T6449] bridge_slave_0: left promiscuous mode [ 141.406030][ T6449] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.464812][ T6449] bond0: (slave bridge0): Releasing backup interface [ 144.193399][ T6382] hsr_slave_0: entered promiscuous mode [ 144.232289][ T6382] hsr_slave_1: entered promiscuous mode [ 144.397925][ T6382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.405665][ T6382] Cannot create hsr debugfs directory [ 144.796037][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 144.796058][ T30] audit: type=1326 audit(1742921973.947:56): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=6466 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713918d169 code=0x7ffc0000 [ 144.830276][ T30] audit: type=1326 audit(1742921973.947:57): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=6466 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713918d169 code=0x7ffc0000 [ 145.579182][ T30] audit: type=1326 audit(1742921973.947:58): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=6466 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f713918d169 code=0x7ffc0000 [ 145.604442][ T30] audit: type=1326 audit(1742921973.947:59): auid=4294967295 uid=60928 gid=60928 ses=4294967295 subj=_ pid=6466 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713918d169 code=0x7ffc0000 [ 145.626591][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.636836][ T30] audit: type=1326 audit(1742921973.947:60): auid=4294967295 uid=60928 gid=60928 ses=4294967295 subj=_ pid=6466 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713918d169 code=0x7ffc0000 [ 145.658849][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.726940][ T30] audit: type=1326 audit(1742921973.947:61): auid=4294967295 uid=60928 gid=60928 ses=4294967295 subj=_ pid=6466 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f713918d169 code=0x7ffc0000 [ 145.850319][ T30] audit: type=1326 audit(1742921973.947:62): auid=4294967295 uid=60928 gid=60928 ses=4294967295 subj=_ pid=6466 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713918d169 code=0x7ffc0000 [ 145.928864][ T6486] netlink: 'syz.3.167': attribute type 10 has an invalid length. [ 145.986949][ T30] audit: type=1326 audit(1742921973.947:63): auid=4294967295 uid=60928 gid=60928 ses=4294967295 subj=_ pid=6466 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713918d169 code=0x7ffc0000 [ 146.009019][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.054734][ T30] audit: type=1326 audit(1742921973.947:64): auid=4294967295 uid=60928 gid=60928 ses=4294967295 subj=_ pid=6466 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f713918d169 code=0x7ffc0000 [ 146.076958][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.101699][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.109362][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.180641][ T30] audit: type=1326 audit(1742921973.947:65): auid=4294967295 uid=60928 gid=60928 ses=4294967295 subj=_ pid=6466 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713918d169 code=0x7ffc0000 [ 146.211300][ T6486] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.218652][ T6486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.226814][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.234044][ T6486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.251820][ T5876] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 147.037567][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.167'. [ 147.048667][ T6486] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 147.216878][ T6491] bridge_slave_1: left allmulticast mode [ 147.222609][ T6491] bridge_slave_1: left promiscuous mode [ 147.267787][ T6492] netlink: 'syz.4.168': attribute type 4 has an invalid length. [ 147.274808][ T5876] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 147.301883][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.312319][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.321201][ T5876] usb 1-1: Product: syz [ 147.330315][ T6491] bridge_slave_0: left allmulticast mode [ 147.331058][ T5876] usb 1-1: Manufacturer: syz [ 147.335996][ T6491] bridge_slave_0: left promiscuous mode [ 147.336219][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.344289][ T5876] usb 1-1: SerialNumber: syz [ 147.381770][ T6491] bond0: (slave bridge0): Releasing backup interface [ 147.390434][ T6497] netlink: 'syz.4.168': attribute type 4 has an invalid length. [ 147.431151][ T5876] usb 1-1: config 0 descriptor?? [ 147.446430][ T5876] usb 1-1: interface 1 not found [ 147.518550][ T1206] usb 1-1: USB disconnect, device number 7 [ 147.546850][ T976] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 147.613894][ T6382] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.748724][ T976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.770514][ T6382] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 147.801626][ T6382] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 147.853550][ T976] usb 2-1: config 0 has no interfaces? [ 147.882154][ T6382] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 147.884370][ T976] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 147.967529][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.359754][ T976] usb 2-1: config 0 descriptor?? [ 148.777291][ T5872] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 149.126016][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.169'. [ 149.202204][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.256214][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.569769][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.621769][ T976] usb 2-1: USB disconnect, device number 3 [ 149.655743][ T5872] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 149.696098][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.728371][ T5872] usb 4-1: Product: syz [ 149.742543][ T6382] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.753635][ T5872] usb 4-1: Manufacturer: syz [ 149.774094][ T5872] usb 4-1: SerialNumber: syz [ 149.814210][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.821441][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.830932][ T5872] usb 4-1: config 0 descriptor?? [ 149.888940][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.897127][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.166430][ T5872] viperboard 4-1:0.0: version 0.00 found at bus 004 address 007 [ 150.276535][ T5872] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 150.319383][ T5872] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 150.376985][ T5872] usb 4-1: USB disconnect, device number 7 [ 152.910528][ T6382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.091869][ T6539] loop6: detected capacity change from 0 to 64 [ 153.156025][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.166503][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.221935][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.231285][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.348034][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.357583][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.365499][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 153.406020][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.415253][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.424189][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.433415][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 153.441400][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.450710][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.464794][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.474075][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.486179][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.495399][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 153.536757][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.546093][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.564419][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.577351][ T6539] ldm_validate_partition_table(): Disk read failed. [ 153.769381][ T6539] Dev loop6: unable to read RDB block 0 [ 154.046804][ T6539] loop6: unable to read partition table [ 154.052945][ T6539] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 154.144813][ T6550] loop8: detected capacity change from 0 to 2 [ 154.198799][ T6550] Dev loop8: unable to read RDB block 2 [ 154.204457][ T6550] loop8: unable to read partition table [ 154.243535][ T6550] loop8: partition table beyond EOD, truncated [ 154.262412][ T6550] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 154.479452][ T5197] ldm_validate_partition_table(): Disk read failed. [ 154.537802][ T5197] Dev loop6: unable to read RDB block 0 [ 154.591388][ T5197] loop6: unable to read partition table [ 156.757043][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 158.322850][ C1] blk_print_req_error: 34 callbacks suppressed [ 158.322873][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.338479][ C1] buffer_io_error: 32 callbacks suppressed [ 158.338496][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.353366][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.362609][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.376426][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.385706][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.400274][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.409719][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.441367][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.450796][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.878771][ T6382] veth0_vlan: entered promiscuous mode [ 158.908517][ T6382] veth1_vlan: entered promiscuous mode [ 159.964769][ T6382] veth0_macvtap: entered promiscuous mode [ 160.045767][ T6382] veth1_macvtap: entered promiscuous mode [ 160.112485][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.157737][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.196780][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.208882][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.227304][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.240646][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.285359][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.299008][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.317225][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.328751][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.374495][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.424430][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.471402][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.546243][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.723433][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.544573][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.555270][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.571040][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.581955][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.593961][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.630087][ T6382] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.681694][ T6382] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.696887][ T6382] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.726946][ T6382] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.747129][ T6585] netlink: 60 bytes leftover after parsing attributes in process `syz.0.190'. [ 162.221460][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.194'. [ 162.288986][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.479087][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.328901][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.340910][ T6601] netlink: 'syz.1.196': attribute type 39 has an invalid length. [ 163.350505][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.328355][ T6613] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 165.649382][ T5876] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 165.727344][ T6622] netlink: 16 bytes leftover after parsing attributes in process `syz.5.200'. [ 165.874683][ T6622] netlink: 16 bytes leftover after parsing attributes in process `syz.5.200'. [ 165.883930][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 165.908655][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 165.920772][ T6626] netlink: 35 bytes leftover after parsing attributes in process `syz.5.200'. [ 165.963250][ T5876] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 165.991258][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.047369][ T5876] usb 2-1: Product: syz [ 166.051617][ T5876] usb 2-1: Manufacturer: syz [ 166.071598][ T5876] usb 2-1: SerialNumber: syz [ 166.099551][ T5876] usb 2-1: config 0 descriptor?? [ 166.124572][ T5876] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 167.359145][ T5820] usb 2-1: USB disconnect, device number 4 [ 167.446834][ T976] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 168.301570][ T6640] ubi: mtd0 is already attached to ubi31 [ 168.902352][ T976] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 168.950289][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.979145][ T976] usb 5-1: Product: syz [ 169.004352][ T976] usb 5-1: Manufacturer: syz [ 169.024872][ T976] usb 5-1: SerialNumber: syz [ 169.045730][ T976] usb 5-1: config 0 descriptor?? [ 169.100414][ T976] usb 5-1: interface 1 not found [ 169.184182][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'. [ 169.299537][ T5820] usb 5-1: USB disconnect, device number 4 [ 169.563450][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 169.563475][ T30] audit: type=1326 audit(1742921998.807:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6650 comm="syz.3.209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f713918d169 code=0x0 [ 169.623938][ T6653] virtio-fs: tag <(null)> not found [ 170.607035][ T5876] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 170.981253][ T5876] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.906925][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.938126][ T5876] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 171.952913][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.963135][ T5876] usb 6-1: Product: syz [ 171.968253][ T5876] usb 6-1: Manufacturer: syz [ 171.972901][ T5876] usb 6-1: SerialNumber: syz [ 171.998731][ T5876] usb 6-1: config 0 descriptor?? [ 172.112194][ T6675] syz_tun: entered allmulticast mode [ 172.134026][ T5876] viperboard 6-1:0.0: version 0.00 found at bus 006 address 002 [ 172.228428][ T6673] syz_tun: left allmulticast mode [ 172.427651][ T5876] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 172.541182][ T6681] tracefs: Unknown parameter '$' [ 172.906766][ T5876] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 173.017275][ T5820] usb 6-1: USB disconnect, device number 2 [ 174.421580][ T6695] ubi: mtd0 is already attached to ubi31 [ 175.010588][ T6698] Zero length message leads to an empty skb [ 175.050129][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 175.058369][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.223'. [ 176.906218][ T6715] FAULT_INJECTION: forcing a failure. [ 176.906218][ T6715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.946849][ T6715] CPU: 1 UID: 0 PID: 6715 Comm: syz.5.228 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 176.946879][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 176.946892][ T6715] Call Trace: [ 176.946899][ T6715] [ 176.946907][ T6715] dump_stack_lvl+0x241/0x360 [ 176.946947][ T6715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.946979][ T6715] ? __pfx__printk+0x10/0x10 [ 176.947014][ T6715] ? snprintf+0xda/0x120 [ 176.947037][ T6715] should_fail_ex+0x40a/0x550 [ 176.947067][ T6715] _copy_to_user+0x31/0xb0 [ 176.947090][ T6715] simple_read_from_buffer+0xdc/0x170 [ 176.947138][ T6715] proc_fail_nth_read+0x1e9/0x250 [ 176.947163][ T6715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.947190][ T6715] ? rw_verify_area+0x243/0x630 [ 176.947214][ T6715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.947239][ T6715] vfs_read+0x1f8/0xb40 [ 176.947265][ T6715] ? fdget_pos+0x247/0x310 [ 176.947287][ T6715] ? __pfx___mutex_lock+0x10/0x10 [ 176.947313][ T6715] ? __pfx_vfs_read+0x10/0x10 [ 176.947335][ T6715] ? do_sys_openat2+0x155/0x1c0 [ 176.947358][ T6715] ? __fget_files+0x2a/0x420 [ 176.947379][ T6715] ? __fget_files+0x39d/0x420 [ 176.947399][ T6715] ? __fget_files+0x2a/0x420 [ 176.947427][ T6715] ksys_read+0x18f/0x2b0 [ 176.947454][ T6715] ? __pfx_ksys_read+0x10/0x10 [ 176.947482][ T6715] ? do_syscall_64+0x100/0x230 [ 176.947514][ T6715] ? do_syscall_64+0xb6/0x230 [ 176.947544][ T6715] do_syscall_64+0xf3/0x230 [ 176.947572][ T6715] ? clear_bhb_loop+0x35/0x90 [ 176.947605][ T6715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.947634][ T6715] RIP: 0033:0x7f551eb8bb7c [ 176.947653][ T6715] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 176.947670][ T6715] RSP: 002b:00007f551f9f1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.947692][ T6715] RAX: ffffffffffffffda RBX: 00007f551eda5fa0 RCX: 00007f551eb8bb7c [ 176.947707][ T6715] RDX: 000000000000000f RSI: 00007f551f9f10a0 RDI: 0000000000000004 [ 176.947720][ T6715] RBP: 00007f551f9f1090 R08: 0000000000000000 R09: 0000000000000000 [ 176.947732][ T6715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.947744][ T6715] R13: 0000000000000000 R14: 00007f551eda5fa0 R15: 00007ffccc2fed58 [ 176.947775][ T6715] [ 177.504620][ T6719] netlink: 60 bytes leftover after parsing attributes in process `syz.1.231'. [ 180.464973][ T6741] netlink: 'syz.5.238': attribute type 13 has an invalid length. [ 182.743915][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 182.805599][ T6762] netlink: 720 bytes leftover after parsing attributes in process `syz.0.244'. [ 184.277622][ T1206] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 187.012438][ T30] audit: type=1326 audit(1742922016.267:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.3.251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f713918d169 code=0x0 [ 189.046740][ T976] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 189.298065][ T976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.339128][ T976] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.420946][ T976] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 189.473996][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.560616][ T1206] usb 1-1: device descriptor read/64, error -110 [ 189.703370][ T976] usb 2-1: Product: syz [ 189.716810][ T976] usb 2-1: Manufacturer: syz [ 189.728742][ T976] usb 2-1: SerialNumber: syz [ 189.759832][ T976] usb 2-1: config 0 descriptor?? [ 189.957346][ T1206] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 189.969357][ T976] viperboard 2-1:0.0: version 0.00 found at bus 002 address 005 [ 189.984018][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 190.020672][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 190.029888][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 190.037774][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 190.045616][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 190.053492][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 190.082089][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 190.091412][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 190.099415][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 190.108573][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 190.116455][ C1] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 190.125712][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 190.133590][ C1] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 190.142828][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 190.224580][ T1206] usb 1-1: device descriptor read/64, error -32 [ 190.266801][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 190.276038][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 190.284025][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 190.297519][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 190.306826][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 190.316034][ C1] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 190.396069][ T1206] usb usb1-port1: attempt power cycle [ 190.412448][ T976] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 190.459610][ T5197] ldm_validate_partition_table(): Disk read failed. [ 190.486255][ T5197] Dev loop6: unable to read RDB block 0 [ 190.492031][ T976] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 190.699179][ T976] usb 2-1: USB disconnect, device number 5 [ 190.735198][ T5197] loop6: unable to read partition table [ 190.776832][ T1206] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 190.859113][ T1206] usb 1-1: device descriptor read/8, error -32 [ 190.967129][ T1206] raw-gadget.0 gadget.0: failed to queue suspend event [ 191.134393][ T6831] ubi: mtd0 is already attached to ubi31 [ 191.177367][ T1206] raw-gadget.0 gadget.0: failed to queue reset event [ 191.605090][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 191.657118][ T1206] raw-gadget.0 gadget.0: failed to queue resume event [ 191.756968][ T1206] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 191.849081][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 191.856328][ T1206] usb 1-1: device descriptor read/8, error -32 [ 192.026013][ T1206] raw-gadget.0 gadget.0: failed to queue suspend event [ 192.066591][ T1206] usb usb1-port1: unable to enumerate USB device [ 194.533171][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.205130][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.780350][ T6845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.868743][ T6845] team0: Port device bond0 added [ 197.546315][ T6870] netlink: 248 bytes leftover after parsing attributes in process `syz.5.273'. [ 198.656760][ T976] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 198.866817][ T976] usb 2-1: Using ep0 maxpacket: 32 [ 198.898504][ T976] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 198.956719][ T976] usb 2-1: config 0 has no interface number 0 [ 198.987458][ T976] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 199.026931][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.100125][ T976] usb 2-1: Product: syz [ 199.104359][ T976] usb 2-1: Manufacturer: syz [ 199.140580][ T976] usb 2-1: SerialNumber: syz [ 199.174120][ T976] usb 2-1: config 0 descriptor?? [ 199.220854][ T976] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 199.441778][ T976] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 199.501879][ T976] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 199.797193][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.276'. [ 199.869984][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 199.872724][ T5872] usb 2-1: USB disconnect, device number 6 [ 200.005164][ T5872] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 200.028799][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 200.064921][ T5872] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 200.069855][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 200.085215][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 200.096166][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 200.116220][ T5829] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 200.128806][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 200.211825][ T5872] quatech2 2-1:0.51: device disconnected [ 200.383460][ T2138] Bluetooth: (null): Invalid header checksum [ 200.408823][ T2138] Bluetooth: (null): Invalid header checksum [ 200.492500][ T12] Bluetooth: (null): Too short H5 packet [ 200.555838][ T12] Bluetooth: (null): Invalid header checksum [ 200.599767][ T12] Bluetooth: (null): Invalid header checksum [ 200.707194][ T5917] Bluetooth: (null): Invalid header checksum [ 200.987511][ T6904] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 201.253902][ T6886] chnl_net:caif_netlink_parms(): no params data found [ 201.261275][ T5872] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 201.481142][ T5872] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 201.519143][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.574093][ T5872] usb 4-1: Product: syz [ 201.593890][ T5872] usb 4-1: Manufacturer: syz [ 201.624426][ T5872] usb 4-1: SerialNumber: syz [ 201.687947][ T5872] usb 4-1: config 0 descriptor?? [ 201.790120][ T6916] netlink: 248 bytes leftover after parsing attributes in process `syz.4.285'. [ 202.278157][ T5823] Bluetooth: hci6: command tx timeout [ 203.063909][ T5872] usb 4-1: Firmware version (0.0) predates our first public release. [ 203.118803][ T5872] usb 4-1: Please update to version 0.2 or newer [ 203.135950][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.346819][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.354182][ T6886] bridge_slave_0: entered allmulticast mode [ 203.368950][ T6886] bridge_slave_0: entered promiscuous mode [ 203.395714][ T6886] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.410791][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.427036][ T6886] bridge_slave_1: entered allmulticast mode [ 204.359184][ T5823] Bluetooth: hci6: command tx timeout [ 204.419209][ T6886] bridge_slave_1: entered promiscuous mode [ 204.808937][ T5872] usb 4-1: USB disconnect, device number 8 [ 204.973467][ T6886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.198244][ T6886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.594865][ T6886] team0: Port device team_slave_0 added [ 206.446857][ T5836] Bluetooth: hci6: command tx timeout [ 206.619289][ T6886] team0: Port device team_slave_1 added [ 206.841488][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 206.848971][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 206.855917][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 206.856884][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 206.863776][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 207.386307][ C1] blk_print_req_error: 24 callbacks suppressed [ 207.386333][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 207.446250][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 207.455496][ C0] buffer_io_error: 28 callbacks suppressed [ 207.455507][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 207.469244][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 207.477236][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 207.485165][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 207.513309][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.522555][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 207.530463][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.539605][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 207.547466][ C1] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.556706][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 207.564551][ C1] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.573777][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 207.677306][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 207.686508][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 207.694473][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 207.704688][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.714717][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.740775][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.824623][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.833912][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.843194][ C0] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.000568][ T6886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.018799][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.025801][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.184627][ T6953] syz.4.295: attempt to access beyond end of device [ 208.184627][ T6953] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 208.241939][ T5197] ldm_validate_partition_table(): Disk read failed. [ 208.256781][ T6886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.314222][ T6953] FAT-fs (loop9): unable to read boot sector [ 208.325029][ T5197] Dev loop6: unable to read RDB block 0 [ 208.346550][ T5197] loop6: unable to read partition table [ 208.517100][ T5829] Bluetooth: hci6: command tx timeout [ 208.684937][ T6886] hsr_slave_0: entered promiscuous mode [ 208.716376][ T6886] hsr_slave_1: entered promiscuous mode [ 208.751390][ T6886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.917573][ T6886] Cannot create hsr debugfs directory [ 223.976278][ T6886] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 224.087603][ T6886] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 224.220844][ T6886] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 224.446973][ T6886] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 224.959057][ T6886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.989858][ T6886] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.122435][ T7023] virtio-fs: tag <(null)> not found [ 225.133331][ T7023] capability: warning: `syz.5.312' uses deprecated v2 capabilities in a way that may be insecure [ 225.868409][ T2138] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.875596][ T2138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.898999][ T2138] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.906166][ T2138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.929083][ T30] audit: type=1800 audit(1742922054.257:73): pid=7007 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.3.308" name="/newroot/65/bus" dev="tmpfs" ino=358 res=0 errno=0 [ 227.903535][ T7037] FAULT_INJECTION: forcing a failure. [ 227.903535][ T7037] name failslab, interval 1, probability 0, space 0, times 0 [ 228.134642][ T7037] CPU: 1 UID: 0 PID: 7037 Comm: syz.3.316 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 228.134675][ T7037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 228.134687][ T7037] Call Trace: [ 228.134695][ T7037] [ 228.134706][ T7037] dump_stack_lvl+0x241/0x360 [ 228.134745][ T7037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.134774][ T7037] ? __pfx__printk+0x10/0x10 [ 228.134804][ T7037] ? __kmalloc_noprof+0xb5/0x4c0 [ 228.134833][ T7037] ? __pfx___might_resched+0x10/0x10 [ 228.134858][ T7037] should_fail_ex+0x40a/0x550 [ 228.134886][ T7037] should_failslab+0xac/0x100 [ 228.134915][ T7037] __kmalloc_noprof+0xdd/0x4c0 [ 228.134941][ T7037] ? security_task_alloc+0x4a/0x340 [ 228.134971][ T7037] security_task_alloc+0x4a/0x340 [ 228.134998][ T7037] copy_process+0x15f8/0x3cf0 [ 228.135033][ T7037] ? copy_process+0x9fa/0x3cf0 [ 228.135054][ T7037] ? io_queue_iowq+0x433/0x670 [ 228.135085][ T7037] ? __pfx_copy_process+0x10/0x10 [ 228.135102][ T7037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.135137][ T7037] ? __pfx_io_wq_worker+0x10/0x10 [ 228.135163][ T7037] ? __pfx_io_wq_worker+0x10/0x10 [ 228.135190][ T7037] create_io_thread+0x16a/0x1e0 [ 228.135214][ T7037] ? __pfx_create_io_thread+0x10/0x10 [ 228.135234][ T7037] ? lockdep_init_map_type+0xa1/0x910 [ 228.135264][ T7037] ? __pfx_io_wq_worker+0x10/0x10 [ 228.135299][ T7037] ? __init_swait_queue_head+0xae/0x150 [ 228.135325][ T7037] create_io_worker+0x1b7/0x610 [ 228.135356][ T7037] io_wq_enqueue+0x83d/0xb10 [ 228.135385][ T7037] ? __pfx_io_wq_enqueue+0x10/0x10 [ 228.135408][ T7037] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 228.135435][ T7037] ? io_prep_async_work+0x4bb/0x770 [ 228.135461][ T7037] io_queue_iowq+0x433/0x670 [ 228.135514][ T7037] io_queue_async+0x3f9/0x4e0 [ 228.135535][ T7037] ? __pfx_io_req_task_submit+0x10/0x10 [ 228.135563][ T7037] io_handle_tw_list+0x380/0x500 [ 228.135596][ T7037] tctx_task_work_run+0x9a/0x370 [ 228.135632][ T7037] tctx_task_work+0x9a/0x100 [ 228.135657][ T7037] ? __pfx_tctx_task_work+0x10/0x10 [ 228.135687][ T7037] ? _raw_spin_unlock_irq+0x23/0x50 [ 228.135707][ T7037] ? lockdep_hardirqs_on+0x99/0x150 [ 228.135732][ T7037] task_work_run+0x24f/0x310 [ 228.135766][ T7037] ? __pfx_task_work_run+0x10/0x10 [ 228.135793][ T7037] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 228.135825][ T7037] get_signal+0x15d1/0x1720 [ 228.135842][ T7037] ? lockdep_hardirqs_on+0x99/0x150 [ 228.135866][ T7037] ? do_sys_openat2+0x155/0x1c0 [ 228.135886][ T7037] ? kmem_cache_free+0x195/0x410 [ 228.135903][ T7037] ? do_sys_openat2+0x155/0x1c0 [ 228.135924][ T7037] ? __pfx_get_signal+0x10/0x10 [ 228.135940][ T7037] ? do_sys_openat2+0x155/0x1c0 [ 228.135966][ T7037] arch_do_signal_or_restart+0x96/0x860 [ 228.135990][ T7037] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 228.136009][ T7037] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 228.136046][ T7037] ? syscall_exit_to_user_mode+0xa3/0x340 [ 228.136072][ T7037] syscall_exit_to_user_mode+0xce/0x340 [ 228.136098][ T7037] do_syscall_64+0x100/0x230 [ 228.136133][ T7037] ? clear_bhb_loop+0x35/0x90 [ 228.136161][ T7037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.136186][ T7037] RIP: 0033:0x7f713918bad0 [ 228.136204][ T7037] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 228.136219][ T7037] RSP: 002b:00007f7139f87b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 228.136239][ T7037] RAX: 0000000000000006 RBX: 0000000000101301 RCX: 00007f713918bad0 [ 228.136251][ T7037] RDX: 0000000000101301 RSI: 00007f7139f87c10 RDI: 00000000ffffff9c [ 228.136263][ T7037] RBP: 00007f7139f87c10 R08: 0000000000000000 R09: 0000000000000000 [ 228.136274][ T7037] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 228.136284][ T7037] R13: 0000000000000000 R14: 00007f71393a5fa0 R15: 00007ffe4356c808 [ 228.136311][ T7037] [ 228.554420][ T6886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.897787][ T6886] veth0_vlan: entered promiscuous mode [ 231.476962][ T6886] veth1_vlan: entered promiscuous mode [ 232.856507][ T6886] veth0_macvtap: entered promiscuous mode [ 233.101085][ T6886] veth1_macvtap: entered promiscuous mode [ 233.793765][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.875683][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.918281][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.947032][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.058682][ T5876] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 234.211640][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.370544][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.651103][ T5876] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 234.716786][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.745878][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.767869][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.786769][ T5876] usb 2-1: Product: syz [ 234.797118][ T5876] usb 2-1: Manufacturer: syz [ 234.801924][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.817505][ T5876] usb 2-1: SerialNumber: syz [ 234.844802][ T5876] usb 2-1: config 0 descriptor?? [ 235.065289][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.098822][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.102117][ T5876] usb 2-1: interface 1 not found [ 235.497230][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.514342][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.842272][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.854184][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.154371][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.178555][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.202807][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.217970][ T976] usb 2-1: USB disconnect, device number 7 [ 236.263295][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.291994][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.326468][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.342442][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.406232][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.647353][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.687449][ T30] audit: type=1800 audit(1742922065.937:74): pid=7094 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.330" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 236.694856][ T6886] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.110272][ T6886] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.151913][ T6886] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.686834][ T6886] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.274478][ T7078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.682375][ C1] blk_print_req_error: 32 callbacks suppressed [ 239.682400][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 239.748223][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 239.757508][ C0] buffer_io_error: 36 callbacks suppressed [ 239.757525][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.771330][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 239.780545][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 239.788478][ T7078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.788491][ C0] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 239.805079][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 239.813086][ C0] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 239.822390][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 239.968103][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 239.977348][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.985266][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 239.994579][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 240.002472][ C1] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.011727][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 240.019602][ C1] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.028955][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 240.425848][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.435110][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.443079][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 240.505208][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.536750][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.885849][ T5197] ldm_validate_partition_table(): Disk read failed. [ 240.901041][ T5197] Dev loop6: unable to read RDB block 0 [ 240.930897][ T5197] loop6: unable to read partition table [ 241.158228][ T7125] netlink: 9 bytes leftover after parsing attributes in process `syz.3.337'. [ 241.216898][ T7125] 0·: renamed from hsr0 (while UP) [ 241.237138][ T5197] ldm_validate_partition_table(): Disk read failed. [ 241.273880][ T5197] Dev loop6: unable to read RDB block 0 [ 241.292551][ T5197] loop6: unable to read partition table [ 241.710829][ T7125] 0·: entered allmulticast mode [ 241.716155][ T7125] hsr_slave_0: entered allmulticast mode [ 241.901451][ T7125] hsr_slave_1: entered allmulticast mode [ 242.178246][ T7125] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 243.620096][ T7145] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 244.007618][ T7150] netlink: 'syz.5.342': attribute type 4 has an invalid length. [ 244.040339][ T7150] netlink: 'syz.5.342': attribute type 4 has an invalid length. [ 244.377205][ T5922] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 244.687005][ T47] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 245.268207][ T5922] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 245.294224][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.304874][ T5922] usb 2-1: Product: syz [ 245.313037][ T5922] usb 2-1: Manufacturer: syz [ 245.318221][ T5922] usb 2-1: SerialNumber: syz [ 245.341898][ T5922] usb 2-1: config 0 descriptor?? [ 245.373075][ T5922] usb 2-1: interface 1 not found [ 245.454208][ T7157] ubi: mtd0 is already attached to ubi31 [ 245.519459][ T47] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 245.548479][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.633366][ T7161] loop6: detected capacity change from 0 to 64 [ 245.645378][ C1] blk_print_req_error: 164 callbacks suppressed [ 245.645400][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.660935][ C1] buffer_io_error: 161 callbacks suppressed [ 245.660947][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 245.694506][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.694763][ T7162] netlink: 'syz.5.345': attribute type 1 has an invalid length. [ 245.703819][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 245.711934][ T47] usb 7-1: Product: syz [ 245.803163][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.812463][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 245.836784][ T47] usb 7-1: Manufacturer: syz [ 245.841547][ T47] usb 7-1: SerialNumber: syz [ 245.968574][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.978471][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.035523][ T7162] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.431826][ T47] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 246.437820][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.437856][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.446707][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.446745][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.496870][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.496910][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.516845][ T7161] ldm_validate_partition_table(): Disk read failed. [ 246.517027][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.517052][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.537546][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.537583][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.550258][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.550287][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.566877][ T7161] Dev loop6: unable to read RDB block 0 [ 246.587236][ T7161] loop6: unable to read partition table [ 246.587541][ T7161] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 246.597474][ T5820] usb 2-1: USB disconnect, device number 8 [ 246.644363][ T5197] ldm_validate_partition_table(): Disk read failed. [ 246.645029][ T5197] Dev loop6: unable to read RDB block 0 [ 246.676363][ T5197] loop6: unable to read partition table [ 247.346024][ T7168] netlink: 72 bytes leftover after parsing attributes in process `syz.3.347'. [ 247.368334][ T7168] netlink: 452 bytes leftover after parsing attributes in process `syz.3.347'. [ 247.963339][ T47] usb 7-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 247.978547][ T47] usb 7-1: ath9k_htc: USB layer deinitialized [ 248.525167][ T976] usb 7-1: USB disconnect, device number 2 [ 249.207016][ T47] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 249.297085][ T7194] ubi: mtd0 is already attached to ubi31 [ 249.376868][ T47] usb 6-1: Using ep0 maxpacket: 8 [ 249.907845][ T47] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 249.916259][ T47] usb 6-1: config 0 has no interface number 0 [ 249.946815][ T7199] netlink: 'syz.4.355': attribute type 4 has an invalid length. [ 249.965477][ T7199] netlink: 'syz.4.355': attribute type 4 has an invalid length. [ 249.996973][ T47] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 250.021978][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.045603][ T47] usb 6-1: Product: syz [ 250.075567][ T47] usb 6-1: Manufacturer: syz [ 250.112463][ T47] usb 6-1: SerialNumber: syz [ 250.163354][ T47] usb 6-1: config 0 descriptor?? [ 250.211444][ T47] radio-usb-si4713 6-1:0.128: Si4713 development board discovered: (10C4:8244) [ 251.642871][ T47] radio-usb-si4713 6-1:0.128: probe with driver radio-usb-si4713 failed with error -32 [ 251.771621][ T47] usbhid 6-1:0.128: couldn't find an input interrupt endpoint [ 253.558499][ T7211] syz.1.358 (7211) used greatest stack depth: 16416 bytes left [ 254.764378][ T47] usb 6-1: USB disconnect, device number 3 [ 254.947645][ T976] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 255.947900][ T976] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.989459][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.995822][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.029810][ T976] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.144036][ T976] usb 7-1: string descriptor 0 read error: -71 [ 257.293949][ T7238] warning: `syz.4.365' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 258.071461][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 258.077863][ T976] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 258.107266][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.117902][ T976] usb 7-1: config 0 descriptor?? [ 258.129123][ T976] usb 7-1: can't set config #0, error -71 [ 258.138022][ T976] usb 7-1: USB disconnect, device number 3 [ 258.399688][ T7247] netlink: 36 bytes leftover after parsing attributes in process `syz.3.367'. [ 258.406799][ T5876] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 258.616169][ T5876] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice=cc.97 [ 258.642790][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.656968][ T47] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 258.733402][ T5876] usb 2-1: config 0 descriptor?? [ 258.775328][ T5876] sisusb 2-1:0.0: Invalid USB2VGA device [ 258.819107][ T5876] sisusb 2-1:0.0: probe with driver sisusb failed with error -22 [ 258.849259][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 258.912486][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.973652][ T47] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 259.175560][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.254947][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.263792][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.959835][ T47] usb 7-1: config 0 descriptor?? [ 260.017643][ T5876] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 260.019522][ T47] hub 7-1:0.0: USB hub found [ 260.428238][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 260.717577][ T5876] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 260.761336][ T5876] usb 6-1: config 0 has no interface number 0 [ 260.820201][ T5876] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 260.866099][ T7260] netlink: 'syz.4.373': attribute type 13 has an invalid length. [ 261.041614][ T5912] usb 2-1: USB disconnect, device number 9 [ 261.069887][ T5876] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 261.129386][ T47] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 261.145436][ T5876] usb 6-1: config 0 interface 41 has no altsetting 0 [ 261.151146][ T47] usbhid 7-1:0.0: can't add hid device: -71 [ 261.169980][ T47] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 261.217632][ T47] usb 7-1: USB disconnect, device number 4 [ 261.252530][ T5876] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 261.278101][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'. [ 261.300209][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.346777][ T5876] usb 6-1: Product: syz [ 261.360295][ T5876] usb 6-1: Manufacturer: syz [ 261.377272][ T5876] usb 6-1: SerialNumber: syz [ 261.418577][ T5876] usb 6-1: config 0 descriptor?? [ 261.424748][ T7256] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 261.447098][ T7256] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 261.685644][ T7256] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 261.776828][ T7256] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 263.199978][ T5876] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 263.223558][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 263.349938][ T7256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.407154][ T7256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.479906][ T7256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.547053][ T7256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.560420][ T5876] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 265.578385][ T5876] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 266.280073][ T5876] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 266.363581][ T5876] usb 6-1: USB disconnect, device number 4 [ 266.797422][ T7310] loop6: detected capacity change from 0 to 64 [ 266.882059][ C1] blk_print_req_error: 30 callbacks suppressed [ 266.882083][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 266.897581][ C1] buffer_io_error: 29 callbacks suppressed [ 266.897600][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 266.956634][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 266.965986][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 266.992530][ T7313] netlink: 'syz.4.388': attribute type 1 has an invalid length. [ 266.993258][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.009854][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 267.025308][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.034710][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 267.053037][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.062406][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 267.072488][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.081735][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 267.106752][ T5820] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 267.124892][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.134186][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 267.272284][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.281552][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 267.289921][ T7310] ldm_validate_partition_table(): Disk read failed. [ 267.321769][ T5820] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.391928][ T7313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.598940][ T5820] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.649105][ T5820] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 267.673739][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.711402][ T5820] usb 2-1: Product: syz [ 267.712077][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.724864][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 267.751252][ T5820] usb 2-1: Manufacturer: syz [ 267.754874][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.765138][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 267.778608][ T7310] Dev loop6: unable to read RDB block 0 [ 267.785579][ T5820] usb 2-1: SerialNumber: syz [ 267.807986][ T7310] loop6: unable to read partition table [ 267.833668][ T7310] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 267.901370][ T5197] ldm_validate_partition_table(): Disk read failed. [ 267.933524][ T5820] usb 2-1: config 0 descriptor?? [ 267.948390][ T5820] usb 2-1: can't set config #0, error -71 [ 267.963803][ T5197] Dev loop6: unable to read RDB block 0 [ 267.995780][ T5820] usb 2-1: USB disconnect, device number 10 [ 268.029641][ T5197] loop6: unable to read partition table [ 268.218528][ T7327] loop6: detected capacity change from 0 to 64 [ 268.235501][ T7327] ldm_validate_partition_table(): Disk read failed. [ 268.655948][ T7327] Dev loop6: unable to read RDB block 0 [ 268.826257][ T7333] netlink: 'syz.6.393': attribute type 1 has an invalid length. [ 269.086515][ T7333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.297099][ T5820] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 269.400984][ T7327] loop6: unable to read partition table [ 269.437176][ T7327] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 269.532972][ T5197] ldm_validate_partition_table(): Disk read failed. [ 269.557880][ T5197] Dev loop6: unable to read RDB block 0 [ 269.610129][ T5820] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 269.653866][ T5820] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 269.692899][ T5197] loop6: unable to read partition table [ 269.698840][ T5820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.698937][ T5820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 269.800221][ T7342] netlink: 'syz.5.397': attribute type 1 has an invalid length. [ 269.916498][ T5912] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 270.172941][ T7342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.338758][ T5820] usb 4-1: config 0 has no interface number 0 [ 270.341744][ T5197] ldm_validate_partition_table(): Disk read failed. [ 270.376821][ T5820] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 270.394249][ T5197] Dev loop6: unable to read RDB block 0 [ 270.422202][ T5197] loop6: unable to read partition table [ 270.433788][ T5912] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 270.463249][ T5820] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 270.487940][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.546500][ T5912] usb 5-1: Product: syz [ 270.555340][ T5820] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 270.604501][ T5912] usb 5-1: Manufacturer: syz [ 270.636960][ T5912] usb 5-1: SerialNumber: syz [ 270.646786][ T5820] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.706265][ T5820] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 270.749184][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.762152][ T5912] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 270.831379][ T5874] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 270.897259][ T5820] usb 4-1: config 0 descriptor?? [ 270.943143][ T47] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 270.963210][ T5820] gspca_main: spca561-2.14.0 probing abcd:cdee [ 271.141494][ T47] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 271.178465][ T5820] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 271.213982][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 271.273467][ T5820] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 271.323747][ T47] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 271.378737][ T5820] usb 4-1: MIDIStreaming interface descriptor not found [ 271.434427][ T47] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 271.446172][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.517329][ T47] usb 2-1: config 0 descriptor?? [ 271.550521][ T7349] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 271.561103][ T47] gspca_main: spca561-2.14.0 probing abcd:cdee [ 271.610936][ T5915] usb 5-1: USB disconnect, device number 5 [ 271.651775][ T5820] usb 4-1: USB disconnect, device number 9 [ 271.962596][ T5874] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 271.996741][ T5874] ath9k_htc: Failed to initialize the device [ 272.043464][ T5915] usb 5-1: ath9k_htc: USB layer deinitialized [ 272.144925][ T47] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 272.198503][ T47] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.279826][ T47] usb 2-1: MIDIStreaming interface descriptor not found [ 272.615193][ T6045] udevd[6045]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.957479][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.403'. [ 273.637497][ T9] usb 2-1: USB disconnect, device number 11 [ 273.777796][ T7373] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 274.196804][ T9] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 274.409218][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 274.433119][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 274.490949][ T9] usb 2-1: too many configurations: 48, using maximum allowed: 8 [ 274.561533][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 274.588033][ T9] usb 2-1: can't read configurations, error -61 [ 275.909249][ T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 276.137199][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 276.150274][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 276.186516][ T9] usb 2-1: too many configurations: 48, using maximum allowed: 8 [ 276.279465][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 276.308419][ T9] usb 2-1: can't read configurations, error -61 [ 276.371521][ T9] usb usb2-port1: attempt power cycle [ 276.509628][ T7396] Bluetooth: MGMT ver 1.23 [ 276.978280][ T7401] netlink: 248 bytes leftover after parsing attributes in process `syz.5.412'. [ 277.496778][ T9] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 277.989655][ T9] usb 2-1: device descriptor read/8, error -71 [ 278.141136][ T5874] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 278.339809][ T5874] usb 5-1: not running at top speed; connect to a high speed hub [ 278.372532][ T5874] usb 5-1: config 0 has no interfaces? [ 278.412440][ T5874] usb 5-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.40 [ 278.468276][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.526309][ T5874] usb 5-1: Product: syz [ 278.546801][ T5874] usb 5-1: Manufacturer: syz [ 278.566673][ T5874] usb 5-1: SerialNumber: syz [ 278.648847][ T5874] usb 5-1: config 0 descriptor?? [ 280.172562][ T7418] ubi: mtd0 is already attached to ubi31 [ 280.277012][ T31] INFO: task syz.2.89:6225 blocked for more than 143 seconds. [ 280.287945][ T31] Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 280.320314][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.353061][ T31] task:syz.2.89 state:D stack:27552 pid:6225 tgid:6210 ppid:5824 task_flags:0x400040 flags:0x00000004 [ 280.408599][ T31] Call Trace: [ 280.427624][ T31] [ 280.443131][ T31] __schedule+0x18bc/0x4c40 [ 280.462556][ T31] ? __pfx___schedule+0x10/0x10 [ 280.484118][ T31] ? __pfx_lock_release+0x10/0x10 [ 280.508551][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 280.537263][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 280.559831][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 280.585350][ T31] ? schedule+0x90/0x320 [ 280.601437][ T31] schedule+0x14b/0x320 [ 280.613480][ T31] schedule_preempt_disabled+0x13/0x30 [ 280.629234][ T31] __mutex_lock+0x817/0x1010 [ 280.644201][ T31] ? __mutex_lock+0x602/0x1010 [ 280.657144][ T31] ? blk_trace_startstop+0xa4/0x740 [ 280.952713][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 280.966436][ T31] ? tomoyo_path_number_perm+0x5dd/0x770 [ 281.032136][ T31] blk_trace_startstop+0xa4/0x740 [ 281.054315][ T31] ? __pfx_blk_trace_startstop+0x10/0x10 [ 281.081033][ T31] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 281.126874][ T31] sg_ioctl+0xba2/0x2e10 [ 281.155290][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 281.182700][ T31] ? __fget_files+0x2a/0x420 [ 281.206722][ T31] ? __fget_files+0x2a/0x420 [ 281.225180][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 281.249674][ T31] __se_sys_ioctl+0xf1/0x160 [ 281.268620][ T31] do_syscall_64+0xf3/0x230 [ 281.315533][ T31] ? clear_bhb_loop+0x35/0x90 [ 281.337058][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.355659][ T31] RIP: 0033:0x7f64ca98d169 [ 281.371850][ T31] RSP: 002b:00007f64cb866038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.419440][ T31] RAX: ffffffffffffffda RBX: 00007f64caba6240 RCX: 00007f64ca98d169 [ 281.466699][ T31] RDX: 0000000000000000 RSI: 0000000000001275 RDI: 0000000000000004 [ 281.506827][ T31] RBP: 00007f64caa0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 281.633849][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.683343][ T31] R13: 0000000000000001 R14: 00007f64caba6240 R15: 00007ffdbfa22e48 [ 281.722924][ T31] [ 281.736740][ T31] [ 281.736740][ T31] Showing all locks held in the system: [ 281.790395][ T5874] usb 5-1: USB disconnect, device number 6 [ 281.823517][ T31] 1 lock held by khungtaskd/31: [ 281.842099][ T31] #0: ffffffff8eb39420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 281.949324][ T31] 3 locks held by kworker/u8:4/62: [ 281.954661][ T31] #0: ffff888032150948 ((wq_completion)l2tp){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 281.967639][ T31] #1: ffffc9000153fc60 ((work_completion)(&session->del_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 281.980663][ T31] #2: ffffffff8eb3e800 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 281.998104][ T31] 2 locks held by kswapd0/90: [ 282.006851][ T31] 2 locks held by getty/5575: [ 282.025074][ T31] #0: ffff8880317ce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 282.050173][ T31] #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 282.075546][ T31] 3 locks held by syz.2.89/6216: [ 282.090826][ T31] 1 lock held by syz.2.89/6225: [ 282.107544][ T31] #0: ffff888025c3e468 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_startstop+0xa4/0x740 [ 282.134877][ T31] 3 locks held by kworker/u8:9/6541: [ 282.148748][ T31] 2 locks held by syz.0.244/6762: [ 282.160878][ T31] #0: ffff88802575ad48 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xfb/0x1f0 [ 282.190119][ T31] #1: ffffffff8eb8bf28 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3cb/0x950 [ 282.220908][ T31] [ 282.228588][ T31] ============================================= [ 282.228588][ T31] [ 282.257905][ T31] NMI backtrace for cpu 0 [ 282.257931][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 282.257954][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 282.257966][ T31] Call Trace: [ 282.257973][ T31] [ 282.257983][ T31] dump_stack_lvl+0x241/0x360 [ 282.258024][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.258057][ T31] ? __pfx__printk+0x10/0x10 [ 282.258101][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 282.258129][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 282.258150][ T31] ? _printk+0xd5/0x120 [ 282.258178][ T31] ? __pfx__printk+0x10/0x10 [ 282.258208][ T31] ? __wake_up_klogd+0xcc/0x110 [ 282.258234][ T31] ? __pfx__printk+0x10/0x10 [ 282.258265][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 282.258294][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 282.258321][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 282.258347][ T31] watchdog+0x1058/0x10a0 [ 282.258378][ T31] ? watchdog+0x1ea/0x10a0 [ 282.258411][ T31] ? __pfx_watchdog+0x10/0x10 [ 282.258439][ T31] kthread+0x7a9/0x920 [ 282.258468][ T31] ? __pfx_kthread+0x10/0x10 [ 282.258499][ T31] ? __pfx_watchdog+0x10/0x10 [ 282.258528][ T31] ? __pfx_kthread+0x10/0x10 [ 282.258555][ T31] ? __pfx_kthread+0x10/0x10 [ 282.258588][ T31] ? __pfx_kthread+0x10/0x10 [ 282.258615][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.258638][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 282.258663][ T31] ? __pfx_kthread+0x10/0x10 [ 282.258694][ T31] ret_from_fork+0x4b/0x80 [ 282.258718][ T31] ? __pfx_kthread+0x10/0x10 [ 282.258747][ T31] ret_from_fork_asm+0x1a/0x30 [ 282.258783][ T31] [ 282.258791][ T31] Sending NMI from CPU 0 to CPUs 1: [ 282.431637][ C1] NMI backtrace for cpu 1 [ 282.431653][ C1] CPU: 1 UID: 0 PID: 90 Comm: kswapd0 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 282.431672][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 282.431683][ C1] RIP: 0010:__asan_memset+0x7/0x50 [ 282.431710][ C1] Code: 00 00 e9 bc e6 ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 56 <53> 48 89 d3 41 89 f6 48 89 fd 48 8b 4c 24 18 48 89 d6 ba 01 00 00 [ 282.431725][ C1] RSP: 0018:ffffc900026de820 EFLAGS: 00000246 [ 282.431741][ C1] RAX: ffffffff84f5cb6b RBX: ffff888035e2d698 RCX: ffff88801d70bc00 [ 282.431755][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff888035e2d5a8 [ 282.431766][ C1] RBP: 0000000000000000 R08: ffff888035e2c72f R09: 0000000000000000 [ 282.431778][ C1] R10: ffff888035e2c720 R11: ffffed1006bc58e6 R12: ffff888035e2d5a8 [ 282.431790][ C1] R13: ffff888035e20000 R14: 00000000000000a8 R15: dffffc0000000000 [ 282.431803][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 282.431816][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.431828][ C1] CR2: 00007f4059f78ab8 CR3: 000000002a30a000 CR4: 00000000003526f0 [ 282.431843][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 282.431853][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 282.431863][ C1] Call Trace: [ 282.431869][ C1] [ 282.431878][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 282.431897][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 282.431923][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 282.431940][ C1] ? nmi_handle+0x2a/0x5a0 [ 282.431972][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 282.431993][ C1] ? nmi_handle+0x14f/0x5a0 [ 282.432015][ C1] ? nmi_handle+0x2a/0x5a0 [ 282.432039][ C1] ? __asan_memset+0x7/0x50 [ 282.432058][ C1] ? default_do_nmi+0x63/0x160 [ 282.432075][ C1] ? exc_nmi+0x123/0x1f0 [ 282.432091][ C1] ? end_repeat_nmi+0xf/0x53 [ 282.432118][ C1] ? sw842_compress+0x28ab/0x4880 [ 282.432151][ C1] ? __asan_memset+0x7/0x50 [ 282.432170][ C1] ? __asan_memset+0x7/0x50 [ 282.432190][ C1] ? __asan_memset+0x7/0x50 [ 282.432209][ C1] [ 282.432215][ C1] [ 282.432221][ C1] sw842_compress+0x28ba/0x4880 [ 282.432257][ C1] scomp_acomp_comp_decomp+0x4ac/0x7c0 [ 282.432281][ C1] zswap_store+0xcfe/0x1c20 [ 282.432302][ C1] ? zswap_store+0x577/0x1c20 [ 282.432321][ C1] ? __pfx_zswap_store+0x10/0x10 [ 282.432336][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 282.432364][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 282.432387][ C1] ? _raw_spin_unlock+0x28/0x50 [ 282.432404][ C1] ? folio_free_swap+0x28d/0x440 [ 282.432429][ C1] swap_writepage+0x647/0xce0 [ 282.432452][ C1] shrink_folio_list+0x376a/0x5930 [ 282.432498][ C1] ? __pfx_shrink_folio_list+0x10/0x10 [ 282.432524][ C1] ? mark_lock+0x9a/0x360 [ 282.432549][ C1] ? __lock_acquire+0x1397/0x2100 [ 282.432571][ C1] ? cgroup_rstat_updated+0x13b/0xc30 [ 282.432612][ C1] ? __mod_zone_page_state+0xda/0x150 [ 282.432637][ C1] ? isolate_lru_folios+0x1342/0x15c0 [ 282.432666][ C1] ? mark_lock+0x9a/0x360 [ 282.432699][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.432716][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 282.432738][ C1] shrink_lruvec+0x16db/0x2f30 [ 282.432782][ C1] ? __pfx_shrink_lruvec+0x10/0x10 [ 282.432828][ C1] ? mem_cgroup_iter+0x3d/0x420 [ 282.432847][ C1] shrink_node+0x12a4/0x2e10 [ 282.432887][ C1] ? __pfx_shrink_node+0x10/0x10 [ 282.432909][ C1] kswapd+0x1958/0x2e30 [ 282.432947][ C1] ? kswapd+0xadf/0x2e30 [ 282.432979][ C1] ? __pfx_kswapd+0x10/0x10 [ 282.433006][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 282.433031][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.433060][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 282.433081][ C1] ? __wait_for_common+0x620/0x6e0 [ 282.433103][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 282.433135][ C1] ? __kthread_parkme+0x169/0x1d0 [ 282.433157][ C1] ? __pfx_kswapd+0x10/0x10 [ 282.433182][ C1] kthread+0x7a9/0x920 [ 282.433204][ C1] ? __pfx_kthread+0x10/0x10 [ 282.433229][ C1] ? __pfx_kswapd+0x10/0x10 [ 282.433253][ C1] ? __pfx_kthread+0x10/0x10 [ 282.433276][ C1] ? __pfx_kthread+0x10/0x10 [ 282.433301][ C1] ? __pfx_kthread+0x10/0x10 [ 282.433324][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.433341][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 282.433361][ C1] ? __pfx_kthread+0x10/0x10 [ 282.433385][ C1] ret_from_fork+0x4b/0x80 [ 282.433406][ C1] ? __pfx_kthread+0x10/0x10 [ 282.433429][ C1] ret_from_fork_asm+0x1a/0x30 [ 282.433455][ C1] [ 282.895829][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 282.902808][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 282.912998][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 282.923098][ T31] Call Trace: [ 282.926391][ T31] [ 282.929340][ T31] dump_stack_lvl+0x241/0x360 [ 282.934062][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.939283][ T31] ? __pfx__printk+0x10/0x10 [ 282.943901][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 282.949909][ T31] ? vscnprintf+0x5d/0x90 [ 282.954253][ T31] panic+0x349/0x880 [ 282.958176][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 282.964339][ T31] ? __pfx_panic+0x10/0x10 [ 282.968782][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 282.974354][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 282.980545][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 282.986713][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 282.992889][ T31] watchdog+0x1097/0x10a0 [ 282.997248][ T31] ? watchdog+0x1ea/0x10a0 [ 283.001703][ T31] ? __pfx_watchdog+0x10/0x10 [ 283.006401][ T31] kthread+0x7a9/0x920 [ 283.010488][ T31] ? __pfx_kthread+0x10/0x10 [ 283.015095][ T31] ? __pfx_watchdog+0x10/0x10 [ 283.019791][ T31] ? __pfx_kthread+0x10/0x10 [ 283.024485][ T31] ? __pfx_kthread+0x10/0x10 [ 283.029092][ T31] ? __pfx_kthread+0x10/0x10 [ 283.033698][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 283.038911][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 283.044119][ T31] ? __pfx_kthread+0x10/0x10 [ 283.048729][ T31] ret_from_fork+0x4b/0x80 [ 283.053169][ T31] ? __pfx_kthread+0x10/0x10 [ 283.057778][ T31] ret_from_fork_asm+0x1a/0x30 [ 283.062559][ T31] [ 283.065850][ T31] Kernel Offset: disabled [ 283.070284][ T31] Rebooting in 86400 seconds..