last executing test programs: 1m20.967254638s ago: executing program 4 (id=655): socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @win={{0x8, 0x9, 0x41a99bbc, 0x25}, 0x0, 0x8, 0x0, 0x7f, 0x0, 0x2c}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setscheduler(0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) openat$nullb(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x800000010d, 0x40002, 0x0, 0x0) getpid() syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043ea19cfdc9104a51b098c92c0d6774ed2f70068a05859477b3e13106000500"], 0x20) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r3, 0x40204706, 0x20000000) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000480)={0x0, 0x9, 0x0, [0x6, 0x1000000000000, 0xfffffffffffffffd, 0x6, 0x1ff], [0x8000, 0xf, 0x2, 0x8, 0x3, 0x72, 0x9, 0xe7f, 0xfffffffffffffffb, 0x6, 0x8, 0x4, 0x9, 0x4, 0x6, 0x4, 0x1, 0x28, 0x0, 0x10000000007, 0x3, 0x1000, 0x7, 0x1, 0x6, 0x3, 0x5, 0x3, 0x2, 0x5, 0x1, 0x2, 0x800000004b4e, 0x5, 0x4, 0x7, 0x8, 0x6, 0x6, 0x20000000000003, 0x400, 0x5, 0x3, 0x9, 0x10001, 0x8, 0x1, 0x0, 0xdab, 0xe, 0xdb68, 0x7, 0xd, 0x7fffffff, 0x5, 0x9, 0x5, 0xfffffffffffffff9, 0x7ff, 0x2, 0x1, 0x3, 0x6, 0x1, 0x8, 0xffff, 0x8, 0x7fffffffffffffff, 0x5, 0xffffffffffffff00, 0x9, 0x9, 0x6, 0x598, 0x800, 0x7, 0x70e, 0x0, 0x2, 0x20000000007, 0x3, 0x4, 0x61, 0x9, 0x8, 0x7, 0x8, 0x3b, 0x2, 0xb, 0x40, 0x6, 0xfffffffffffffff6, 0x7, 0x3, 0x0, 0x35d, 0x9, 0x8, 0x1d66, 0x800000000000000b, 0x7, 0x1, 0x8, 0x1, 0x7, 0x1d2, 0xffffffff, 0x4, 0x9, 0x6, 0x2, 0x10001, 0x2, 0x3, 0x0, 0x0, 0x1, 0x4, 0xce7a, 0x685c]}) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$audio1(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2458, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x1e0, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) 1m19.633628409s ago: executing program 4 (id=660): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000001b80)=0x58, 0x800) r3 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) recvmmsg$unix(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001940)=""/224, 0xe0}], 0x1, &(0x7f0000001a80)=[@cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x70}}], 0x1, 0x40008002, &(0x7f0000001b40)) 1m18.128784962s ago: executing program 4 (id=663): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x61) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000080)={r3, 0x2, 0x2, 0x9, 0x3, [0x0], [0x800000, 0x0, 0xffffffff], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4], [0x2b8], [0x0, 0x9]}) 1m18.013016269s ago: executing program 4 (id=664): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0xc0603d06, &(0x7f0000000040)) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db7", 0xfee9}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a958df39f9c5a8c8e876a52816446d0106f4a81dba144c80fda0b401f0774edbf73b3de44d7ca5c28b0830910f3b0", 0x424}], 0x2}, 0x0) r8 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r8, &(0x7f000001be80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002a40)=@newchain={0x88, 0x64, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe}}, [@f_rsvp={{0x9}, {0x4}}, @f_rsvp6={{0xa}, {0x48, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00'}, @TCA_RSVP_DST={0x14, 0x2, @local}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xa, 0x5}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}]}, 0x88}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a936", 0x1b}], 0x1}, 0x0) r9 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000280)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) 1m17.901273353s ago: executing program 4 (id=666): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002600)={0x20, 0x4, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtfilter={0x4c4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_route={{0xa}, {0x494, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x91}, @TCA_ROUTE4_POLICE={0x480, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x0, 0x6, 0x2, 0x6c, {0x94, 0x0, 0x4, 0x5, 0x9, 0x8}, {0x1, 0x0, 0x40, 0x3, 0x2, 0x8}, 0x0, 0x8, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x1, 0x5, 0x6, 0x100, 0x800, 0x9, 0x8, 0x80000001, 0x8cb4, 0xc, 0x3, 0xfff, 0x1, 0x10, 0x8, 0xaf59, 0x3, 0x7, 0x6, 0x1, 0x2, 0x20000000, 0xffffffff, 0x86, 0x9, 0x6, 0x400, 0x7, 0x9, 0xea, 0x94, 0x1, 0x7, 0xeac, 0x86a, 0x6, 0x3, 0x5, 0x4000000, 0x9, 0xfffffff9, 0x80000001, 0x1, 0x2aa, 0x0, 0x7f, 0xb, 0xb, 0x3ff, 0x10000, 0x0, 0x81, 0x7f, 0x8001, 0x5, 0x8, 0x4, 0x8, 0x10000, 0x8, 0x2, 0x0, 0x4, 0x0, 0x8, 0x100, 0x4499, 0x64b, 0x7, 0x4, 0x6, 0x6, 0x8, 0x3e53, 0x1, 0x3, 0x5, 0xfffffffb, 0xa7f7, 0x80000000, 0xb9e, 0x7, 0x0, 0x0, 0x50400000, 0x8001, 0x9, 0x3, 0x3e, 0x8, 0x2, 0x10, 0x0, 0x2, 0xffffff59, 0x80, 0x7, 0x4, 0x8, 0x80000001, 0x5, 0x11bd2f, 0x12, 0x6, 0x5, 0xffff21c3, 0x8, 0x2, 0x6814da7c, 0x4, 0xd84, 0x10000, 0x9, 0x9, 0x8, 0x32f, 0x5, 0x2, 0x100, 0x100, 0x3, 0x401, 0xa, 0x10000, 0x400, 0x7, 0xf312, 0x1, 0x1, 0x1, 0xfffffffe, 0x8, 0x1, 0x8, 0x400, 0x81, 0xfffffffd, 0x4, 0x10, 0xc, 0xc, 0x380, 0x6, 0x4800000, 0x6, 0x5, 0x0, 0x0, 0x4, 0x81, 0x80000001, 0x1, 0x7, 0x8000, 0x100, 0x3, 0x0, 0x5, 0xca, 0x4, 0x10001, 0x40, 0x6, 0x5, 0xc, 0x1000, 0x400, 0x9, 0x4, 0x240000, 0x31fc, 0x7, 0x65, 0x1, 0xe, 0xef0, 0x80, 0x7, 0x3, 0x7, 0x81, 0x6, 0x83, 0xfff, 0x400, 0x1, 0x5, 0x7fffffff, 0x7bf, 0x16, 0x80000000, 0x1, 0x4e4, 0x5, 0x72c8, 0x80, 0x8001, 0x8585, 0x9, 0x4e49, 0x4, 0x0, 0xff, 0x10, 0xff, 0x7, 0xc, 0xd82e, 0x7, 0x8, 0xfffff801, 0x7d, 0x10, 0x7, 0x24, 0x3, 0x10, 0xd42, 0x7, 0x0, 0xffff1259, 0x94, 0x4, 0x83, 0x7, 0x9, 0xc, 0x9b37, 0x100, 0x4, 0x1, 0x100, 0x4, 0x5, 0x4e, 0x2, 0x80000000, 0x3e7, 0xd, 0x1, 0x2, 0xc, 0x4, 0x1, 0x5, 0x6, 0x6b7f, 0x3, 0x5, 0x8, 0xb3af, 0x5, 0x2, 0x1f, 0xfff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x80000001, 0xfffffffb, 0x5, {0x4, 0x0, 0x7, 0x98, 0x7, 0x7f}, {0x3, 0x1, 0x8, 0x1, 0x1, 0x5}, 0x2, 0x3, 0xd3}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}]}}]}, 0x4c4}}, 0x44050) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, 0x0, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1001}, 0x4) sendmmsg(r5, 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x14, 0x4a, 0x201, 0x0, 0x800000, {0xa, 0x0, 0x300}}, 0x14}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfffffffd}, 0xc) 1m16.447358699s ago: executing program 4 (id=674): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000001b80)=0x58, 0x800) r3 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) recvmmsg$unix(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001940)=""/224, 0xe0}], 0x1, &(0x7f0000001a80)=[@cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x70}}], 0x1, 0x40008002, &(0x7f0000001b40)) 1m0.25094032s ago: executing program 32 (id=674): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000001b80)=0x58, 0x800) r3 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) recvmmsg$unix(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001940)=""/224, 0xe0}], 0x1, &(0x7f0000001a80)=[@cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x70}}], 0x1, 0x40008002, &(0x7f0000001b40)) 24.096690398s ago: executing program 1 (id=880): socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pc\xbf\f\x8c\xc8\xf2_\xdc\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x12ef, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3, 0xb, 0xbb, 0x40, 0x7fa, 0x847, 0x60e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x0, 0x38, 0x38, 0x1d}}]}}]}}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) pipe2$9p(&(0x7f00000001c0), 0x0) r1 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0xfffffffa}, &(0x7f0000000c40)=0x0, &(0x7f0000000180)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x6c, 0x0, @fd_index=0x4, 0x7f, 0x0, 0x7, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 21.182461126s ago: executing program 3 (id=890): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [], {0x14, 0x11, 0x1, 0x4}}, 0x28}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 21.046673314s ago: executing program 3 (id=893): r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x42, 0x0, "bd1c790806ed6dcd18899f9ea77ca9fb5184ff0ba54b7dfe784d2f6b7dcd9474d9b295588ac0b991d5c66461eca3f1ff5543acc6c970d0ad22d692e84d692972368e64c272da633a217b45fcc8b1ff3b"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) sendfile(r1, r2, &(0x7f0000000100)=0x8dff, 0x100000000010001) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x47be, 0x2, 0xd, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20.84918883s ago: executing program 3 (id=895): socket$rds(0x15, 0x5, 0x0) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSF(r2, 0x80047456, 0xffffffffffffffff) fcntl$setstatus(r0, 0x4, 0x0) accept4(r1, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x3, @empty, 0x2}, 0x1c) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0x541b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 20.724883441s ago: executing program 3 (id=896): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0xee0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0xeac, 0x2, [@TCA_MATCHALL_ACT={0xea8, 0x2, [@m_pedit={0xea4, 0x1a, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x6, 0x2, 0x5, 0x4, 0xffffffff}, 0x0, 0x7, [{0x80000000, 0x10000, 0x2, 0xd, 0x3, 0x6}]}, [{0x7, 0x8, 0xb4b, 0x7fffffff, 0x6, 0x5}, {0x2, 0x954, 0x80000000, 0x1ff, 0x4, 0x6}, {0x7, 0xfffffff7, 0x3ff, 0x200, 0x33ad, 0x7}, {0x1, 0x28, 0x8, 0x7, 0x4}, {0xc, 0x200, 0x1000, 0x4, 0x7, 0x6d1}, {0x2, 0x0, 0xe, 0x6, 0x40f, 0x7}, {0x72, 0x7b5, 0x8, 0x5, 0x3ff, 0xfffffff8}, {0x5, 0x9, 0x7, 0x5, 0x8, 0x8000}, {0x8, 0x7, 0x2, 0x9, 0x1, 0x9e0}, {0x0, 0x0, 0x4, 0x1, 0x200, 0x8}, {0xfffffe91, 0xa5, 0x200, 0x1, 0x9, 0x9e}, {0xfffffffe, 0x2, 0x0, 0xeb, 0x9, 0x3350}, {0x0, 0x8000, 0xbd, 0x8, 0x0, 0x7}, {0x8, 0x3, 0x3, 0x2, 0xffff0661, 0x6}, {0x5, 0x7f, 0x9, 0x0, 0x1, 0x624}, {0xa2, 0x5, 0x8, 0x2, 0x2b}, {0x9, 0x7fffffff, 0x9, 0x10000, 0x6, 0x35}, {0x40, 0xec1, 0x0, 0x2, 0x4, 0x4}, {0x9, 0x5, 0x1, 0x9, 0x7a1e9b4d, 0x5a7}, {0x4, 0x200, 0x1, 0x5, 0x100000, 0x9}, {0x1, 0x0, 0x2, 0x6, 0x9, 0x40}, {0x7, 0x457a4711, 0x3ff, 0xfff, 0xd, 0xc9d8}, {0x1, 0x9, 0xfffff001, 0x81, 0x8, 0xc}, {0x5, 0x0, 0x7fff, 0xb2, 0x74, 0x7}, {0x18, 0x7, 0x9, 0x1d7, 0x8, 0x5}, {0x2, 0x2, 0x7, 0x7, 0x9755, 0x7}, {0xf, 0x10000, 0x25, 0x7f, 0x400}, {0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0x5, 0x7}, {0x2000000, 0x1000, 0x800, 0x9, 0x9, 0x4}, {0x1ec, 0x5, 0x4, 0x657, 0x7fff, 0x29}, {0xd, 0x9, 0xf, 0xb2, 0x401, 0x4}, {0x7, 0x10, 0xe7, 0xd, 0x3, 0x6}, {0xfffffffa, 0xfffffff7, 0x7, 0xffff0001, 0x7, 0xfffffffb}, {0x2, 0xe, 0x80000000, 0x8c, 0x80, 0x7}, {0x3, 0x6, 0xffffffd1, 0xffff062b, 0x9}, {0x5, 0x4, 0x8001, 0x8001, 0xf49, 0x4}, {0x6, 0xfff, 0x6, 0x4, 0x8, 0x6}, {0x3, 0x80000001, 0xfff, 0x6, 0x8, 0x1}, {0x3, 0x0, 0xfffffff7, 0x9, 0x0, 0x1}, {0x8a, 0x7, 0x9, 0x7b7, 0x9, 0x6b0a9c9c}, {0xc1, 0x8, 0x8, 0x4}, {0x0, 0x0, 0x3, 0x9, 0x2, 0x2}, {0xfffff800, 0xfff00000, 0x1, 0x8, 0x5, 0x2f99}, {0x4, 0xe, 0xfffffffe, 0x3, 0x2, 0x50}, {0xffff29eb, 0x4, 0x6, 0x3, 0x6, 0x9}, {0x7, 0x5, 0x401, 0xaf, 0x5, 0xf2e}, {0xf25f, 0xff, 0xffffffff, 0x8, 0x7, 0x10001}, {0x0, 0x1000, 0x8, 0x4, 0x2, 0xfffff800}, {0x8, 0x0, 0x0, 0x7, 0x3, 0x3}, {0x770, 0x4, 0x8, 0x80000000, 0x1, 0x6}, {0xaa5, 0x7fff, 0xf8c, 0x8, 0x3ff, 0xffffffff}, {0x3, 0xec8c, 0x3, 0x6, 0x8, 0x2}, {0x800, 0x3, 0x7f, 0x3, 0x5, 0xfffffff9}, {0x6, 0xc20a, 0xc78, 0x101, 0x1, 0x81}, {0x100, 0x4, 0x1, 0x9, 0xc0f, 0xcd}, {0x8001, 0x1ff, 0x6, 0x64f1, 0x8, 0x2}, {0x200, 0x1, 0xff, 0x1ff, 0xfffffd91, 0xfff}, {0xfffffffa, 0x4, 0x670, 0xfffffff8, 0x4, 0x6}, {0xf3, 0xa, 0xe, 0x100000, 0x10, 0x2}, {0x2, 0x7, 0x3, 0x9, 0x9f, 0x9}, {0x1, 0x1, 0xfffff0fb, 0xbcb, 0x6, 0x3}, {0x6, 0x1, 0x7, 0x7, 0x6, 0x3}, {0x8, 0x7, 0xffff43bf, 0xc785, 0x9, 0x9}, {0x7f, 0x5, 0x4, 0x1000, 0x8, 0x4}, {0x7f, 0x8, 0x6, 0x6, 0x4, 0x4}, {0x8, 0x8, 0xa, 0xbb, 0x8, 0x7}, {0x4158, 0xfffff965, 0x6, 0xe57, 0x6, 0x39b84b2a}, {0x1, 0x4, 0x57ee, 0x7, 0xfffffc36, 0x7b}, {0xffff, 0x6e3, 0x5, 0x80, 0xfffffff8, 0x9}, {0xff, 0x6, 0x3, 0x1, 0x0, 0x2}, {0x10, 0xf66, 0x200, 0xd2, 0x6, 0x6bc}, {0x7, 0x9, 0x2, 0x7ff, 0x8000, 0x4}, {0x5, 0x26aff219, 0x7f, 0x5, 0x80, 0x3}, {0x2, 0xb2, 0x3, 0x8000, 0xff, 0x3}, {0xbb8, 0x69c, 0x2, 0xfffffffe, 0x0, 0x80000001}, {0x41baae5f, 0x5, 0x3, 0x3, 0x5, 0x9}, {0x4, 0x4, 0x6, 0x9, 0x0, 0x9}, {0x6, 0xfff, 0x800, 0x3, 0xe118, 0xfffffffc}, {0x6, 0xa7, 0x485, 0x80000001, 0x96, 0x1}, {0x80, 0x5, 0x1, 0x0, 0x9, 0x3}, {0xffffffff, 0xffffffff, 0x8, 0x1a0d, 0x8fe3, 0x1}, {0x0, 0xf, 0x5, 0x65, 0x7}, {0x2, 0x4, 0x3ff, 0x800, 0xa, 0x5}, {0x5, 0x1000, 0x7fff, 0x8, 0x0, 0x2}, {0x80000000, 0xfffffffe, 0x3, 0x5, 0x3, 0x9}, {0x1ff, 0x1, 0xd2d, 0x10001, 0x8, 0x5}, {0x6, 0x1, 0xc, 0x3, 0xc1, 0x9}, {0x3, 0x9f4a, 0x7f, 0x3, 0x6, 0xffffffff}, {0xd3, 0x1, 0x101, 0x7f, 0x2, 0x80000001}, {0x9, 0x10, 0x1, 0x2, 0x6, 0x7}, {0x4, 0x200, 0x3, 0x3d0, 0x1}, {0x9, 0x9720, 0x8000, 0xd84, 0x3, 0x1}, {0x3, 0x401, 0x3, 0x6, 0x9, 0x1000}, {0x8000, 0x5, 0x7fff, 0x1, 0x4, 0x7}, {0x7fffffff, 0x1800000, 0x1, 0x7, 0x0, 0x5}, {0x8, 0x1, 0x2, 0xd2, 0x3, 0x80000001}, {0x1, 0xd74c, 0x9fd, 0xda, 0x4, 0x6}, {0x4, 0x9, 0x8, 0x8, 0xffffff66, 0x800000}, {0x81, 0x800, 0x2, 0x7fff, 0x4, 0xffffffff}, {0x7, 0x5, 0x3e, 0xfffffff7, 0xc, 0x8}, {0x5, 0x2, 0xc762, 0x7fffffff, 0xf, 0x2}, {0x5, 0x0, 0x8, 0x5, 0x4, 0x3}, {0xb4, 0x1, 0xff, 0x1, 0x4, 0x1}, {0x10001, 0x8, 0x7, 0x6, 0x9, 0x800}, {0x401, 0x0, 0xab, 0xa7dd, 0x5, 0x8}, {0x4, 0x3, 0x40, 0x7, 0x3, 0x8}, {0x1, 0x5, 0x800, 0x1, 0x9, 0x6}, {0x8, 0x7a99, 0x962, 0x2, 0x0, 0x627}, {0x3, 0x8, 0x1, 0x9, 0x10000, 0x9}, {0x4, 0xffff, 0x9, 0xf, 0x9, 0x8001}, {0x6, 0x3, 0x7f, 0x1, 0x4, 0xffffff42}, {0x7fffffff, 0x800, 0xff, 0x4, 0x7fffffff, 0x7}, {0xfffffff9, 0x8ff6, 0x51, 0x8000, 0x80000001, 0x2}, {0x10, 0x7ff, 0xfffffffa, 0xac, 0x7b1, 0x3}, {0x4, 0x3, 0x8, 0x10000, 0xa0eaa367, 0x3}, {0x6, 0x80000000, 0x6, 0x0, 0x6, 0x61}, {0x9, 0x6, 0x9, 0x9, 0x8, 0x2}, {0xf1d7, 0x0, 0xff, 0x0, 0x2, 0x5}, {0x8, 0x7fffffff, 0x6, 0x7, 0x4, 0x1}, {0x4, 0x8, 0x7fffffff, 0x8, 0x10001, 0x7}, {0xc0, 0x4, 0x7, 0x7, 0xb0, 0x1}, {0x3ce, 0x0, 0x5, 0x0, 0x35d1, 0x749a}, {0x1, 0xffffffff, 0x5, 0xfff, 0x8}, {0x6, 0x10001, 0x9, 0x3, 0xaac79a1a, 0x8}, {0x80000000, 0xfffffff7, 0x8, 0x4, 0xb17, 0x2e}, {0x6, 0xffffffff, 0x100, 0xf, 0x5, 0x5}, {0x8001, 0x2, 0x0, 0x0, 0x1, 0xe3e9}, {0x3, 0xff, 0x5, 0x0, 0xfa, 0xdf47}], [{0x4, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x5}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2, 0x2}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x6}, {0x4, 0x1}, {0x4, 0x1}, {0x6}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x3}, {}, {}, {0x5c326980d9c9b056, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x3}, {}, {0x3}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x4}, {}, {0x2}, {0x0, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {}, {}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}]}}]}, {0x40, 0x6, "8004c389aff32d8649d2601fdfa71f7107b074a2c2348c2f566ed93994a66f675f36bc3f2235fec335c95229af325bcf1ecdb1a763f8d77687223d0e"}, {0xc}, {0xc, 0x8, {0x2a32c7211208518c, 0x1}}}}]}]}}]}, 0xee0}}, 0x801) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20.723200846s ago: executing program 1 (id=898): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r3, 0x40086602, &(0x7f0000000000)) 20.528433751s ago: executing program 3 (id=900): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x9000, 0x208, 0x300, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x98, 0x230, 0x230, 0x3d8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @private=0xa010102, 0x0, 0xffffff00, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x1}, 0x0, 0x70, 0x98, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x2}}}, {{@ip={@private=0xa010100, @empty, 0xffffff00, 0xff, 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x88, 0x3, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 20.287389534s ago: executing program 2 (id=902): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [], {0x14, 0x11, 0x1, 0x4}}, 0x28}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 20.186571965s ago: executing program 3 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000001b80)=0x58, 0x800) r3 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) 19.484546578s ago: executing program 1 (id=904): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000500)=[@increfs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 19.444699654s ago: executing program 2 (id=905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 19.347458707s ago: executing program 1 (id=906): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001300f5d10300"/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00)\x00\x00\b!'], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 18.689367398s ago: executing program 1 (id=908): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0xa, @in=@broadcast, 0x1}}, 0xe4) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 18.666512991s ago: executing program 2 (id=909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000a25284eb947959e60800", @ANYRES32], 0x28}}, 0x0) 18.567322044s ago: executing program 0 (id=910): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000580), &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x1000816, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000240, 0x20000270, 0x200002a0], 0x0, 0x0, &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r4, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x380b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3aa755b6) chdir(&(0x7f0000000280)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x5) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='m', 0xfffffdfc}]) writev(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)="14", 0x1}], 0x1) 18.319091284s ago: executing program 2 (id=911): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b70800"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="240000002e00074c8bfffd946fa2830022200afffffffffffff000e50c1be3a20400007e", 0x24}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000abfa"], 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, r4, 0x1, 0x0, 0x0, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r5 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000000c0)=0x14a7, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x18, r6, 0x705, 0xfffffffc, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}}, 0x40) 17.66533066s ago: executing program 1 (id=912): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000700), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 17.388773525s ago: executing program 0 (id=913): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r3, 0x40086602, &(0x7f0000000000)) 17.235950875s ago: executing program 2 (id=914): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x4}}, 0x74}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 17.139520946s ago: executing program 2 (id=915): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000b00)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 16.277872345s ago: executing program 0 (id=916): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24048084}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 15.144378978s ago: executing program 0 (id=917): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001300f5d10300"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00)\x00\x00\b!'], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 15.143870621s ago: executing program 0 (id=918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15.101661027s ago: executing program 0 (id=919): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0xfffffffffffffe1d, 0xfa00, @id_afonly={&(0x7f0000000100), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) 5.013166665s ago: executing program 33 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000001b80)=0x58, 0x800) r3 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) 2.508069293s ago: executing program 34 (id=912): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000700), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.010859393s ago: executing program 35 (id=915): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000b00)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 0s ago: executing program 36 (id=919): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0xfffffffffffffe1d, 0xfa00, @id_afonly={&(0x7f0000000100), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts. [ 83.310930][ T5811] cgroup: Unknown subsys name 'net' [ 83.480180][ T5811] cgroup: Unknown subsys name 'cpuset' [ 83.489450][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.114265][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.347756][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.357429][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.366143][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.376683][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.384241][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.393254][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.402715][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.411208][ T5830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.418870][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.429459][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.447398][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.462830][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.478145][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.487326][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.487437][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.502115][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.509926][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.517477][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.537113][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.554554][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.566605][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.575604][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.585705][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.594112][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.601982][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.625943][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.634827][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.658988][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.669486][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.676943][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.064663][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 90.104360][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 90.143412][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 90.183642][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 90.375764][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.384463][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.392392][ T5831] bridge_slave_0: entered allmulticast mode [ 90.399724][ T5831] bridge_slave_0: entered promiscuous mode [ 90.433001][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 90.457983][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.465157][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.472895][ T5831] bridge_slave_1: entered allmulticast mode [ 90.480652][ T5831] bridge_slave_1: entered promiscuous mode [ 90.526302][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.533601][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.541498][ T5822] bridge_slave_0: entered allmulticast mode [ 90.548930][ T5822] bridge_slave_0: entered promiscuous mode [ 90.594411][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.603790][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.614226][ T5822] bridge_slave_1: entered allmulticast mode [ 90.623751][ T5822] bridge_slave_1: entered promiscuous mode [ 90.658403][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.665790][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.673395][ T5836] bridge_slave_0: entered allmulticast mode [ 90.680522][ T5836] bridge_slave_0: entered promiscuous mode [ 90.688845][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.696078][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.703610][ T5836] bridge_slave_1: entered allmulticast mode [ 90.711003][ T5836] bridge_slave_1: entered promiscuous mode [ 90.721362][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.776056][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.799736][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.816421][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.835616][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.843072][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.850860][ T5821] bridge_slave_0: entered allmulticast mode [ 90.858828][ T5821] bridge_slave_0: entered promiscuous mode [ 90.867917][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.875062][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.882517][ T5821] bridge_slave_1: entered allmulticast mode [ 90.889695][ T5821] bridge_slave_1: entered promiscuous mode [ 90.898109][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.912788][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.983405][ T5831] team0: Port device team_slave_0 added [ 91.024294][ T5836] team0: Port device team_slave_0 added [ 91.035537][ T5831] team0: Port device team_slave_1 added [ 91.043808][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.068074][ T5822] team0: Port device team_slave_0 added [ 91.074381][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.086371][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.094546][ T5838] bridge_slave_0: entered allmulticast mode [ 91.101849][ T5838] bridge_slave_0: entered promiscuous mode [ 91.110891][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.118233][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.125707][ T5838] bridge_slave_1: entered allmulticast mode [ 91.132863][ T5838] bridge_slave_1: entered promiscuous mode [ 91.142616][ T5836] team0: Port device team_slave_1 added [ 91.172417][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.204582][ T5822] team0: Port device team_slave_1 added [ 91.239944][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.255168][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.283154][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.298710][ T5821] team0: Port device team_slave_0 added [ 91.318450][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.340430][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.349277][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.385617][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.408381][ T5821] team0: Port device team_slave_1 added [ 91.427107][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.436995][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.444113][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.470569][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.484740][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.488470][ T54] Bluetooth: hci1: command tx timeout [ 91.491927][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.523546][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.554085][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.561516][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.588481][ T54] Bluetooth: hci2: command tx timeout [ 91.592412][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.594411][ T5134] Bluetooth: hci0: command tx timeout [ 91.610861][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.618776][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.645860][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.657689][ T5134] Bluetooth: hci3: command tx timeout [ 91.690835][ T5838] team0: Port device team_slave_0 added [ 91.698805][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.705831][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.727157][ T5134] Bluetooth: hci4: command tx timeout [ 91.733325][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.754164][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.761316][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.787614][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.825198][ T5838] team0: Port device team_slave_1 added [ 91.859761][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.866958][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.893852][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.910815][ T5831] hsr_slave_0: entered promiscuous mode [ 91.917664][ T5831] hsr_slave_1: entered promiscuous mode [ 91.945988][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.953369][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.980127][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.028848][ T5822] hsr_slave_0: entered promiscuous mode [ 92.037941][ T5822] hsr_slave_1: entered promiscuous mode [ 92.044469][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.053367][ T5822] Cannot create hsr debugfs directory [ 92.063638][ T5836] hsr_slave_0: entered promiscuous mode [ 92.070569][ T5836] hsr_slave_1: entered promiscuous mode [ 92.076917][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.084552][ T5836] Cannot create hsr debugfs directory [ 92.125675][ T5821] hsr_slave_0: entered promiscuous mode [ 92.132328][ T5821] hsr_slave_1: entered promiscuous mode [ 92.139064][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.146979][ T5821] Cannot create hsr debugfs directory [ 92.220955][ T5838] hsr_slave_0: entered promiscuous mode [ 92.227861][ T5838] hsr_slave_1: entered promiscuous mode [ 92.234332][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.242564][ T5838] Cannot create hsr debugfs directory [ 92.642950][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.658243][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.668831][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.692535][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.735050][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.781664][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.792973][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.816165][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.934663][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.952255][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.964085][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.012911][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.103671][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.125267][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.141083][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.180404][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.198560][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.294109][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.329040][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.357629][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.370593][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.450390][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.457882][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.472389][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.479614][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.494332][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.541573][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.566868][ T5134] Bluetooth: hci1: command tx timeout [ 93.645488][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.651458][ T5134] Bluetooth: hci0: command tx timeout [ 93.653930][ T54] Bluetooth: hci2: command tx timeout [ 93.685854][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.700825][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.708096][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.726792][ T54] Bluetooth: hci3: command tx timeout [ 93.765285][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.772528][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.807320][ T54] Bluetooth: hci4: command tx timeout [ 93.818481][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.834956][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.877519][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.894069][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.901241][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.911720][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.918895][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.954480][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.961760][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.990473][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.997669][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.059213][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.105929][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.121118][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.159556][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.167154][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.177661][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.185056][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.281378][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.326281][ T5831] veth0_vlan: entered promiscuous mode [ 94.366253][ T5831] veth1_vlan: entered promiscuous mode [ 94.490028][ T5831] veth0_macvtap: entered promiscuous mode [ 94.523363][ T5831] veth1_macvtap: entered promiscuous mode [ 94.611417][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.686229][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.732972][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.744400][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.753441][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.762489][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.784893][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.824141][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.839546][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.868685][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.975010][ T5821] veth0_vlan: entered promiscuous mode [ 95.041883][ T5821] veth1_vlan: entered promiscuous mode [ 95.064173][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.074803][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.119052][ T5822] veth0_vlan: entered promiscuous mode [ 95.161533][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.173375][ T5838] veth0_vlan: entered promiscuous mode [ 95.186661][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.203157][ T5822] veth1_vlan: entered promiscuous mode [ 95.215923][ T5838] veth1_vlan: entered promiscuous mode [ 95.290031][ T5821] veth0_macvtap: entered promiscuous mode [ 95.326340][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.329116][ T5821] veth1_macvtap: entered promiscuous mode [ 95.381790][ T5822] veth0_macvtap: entered promiscuous mode [ 95.448781][ T5822] veth1_macvtap: entered promiscuous mode [ 95.469042][ T5838] veth0_macvtap: entered promiscuous mode [ 95.487317][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.505849][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.519208][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.534678][ T5836] veth0_vlan: entered promiscuous mode [ 95.543255][ T5904] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.564042][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.585624][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.597828][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.625062][ T5838] veth1_macvtap: entered promiscuous mode [ 95.649085][ T54] Bluetooth: hci1: command tx timeout [ 95.654608][ T5836] veth1_vlan: entered promiscuous mode [ 95.670652][ T5821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.680790][ T5821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.691490][ T5821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.700595][ T5821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.729384][ T54] Bluetooth: hci2: command tx timeout [ 95.735764][ T54] Bluetooth: hci0: command tx timeout [ 95.745988][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.764807][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.777762][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.789304][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.801462][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.809690][ T54] Bluetooth: hci3: command tx timeout [ 95.819903][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.831581][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.842136][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.853167][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.864397][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.888868][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.898890][ T54] Bluetooth: hci4: command tx timeout [ 95.905184][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.914781][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.923744][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.945207][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.955997][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.966534][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.979394][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.989467][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.999981][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.011205][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.039964][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.051569][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.062215][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.074054][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.084792][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.095436][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.107570][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.137417][ T5836] veth0_macvtap: entered promiscuous mode [ 96.149575][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.158628][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.171015][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.180286][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.201513][ T5836] veth1_macvtap: entered promiscuous mode [ 96.285807][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.299809][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.312564][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.324834][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.335530][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.347615][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.359297][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.371064][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.382628][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.398066][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.409038][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.419642][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.430564][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.440520][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.451188][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.461348][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.473206][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.484850][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.525022][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.540331][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.558620][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.567131][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.576077][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.592208][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.734394][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.760354][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.798358][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.808485][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.884481][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.934197][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.992885][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.031882][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.135491][ T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.193571][ T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.234300][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.255318][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.288591][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.315611][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.404807][ T5917] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.739648][ T54] Bluetooth: hci1: command tx timeout [ 97.762241][ T5921] delete_channel: no stack [ 97.807625][ T54] Bluetooth: hci2: command tx timeout [ 97.810640][ T5134] Bluetooth: hci0: command tx timeout [ 97.896661][ T5134] Bluetooth: hci3: command tx timeout [ 97.914144][ T1214] cfg80211: failed to load regulatory.db [ 97.967046][ T5134] Bluetooth: hci4: command tx timeout [ 99.431736][ T5945] overlayfs: missing 'lowerdir' [ 100.371364][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16'. [ 100.381454][ T5950] netlink: 31 bytes leftover after parsing attributes in process `syz.2.16'. [ 100.414619][ T5950] netlink: 'syz.2.16': attribute type 3 has an invalid length. [ 100.425227][ T5950] netlink: 'syz.2.16': attribute type 2 has an invalid length. [ 100.436418][ T5950] netlink: 31 bytes leftover after parsing attributes in process `syz.2.16'. [ 100.606863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.638156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.057086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.107815][ T5950] pim6reg: entered allmulticast mode [ 103.335039][ T5976] ceph: No mds server is up or the cluster is laggy [ 103.392652][ T25] libceph: connect (1)[c::]:6789 error -101 [ 103.482607][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 104.116349][ T25] libceph: connect (1)[c::]:6789 error -101 [ 104.137744][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 106.656904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.191738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 108.768400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.008219][ T5134] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 110.571000][ T5134] Bluetooth: hci4: SCO packet for unknown connection handle 4095 [ 111.595120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 112.004726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 113.193138][ T979] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.555722][ T979] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 114.008896][ T6038] netlink: 36 bytes leftover after parsing attributes in process `syz.0.42'. [ 114.209071][ T6045] netlink: 68 bytes leftover after parsing attributes in process `syz.4.43'. [ 114.270790][ T979] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.280614][ T6045] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 114.367280][ T979] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.465814][ T979] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.777374][ T979] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.796593][ T979] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.840682][ T979] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.866429][ T979] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.122353][ T979] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.176314][ T979] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.034377][ T979] usb 2-1: unable to read config index 3 descriptor/start: -71 [ 116.093595][ T979] usb 2-1: can't read configurations, error -71 [ 116.698053][ T6072] Bluetooth: MGMT ver 1.23 [ 119.712888][ T6105] netlink: 36 bytes leftover after parsing attributes in process `syz.2.57'. [ 122.285436][ T6120] ALSA: mixer_oss: invalid OSS volume '' [ 122.589328][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 122.609000][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 122.621502][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 122.645011][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 122.680559][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 122.708378][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 122.741441][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 122.762788][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 122.789148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.810218][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 122.838319][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 122.845764][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 122.864399][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.872437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.923171][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 122.953627][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 122.983271][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.026196][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.036630][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.079771][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.097397][ T9] usb 4-1: config 0 has no interfaces? [ 123.106924][ T9] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 123.117977][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.125445][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.145905][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.184004][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.204717][ T9] usb 4-1: config 0 descriptor?? [ 123.216640][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.446145][ T6141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.65'. [ 123.462507][ T6141] Zero length message leads to an empty skb [ 124.194469][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 124.204691][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 124.212984][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 124.220801][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 124.229169][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 124.844698][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 124.866172][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 124.884003][ T1214] usb 4-1: USB disconnect, device number 2 [ 124.926638][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 124.986880][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 125.035271][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 125.067115][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 125.105355][ T8] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 126.185526][ T1214] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 126.386604][ T1214] usb 1-1: Using ep0 maxpacket: 32 [ 126.436072][ T1214] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 126.491171][ T1214] usb 1-1: config 0 has no interface number 0 [ 126.588742][ T1214] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 126.662349][ T1214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.733922][ T1214] usb 1-1: Product: syz [ 126.756083][ T1214] usb 1-1: Manufacturer: syz [ 126.780876][ T1214] usb 1-1: SerialNumber: syz [ 126.910922][ T1214] usb 1-1: config 0 descriptor?? [ 126.950868][ T1214] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 128.255847][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.75'. [ 128.266743][ T6175] netlink: 31 bytes leftover after parsing attributes in process `syz.1.75'. [ 128.276057][ T6175] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 128.285113][ T6175] netlink: 'syz.1.75': attribute type 2 has an invalid length. [ 128.306906][ T6175] netlink: 31 bytes leftover after parsing attributes in process `syz.1.75'. [ 129.212511][ T6175] pim6reg527: entered allmulticast mode [ 130.699473][ T1214] usb 1-1: qt2_attach - failed to power on unit: -71 [ 130.706389][ T1214] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 130.773933][ T1214] usb 1-1: USB disconnect, device number 2 [ 130.842994][ T6208] overlayfs: missing 'lowerdir' [ 130.924918][ T6209] netlink: 140 bytes leftover after parsing attributes in process `syz.3.78'. [ 134.636261][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 134.645421][ T6259] netlink: 31 bytes leftover after parsing attributes in process `syz.1.90'. [ 134.655775][ T6259] netlink: 'syz.1.90': attribute type 3 has an invalid length. [ 134.738965][ T6259] netlink: 'syz.1.90': attribute type 2 has an invalid length. [ 134.759792][ T6259] netlink: 31 bytes leftover after parsing attributes in process `syz.1.90'. [ 134.942705][ T6272] overlayfs: missing 'lowerdir' [ 134.956635][ T5870] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 134.967407][ T6272] netlink: 140 bytes leftover after parsing attributes in process `syz.2.93'. [ 135.166655][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 135.178652][ T5870] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 135.191829][ T5870] usb 4-1: config 0 has no interface number 0 [ 135.208631][ T5870] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 135.218085][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.226205][ T5870] usb 4-1: Product: syz [ 135.230866][ T5870] usb 4-1: Manufacturer: syz [ 135.235517][ T5870] usb 4-1: SerialNumber: syz [ 135.250444][ T5870] usb 4-1: config 0 descriptor?? [ 135.281817][ T5870] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 135.400111][ T6276] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 137.814862][ T5870] usb 4-1: qt2_attach - failed to power on unit: -71 [ 137.846638][ T5870] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 137.883498][ T5870] usb 4-1: USB disconnect, device number 3 [ 138.851911][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.246593][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.529335][ T6320] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.189175][ T6335] netlink: 140 bytes leftover after parsing attributes in process `syz.2.105'. [ 142.896546][ T979] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 142.992771][ T6372] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 143.088584][ T6372] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 143.095524][ T979] usb 3-1: Using ep0 maxpacket: 32 [ 143.112731][ T979] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 143.221578][ T979] usb 3-1: config 0 has no interface number 0 [ 143.303710][ T979] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 143.382933][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.456237][ T979] usb 3-1: Product: syz [ 143.496400][ T979] usb 3-1: Manufacturer: syz [ 143.565763][ T979] usb 3-1: SerialNumber: syz [ 143.647666][ T979] usb 3-1: config 0 descriptor?? [ 143.692959][ T979] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 143.940262][ T6382] netlink: 140 bytes leftover after parsing attributes in process `syz.4.120'. [ 146.597069][ T979] usb 3-1: qt2_attach - failed to power on unit: -71 [ 146.604455][ T979] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 146.652461][ T979] usb 3-1: USB disconnect, device number 2 [ 147.112614][ T6412] overlayfs: failed to resolve './file0': -2 [ 149.504741][ T6426] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 149.511500][ T6426] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 149.519866][ T6426] vhci_hcd vhci_hcd.0: Device attached [ 149.695178][ T6441] netlink: 140 bytes leftover after parsing attributes in process `syz.0.135'. [ 149.866640][ T8] vhci_hcd: vhci_device speed not set [ 149.929942][ T8] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 150.924296][ T6451] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.136'. [ 151.067531][ T6433] vhci_hcd: connection reset by peer [ 151.087063][ T3541] vhci_hcd: stop threads [ 151.129216][ T3541] vhci_hcd: release socket [ 151.175348][ T3541] vhci_hcd: disconnect device [ 151.196913][ T877] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 151.426646][ T877] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 151.466916][ T877] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.483020][ T877] usb 1-1: config 0 interface 0 has no altsetting 0 [ 151.499684][ T877] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.514438][ T877] usb 1-1: config 0 interface 0 has no altsetting 0 [ 151.536601][ T877] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.555953][ T877] usb 1-1: config 0 interface 0 has no altsetting 0 [ 151.627987][ T877] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.641550][ T877] usb 1-1: config 0 interface 0 has no altsetting 0 [ 151.684085][ T877] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.703923][ T877] usb 1-1: config 0 interface 0 has no altsetting 0 [ 151.738674][ T877] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.789216][ T877] usb 1-1: config 0 interface 0 has no altsetting 0 [ 151.825613][ T877] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.853305][ T877] usb 1-1: config 0 interface 0 has no altsetting 0 [ 151.889214][ T877] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.908978][ T6466] overlayfs: failed to resolve './file1': -2 [ 151.923816][ T877] usb 1-1: config 0 interface 0 has no altsetting 0 [ 151.957726][ T877] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 152.164774][ T877] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 152.928314][ T5134] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 152.993970][ T877] usb 1-1: Product: syz [ 153.004063][ T877] usb 1-1: Manufacturer: syz [ 153.012120][ T5134] Bluetooth: hci0: command 0x0401 tx timeout [ 153.644387][ T6491] netlink: 140 bytes leftover after parsing attributes in process `syz.4.146'. [ 153.986756][ T877] usb 1-1: SerialNumber: syz [ 154.020515][ T877] usb 1-1: config 0 descriptor?? [ 154.312552][ T877] usb 1-1: can't set config #0, error -71 [ 154.345214][ T877] usb 1-1: USB disconnect, device number 3 [ 154.736610][ T5873] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 155.629285][ T5873] usb 3-1: device descriptor read/64, error -71 [ 155.796895][ T8] vhci_hcd: vhci_device speed not set [ 155.867307][ T1214] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 155.887305][ T5873] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 156.131277][ T5873] usb 3-1: device descriptor read/64, error -71 [ 156.876699][ T1214] usb 1-1: Using ep0 maxpacket: 32 [ 156.887584][ T1214] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 156.906560][ T1214] usb 1-1: config 0 has no interface number 0 [ 156.919151][ T1214] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 156.946917][ T1214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.999310][ T1214] usb 1-1: Product: syz [ 157.009165][ T5873] usb usb3-port1: attempt power cycle [ 157.014997][ T1214] usb 1-1: Manufacturer: syz [ 157.037025][ T1214] usb 1-1: SerialNumber: syz [ 157.053546][ T1214] usb 1-1: config 0 descriptor?? [ 157.096087][ T1214] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 157.315887][ T6525] netlink: 140 bytes leftover after parsing attributes in process `syz.4.157'. [ 157.620024][ T5873] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 158.550868][ T979] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 158.739634][ T5873] usb 3-1: device descriptor read/8, error -71 [ 158.750600][ T6528] kernel profiling enabled (shift: 7) [ 159.901351][ T1214] usb 1-1: qt2_attach - failed to power on unit: -71 [ 159.913018][ T1214] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 159.962183][ T1214] usb 1-1: USB disconnect, device number 4 [ 160.008381][ T6535] input: syz0 as /devices/virtual/input/input5 [ 161.710057][ T979] usb 2-1: unable to get BOS descriptor or descriptor too short [ 161.744689][ T979] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 161.843340][ T979] usb 2-1: can't read configurations, error -71 [ 162.277665][ T6570] fuse: Bad value for 'fd' [ 162.286643][ T5873] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 162.982583][ T5134] Bluetooth: hci0: command 0x0401 tx timeout [ 162.988936][ T8] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 163.045870][ T8] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 163.129238][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 163.160319][ T5873] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.181977][ T5873] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.245118][ T6577] netlink: 140 bytes leftover after parsing attributes in process `syz.1.168'. [ 163.338360][ T5873] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.398337][ T5873] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.457195][ T5873] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.517610][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.763176][ T5873] usb 5-1: usb_control_msg returned -32 [ 164.063366][ T6591] [U]  [ 164.809413][ T5873] usbtmc 5-1:16.0: can't read capabilities [ 165.087513][ T5870] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 165.247136][ T8] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 165.256733][ T5870] usb 2-1: device descriptor read/64, error -71 [ 165.256796][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.286165][ T8] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 165.516705][ T5870] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 165.717892][ T5870] usb 2-1: device descriptor read/64, error -71 [ 165.938881][ T979] usb 5-1: USB disconnect, device number 2 [ 166.045991][ T6615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.176'. [ 166.102934][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 166.225932][ T5870] usb usb2-port1: attempt power cycle [ 167.397631][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.416995][ T8] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 167.423116][ T8] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 167.676664][ T5870] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 167.822802][ T6631] netlink: 140 bytes leftover after parsing attributes in process `syz.3.179'. [ 167.872245][ T5870] usb 2-1: device descriptor read/8, error -71 [ 169.646960][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.656875][ T8] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 169.663005][ T8] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 169.776911][ T6668] ALSA: mixer_oss: invalid OSS volume '' [ 171.728458][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 171.734820][ T8] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 171.779264][ T8] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 172.226758][ T5870] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 172.526741][ T5870] usb 5-1: device descriptor read/64, error -71 [ 173.646668][ T5870] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 173.785597][ T6712] overlayfs: failed to resolve './file0': -2 [ 173.806570][ T5870] usb 5-1: device descriptor read/64, error -71 [ 173.939264][ T5870] usb usb5-port1: attempt power cycle [ 174.410628][ T5870] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 174.460621][ T5870] usb 5-1: device descriptor read/8, error -71 [ 174.831627][ T5134] Bluetooth: hci5: sending frame failed (-49) [ 174.839447][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 175.533989][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.200'. [ 177.618715][ T6774] overlayfs: failed to resolve './file0': -2 [ 178.218437][ T6793] binder: BINDER_SET_CONTEXT_MGR already set [ 178.224964][ T6793] binder: 6791:6793 ioctl 4018620d 200001c0 returned -16 [ 178.306582][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 178.430555][ T5134] Bluetooth: hci5: sending frame failed (-49) [ 178.440027][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 178.456610][ T6799] Bluetooth: hci5: Frame reassembly failed (-84) [ 178.468247][ T8] usb 3-1: device descriptor read/64, error -71 [ 178.722396][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.006901][ T8] usb 3-1: device descriptor read/64, error -71 [ 179.033131][ T6811] syz_tun: entered allmulticast mode [ 179.042757][ T6811] syz_tun: left allmulticast mode [ 179.131811][ T8] usb usb3-port1: attempt power cycle [ 179.506678][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 179.572814][ T8] usb 3-1: device descriptor read/8, error -71 [ 179.680583][ T6828] overlayfs: failed to resolve './file0': -2 [ 179.923624][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 179.957525][ T8] usb 3-1: device descriptor read/8, error -71 [ 180.093533][ T8] usb usb3-port1: unable to enumerate USB device [ 181.366601][ T1214] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 181.538981][ T1214] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 181.553748][ T1214] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 181.579793][ T1214] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 181.613694][ T1214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.660023][ T6843] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 181.688541][ T1214] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.101547][ T25] usb 1-1: USB disconnect, device number 5 [ 186.920271][ T12] Bluetooth: hci5: Frame reassembly failed (-90) [ 186.967003][ T1214] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 187.106924][ T1214] usb 4-1: device descriptor read/64, error -71 [ 187.356926][ T1214] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 187.506740][ T1214] usb 4-1: device descriptor read/64, error -71 [ 187.524916][ T6954] ALSA: mixer_oss: invalid OSS volume '' [ 187.617469][ T1214] usb usb4-port1: attempt power cycle [ 188.792264][ T1214] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 188.821850][ T1214] usb 4-1: device descriptor read/8, error -71 [ 188.994371][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 189.002397][ T5134] Bluetooth: hci5: command 0x1003 tx timeout [ 190.134586][ T1214] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 190.519657][ T1214] usb 4-1: device descriptor read/8, error -71 [ 190.658413][ T1214] usb usb4-port1: unable to enumerate USB device [ 190.984114][ T6995] ALSA: mixer_oss: invalid OSS volume '' [ 193.438576][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 193.819801][ T7019] 9pnet_fd: Insufficient options for proto=fd [ 195.487527][ T5134] Bluetooth: hci5: command 0x1003 tx timeout [ 195.494950][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 195.790865][ T7035] ALSA: mixer_oss: invalid OSS volume '' [ 196.126691][ T7043] netlink: 'syz.2.258': attribute type 15 has an invalid length. [ 196.134557][ T7043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.258'. [ 197.054724][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 197.066030][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 197.077008][ T7045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.260'. [ 200.354283][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.361185][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.489451][ T7090] netlink: 'syz.4.274': attribute type 15 has an invalid length. [ 200.497430][ T7090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.274'. [ 201.744629][ T5134] Bluetooth: hci5: command 0x1003 tx timeout [ 201.756605][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 202.325496][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'. [ 202.336576][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'. [ 202.346080][ T7103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.277'. [ 208.184779][ T7159] syz_tun: entered allmulticast mode [ 208.193206][ T7159] syz_tun: left allmulticast mode [ 209.006298][ T5873] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 209.179568][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'. [ 209.229296][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'. [ 209.245434][ T7158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.292'. [ 209.336603][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 209.344285][ T5873] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.382079][ T7165] netlink: 'syz.1.296': attribute type 10 has an invalid length. [ 209.403016][ T5873] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.451438][ T7165] netlink: 2 bytes leftover after parsing attributes in process `syz.1.296'. [ 209.456120][ T29] audit: type=1326 audit(1737827970.407:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7168 comm="syz.3.297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f198758cd29 code=0x0 [ 209.460949][ T5873] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.492750][ T7165] team0: entered promiscuous mode [ 209.509008][ T7165] team_slave_0: entered promiscuous mode [ 209.514996][ T7165] team_slave_1: entered promiscuous mode [ 209.530602][ T5873] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.564546][ T5873] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 209.585277][ T7165] bridge0: port 3(team0) entered blocking state [ 209.591836][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.847752][ T7165] bridge0: port 3(team0) entered disabled state [ 209.857124][ T7165] team0: entered allmulticast mode [ 209.866140][ T7165] team_slave_0: entered allmulticast mode [ 209.877969][ T7165] team_slave_1: entered allmulticast mode [ 209.887643][ T7165] bridge0: port 3(team0) entered blocking state [ 209.894744][ T7165] bridge0: port 3(team0) entered forwarding state [ 210.140498][ T5873] usb 5-1: usb_control_msg returned -32 [ 210.148913][ T5873] usbtmc 5-1:16.0: can't read capabilities [ 212.932155][ T7181] [U]  [ 213.136532][ T25] usb 5-1: USB disconnect, device number 7 [ 214.535977][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 214.544846][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'. [ 214.553168][ T7215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.308'. [ 218.147052][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 218.196905][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.322'. [ 218.206402][ T7259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.322'. [ 223.506716][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 223.516633][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.339'. [ 223.526028][ T7320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.339'. [ 226.268985][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 226.278571][ T7361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.353'. [ 226.288217][ T7361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.353'. [ 228.042362][ T7385] syz_tun: entered allmulticast mode [ 228.223229][ T7387] tipc: Started in network mode [ 228.262486][ T7387] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 228.328194][ T7387] tipc: Enabled bearer , priority 10 [ 228.410568][ T7378] syz_tun: left allmulticast mode [ 228.860911][ T7413] block nbd2: NBD_DISCONNECT [ 228.862499][ T7407] block nbd2: shutting down sockets [ 228.968678][ T7413] block nbd2: Send disconnect failed -32 [ 228.996478][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 229.005953][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.371'. [ 229.015708][ T7414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.371'. [ 229.346867][ T5870] tipc: Node number set to 10136234 [ 230.432385][ T7426] process 'syz.2.376' launched '/dev/fd/3' with NULL argv: empty string added [ 233.253529][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 233.262457][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'. [ 233.271413][ T7470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.387'. [ 237.590599][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.403'. [ 237.600728][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.403'. [ 237.611061][ T7508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.403'. [ 239.396753][ T7529] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 240.657347][ T7484] netlink: 'syz.4.390': attribute type 15 has an invalid length. [ 240.674737][ T7484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.390'. [ 241.077686][ T7539] netlink: 140 bytes leftover after parsing attributes in process `syz.2.413'. [ 242.051331][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 242.060526][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.415'. [ 242.069490][ T7546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.415'. [ 244.421078][ T7572] syz.1.423 uses obsolete (PF_INET,SOCK_PACKET) [ 248.234391][ T7598] netlink: 140 bytes leftover after parsing attributes in process `syz.2.430'. [ 248.855870][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 248.866068][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.431'. [ 248.875617][ T7604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.431'. [ 250.601074][ T7639] netlink: 'syz.4.427': attribute type 15 has an invalid length. [ 250.608949][ T7639] netlink: 24 bytes leftover after parsing attributes in process `syz.4.427'. [ 251.333788][ T5870] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 252.136599][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 252.164008][ T5870] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 252.190162][ T5870] usb 2-1: config 150 has no interface number 0 [ 252.220310][ T5870] usb 2-1: config 150 interface 204 has no altsetting 0 [ 252.470034][ T5870] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 252.479654][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.496545][ T5870] usb 2-1: Product: syz [ 252.500788][ T5870] usb 2-1: Manufacturer: syz [ 252.505431][ T5870] usb 2-1: SerialNumber: syz [ 253.443927][ T5870] xr_serial 2-1:150.204: xr_serial converter detected [ 253.480995][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 253.491844][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 253.501669][ T7654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.445'. [ 253.840618][ T5870] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 253.902518][ T5870] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 254.020199][ T5870] usb 2-1: USB disconnect, device number 10 [ 254.059383][ T5870] xr_serial 2-1:150.204: device disconnected [ 259.818715][ T7704] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.038803][ T7706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 260.772403][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 260.784254][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.460'. [ 260.794802][ T7713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.460'. [ 261.729826][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.736239][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.187379][ T7761] netlink: 'syz.4.478': attribute type 3 has an invalid length. [ 264.195231][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'. [ 265.022272][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 265.031889][ T7757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.476'. [ 265.042312][ T7757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.476'. [ 268.306251][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 268.315584][ T7810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 268.324581][ T7810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.490'. [ 269.165673][ T7815] veth0_to_team: entered promiscuous mode [ 269.176370][ T7815] veth0_to_team: entered allmulticast mode [ 269.277156][ T7820] netlink: 'syz.1.494': attribute type 15 has an invalid length. [ 269.284959][ T7820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.494'. [ 271.783989][ T7835] block nbd4: NBD_DISCONNECT [ 272.385584][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 272.395672][ T7846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'. [ 272.404822][ T7846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.504'. [ 273.050333][ T7853] netlink: 'syz.0.506': attribute type 15 has an invalid length. [ 273.058225][ T7853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.506'. [ 274.334754][ T5870] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 274.396566][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 274.516628][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 274.577365][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 274.679578][ T5870] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 275.097576][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.122902][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.176526][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.195771][ T5870] usb 5-1: config 0 descriptor?? [ 275.242338][ T5870] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 275.251841][ T25] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 275.301113][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.333621][ T25] usb 2-1: config 0 descriptor?? [ 275.642882][ T8] usb 5-1: USB disconnect, device number 8 [ 276.615098][ T7887] autofs: Bad value for 'fd' [ 276.642408][ T7887] netlink: 140 bytes leftover after parsing attributes in process `syz.2.518'. [ 276.675132][ T25] steelseries 0003:1038:12B6.0002: unknown main item tag 0xe [ 276.684109][ T25] steelseries 0003:1038:12B6.0002: item fetching failed at offset 5/7 [ 276.693522][ T25] steelseries 0003:1038:12B6.0002: probe with driver steelseries failed with error -22 [ 276.977722][ T25] usb 2-1: USB disconnect, device number 11 [ 277.010850][ T7882] 9pnet: Could not find request transport: fd0x0000000000000006 [ 277.555847][ T7895] netlink: 'syz.2.519': attribute type 15 has an invalid length. [ 277.563716][ T7895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.519'. [ 278.451932][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 278.461723][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'. [ 278.476989][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.521'. [ 280.691644][ T7927] loop7: detected capacity change from 0 to 16384 [ 282.831393][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 282.990832][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 283.000844][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.535'. [ 283.010056][ T7951] netlink: 20 bytes leftover after parsing attributes in process `syz.3.535'. [ 283.438730][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 283.450721][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.731278][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 283.750933][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.774394][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.806302][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 283.862232][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.253806][ T8] usb 3-1: usb_control_msg returned -32 [ 284.259968][ T8] usbtmc 3-1:16.0: can't read capabilities [ 284.406193][ T7959] [U]  [ 287.260999][ T5908] usb 3-1: USB disconnect, device number 11 [ 287.609249][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 287.675028][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 287.684740][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 287.695346][ T7984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.546'. [ 287.826215][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 288.191390][ T7987] overlayfs: failed to resolve './file0': -2 [ 288.201096][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.222782][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.253645][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 288.443921][ T25] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 288.456512][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.487720][ T25] usb 4-1: config 0 descriptor?? [ 290.599815][ T25] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0003/input/input12 [ 290.826833][ T8023] overlayfs: failed to resolve './file1': -2 [ 291.082484][ T979] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 292.086141][ T25] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0003/input/input13 [ 292.140070][ T979] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 292.194263][ T979] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 292.233773][ T25] kye 0003:0458:5011.0003: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 292.246003][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 292.269926][ T979] usb 1-1: Product: syz [ 292.280006][ T979] usb 1-1: Manufacturer: syz [ 292.312129][ T979] usb 1-1: SerialNumber: syz [ 292.317195][ T25] usb 4-1: USB disconnect, device number 8 [ 292.345372][ T979] usb 1-1: config 0 descriptor?? [ 292.363767][ T979] ims_pcu 1-1:0.0: Zero length descriptor [ 292.403355][ T979] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 292.647592][ T979] usb 1-1: USB disconnect, device number 6 [ 293.870059][ T8059] overlayfs: failed to resolve './file1': -2 [ 294.797873][ T8077] syz_tun: entered allmulticast mode [ 294.837445][ T8077] syz_tun: left allmulticast mode [ 294.906204][ T29] audit: type=1326 audit(1737828055.857:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8081 comm="syz.3.578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f198758cd29 code=0x0 [ 296.548497][ T8101] overlayfs: failed to resolve './file1': -2 [ 298.019858][ T8120] syz_tun: entered allmulticast mode [ 298.029182][ T8120] syz_tun: left allmulticast mode [ 298.306567][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 298.539088][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 298.553683][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.588695][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.610693][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.667503][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.680826][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.699961][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.929895][ T25] usb 5-1: usb_control_msg returned -32 [ 299.086473][ T25] usbtmc 5-1:16.0: can't read capabilities [ 299.230116][ T8140] [U]  [ 300.159944][ T8144] overlayfs: failed to resolve './file1': -2 [ 301.509113][ T25] usb 5-1: USB disconnect, device number 9 [ 303.367281][ T8184] overlayfs: failed to resolve './file1': -2 [ 303.849685][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 304.048120][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 304.258618][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.269872][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.281971][ T8] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 304.328612][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.342657][ T8] usb 4-1: config 0 descriptor?? [ 304.769544][ T8] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 304.794016][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0004/input/input14 [ 304.829560][ T54] block nbd4: Receive control failed (result -32) [ 304.830366][ T8197] block nbd4: shutting down sockets [ 305.040558][ T8] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 305.101637][ T8] usb 4-1: USB disconnect, device number 9 [ 306.114474][ T8226] netlink: 'syz.4.625': attribute type 20 has an invalid length. [ 306.123224][ T8226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.625'. [ 308.077562][ T8246] block nbd2: shutting down sockets [ 308.727580][ T8251] netlink: 'syz.1.634': attribute type 15 has an invalid length. [ 308.735396][ T8251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.634'. [ 311.181436][ T8297] 9pnet_fd: Insufficient options for proto=fd [ 311.654284][ T8290] sctp: failed to load transform for md5: -2 [ 313.596635][ T8328] 9pnet_fd: Insufficient options for proto=fd [ 313.610816][ T8328] 9pnet_fd: Insufficient options for proto=fd [ 314.476945][ T5873] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 314.656357][ T8339] IPVS: set_ctl: invalid protocol: 108 172.30.1.2:20004 [ 314.667938][ T5873] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 314.691850][ T5873] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 314.705614][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 314.733806][ T5873] usb 3-1: Product: syz [ 314.756864][ T5873] usb 3-1: Manufacturer: syz [ 314.761687][ T5873] usb 3-1: SerialNumber: syz [ 314.772819][ T5873] usb 3-1: config 0 descriptor?? [ 314.789933][ T5873] ims_pcu 3-1:0.0: Zero length descriptor [ 314.798166][ T5873] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 315.106492][ T5873] usb 3-1: USB disconnect, device number 12 [ 316.130128][ T8348] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 316.385280][ T8352] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 316.934026][ T8373] IPVS: set_ctl: invalid protocol: 108 172.30.1.3:20004 [ 317.166723][ T8376] 9pnet_fd: Insufficient options for proto=fd [ 317.181413][ T8376] 9pnet_fd: Insufficient options for proto=fd [ 323.097162][ T5873] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 323.170154][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.179792][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.258897][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 323.274436][ T5873] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 323.291437][ T5873] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 323.324884][ T5873] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 323.342202][ T8445] block nbd0: shutting down sockets [ 323.355464][ T5873] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.397003][ T5873] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 323.406125][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.291445][ T5873] usb 4-1: usb_control_msg returned -32 [ 324.297963][ T5873] usbtmc 4-1:16.0: can't read capabilities [ 324.442933][ T8460] [U]  [ 326.566544][ T5909] usb 4-1: USB disconnect, device number 10 [ 326.636865][ T8484] block nbd2: NBD_DISCONNECT [ 326.643222][ T8484] block nbd2: Disconnected due to user request. [ 326.673952][ T8484] block nbd2: shutting down sockets [ 328.742037][ T8507] fuse: Bad value for 'group_id' [ 328.794516][ T8511] fuse: Bad value for 'group_id' [ 328.803391][ T8511] fuse: Bad value for 'group_id' [ 328.854770][ T8507] fuse: Bad value for 'group_id' [ 331.852922][ T8545] fuse: Bad value for 'group_id' [ 331.880338][ T8545] fuse: Bad value for 'group_id' [ 331.903115][ T8545] fuse: Bad value for 'group_id' [ 331.921356][ T8545] fuse: Bad value for 'group_id' [ 336.964561][ T8618] loop7: detected capacity change from 0 to 16384 [ 337.071310][ T40] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 340.931363][ T8649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.784003][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 343.266876][ T5873] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 343.436692][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 343.482322][ T5873] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 343.547211][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 343.623352][ T5873] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 343.727163][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.744181][ T5873] usb 2-1: Product: syz [ 343.753962][ T5873] usb 2-1: Manufacturer: syz [ 343.766499][ T5873] usb 2-1: SerialNumber: syz [ 343.779109][ T5873] usb 2-1: config 0 descriptor?? [ 343.798387][ T5873] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 343.816783][ T5873] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 344.424892][ T5873] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 344.435481][ T5873] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 345.451370][ T5873] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 345.749305][ T5873] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 345.757478][ T5873] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 345.764692][ T5873] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 345.773003][ T5873] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 345.784570][ T5873] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 346.247357][ T5873] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 346.253779][ T5873] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 346.296604][ T5873] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 346.307611][ T5873] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 346.315724][ T5873] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 346.331785][ T5873] usb 2-1: USB disconnect, device number 12 [ 346.410404][ T8719] 9pnet_fd: Insufficient options for proto=fd [ 348.852387][ T8744] trusted_key: encrypted_key: master key parameter 'G)؏7hksRJok0' is invalid [ 349.339598][ T8762] block nbd1: NBD_DISCONNECT [ 349.354745][ T8762] block nbd1: Disconnected due to user request. [ 349.374062][ T8762] block nbd1: shutting down sockets [ 349.506491][ T877] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 349.676744][ T877] usb 1-1: Using ep0 maxpacket: 16 [ 349.692225][ T877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.726683][ T877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.756339][ T877] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 349.779745][ T877] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 349.796558][ T877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.817659][ T877] usb 1-1: config 0 descriptor?? [ 349.842988][ T8773] trusted_key: encrypted_key: master key parameter 'G)؏7hksRJok0' is invalid [ 350.607447][ T877] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input22 [ 350.846018][ T877] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 350.964722][ T5873] usb 1-1: USB disconnect, device number 7 [ 351.631629][ T29] audit: type=1326 audit(1737828112.587:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8794 comm="syz.1.812" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff69d8cd29 code=0x0 [ 352.246658][ T5873] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 352.428701][ T5873] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.549684][ T5873] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.560690][ T5873] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 352.574043][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 352.737931][ T5873] usb 1-1: SerialNumber: syz [ 352.974557][ T5873] usb 1-1: 0:2 : does not exist [ 352.989304][ T5873] usb 1-1: USB disconnect, device number 8 [ 355.616634][ T29] audit: type=1326 audit(1737828116.567:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8827 comm="syz.1.822" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff69d8cd29 code=0x0 [ 356.282947][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 356.731136][ T8] usb 2-1: config 0 has no interfaces? [ 356.752391][ T8] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 356.763211][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.777457][ T8] usb 2-1: Product: syz [ 356.781708][ T8] usb 2-1: Manufacturer: syz [ 356.787561][ T8] usb 2-1: SerialNumber: syz [ 356.797299][ T8] usb 2-1: config 0 descriptor?? [ 359.637635][ T5908] usb 2-1: USB disconnect, device number 13 [ 365.349185][ T8924] netlink: 140 bytes leftover after parsing attributes in process `syz.3.852'. [ 365.412108][ T8928] mmap: syz.1.854 (8928) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 367.676735][ T8961] netlink: 140 bytes leftover after parsing attributes in process `syz.1.864'. [ 370.269537][ T8991] netlink: 140 bytes leftover after parsing attributes in process `syz.1.876'. [ 370.494880][ T9001] program syz.2.881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.781327][ T9006] 9pnet_fd: Insufficient options for proto=fd [ 371.549030][ T5873] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 371.584731][ T9010] 9pnet_virtio: no channels available for device syz [ 371.738891][ T5873] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 371.824661][ T5873] usb 2-1: config 0 has no interface number 0 [ 371.842624][ T5873] usb 2-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=60.e8 [ 371.852810][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.862667][ T5873] usb 2-1: Product: syz [ 371.872895][ T5873] usb 2-1: Manufacturer: syz [ 371.878273][ T5873] usb 2-1: SerialNumber: syz [ 371.887466][ T5873] usb 2-1: config 0 descriptor?? [ 371.909479][ T5873] HFC-S_USB 2-1:0.29: probe with driver HFC-S_USB failed with error -5 [ 373.175932][ T5908] usb 2-1: USB disconnect, device number 14 [ 373.178953][ T9028] fuse: Unknown parameter 'group_id00000000000000000000' [ 373.211246][ T9028] fuse: Unknown parameter 'group_id00000000000000000000' [ 373.664589][ T9040] netlink: 68 bytes leftover after parsing attributes in process `syz.2.894'. [ 375.909977][ T9081] 9pnet_virtio: no channels available for device syz [ 384.610035][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.618743][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.048773][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.055363][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 473.566557][ T30] INFO: task kworker/1:3:979 blocked for more than 143 seconds. [ 473.574277][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 473.583086][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.591923][ T30] task:kworker/1:3 state:D stack:21840 pid:979 tgid:979 ppid:2 flags:0x00004000 [ 473.610020][ T30] Workqueue: events rfkill_sync_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 473.615426][ T30] Call Trace: [ 473.622305][ T30] [ 473.625289][ T30] __schedule+0x181a/0x4b90 [ 473.632435][ T30] ? __pfx___schedule+0x10/0x10 [ 473.641576][ T30] ? __pfx_lock_release+0x10/0x10 [ 473.650285][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 473.655730][ T30] ? schedule+0x90/0x320 [ 473.660467][ T30] schedule+0x14b/0x320 [ 473.676404][ T30] schedule_preempt_disabled+0x13/0x30 [ 473.696377][ T30] __mutex_lock+0x817/0x1010 [ 473.701062][ T30] ? __mutex_lock+0x602/0x1010 [ 473.705878][ T30] ? nfc_rfkill_set_block+0x50/0x310 [ 473.740051][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 473.745184][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 473.755153][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 473.761855][ T30] nfc_rfkill_set_block+0x50/0x310 [ 473.767133][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 473.772900][ T30] rfkill_set_block+0x1f1/0x440 [ 473.778200][ T30] rfkill_sync_work+0x12a/0x220 [ 473.783090][ T30] ? process_scheduled_works+0x976/0x1840 [ 473.789270][ T30] process_scheduled_works+0xa66/0x1840 [ 473.794866][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 473.800925][ T30] ? assign_work+0x364/0x3d0 [ 473.805553][ T30] worker_thread+0x870/0xd30 [ 473.810722][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 473.817435][ T30] ? __kthread_parkme+0x169/0x1d0 [ 473.822823][ T30] ? __pfx_worker_thread+0x10/0x10 [ 473.828225][ T30] kthread+0x7a9/0x920 [ 473.832343][ T30] ? __pfx_kthread+0x10/0x10 [ 473.837347][ T30] ? __pfx_worker_thread+0x10/0x10 [ 473.842493][ T30] ? __pfx_kthread+0x10/0x10 [ 473.847197][ T30] ? __pfx_kthread+0x10/0x10 [ 473.851839][ T30] ? __pfx_kthread+0x10/0x10 [ 473.856573][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.861809][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 473.867600][ T30] ? __pfx_kthread+0x10/0x10 [ 473.872251][ T30] ret_from_fork+0x4b/0x80 [ 473.876754][ T30] ? __pfx_kthread+0x10/0x10 [ 473.881377][ T30] ret_from_fork_asm+0x1a/0x30 [ 473.886157][ T30] [ 473.889376][ T30] INFO: task udevd:5195 blocked for more than 143 seconds. [ 473.896985][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 473.904312][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.913092][ T30] task:udevd state:D stack:22208 pid:5195 tgid:5195 ppid:1 flags:0x00000002 [ 473.923372][ T30] Call Trace: [ 473.927078][ T30] [ 473.930046][ T30] __schedule+0x181a/0x4b90 [ 473.934594][ T30] ? __pfx___schedule+0x10/0x10 [ 473.939555][ T30] ? __pfx_lock_release+0x10/0x10 [ 473.944623][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 473.950632][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 473.956942][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 473.963302][ T30] ? schedule+0x90/0x320 [ 473.967650][ T30] schedule+0x14b/0x320 [ 473.971835][ T30] schedule_preempt_disabled+0x13/0x30 [ 473.977577][ T30] __mutex_lock+0x817/0x1010 [ 473.982220][ T30] ? __mutex_lock+0x602/0x1010 [ 473.987406][ T30] ? uevent_show+0x17d/0x340 [ 473.992035][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 473.997154][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 474.001926][ T30] ? uevent_show+0x163/0x340 [ 474.006635][ T30] uevent_show+0x17d/0x340 [ 474.011085][ T30] dev_attr_show+0x55/0xc0 [ 474.015509][ T30] ? __pfx_dev_attr_show+0x10/0x10 [ 474.020996][ T30] sysfs_kf_seq_show+0x331/0x4c0 [ 474.025983][ T30] seq_read_iter+0x43f/0xd70 [ 474.030729][ T30] vfs_read+0x975/0xb40 [ 474.034956][ T30] ? __pfx_vfs_read+0x10/0x10 [ 474.039742][ T30] ksys_read+0x18f/0x2b0 [ 474.044027][ T30] ? __pfx_ksys_read+0x10/0x10 [ 474.049290][ T30] ? do_syscall_64+0x100/0x230 [ 474.054097][ T30] ? do_syscall_64+0xb6/0x230 [ 474.058887][ T30] do_syscall_64+0xf3/0x230 [ 474.063434][ T30] ? clear_bhb_loop+0x35/0x90 [ 474.068217][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.074157][ T30] RIP: 0033:0x7f2804b16b6a [ 474.078910][ T30] RSP: 002b:00007fff87dadf68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 474.087654][ T30] RAX: ffffffffffffffda RBX: 000055a2c64b9fa0 RCX: 00007f2804b16b6a [ 474.095670][ T30] RDX: 0000000000001000 RSI: 000055a2c6553240 RDI: 000000000000000c [ 474.103722][ T30] RBP: 000055a2c64b9fa0 R08: 000000000000000c R09: 0000000000000000 [ 474.112223][ T30] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 474.120305][ T30] R13: 0000000000003fff R14: 00007fff87dae448 R15: 000000000000000a [ 474.128413][ T30] [ 474.131494][ T30] INFO: task kworker/1:4:5870 blocked for more than 143 seconds. [ 474.139598][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 474.147001][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.155686][ T30] task:kworker/1:4 state:D stack:20336 pid:5870 tgid:5870 ppid:2 flags:0x00004000 [ 474.165960][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 474.172961][ T30] Call Trace: [ 474.176255][ T30] [ 474.179272][ T30] __schedule+0x181a/0x4b90 [ 474.183827][ T30] ? __pfx___schedule+0x10/0x10 [ 474.188801][ T30] ? __pfx_lock_release+0x10/0x10 [ 474.193867][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 474.199727][ T30] ? schedule+0x90/0x320 [ 474.203991][ T30] schedule+0x14b/0x320 [ 474.208432][ T30] schedule_preempt_disabled+0x13/0x30 [ 474.213926][ T30] __mutex_lock+0x817/0x1010 [ 474.218640][ T30] ? __mutex_lock+0x602/0x1010 [ 474.223438][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 474.230066][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 474.235111][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 474.241194][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 474.247655][ T30] ? process_scheduled_works+0x976/0x1840 [ 474.253406][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 474.259874][ T30] process_scheduled_works+0xa66/0x1840 [ 474.265504][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 474.271589][ T30] ? assign_work+0x364/0x3d0 [ 474.276189][ T30] worker_thread+0x870/0xd30 [ 474.280894][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 474.287190][ T30] ? __kthread_parkme+0x169/0x1d0 [ 474.292255][ T30] ? __pfx_worker_thread+0x10/0x10 [ 474.297561][ T30] kthread+0x7a9/0x920 [ 474.301676][ T30] ? __pfx_kthread+0x10/0x10 [ 474.306613][ T30] ? __pfx_worker_thread+0x10/0x10 [ 474.311762][ T30] ? __pfx_kthread+0x10/0x10 [ 474.316748][ T30] ? __pfx_kthread+0x10/0x10 [ 474.321396][ T30] ? __pfx_kthread+0x10/0x10 [ 474.325992][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 474.331302][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 474.336580][ T30] ? __pfx_kthread+0x10/0x10 [ 474.341202][ T30] ret_from_fork+0x4b/0x80 [ 474.345624][ T30] ? __pfx_kthread+0x10/0x10 [ 474.350584][ T30] ret_from_fork_asm+0x1a/0x30 [ 474.355400][ T30] [ 474.358532][ T30] INFO: task syz.4.674:8384 blocked for more than 144 seconds. [ 474.366109][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 474.373757][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.382864][ T30] task:syz.4.674 state:D stack:22752 pid:8384 tgid:8384 ppid:5836 flags:0x00004004 [ 474.393198][ T30] Call Trace: [ 474.396679][ T30] [ 474.399655][ T30] __schedule+0x181a/0x4b90 [ 474.404468][ T30] ? __schedule+0x1822/0x4b90 [ 474.409291][ T30] ? __pfx___schedule+0x10/0x10 [ 474.414183][ T30] ? __pfx_lock_release+0x10/0x10 [ 474.419414][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 474.425434][ T30] ? schedule+0x90/0x320 [ 474.429759][ T30] schedule+0x14b/0x320 [ 474.433945][ T30] schedule_timeout+0xb0/0x290 [ 474.438845][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 474.444263][ T30] ? wait_for_completion+0x2fe/0x620 [ 474.449647][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 474.455061][ T30] ? wait_for_completion+0x2fe/0x620 [ 474.460468][ T30] wait_for_completion+0x355/0x620 [ 474.465610][ T30] ? rcu_is_watching+0x15/0xb0 [ 474.470476][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 474.476147][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 474.481307][ T30] __flush_work+0xa47/0xc60 [ 474.485850][ T30] ? __flush_work+0xe9/0xc60 [ 474.490522][ T30] ? __pfx___flush_work+0x10/0x10 [ 474.495579][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 474.501008][ T30] ? __pfx___cancel_work+0x10/0x10 [ 474.506169][ T30] __cancel_work_sync+0xbc/0x110 [ 474.511216][ T30] rfkill_unregister+0x96/0x230 [ 474.516118][ T30] nfc_unregister_device+0x96/0x2a0 [ 474.521516][ T30] virtual_ncidev_close+0x56/0x90 [ 474.526632][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 474.532401][ T30] __fput+0x3e9/0x9f0 [ 474.536535][ T30] task_work_run+0x24f/0x310 [ 474.541179][ T30] ? _raw_spin_unlock+0x28/0x50 [ 474.546041][ T30] ? __pfx_task_work_run+0x10/0x10 [ 474.551254][ T30] ? schedule+0x155/0x320 [ 474.555624][ T30] syscall_exit_to_user_mode+0x13f/0x340 [ 474.561389][ T30] do_syscall_64+0x100/0x230 [ 474.566018][ T30] ? clear_bhb_loop+0x35/0x90 [ 474.570795][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.576832][ T30] RIP: 0033:0x7f940b38cd29 [ 474.581272][ T30] RSP: 002b:00007ffe8ee0e6c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 474.589806][ T30] RAX: 0000000000000000 RBX: 00007f940b5a7ba0 RCX: 00007f940b38cd29 [ 474.597951][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 474.605981][ T30] RBP: 00007f940b5a7ba0 R08: 0000000000000890 R09: 00007ffe8ee0e9bf [ 474.614027][ T30] R10: 00007f940b5a7ac0 R11: 0000000000000246 R12: 000000000004deb6 [ 474.622110][ T30] R13: 00007f940b5a6400 R14: 0000000000000032 R15: ffffffffffffffff [ 474.630206][ T30] [ 474.633300][ T30] [ 474.633300][ T30] Showing all locks held in the system: [ 474.641101][ T30] 1 lock held by khungtaskd/30: [ 474.645980][ T30] #0: ffffffff8e93a020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 474.656020][ T30] 4 locks held by kworker/1:3/979: [ 474.661174][ T30] #0: ffff88801ac80d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 474.672226][ T30] #1: ffffc90003a5fc60 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 474.684735][ T30] #2: ffffffff8ff86dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x23/0x220 [ 474.694887][ T30] #3: ffff888030bd2100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x310 [ 474.704679][ T30] 4 locks held by udevd/5195: [ 474.709446][ T30] #0: ffff888033ba8418 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 [ 474.718358][ T30] #1: ffff8880275f5088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 [ 474.727939][ T30] #2: ffff888028b08878 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 474.737554][ T30] #3: ffff888030bd2100 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 [ 474.746675][ T30] 2 locks held by getty/5584: [ 474.751391][ T30] #0: ffff88823bfb80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 474.761272][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 474.771993][ T30] 3 locks held by kworker/1:4/5870: [ 474.777301][ T30] #0: ffff88801ac80d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 474.788436][ T30] #1: ffffc90004847c60 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 474.802023][ T30] #2: ffffffff8ff86dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 474.813484][ T30] 1 lock held by syz.4.674/8384: [ 474.818586][ T30] #0: ffff888030bd2100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 474.828496][ T30] 2 locks held by syz-executor/8594: [ 474.833802][ T30] #0: ffff88805bd5f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6a0 [ 474.844339][ T30] #1: ffffffff8ff86dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 474.854607][ T30] 3 locks held by syz.3.903/9065: [ 474.859992][ T30] #0: ffffffff8f182f28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 474.868779][ T30] #1: ffff88805bd63100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x9c/0x320 [ 474.878604][ T30] #2: ffffffff8ff86dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 474.888647][ T30] 1 lock held by syz.1.912/9093: [ 474.893635][ T30] #0: ffffffff8f182f28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 474.902168][ T30] 1 lock held by syz.2.915/9100: [ 474.907178][ T30] #0: ffffffff8f182f28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 474.915717][ T30] 1 lock held by syz.0.919/9112: [ 474.920808][ T30] #0: ffffffff8f182f28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 474.929603][ T30] 1 lock held by syz-executor/9119: [ 474.934821][ T30] #0: ffffffff8f182f28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 474.943467][ T30] 1 lock held by syz-executor/9121: [ 474.948734][ T30] #0: ffffffff8f182f28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 474.957317][ T30] 1 lock held by syz-executor/9123: [ 474.962534][ T30] #0: ffffffff8f182f28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 474.971075][ T30] 1 lock held by syz-executor/9126: [ 474.976291][ T30] #0: ffffffff8f182f28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 474.984864][ T30] 1 lock held by syz-executor/9127: [ 474.990121][ T30] #0: ffffffff8f182f28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 474.998727][ T30] 1 lock held by syz-executor/9129: [ 475.003940][ T30] #0: ffffffff8f182f28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 475.012483][ T30] 1 lock held by syz-executor/9131: [ 475.017743][ T30] #0: ffffffff8f182f28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 475.026278][ T30] 1 lock held by syz-executor/9133: [ 475.031552][ T30] #0: ffffffff8f182f28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 475.040148][ T30] 1 lock held by syz-executor/9136: [ 475.045449][ T30] #0: ffffffff8f182f28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 475.054136][ T30] 1 lock held by syz-executor/9137: [ 475.059408][ T30] #0: ffffffff8f182f28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 475.067996][ T30] [ 475.070345][ T30] ============================================= [ 475.070345][ T30] [ 475.078840][ T30] NMI backtrace for cpu 1 [ 475.078862][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 475.078884][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 475.078896][ T30] Call Trace: [ 475.078908][ T30] [ 475.078916][ T30] dump_stack_lvl+0x241/0x360 [ 475.078956][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.078989][ T30] ? __pfx__printk+0x10/0x10 [ 475.079031][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 475.079059][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 475.079090][ T30] ? _printk+0xd5/0x120 [ 475.079117][ T30] ? __pfx__printk+0x10/0x10 [ 475.079146][ T30] ? __wake_up_klogd+0xcc/0x110 [ 475.079167][ T30] ? __pfx__printk+0x10/0x10 [ 475.079189][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 475.079208][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 475.079226][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 475.079252][ T30] watchdog+0xff6/0x1040 [ 475.079272][ T30] ? watchdog+0x1ea/0x1040 [ 475.079293][ T30] ? __pfx_watchdog+0x10/0x10 [ 475.079311][ T30] kthread+0x7a9/0x920 [ 475.079329][ T30] ? __pfx_kthread+0x10/0x10 [ 475.079350][ T30] ? __pfx_watchdog+0x10/0x10 [ 475.079367][ T30] ? __pfx_kthread+0x10/0x10 [ 475.079385][ T30] ? __pfx_kthread+0x10/0x10 [ 475.079406][ T30] ? __pfx_kthread+0x10/0x10 [ 475.079424][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.079438][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 475.079454][ T30] ? __pfx_kthread+0x10/0x10 [ 475.079474][ T30] ret_from_fork+0x4b/0x80 [ 475.079491][ T30] ? __pfx_kthread+0x10/0x10 [ 475.079510][ T30] ret_from_fork_asm+0x1a/0x30 [ 475.079535][ T30] [ 475.079541][ T30] Sending NMI from CPU 1 to CPUs 0: [ 475.248485][ C0] NMI backtrace for cpu 0 [ 475.248500][ C0] CPU: 0 UID: 0 PID: 3523 Comm: kworker/u8:7 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 475.248519][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 475.248530][ C0] Workqueue: 0x0 (bat_events) [ 475.248553][ C0] RIP: 0010:rcu_read_lock_sched_held+0xc/0x130 [ 475.248584][ C0] Code: 1e fa e9 d7 5b 27 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 <41> 54 53 48 83 e4 e0 48 83 ec 60 65 48 8b 04 25 28 00 00 00 48 89 [ 475.248598][ C0] RSP: 0018:ffffc9000c17f7e0 EFLAGS: 00000002 [ 475.248611][ C0] RAX: 0000000000000001 RBX: ffff888032269e00 RCX: ffff888032269e00 [ 475.248624][ C0] RDX: 0000000000000000 RSI: ffffffff8c0aa180 RDI: ffffffff8c5f5420 [ 475.248635][ C0] RBP: ffffc9000c17f7f0 R08: ffffffff901a5c37 R09: 1ffffffff2034b86 [ 475.248647][ C0] R10: dffffc0000000000 R11: fffffbfff2034b87 R12: ffffffff8e2fab50 [ 475.248660][ C0] R13: ffffffff8e9731e0 R14: dffffc0000000000 R15: 1ffffffff1c5f56a [ 475.248673][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 475.248686][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.248697][ C0] CR2: 00007fc6c4924e71 CR3: 000000000e738000 CR4: 00000000003526f0 [ 475.248713][ C0] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 475.248722][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 475.248732][ C0] Call Trace: [ 475.248738][ C0] [ 475.248745][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 475.248762][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 475.248785][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 475.248810][ C0] ? nmi_handle+0x2a/0x5a0 [ 475.248840][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 475.248859][ C0] ? nmi_handle+0x14f/0x5a0 [ 475.248881][ C0] ? nmi_handle+0x2a/0x5a0 [ 475.248905][ C0] ? rcu_read_lock_sched_held+0xc/0x130 [ 475.248931][ C0] ? default_do_nmi+0x63/0x160 [ 475.248957][ C0] ? exc_nmi+0x123/0x1f0 [ 475.248981][ C0] ? end_repeat_nmi+0xf/0x53 [ 475.249010][ C0] ? rcu_read_lock_sched_held+0xc/0x130 [ 475.249036][ C0] ? rcu_read_lock_sched_held+0xc/0x130 [ 475.249063][ C0] ? rcu_read_lock_sched_held+0xc/0x130 [ 475.249089][ C0] [ 475.249094][ C0] [ 475.249101][ C0] cpuacct_charge+0x12f/0x330 [ 475.249120][ C0] update_curr_task+0xf0/0x330 [ 475.249137][ C0] update_curr+0x52f/0xda0 [ 475.249177][ C0] dequeue_entity+0x2a/0x1890 [ 475.249197][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 475.249214][ C0] ? sched_clock+0x4a/0x70 [ 475.249231][ C0] ? sched_clock_cpu+0x76/0x490 [ 475.249248][ C0] dequeue_entities+0x25a/0xdd0 [ 475.249275][ C0] dequeue_task_fair+0x2b0/0x540 [ 475.249299][ C0] __schedule+0x5fc/0x4b90 [ 475.249326][ C0] ? __pfx___schedule+0x10/0x10 [ 475.249343][ C0] ? schedule+0x90/0x320 [ 475.249360][ C0] ? __pfx_lock_release+0x10/0x10 [ 475.249381][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 475.249404][ C0] ? schedule+0x90/0x320 [ 475.249419][ C0] ? wq_worker_sleeping+0x66/0x240 [ 475.249439][ C0] ? schedule+0x90/0x320 [ 475.249455][ C0] schedule+0x14b/0x320 [ 475.249473][ C0] worker_thread+0xa30/0xd30 [ 475.249498][ C0] ? __kthread_parkme+0x169/0x1d0 [ 475.249519][ C0] ? __pfx_worker_thread+0x10/0x10 [ 475.249538][ C0] kthread+0x7a9/0x920 [ 475.249559][ C0] ? __pfx_kthread+0x10/0x10 [ 475.249581][ C0] ? __pfx_worker_thread+0x10/0x10 [ 475.249600][ C0] ? __pfx_kthread+0x10/0x10 [ 475.249620][ C0] ? __pfx_kthread+0x10/0x10 [ 475.249643][ C0] ? __pfx_kthread+0x10/0x10 [ 475.249663][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.249680][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 475.249698][ C0] ? __pfx_kthread+0x10/0x10 [ 475.249720][ C0] ret_from_fork+0x4b/0x80 [ 475.249739][ C0] ? __pfx_kthread+0x10/0x10 [ 475.249760][ C0] ret_from_fork_asm+0x1a/0x30 [ 475.249786][ C0] [ 475.255619][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 475.643708][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 475.653870][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 475.663935][ T30] Call Trace: [ 475.667223][ T30] [ 475.670181][ T30] dump_stack_lvl+0x241/0x360 [ 475.674882][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.680120][ T30] ? __pfx__printk+0x10/0x10 [ 475.684724][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 475.690722][ T30] ? vscnprintf+0x5d/0x90 [ 475.695070][ T30] panic+0x349/0x880 [ 475.698983][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 475.705158][ T30] ? __pfx_panic+0x10/0x10 [ 475.709594][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 475.714977][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 475.721153][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 475.727328][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 475.733503][ T30] watchdog+0x1035/0x1040 [ 475.737870][ T30] ? watchdog+0x1ea/0x1040 [ 475.742313][ T30] ? __pfx_watchdog+0x10/0x10 [ 475.747014][ T30] kthread+0x7a9/0x920 [ 475.751183][ T30] ? __pfx_kthread+0x10/0x10 [ 475.755817][ T30] ? __pfx_watchdog+0x10/0x10 [ 475.760529][ T30] ? __pfx_kthread+0x10/0x10 [ 475.765141][ T30] ? __pfx_kthread+0x10/0x10 [ 475.769754][ T30] ? __pfx_kthread+0x10/0x10 [ 475.774360][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.779570][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 475.784789][ T30] ? __pfx_kthread+0x10/0x10 [ 475.789397][ T30] ret_from_fork+0x4b/0x80 [ 475.793830][ T30] ? __pfx_kthread+0x10/0x10 [ 475.798442][ T30] ret_from_fork_asm+0x1a/0x30 [ 475.803228][ T30] [ 475.806619][ T30] Kernel Offset: disabled [ 475.810961][ T30] Rebooting in 86400 seconds..