last executing test programs: 10m46.129694412s ago: executing program 4 (id=147): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x42000773) syz_pidfd_open(r0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) sendmsg$AUDIT_USER(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xd4, 0x3ed, 0x20, 0x70bd26, 0x25dfdbfb, "7f38ea14473e094d8f1dcc8145c88489aebcc30bc1235010f1cbb711ab54d83b2a518fe885b12fd3d6c7f211bfb521ec76edf896e74399e0dd5cdaa1db0a4705c6e7d00e86f198227851540cef9b259ce9f449a3e7fdd4ec1322d699d44c7bfb9f16e8e35806fa699711deffd7d193c9b2666b4b6275458a196ba9707546c7d6df47bdf4017ca21464d6412b7d1b505c3d6378b26a86086e36589f4684a8f465c6da1eb73203ee89dc91916c781072a703918a6264316251578553364997f879444f", ["", ""]}, 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r5, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {0x101}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) syz_open_dev$loop(&(0x7f00000000c0), 0x75c, 0x122c42) 10m44.21993801s ago: executing program 4 (id=150): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socket(0x25, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYRES16=r4], &(0x7f00000004c0)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000340)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000580)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004080}], 0x1, 0x30000800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000980)=""/146, 0x92}], 0x1}, 0x20) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x1) 10m36.748868745s ago: executing program 4 (id=156): r0 = socket$inet6(0x10, 0x3, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$pid(0x2, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, r5, 0x10ada85e65c25359, 0x70bd29, 0x8000000, {{0x6b}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x800) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r5, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x207}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000042}, 0x24000800) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r8, r8, 0x0, 0x40008) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f0000000000)={0x48}) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 10m33.522590638s ago: executing program 4 (id=160): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x5, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x10, 0x800, 0xbbbe, 0x0, 0x2, 0x4, {0x0, 0x0, 0x1}, {0x7, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x40a00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0xf4, 0x8, 0xa, 0xf0a, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x892f}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0x60, 0x7, 0x1, 0x0, "0f892b485d046c9329fc2fab944957b724197f85e0b5a98c9cf97d548e01e48cfd5373352d833ad95107c3136b851d699740f5d95168482198d966c77773427708690b8b0baec3ee2b13f76b69baca5d85f7378db86267a24b3f7ef9"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14}}, 0x11c}}, 0x8050) 10m29.004116264s ago: executing program 4 (id=164): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040), 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f00000001c0)={0x0, "9800003de8f644ad6c8a55930700", 0x3}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000823292e4b74cb6c5c7d4a4a45805287ce528089f3a77156e46af5278919f5198e8969faa638d68ce85dff162e75d44f989c4af1895c8b91cae4abd2e41d9724daa46f2a37e916b5e6b58458153e531c1b809c1db2eee0f16fb3711bb18f6d9d781e79a1aa6dc3c42ee3680504125e5cf8d7a18bfda19c46c86fbb637ba7ef8d67900000000076c562df17f5bb5c128a38e1bcfb929f127a69c1653464e3ff37bb445d66e04ad3f8748117bbf0f4c3e99be9a4a83ea1f"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={[0x0]}, 0x0) r6 = memfd_create(&(0x7f0000000300)='\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xfe\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3@\xd3\xae\xd2\a\x11\xa9\xa5^\xa8ddj\x03\xbd\x16\x93\xb9r\x04h\xaa\x1aT\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xa3[\x00\xa9C%}C\xf4c\xba\xf9H\x98}<\x98m#\xf5\x9e\xd3\xea\x00\x00\x00\x00', 0x3) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4ea2, 0x1, @mcast2, 0x4}, 0x1c) 10m26.319934399s ago: executing program 4 (id=167): r0 = socket(0x2, 0x80805, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r1 = socket(0x10, 0x5, 0x3ff) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, 0x0, 0x240048d5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0xc0403d08, 0xffffffffffffffff) set_mempolicy(0x8006, 0x0, 0x5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syslog(0x2, &(0x7f0000000040)=""/36, 0x24) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0xe8) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='hpfs\x00', 0x321021d, 0x0) 10m5.085239108s ago: executing program 32 (id=167): r0 = socket(0x2, 0x80805, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r1 = socket(0x10, 0x5, 0x3ff) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, 0x0, 0x240048d5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0xc0403d08, 0xffffffffffffffff) set_mempolicy(0x8006, 0x0, 0x5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syslog(0x2, &(0x7f0000000040)=""/36, 0x24) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0xe8) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='hpfs\x00', 0x321021d, 0x0) 7m29.759792951s ago: executing program 5 (id=390): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x11000d}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000140), 0x400080, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x20040000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(r0, 0x0, 0x40088c0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10004043}, 0x4000084) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000200)=0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040), 0xe) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r8, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa49dc0001050006040001aaaaaaaaaaaaac1414bb0180c0000000ffffffffd5f95d10d7e2d4", @ANYRES8=r5, @ANYRES16=r4], 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) 7m21.699944061s ago: executing program 5 (id=403): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = dup(0xffffffffffffffff) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40603d07, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) memfd_create(&(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000001c0)="b15dd7cf1c00000400000000000036af1747da", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) dup(0xffffffffffffffff) syz_open_dev$video(&(0x7f00000005c0), 0x40000000005, 0x80942) 7m16.118598865s ago: executing program 5 (id=411): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) mkdirat(r4, &(0x7f00000000c0)='./file0\x00', 0x194) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0xc, 0x6, 0x8, 0x4, @mcast2, @private2, 0x7, 0x7, 0x7, 0xa}}) r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000000)='sched_switch\x00', &(0x7f00000000c0)="95", 0x1) recvfrom$inet_nvme(r5, 0x0, 0x0, 0x2, &(0x7f0000000480)=@xdp={0x2c, 0x1, r7, 0x37}, 0x80) r9 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7m14.83561246s ago: executing program 5 (id=415): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b850000000700"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000340)={0x0, 0x0, 0x6, &(0x7f0000000100)={0x22, "50e1c0340af66e0dffda611f117e9df8b20630faa67cf4f18be015c85613a37043"}}) get_robust_list(0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x8881}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$isdn(0x22, 0x3, 0x2) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={0x0, @hci={0x1f, 0x1, 0x3}, @ethernet={0x1, @local}, @vsock={0x28, 0x0, 0x0, @host}, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0xffffffffffffffc3}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x1d4, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x3c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x144, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'pim6reg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x107, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x23c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 7m12.060682416s ago: executing program 5 (id=419): bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0x21, 0x2, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r7], 0x30}}, 0x94) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) mmap(&(0x7f000046c000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r3, 0x53ef0000) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r9, 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000080200000000000000000000010500000180000000000000000100008502000000000000000100000000000004", @ANYRES8=r9], 0x0, 0x52}, 0x28) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 7m9.617112518s ago: executing program 5 (id=422): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x15}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r7], 0x1, r5, r6, 0x3, 0x0, 0xffffffff, 0x804, {0x1, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412d, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)=0x3) read$FUSE(r0, &(0x7f00000056c0)={0x2020}, 0x2020) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)=0x2) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) 6m52.365415552s ago: executing program 33 (id=422): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x15}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r7], 0x1, r5, r6, 0x3, 0x0, 0xffffffff, 0x804, {0x1, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412d, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)=0x3) read$FUSE(r0, &(0x7f00000056c0)={0x2020}, 0x2020) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)=0x2) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) 2m45.467696506s ago: executing program 0 (id=1256): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}], 0x2}}], 0x1, 0x60, 0x0) 2m45.35839546s ago: executing program 0 (id=1257): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 2m41.255881713s ago: executing program 0 (id=1269): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r2, 0x809, 0x70bd2c, 0x0, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10000014}, 0x20044000) 2m40.696976976s ago: executing program 0 (id=1276): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)="67d8902400aa3087776de67e1e03801f9fd3734ebad13e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04a638922721cb7816094cb82950fd012efd26d426acfc31a72123318c93f2ac949710af76e93ab485fbf6ebaffdb2deba6376fab3575806cc5fc49325220992f66ee9741e20cc7cf14ea2c07b2c4b703d53b5ef9e0ef9f57c32c4d001438544f271b5fde9972ce311f6a2826a1e59bb18caac33261724de0e3dc426ce84410e6383ea7745aa10c67ce0000000000", 0xe4}, {&(0x7f0000000900)="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", 0x39d}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 2m40.170948247s ago: executing program 0 (id=1278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xb, 0x29, 0x1, {0x7fff}}, 0xb) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) getegid() syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000c280)="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", 0x2000, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x11c, r4, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x11c}}, 0x8800) 2m38.883813725s ago: executing program 0 (id=1280): setfsgid(0xee00) r0 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) sync() r2 = syz_open_procfs(r0, &(0x7f0000000040)='syscall\x00') pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 2m22.515878785s ago: executing program 34 (id=1280): setfsgid(0xee00) r0 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) sync() r2 = syz_open_procfs(r0, &(0x7f0000000040)='syscall\x00') pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 1m6.08645833s ago: executing program 1 (id=1642): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000001640)='debugfs\x00', 0x208000, 0x0) fchdir(0xffffffffffffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}}, 0x0) 1m5.052003201s ago: executing program 1 (id=1644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x4804) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x402}, 0x0) 1m3.623617348s ago: executing program 1 (id=1648): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x3000000, 0x8, {0x0, @empty}}}], 0x20}}], 0x1, 0x80) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x58, r8, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) uname(&(0x7f0000000000)=""/98) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000080)={0x0, 0x1d, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000017abccc849e5e0551b19e033622d9a2555f953ae3abb4114ae07edf48a99cf06bd0d7a5a1165cfa7c13821b6a483e8ed44a373188a014920922cb8d9ffc83d80898b48ad9844c8c6723ad8951e919d7be7bf981f3b7391bf06dd95b3d674a5c15fea8d77a74780733c164b8e18bd3b6c2a43163fbe223ac0f6e8be6db23e81e94c19da8c5c1c9475eadfca3d5b6c", @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000c0010000500000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) write$smackfs_cipso(0xffffffffffffffff, &(0x7f0000006940)={'batadv_slave_1\x00', 0x20, 0x21, 0x20, 0x4, 0x20, [{0x46}, {0x63}, {0x7c}, {0x77}]}, 0x8f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x143001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r10, 0x5, 0x14, 0x0, &(0x7f0000000000)='%', 0x0, 0x7fffffff, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_clone(0x200, &(0x7f0000000140)="1c7b11da2b8793873e0ca595aff70c3c2dbebe2df3ed014e3f813a14b6cd0daf5930f8b310e84455e834184e28c1e07fdcc9cbfdacbbb581b2e9089d59ecc8e91ffbd5062d067a24225d854fe53f3c6ea6f3bb05e132812156d6ee1311947e98e48c30aa32fa0d708b5d1ea2337eee27d4", 0x71, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000540)="a18ae4a04f58abb3a7a45043c89b3c4e6b90cdac2eea6d15e67e00a17aba3c9d4aae0843a7c8eb813e02b44081e94641d785b490e9c2912b5fcf6c3fcffcea2a25aeb6a378eaa4f3cb9081ff57001e53645ee87a2211c1c9fa0bb8191fcb818921a88b77730749c0cfb57a7e25354a98b923278ed1") r11 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b00000000000001000000090002007379"], 0xb4}}, 0x0) syz_open_dev$MSR(&(0x7f00000005c0), 0x80000000, 0x0) 59.187430844s ago: executing program 1 (id=1659): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, 0x0, 0x0) 57.202381433s ago: executing program 1 (id=1661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xb, 0x29, 0x1, {0x7fff}}, 0xb) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) getegid() syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150fdf0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcb05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc28afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f2724f5024a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4a7e642fdc56d11c2ec87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b09ffd42a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3da452647e342e2591be4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x11c, r4, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x11c}}, 0x8800) 55.380101495s ago: executing program 1 (id=1665): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x4394) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x5) 38.495467092s ago: executing program 35 (id=1665): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x4394) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x5) 16.659625165s ago: executing program 6 (id=1749): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) 14.22283623s ago: executing program 6 (id=1754): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000015) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff058500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='ext2\x00', 0x8080, &(0x7f00000001c0)='discard') 13.097472981s ago: executing program 6 (id=1757): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x1000)=nil, &(0x7f0000c87000/0x2000)=nil, 0xfffffffffffffffd, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1b01}}, './file0\x00'}) 11.743792547s ago: executing program 3 (id=1760): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c0001006272696467"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 10.879800664s ago: executing program 8 (id=1698): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) 10.790307377s ago: executing program 6 (id=1762): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c63616368653d667363616368652c004a274bef3c1a5a67d243c956876c14d52469938b30cf016348c28c745d9e825d8e9f94ce795c3854787265c4e05a7fead4818c05ad3777811a29"]) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r4, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) chmod(0x0, 0x100) 9.07621947s ago: executing program 3 (id=1763): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(0x0, 0xfffffffbfffffff9, 0x587000) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) close_range(r3, 0xffffffffffffffff, 0x0) 8.804861312s ago: executing program 8 (id=1764): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000230006b9effae2a3a6f43bc662ae500000c0a010300220000000000000100000008000440000000000000020073797a310000000008000380040000801400000010000100"], 0xfffffdfc}, 0x1, 0x0, 0x0, 0x22000010}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x38, 0x0, 0x0) 8.677284604s ago: executing program 6 (id=1765): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x34b7, &(0x7f0000000000)={0x0, 0x0, 0x30c0, 0x0, 0x24}, &(0x7f00000001c0), &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) 8.458399209s ago: executing program 2 (id=1766): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) creat(0x0, 0x41) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, 0x0, 0x0) poll(0x0, 0x0, 0x40000) 7.740118603s ago: executing program 7 (id=1767): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 7.693689292s ago: executing program 3 (id=1768): close(0xffffffffffffffff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffff3) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000caa000/0x4000)=nil, 0x183b, &(0x7f0000000400)='\xb3x\xd7,n\x1e\v\xc4\xe84\x04\xcb\xcb#\x80\x83\xb2\'&\xe3\xf1\x97\a\xef\xff`\x1e\x11E\xff\xff\x9b\x9f\x1c\x13w\xd7\xda\x92~i\xf5\x06\x00\xe7;K\x97\xeb\xda\\\t)<\xf4{\x95+A\xf9*\xa0\xd8\x13\x88\xcd\xe2\x86\x8a\x00jrv\xe4\xafY(\xe1\xdb\bF\xbb\xde\x02\x00\x00\x00\x83E/\x00V\xf0\xa8\xf5!_\xe7\xa0\xd0,\x00\x00\xff\xf6\x00\x00\x00\xbd\x03\n\xecT\x03&i\xa6_\xc5>\xdc?\x191#\xf41\x00\x7f\xce\xea]\xc2\x7f!\xd1\xb8\x94\t3S\tm\xe9\xfa\x13\xa7\xe3HI\xed\xf6\xe4\xdc!Aw5\x9ay \xb0\nGoF\xef\xaa\xe8\xec\x1c\x8a\x88\x10U\xd4\x91\xf4\xa7/\x01\x83\xa6~\xcdl\x82\x8ck\x93\x7f\xdc\xdf\x0e\xdc4K8\xe2\x10\xa2N\x91\xe0\xf3\xfb\x1c\xcc`\x87\x11\xc5\xa2\x13>\x9a%\x1c(Q|s\xdd\xd1\x9b\xfb\xf0\xfet\x01\xb9\xb1\x04J\xaf~\xa6:^\x00\x19\xc4P\x80.\xa3\xebM\x13\x03\x13u\xd0\xac\x8c\r\x9f7\x9a\x16\xe6\xba\xec\xdb\x15\xa2-\x9b\xf8\xfc\xee\x10O\xed$t\xa99\'C\xa1') prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xffffffffffffffff) 6.720112484s ago: executing program 7 (id=1769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe5000/0x1000)=nil, r6, 0x1, 0x11, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.627820028s ago: executing program 2 (id=1770): getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000540), 0x0, 0x2, 0x20, 0x0, r4}) 6.556153373s ago: executing program 3 (id=1771): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x2) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x800) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464d0, 0x0) 5.378932524s ago: executing program 2 (id=1772): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 3.885936688s ago: executing program 3 (id=1773): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(0x0, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000280)={0x10001, 0x6, 0x1000, 0x1000, &(0x7f00009ad000/0x1000)=nil}) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl(0xffffffffffffffff, 0x8b21, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6f5f5d8f305832d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @value=r0}, 0x94) 3.569346297s ago: executing program 7 (id=1774): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() r2 = mmap$IORING_OFF_SQES(&(0x7f0000059000/0x1000)=nil, 0x1000, 0x1000000, 0x30, 0xffffffffffffffff, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc0bc5351, &(0x7f0000000d40)={0x400, 0x2, 'client1\x00', 0x0, "24db67818b4014fd", "859e92f118c4484604734b1d43209426c1bd711b936fc2c4d28f902e94f8e647"}) 3.568865442s ago: executing program 2 (id=1775): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x1) unshare(0x18000780) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r2, 0x6000000) fchown(r1, 0x0, 0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) 2.6350247s ago: executing program 2 (id=1776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd=r3, 0x0, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r4, 0x3f70, 0x0, 0x0, 0x0, 0x0) 2.428224136s ago: executing program 7 (id=1777): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x810) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4c050) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close(r1) 1.418466861s ago: executing program 2 (id=1778): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) chdir(0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$isdn(0x22, 0x3, 0x26) mount(0x0, 0x0, 0x0, 0x10000, &(0x7f0000000340)='\'\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64=r1], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4008040) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r2, 0x2, 0xc9, 0x2}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f00000003c0)=0xe27, 0x4) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0xb}) 1.25531498s ago: executing program 3 (id=1779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7fff, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.230383187s ago: executing program 7 (id=1780): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000380)={r5}, &(0x7f0000000140)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) 126.589566ms ago: executing program 7 (id=1781): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000065f9bfff00000000fdffffff850000002c00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 53.749501ms ago: executing program 6 (id=1782): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9, @ANYBLOB="01"], 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 8 (id=1783): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x3000000, 0x8, {0x0, @empty}}}], 0x20}}], 0x1, 0x80) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x58, r8, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) uname(&(0x7f0000000000)=""/98) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000080)={0x0, 0x1d, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000017abccc849e5e0551b19e033622d9a2555f953ae3abb4114ae07edf48a99cf06bd0d7a5a1165cfa7c13821b6a483e8ed44a373188a014920922cb8d9ffc83d80898b48ad9844c8c6723ad8951e919d7be7bf981f3b7391bf06dd95b3d674a5c15fea8d77a74780733c164b8e18bd3b6c2a43163fbe223ac0f6e8be6db23e81e94c19da8c5c1c9475eadfca3d5b6c", @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000c0010000500000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r10 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) write$smackfs_cipso(r10, &(0x7f0000006940)={'batadv_slave_1\x00', 0x20, 0x21, 0x20, 0x5, 0x20, [{0xa2}, {0x46}, {0x63}, {0x7c}, {0x77}]}, 0xa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x143001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r11, 0x5, 0x14, 0x0, &(0x7f0000000000)='%', 0x0, 0x7fffffff, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_clone(0x200, &(0x7f0000000140)="1c7b11da2b8793873e0ca595aff70c3c2dbebe2df3ed014e3f813a14b6cd0daf5930f8b310e84455e834184e28c1e07fdcc9cbfdacbbb581b2e9089d59ecc8e91ffbd5062d067a24225d854fe53f3c6ea6f3bb05e132812156d6ee1311947e98e48c30aa32fa0d708b5d1ea2337eee27d4", 0x71, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000540)="a18ae4a04f58abb3a7a45043c89b3c4e6b90cdac2eea6d15e67e00a17aba3c9d4aae0843a7c8eb813e02b44081e94641d785b490e9c2912b5fcf6c3fcffcea2a25aeb6a378eaa4f3cb9081ff57001e53645ee87a2211c1c9fa0bb8191fcb818921a88b77730749c0cfb57a7e25354a98b923278ed1") r12 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) sendmsg$NFT_BATCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b00000000000001000000090002007379"], 0xb4}}, 0x0) syz_open_dev$MSR(&(0x7f00000005c0), 0x80000000, 0x0) kernel console output (not intermixed with test programs): 506][ T9742] openvswitch: netlink: Message has 20 unknown bytes. [ 598.991327][ T7909] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 599.165101][ T7909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.207892][ T7909] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 599.251342][ T7909] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 599.297074][ T7909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.328186][ T7909] usb 1-1: config 0 descriptor?? [ 599.350859][ T7909] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 599.373805][ T7909] dvb-usb: bulk message failed: -22 (3/0) [ 599.431734][ T7909] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 599.501091][ T7909] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 599.529228][ T7909] usb 1-1: media controller created [ 599.567043][ T7909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 599.587486][ T9761] dibusb: i2c wr: len=62 is too big! [ 599.587486][ T9761] [ 599.671843][ T7909] dvb-usb: bulk message failed: -22 (6/0) [ 599.690316][ T7909] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 599.734955][ T7909] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 599.821804][ T7909] dvb-usb: schedule remote query interval to 150 msecs. [ 599.857286][ T7909] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 599.918951][ T7909] usb 1-1: USB disconnect, device number 8 [ 600.047204][ T7909] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 600.839771][ T9813] xt_bpf: check failed: parse error [ 601.446024][ T9833] program syz.3.804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 602.022375][ T9852] input: syz0 as /devices/virtual/input/input15 [ 603.315160][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.6.816'. [ 603.345926][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.816'. [ 604.197498][ T121] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 604.369957][ T121] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 604.406588][ T121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.440420][ T121] usb 4-1: config 0 descriptor?? [ 604.483063][ T121] cp210x 4-1:0.0: cp210x converter detected [ 604.643791][ T9894] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 604.918319][ T121] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 604.980765][ T121] usb 4-1: cp210x converter now attached to ttyUSB0 [ 605.214015][ T5834] usb 4-1: USB disconnect, device number 7 [ 605.269206][ T9900] ubi31: attaching mtd0 [ 605.311172][ T9900] ubi31: scanning is finished [ 605.597865][ T978] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 605.874872][ T5834] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 605.912386][ T9900] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 605.920228][ T9900] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 605.927560][ T9900] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 605.935347][ T9900] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 605.943219][ T9900] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 605.950126][ T9900] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 605.958311][ T9900] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3255875279 [ 605.968457][ T9900] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 605.982194][ T9904] ubi31: background thread "ubi_bgt31d" started, PID 9904 [ 606.059719][ T5834] cp210x 4-1:0.0: device disconnected [ 606.100753][ T978] usb 3-1: Using ep0 maxpacket: 16 [ 606.116930][ T978] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 606.142903][ T978] usb 3-1: config 0 has no interface number 0 [ 606.189809][ T978] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 606.210628][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.241857][ T978] usb 3-1: Product: syz [ 606.272466][ T978] usb 3-1: Manufacturer: syz [ 606.291915][ T978] usb 3-1: SerialNumber: syz [ 607.530902][ T978] usb 3-1: config 0 descriptor?? [ 608.405079][ T978] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 608.421006][ T978] gspca_spca1528: reg_w err -71 [ 608.446313][ T978] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 608.467578][ T978] usb 3-1: USB disconnect, device number 9 [ 609.297034][ T121] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 609.304971][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 609.361162][ T9932] netlink: 'syz.0.838': attribute type 1 has an invalid length. [ 609.468118][ T121] usb 3-1: device descriptor read/64, error -32 [ 609.536642][ T9938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.725418][ T121] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 609.909171][ T5917] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 610.221553][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.241207][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.268174][ T121] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 610.289748][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.330245][ T121] usb 3-1: config 0 descriptor?? [ 610.356335][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 610.399264][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.439571][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.452933][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 610.471481][ T5917] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 610.473569][ T9952] nbd0: detected capacity change from 0 to 127 [ 610.487440][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.516803][ T5917] usb 1-1: config 0 descriptor?? [ 610.533042][ T5840] block nbd0: Receive control failed (result -104) [ 610.931136][ T121] usbhid 3-1:0.0: can't add hid device: -71 [ 610.971643][ T121] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 611.023238][ T121] usb 3-1: USB disconnect, device number 11 [ 611.247671][ T978] usb 1-1: USB disconnect, device number 9 [ 611.374251][ T9975] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 9975 comm: syz.6.854) [ 611.510560][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 611.516913][ T30] audit: type=1800 audit(1752004052.151:104): pid=9975 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.854" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=23643 res=0 errno=0 [ 611.827714][ T6227] kernel read not supported for file /dsp (pid: 6227 comm: kworker/1:6) [ 611.990990][ T5917] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 612.175538][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.288384][ T5917] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 612.302712][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.317225][ T5917] usb 2-1: config 0 descriptor?? [ 612.516809][ T978] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 612.730506][ T978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.802177][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 612.813751][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 612.871242][ T978] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 612.871511][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 612.961703][ T5917] magicmouse 0003:05AC:0265.0007: unbalanced collection at end of report description [ 613.232721][ T978] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 613.233929][ T5917] magicmouse 0003:05AC:0265.0007: magicmouse hid parse failed [ 613.330206][ T5917] magicmouse 0003:05AC:0265.0007: probe with driver magicmouse failed with error -22 [ 613.337890][ T978] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 613.357178][ T978] usb 4-1: Manufacturer: syz [ 613.371862][ T5917] usb 2-1: USB disconnect, device number 8 [ 613.384862][ T978] usb 4-1: config 0 descriptor?? [ 613.464320][T10007] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.472015][T10007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.490970][ T10] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 613.513106][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 613.523903][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.40 [ 613.533972][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.543543][ T10] usb 1-1: Product: syz [ 613.548101][ T10] usb 1-1: Manufacturer: syz [ 613.552986][ T10] usb 1-1: SerialNumber: syz [ 613.694104][ T978] rc_core: IR keymap rc-hauppauge not found [ 613.700054][ T978] Registered IR keymap rc-empty [ 613.710843][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 613.729335][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'. [ 613.738610][T10012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.872'. [ 613.755884][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 613.793678][ T978] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 613.810324][ T10] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input17 [ 613.824424][ T978] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16 [ 613.848553][ T5193] bcm5974 1-1:1.0: could not read from device [ 613.866789][ T5193] bcm5974 1-1:1.0: could not read from device [ 613.873000][ T10] usb 1-1: USB disconnect, device number 10 [ 613.887106][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 613.915622][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 613.980034][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 614.011636][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 614.032968][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 614.055193][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 614.086587][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 614.107895][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 614.129221][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 614.150643][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 614.176135][ T978] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 614.186345][ T978] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 614.200161][ T978] usb 4-1: USB disconnect, device number 8 [ 615.016911][ T5917] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 615.176964][ T978] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 615.199948][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.219773][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.250952][ T5917] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 615.277848][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.302869][ T5917] usb 7-1: config 0 descriptor?? [ 615.358571][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 615.781647][ T978] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 615.822122][ T978] usb 1-1: config 1 has no interface number 0 [ 615.834000][ T978] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 615.850487][ T978] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 615.884656][ T978] usb 1-1: config 1 interface 105 has no altsetting 0 [ 615.894595][ T978] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 615.903953][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.911970][ T978] usb 1-1: Product: syz [ 615.920629][ T978] usb 1-1: Manufacturer: syz [ 615.925499][ T7909] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 615.933521][ T978] usb 1-1: SerialNumber: syz [ 615.966799][T10024] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 615.974411][T10024] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 616.256692][ T7909] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 616.280678][ T7909] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 616.331814][ T7909] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 616.360824][ T7909] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 616.388883][ T7909] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 616.447366][ T7909] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 616.468174][ T7909] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 616.476669][ T7909] usb 3-1: Product: syz [ 616.491153][ T7909] usb 3-1: Manufacturer: syz [ 616.503569][T10024] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 616.536886][ T7909] cdc_wdm 3-1:1.0: skipping garbage [ 616.542265][ T7909] cdc_wdm 3-1:1.0: skipping garbage [ 616.548022][T10024] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 616.567272][ C0] hrtimer: interrupt took 1469144 ns [ 616.575437][ T7909] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 616.586330][ T7909] cdc_wdm 3-1:1.0: Unknown control protocol [ 616.609337][ T5917] usbhid 7-1:0.0: can't add hid device: -71 [ 616.618168][ T5917] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 616.648307][ T5917] usb 7-1: USB disconnect, device number 3 [ 616.810681][ T7909] usb 3-1: USB disconnect, device number 12 [ 616.991070][ T978] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 617.005439][ T978] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 617.027372][ T978] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 617.076716][ T978] aqc111 1-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ce:70:0a:44:a5:6d [ 617.117381][ T978] usb 1-1: USB disconnect, device number 11 [ 617.156692][ T978] aqc111 1-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 617.195208][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 617.230939][ T978] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 617.246327][ T978] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 617.290804][ T978] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 617.713910][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 617.810901][T10058] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 10058 comm: syz.2.885) [ 617.902995][ T30] audit: type=1800 audit(1752004058.175:105): pid=10058 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.885" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=23747 res=0 errno=0 [ 618.309646][ T5834] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 618.317273][ T7909] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 618.502971][ T7909] usb 7-1: Using ep0 maxpacket: 16 [ 618.511678][ T5834] usb 2-1: config 0 has no interfaces? [ 618.518949][ T7909] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 618.530864][ T5834] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 618.541042][ T7909] usb 7-1: config 0 has no interface number 0 [ 618.547441][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.556609][ T7909] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 618.567723][ T5834] usb 2-1: Product: syz [ 618.572000][ T5834] usb 2-1: Manufacturer: syz [ 618.577001][ T7909] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 618.586824][ T5834] usb 2-1: SerialNumber: syz [ 618.596370][ T5834] usb 2-1: config 0 descriptor?? [ 618.605696][ T7909] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 618.623916][ T7909] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 618.641223][ T7909] usb 7-1: Product: syz [ 618.649819][ T7909] usb 7-1: SerialNumber: syz [ 618.661516][ T7909] usb 7-1: config 0 descriptor?? [ 618.681355][ T7909] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 618.691429][ T7909] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input18 [ 618.702093][ T6227] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 618.744132][T10067] netlink: 'syz.0.892': attribute type 3 has an invalid length. [ 618.855667][ T7909] usb 2-1: USB disconnect, device number 9 [ 618.868975][ T6227] usb 4-1: unable to get BOS descriptor or descriptor too short [ 618.880592][ T6227] usb 4-1: config 0 interface 0 has no altsetting 0 [ 618.916677][ T6227] usb 4-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb [ 618.916705][ T6227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.916753][ T6227] usb 4-1: Product: syz [ 618.916767][ T6227] usb 4-1: Manufacturer: syz [ 618.916781][ T6227] usb 4-1: SerialNumber: syz [ 618.928971][ T6227] usb 4-1: config 0 descriptor?? [ 618.969487][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 618.977829][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 618.985055][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 618.992219][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 618.999826][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 619.007385][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 619.014629][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 619.024912][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 619.032133][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 619.039346][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 619.047863][ T5834] usb 7-1: USB disconnect, device number 4 [ 619.053757][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 619.072070][ T5834] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 619.430231][ T6227] snd_usb_podhd 4-1:0.0: Line 6 POD HDDESKTOP found [ 619.647798][ T6227] snd_usb_podhd 4-1:0.0: endpoint not available, using fallback values [ 619.675379][ T6227] snd_usb_podhd 4-1:0.0: invalid control EP [ 619.692841][ T6227] snd_usb_podhd 4-1:0.0: cannot start listening: -22 [ 619.707321][ T6227] snd_usb_podhd 4-1:0.0: Line 6 POD HDDESKTOP now disconnected [ 619.718538][ T6227] snd_usb_podhd 4-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 619.906811][ T5917] usb 4-1: USB disconnect, device number 9 [ 621.986614][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 622.066584][T10102] IPVS: Error connecting to the multicast addr [ 622.177876][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'. [ 622.196181][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 622.214064][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.249226][ T10] usb 3-1: config 0 descriptor?? [ 622.264746][ T10] cp210x 3-1:0.0: cp210x converter detected [ 622.312713][T10098] netlink: 76 bytes leftover after parsing attributes in process `syz.1.905'. [ 622.619736][T10116] netlink: 24 bytes leftover after parsing attributes in process `syz.6.912'. [ 622.628266][ T6227] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 622.703357][ T10] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 622.951945][ T6227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 622.963452][ T6227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.978194][ T10] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 622.995297][ T6227] usb 1-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 622.998336][ T10] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 623.038026][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 623.119380][T10124] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 10124 comm: syz.3.911) [ 623.190012][ T30] audit: type=1800 audit(1752004063.142:106): pid=10124 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.911" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=23903 res=0 errno=0 [ 623.536301][ T10] usb 3-1: USB disconnect, device number 13 [ 623.571324][ T6227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.599160][ T6227] usb 1-1: config 0 descriptor?? [ 623.635046][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 623.644688][ T10] cp210x 3-1:0.0: device disconnected [ 624.072791][ T6227] logitech-hidpp-device 0003:046D:C262.0008: item fetching failed at offset 0/3 [ 624.107974][ T6227] logitech-hidpp-device 0003:046D:C262.0008: hidpp_probe:parse failed [ 624.124037][ T6227] logitech-hidpp-device 0003:046D:C262.0008: probe with driver logitech-hidpp-device failed with error -22 [ 624.313730][ T6227] usb 1-1: USB disconnect, device number 12 [ 624.702295][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 624.873189][ T6227] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 624.891993][ T10] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 624.916039][ T10] usb 3-1: config 0 has no interface number 0 [ 624.948133][ T10] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=cd.e9 [ 624.972645][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.990649][ T10] usb 3-1: Product: syz [ 624.995240][ T10] usb 3-1: Manufacturer: syz [ 624.999949][ T10] usb 3-1: SerialNumber: syz [ 625.026399][ T10] usb 3-1: config 0 descriptor?? [ 625.045388][ T10] usb_ehset_test 3-1:0.205: probe with driver usb_ehset_test failed with error -32 [ 625.063138][ T6227] usb 2-1: unable to get BOS descriptor or descriptor too short [ 625.100339][ T6227] usb 2-1: no configurations [ 625.115787][ T6227] usb 2-1: can't read configurations, error -22 [ 625.268836][ T978] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 625.441812][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.457074][ T5834] usb 3-1: USB disconnect, device number 14 [ 625.511031][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.560254][ T978] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 625.614392][ T978] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 625.661326][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.697808][ T978] usb 1-1: config 0 descriptor?? [ 626.193971][ T978] dragonrise 0003:0079:0011.0009: invalid report_count -326368751 [ 626.237818][ T978] dragonrise 0003:0079:0011.0009: item 0 4 1 9 parsing failed [ 626.264480][ T978] dragonrise 0003:0079:0011.0009: parse failed [ 626.293091][T10169] IPVS: Unknown mcast interface: vcan0 [ 626.298789][ T978] dragonrise 0003:0079:0011.0009: probe with driver dragonrise failed with error -22 [ 626.460219][ T5931] usb 1-1: USB disconnect, device number 13 [ 626.466510][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 626.669753][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 626.686229][T10159] netlink: 76 bytes leftover after parsing attributes in process `syz.3.926'. [ 626.709468][ T10] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 626.754862][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.806781][ T10] usb 2-1: config 0 descriptor?? [ 627.669882][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 627.684901][T10179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.933'. [ 627.724471][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 627.734982][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 627.794088][ T10] asix 2-1:0.0: probe with driver asix failed with error -71 [ 627.826141][ T10] usb 2-1: USB disconnect, device number 12 [ 627.858833][T10183] Illegal XDP return value 4294967294 on prog (id 211) dev N/A, expect packet loss! [ 628.020141][ T30] audit: type=1326 audit(1752004067.716:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10186 comm="syz.6.936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4ee18e929 code=0x0 [ 628.487209][T10204] sp0: Synchronizing with TNC [ 628.511263][T10204] sp0: Found TNC [ 629.118736][T10229] IPVS: Error connecting to the multicast addr [ 629.306734][T10226] netlink: 76 bytes leftover after parsing attributes in process `syz.6.955'. [ 629.897743][ T978] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 630.079460][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 630.091700][ T978] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.122271][ T978] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.175619][ T978] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 630.209032][ T978] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 630.240106][T10241] syzkaller1: entered promiscuous mode [ 630.245690][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 630.266130][T10241] syzkaller1: entered allmulticast mode [ 630.275445][ T978] usb 2-1: SerialNumber: syz [ 630.300743][ T978] hub 2-1:1.0: bad descriptor, ignoring hub [ 630.315544][ T978] hub 2-1:1.0: probe with driver hub failed with error -5 [ 630.332619][ T978] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 630.667739][ T978] usb 2-1: USB disconnect, device number 13 [ 630.741646][T10254] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 630.749232][ T978] IPVS: starting estimator thread 0... [ 630.870818][T10260] IPVS: using max 30 ests per chain, 72000 per kthread [ 631.219028][ T121] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 631.249759][ T121] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 632.779435][T10292] loop6: detected capacity change from 0 to 63 [ 632.796478][T10292] Buffer I/O error on dev loop6, logical block 0, async page read [ 632.816746][T10292] Buffer I/O error on dev loop6, logical block 1, async page read [ 632.835740][T10292] Buffer I/O error on dev loop6, logical block 2, async page read [ 632.863103][T10292] Buffer I/O error on dev loop6, logical block 3, async page read [ 632.888016][T10292] Buffer I/O error on dev loop6, logical block 0, async page read [ 632.907105][T10292] Buffer I/O error on dev loop6, logical block 1, async page read [ 632.917900][T10292] Buffer I/O error on dev loop6, logical block 2, async page read [ 632.932730][T10292] Buffer I/O error on dev loop6, logical block 3, async page read [ 632.966739][ T9730] Buffer I/O error on dev loop6, logical block 0, async page read [ 632.983046][ T9730] Buffer I/O error on dev loop6, logical block 1, async page read [ 634.279610][T10317] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 634.667729][T10327] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 10327 comm: syz.0.984) [ 634.800422][ T30] audit: type=1800 audit(1752004073.946:108): pid=10327 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.984" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=24344 res=0 errno=0 [ 634.901698][ T121] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 635.254243][ T121] usb 2-1: Using ep0 maxpacket: 8 [ 635.274102][ T121] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 635.303500][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.352988][ T121] pvrusb2: Hardware description: Terratec Grabster AV400 [ 635.373794][ T121] pvrusb2: ********** [ 635.383555][ T121] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 635.400713][ T121] pvrusb2: Important functionality might not be entirely working. [ 635.430730][ T121] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 635.476973][ T121] pvrusb2: ********** [ 635.579880][ T10] kernel write not supported for file /vbi3 (pid: 10 comm: kworker/0:1) [ 635.594739][ T2344] pvrusb2: Invalid write control endpoint [ 635.737500][ T2344] pvrusb2: Invalid write control endpoint [ 635.744716][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 635.774184][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 635.799091][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 635.845262][ T2344] pvrusb2: Device being rendered inoperable [ 635.883923][ T121] usb 2-1: USB disconnect, device number 14 [ 635.895435][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 635.927360][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 635.973236][ T2344] pvrusb2: Attached sub-driver cx25840 [ 635.998358][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 636.040065][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 636.636556][ T121] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 636.737024][ T978] kernel write not supported for file /802/oom_score_adj (pid: 978 comm: kworker/1:2) [ 636.830683][ T121] usb 4-1: Using ep0 maxpacket: 8 [ 636.850680][ T121] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 636.872366][ T121] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 636.885448][ T121] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 636.900282][ T121] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 636.932736][ T121] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 636.963884][ T121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.284295][ T121] usb 4-1: GET_CAPABILITIES returned 0 [ 637.320482][ T121] usbtmc 4-1:16.0: can't read capabilities [ 637.612995][ T121] usb 4-1: USB disconnect, device number 10 [ 637.840974][ T978] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 637.929276][ T6227] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 638.025004][ T978] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 638.036390][ T978] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 638.046563][ T978] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 638.055857][ T978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.067884][T10366] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 638.083137][ T978] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 638.108158][ T6227] usb 2-1: Using ep0 maxpacket: 32 [ 638.129523][ T5834] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 638.142992][ T6227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.165226][ T6227] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 638.172430][ T5917] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 638.185756][ T6227] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 638.195199][ T6227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 638.206010][ T6227] usb 2-1: Product: syz [ 638.210414][ T6227] usb 2-1: Manufacturer: syz [ 638.220158][ T6227] usb 2-1: SerialNumber: syz [ 638.233155][ T6227] usb 2-1: config 0 descriptor?? [ 638.320317][ T121] usb 7-1: USB disconnect, device number 5 [ 638.343782][ T5834] usb 1-1: unable to get BOS descriptor or descriptor too short [ 638.360763][ T5834] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 638.373517][ T5834] usb 1-1: can't read configurations, error -71 [ 638.386188][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 638.399164][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.418149][ T5917] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 638.427384][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.458806][ T5917] usb 3-1: config 0 descriptor?? [ 638.469064][ T5917] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 638.568008][ T6227] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 638.619567][ T978] usb 2-1: USB disconnect, device number 15 [ 638.762441][ T6227] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 638.771929][ T6227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.785929][ T6227] usb 4-1: config 0 descriptor?? [ 639.335576][ T5917] gspca_vc032x: reg_w err -71 [ 639.342324][ T5917] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 639.372469][ T5917] usb 3-1: USB disconnect, device number 15 [ 639.530172][ T121] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 639.665644][ T6227] pegasus 4-1:0.0: probe with driver pegasus failed with error -121 [ 639.736392][ T121] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 639.747873][ T121] usb 7-1: config 0 has no interface number 0 [ 639.757828][ T121] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 639.770527][ T121] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 639.785532][ T121] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 639.803212][ T121] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 639.825025][ T121] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 639.850073][ T121] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 639.872012][ T121] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 639.887158][ T10] usb 4-1: USB disconnect, device number 11 [ 639.921385][ T121] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.963571][ T121] usb 7-1: config 0 descriptor?? [ 639.997052][T10390] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 640.015243][T10390] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 640.050024][ T121] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 640.331171][ T121] usb 7-1: USB disconnect, device number 6 [ 640.365006][ T121] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 640.501898][T10413] netlink: 'syz.3.1023': attribute type 1 has an invalid length. [ 640.593239][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 640.606846][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 640.820094][ T978] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 640.911718][T10419] xt_CT: No such helper "snmp" [ 641.007123][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.047173][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.074568][ T978] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 641.105067][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.181784][ T978] usb 3-1: config 0 descriptor?? [ 641.469233][ T978] usbhid 3-1:0.0: can't add hid device: -71 [ 641.476024][ T978] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 641.488223][ T978] usb 3-1: USB disconnect, device number 16 [ 642.213294][ T6227] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 642.258276][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 642.330949][ T121] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 642.373826][ T6227] usb 3-1: Using ep0 maxpacket: 16 [ 642.387233][ T6227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.401895][ T6227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.413086][ T6227] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.40 [ 642.439831][ T6227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.452827][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 642.460420][ T6227] usb 3-1: config 0 descriptor?? [ 642.462021][ T10] usb 1-1: config 0 has no interfaces? [ 642.477836][ T10] usb 1-1: config 0 has no interfaces? [ 642.488669][ T10] usb 1-1: config 0 has no interfaces? [ 642.494553][ T121] usb 2-1: Using ep0 maxpacket: 32 [ 642.506931][ T121] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 642.530289][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 642.545280][ T121] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 642.559680][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.568734][ T121] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 642.582615][ T10] usb 1-1: Product: syz [ 642.586867][ T10] usb 1-1: Manufacturer: syz [ 642.592710][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 642.608097][ T10] usb 1-1: SerialNumber: syz [ 642.614593][ T121] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 642.634428][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 642.634920][ T55] block nbd0: Possible stuck request ffff888025650000: control (read@0,1024B). Runtime 30 seconds [ 642.645857][ T10] usb 1-1: config 0 descriptor?? [ 642.655959][ T55] block nbd0: Possible stuck request ffff8880256501c0: control (read@1024,1024B). Runtime 30 seconds [ 642.671696][ T55] block nbd0: Possible stuck request ffff888025650380: control (read@2048,1024B). Runtime 30 seconds [ 642.683082][ T55] block nbd0: Possible stuck request ffff888025650540: control (read@3072,1024B). Runtime 30 seconds [ 642.714054][ T121] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 642.746770][ T121] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 642.796323][ T121] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 642.820041][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.832100][ T121] usb 2-1: config 0 descriptor?? [ 642.941445][ T6227] kye 0003:0458:5016.000B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 642.970059][ T10] usb 1-1: USB disconnect, device number 16 [ 642.976209][ T6227] kye 0003:0458:5016.000B: unknown main item tag 0x0 [ 642.979206][ T6227] kye 0003:0458:5016.000B: hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 643.020074][ T6227] kye 0003:0458:5016.000B: tablet-enabling feature report not found [ 643.065899][ T121] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 643.069098][ T6227] kye 0003:0458:5016.000B: tablet enabling failed [ 643.171549][ T6227] usb 3-1: USB disconnect, device number 17 [ 643.224188][T10454] fido_id[10454]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 643.312348][ T10] usb 2-1: USB disconnect, device number 16 [ 643.331348][ T10] usblp0: removed [ 644.591487][T10478] loop6: detected capacity change from 0 to 524287999 [ 644.651882][ T9730] buffer_io_error: 26 callbacks suppressed [ 644.651899][ T9730] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.757930][ T9730] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.779191][ T9730] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.832584][T10481] Invalid logical block size (3) [ 644.838605][ T9730] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.853605][ T9730] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.873057][T10485] ucma_write: process 801 (syz.2.1048) changed security contexts after opening file descriptor, this is not allowed. [ 644.898073][ T9730] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.907957][ T9730] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.916036][ T9730] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.952088][T10487] smc: net device bond0 applied user defined pnetid SYZ2 [ 644.956642][ T9730] ldm_validate_partition_table(): Disk read failed. [ 644.980630][T10487] smc: net device bond0 erased user defined pnetid SYZ2 [ 644.986130][ T9730] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.019594][ T9730] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.046567][ T9730] Dev loop6: unable to read RDB block 0 [ 645.052804][ T9730] loop6: unable to read partition table [ 645.083503][T10478] ldm_validate_partition_table(): Disk read failed. [ 645.110900][T10478] Dev loop6: unable to read RDB block 0 [ 645.133788][T10478] loop6: unable to read partition table [ 645.170685][T10478] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 647.200307][ T6227] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 647.239226][T10521] syzkaller1: entered promiscuous mode [ 647.244746][T10521] syzkaller1: entered allmulticast mode [ 647.411691][ T6227] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 647.428610][ T6227] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 647.447924][ T6227] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 647.664883][ T6227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.683875][ T6227] usb 4-1: config 0 descriptor?? [ 647.704545][ T6227] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 648.873882][T10549] block nbd2: NBD_DISCONNECT [ 648.882279][T10549] block nbd2: Send disconnect failed -22 [ 648.896928][T10554] IPVS: Error connecting to the multicast addr [ 648.906949][T10549] block nbd2: Send disconnect failed -22 [ 648.929207][T10548] block nbd2: Disconnected due to user request. [ 648.935808][T10548] block nbd2: shutting down sockets [ 649.940725][T10552] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1071'. [ 651.859192][ T978] usb 4-1: USB disconnect, device number 12 [ 652.197623][T10602] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1087'. [ 652.936015][ T6227] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 653.170401][ T6227] usb 3-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 653.652272][ T6227] usb 3-1: config 0 has an invalid interface number: 128 but max is 35 [ 653.660590][ T6227] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 653.695056][ T6227] usb 3-1: config 0 has no interface number 0 [ 653.701396][ T6227] usb 3-1: config 0 interface 128 altsetting 6 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 653.748173][ T6227] usb 3-1: config 0 interface 128 altsetting 6 endpoint 0x8 has invalid wMaxPacketSize 0 [ 653.801658][ T6227] usb 3-1: config 0 interface 128 has no altsetting 0 [ 653.827849][ T6227] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 653.840118][T10626] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 653.846986][ T6227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.847010][ T6227] usb 3-1: Product: syz [ 653.847025][ T6227] usb 3-1: Manufacturer: syz [ 653.847040][ T6227] usb 3-1: SerialNumber: syz [ 653.851367][ T6227] usb 3-1: config 0 descriptor?? [ 653.907629][ T6227] radio-si470x 3-1:0.128: could not find interrupt in endpoint [ 653.929266][ T6227] radio-si470x 3-1:0.128: probe with driver radio-si470x failed with error -5 [ 653.939243][ T6227] usbhid 3-1:0.128: couldn't find an input interrupt endpoint [ 654.091398][ T978] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 654.137759][ T6227] usb 3-1: USB disconnect, device number 18 [ 654.251343][ T978] usb 4-1: Using ep0 maxpacket: 16 [ 654.267661][ T978] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 654.311685][ T978] usb 4-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 654.328472][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.364314][ T978] usb 4-1: Product: syz [ 654.369817][ T978] usb 4-1: Manufacturer: syz [ 654.388502][ T978] usb 4-1: SerialNumber: syz [ 654.425350][ T978] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input19 [ 654.627323][ T5193] bcm5974 4-1:1.0: could not read from device [ 654.650704][ T5193] bcm5974 4-1:1.0: could not read from device [ 654.653992][ T978] usb 4-1: USB disconnect, device number 13 [ 654.683149][ T5193] bcm5974 4-1:1.0: could not read from device [ 654.839126][ T6227] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 654.888687][ T30] audit: type=1326 audit(1752004092.841:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10657 comm="syz.2.1107" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f311bf8e929 code=0x0 [ 655.033772][ T6227] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 655.043725][ T6227] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 655.067169][ T6227] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 655.084733][ T6227] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.092782][ T6227] usb 7-1: Product: syz [ 655.097322][ T6227] usb 7-1: Manufacturer: syz [ 655.101947][ T6227] usb 7-1: SerialNumber: syz [ 655.128684][ T6227] usb 7-1: config 0 descriptor?? [ 655.135463][T10652] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 655.153912][T10652] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 655.393720][T10652] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 655.417142][T10652] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 656.454633][ T6227] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 657.110760][ T6227] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 657.193986][ T6227] usb 7-1: USB disconnect, device number 7 [ 657.226514][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1120'. [ 658.024712][ T5917] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 658.197080][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 658.209409][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 658.249605][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 658.271710][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 658.320343][ T5917] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 658.344353][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.360198][ T5917] usb 2-1: config 0 descriptor?? [ 658.402654][ T5917] hub 2-1:0.0: USB hub found [ 658.419126][T10723] netlink: 'syz.6.1132': attribute type 12 has an invalid length. [ 658.440010][T10723] netlink: 'syz.6.1132': attribute type 29 has an invalid length. [ 658.479921][T10723] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1132'. [ 658.505927][T10723] netlink: 59 bytes leftover after parsing attributes in process `syz.6.1132'. [ 658.606684][ T5917] hub 2-1:0.0: 2 ports detected [ 658.659992][T10731] random: crng reseeded on system resumption [ 658.829350][ T5917] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 658.847475][ T5917] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 658.871907][ T5917] usbhid 2-1:0.0: can't add hid device: -71 [ 658.875413][ T5912] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 658.878036][ T5917] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 658.946141][ T5917] usb 2-1: USB disconnect, device number 17 [ 659.052057][T10708] syz.2.1126 (10708): drop_caches: 2 [ 659.068253][ T5912] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 659.077606][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.088429][ T5912] usb 4-1: Product: syz [ 659.092628][ T5912] usb 4-1: Manufacturer: syz [ 659.100736][ T5912] usb 4-1: SerialNumber: syz [ 659.108583][ T5912] usb 4-1: config 0 descriptor?? [ 659.196705][ T30] audit: type=1326 audit(1752004096.872:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10737 comm="syz.6.1137" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4ee18e929 code=0x0 [ 659.414567][T10742] IPVS: Scheduler module ip_vs_ not found [ 659.504028][T10741] IPVS: Error connecting to the multicast addr [ 659.582797][ T5912] usb 4-1: Firmware: major: 13, minor: 242, hardware type: UNKNOWN (129) [ 659.755845][T10744] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1139'. [ 659.798129][ T5912] usb 4-1: Read permanent extended address ac:83:de:59:10:b2:10:83 from device [ 659.822266][ T5912] usb 4-1: atusb_probe: initialization failed, error = -524 [ 659.854945][ T5912] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 659.929129][ T978] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 660.029646][ T5917] usb 4-1: USB disconnect, device number 14 [ 660.124082][ T978] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 660.133042][ T978] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 660.155905][ T978] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 660.165309][ T978] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 660.184114][ T978] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 660.207742][ T978] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 660.224727][ T978] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 660.261881][ T978] usb 1-1: Product: syz [ 660.266091][ T978] usb 1-1: Manufacturer: syz [ 660.274150][T10763] loop2: detected capacity change from 0 to 7 [ 660.286686][ T978] cdc_wdm 1-1:1.0: skipping garbage [ 660.292356][T10763] Dev loop2: unable to read RDB block 7 [ 660.298050][T10763] loop2: unable to read partition table [ 660.319597][ T978] cdc_wdm 1-1:1.0: skipping garbage [ 660.329168][T10763] loop2: partition table beyond EOD, truncated [ 660.355444][ T978] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 660.363593][T10763] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 660.374032][ T978] cdc_wdm 1-1:1.0: Unknown control protocol [ 660.577989][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 660.579188][ T10] usb 1-1: USB disconnect, device number 17 [ 660.584908][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 660.584932][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 660.587047][T10753] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 660.965695][ T5912] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 661.170006][ T5912] usb 7-1: config 0 has no interfaces? [ 661.178255][ T5912] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 661.187624][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.195973][ T5912] usb 7-1: Product: syz [ 661.200610][ T5912] usb 7-1: Manufacturer: syz [ 661.205291][ T5912] usb 7-1: SerialNumber: syz [ 661.213493][ T5912] usb 7-1: config 0 descriptor?? [ 661.456408][ T5912] usb 7-1: USB disconnect, device number 8 [ 661.467533][T10785] loop2: detected capacity change from 0 to 7 [ 661.485981][T10785] Dev loop2: unable to read RDB block 7 [ 661.537353][T10785] loop2: unable to read partition table [ 661.560601][T10785] loop2: partition table beyond EOD, truncated [ 661.591306][T10785] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 663.337944][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 663.366905][T10827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.452575][T10830] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 663.563818][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.607848][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.637245][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 663.657314][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.680496][ T10] usb 3-1: config 0 descriptor?? [ 663.819289][ T978] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 663.995111][ T978] usb 7-1: Using ep0 maxpacket: 32 [ 664.020395][ T978] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 664.039459][ T978] usb 7-1: config 0 has no interface number 0 [ 664.110951][ T978] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 664.120317][ T978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.128359][ T978] usb 7-1: Product: syz [ 664.150710][ T978] usb 7-1: Manufacturer: syz [ 664.155599][ T978] usb 7-1: SerialNumber: syz [ 664.175358][ T978] usb 7-1: config 0 descriptor?? [ 664.249087][ T978] smsc95xx v2.0.0 [ 664.310836][ T6227] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 665.082421][ T978] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 665.109571][ T978] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 665.152545][ T6227] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 665.190513][ T6227] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 665.224163][ T6227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 665.268266][ T6227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 665.282819][ T6227] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 665.310403][ T6227] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 665.324900][ T6227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.360253][ T10] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input20 [ 665.362712][ T6227] usb 1-1: config 0 descriptor?? [ 665.443202][T10856] batadv_slave_0: entered promiscuous mode [ 665.456188][T10855] batadv_slave_0: left promiscuous mode [ 665.511569][ T10] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input21 [ 665.639047][ T10] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input22 [ 665.761985][ T10] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input23 [ 665.824857][ T978] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 665.849068][ T6227] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd [ 665.864945][ T978] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 665.874473][ T10] uclogic 0003:256C:006D.000C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 665.938498][ T6227] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 665.960915][ T10] usb 3-1: USB disconnect, device number 19 [ 666.068129][ T978] usb 7-1: USB disconnect, device number 9 [ 666.147813][T10866] fido_id[10866]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 666.227418][ T5917] usb 1-1: USB disconnect, device number 18 [ 666.471305][ T5931] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 666.646998][ T5931] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 666.672837][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.713668][ T5931] usb 2-1: config 0 descriptor?? [ 666.763048][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1192'. [ 666.927019][T10889] loop2: detected capacity change from 0 to 7 [ 666.942891][T10889] Dev loop2: unable to read RDB block 7 [ 666.955814][T10889] loop2: unable to read partition table [ 666.972497][T10889] loop2: partition table beyond EOD, truncated [ 666.990837][T10889] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 667.104702][T10893] IPVS: Error connecting to the multicast addr [ 667.230918][T10891] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1194'. [ 668.040153][ T5931] usb 2-1: Cannot set autoneg [ 668.045340][ T5931] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 668.070134][ T5931] usb 2-1: USB disconnect, device number 18 [ 669.004036][ T5931] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 669.188339][ T5931] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.214795][ T5931] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 669.233037][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.254895][ T5931] usb 2-1: Product: syz [ 669.265901][ T5931] usb 2-1: Manufacturer: syz [ 669.270617][ T5931] usb 2-1: SerialNumber: syz [ 669.699127][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 669.880575][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 669.913365][ T10] usb 1-1: config 0 has no interfaces? [ 670.610211][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 670.621123][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 670.629466][ T10] usb 1-1: SerialNumber: syz [ 670.716209][ T10] usb 1-1: config 0 descriptor?? [ 670.795668][ T5931] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 670.813899][ T5931] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 670.831617][ T5931] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 670.961452][ T121] usb 1-1: USB disconnect, device number 19 [ 671.012084][ T5931] cdc_ncm 2-1:1.0: setting tx_max = 136 [ 671.049653][ T5931] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 671.085702][ T5931] usb 2-1: USB disconnect, device number 19 [ 671.120435][ T5931] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 671.323879][ T6227] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 671.486200][ T6227] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 671.515960][ T6227] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.720593][ T6227] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 671.729889][ T6227] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 671.741894][ T6227] usb 7-1: Manufacturer: syz [ 671.755420][ T6227] usb 7-1: config 0 descriptor?? [ 672.285133][ T6227] cougar 0003:060B:700A.000E: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 673.002727][ T978] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 673.325560][ T978] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 673.438858][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 673.480473][ T6227] usb 7-1: USB disconnect, device number 10 [ 673.608181][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 673.656648][ T978] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 673.725561][ T978] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 673.735303][T10971] IPVS: Unknown mcast interface: vcan0 [ 673.777023][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.805305][ T978] usb 2-1: config 0 descriptor?? [ 673.811102][T10954] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 673.840991][T10970] fido_id[10970]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 673.912408][ T5931] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 673.978683][T10966] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1220'. [ 674.109508][ T5931] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 674.128194][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.148751][ T5931] usb 1-1: config 0 descriptor?? [ 674.156393][ T5931] cp210x 1-1:0.0: cp210x converter detected [ 674.313813][ T978] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 674.598852][ T5931] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 674.618142][ T5931] usb 1-1: cp210x converter now attached to ttyUSB0 [ 674.691422][ T121] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 674.787593][ T55] block nbd0: Possible stuck request ffff888025650000: control (read@0,1024B). Runtime 60 seconds [ 674.798397][ T55] block nbd0: Possible stuck request ffff8880256501c0: control (read@1024,1024B). Runtime 60 seconds [ 674.812323][ T55] block nbd0: Possible stuck request ffff888025650380: control (read@2048,1024B). Runtime 60 seconds [ 674.824300][ T55] block nbd0: Possible stuck request ffff888025650540: control (read@3072,1024B). Runtime 60 seconds [ 674.856499][ T10] usb 1-1: USB disconnect, device number 20 [ 674.883755][ T121] usb 7-1: config 0 has an invalid interface number: 72 but max is 0 [ 674.900055][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 674.916013][ T121] usb 7-1: config 0 has no interface number 0 [ 674.922196][ T121] usb 7-1: too many endpoints for config 0 interface 72 altsetting 199: 192, using maximum allowed: 30 [ 674.933763][ T5931] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 674.965038][ T10] cp210x 1-1:0.0: device disconnected [ 674.996581][ T121] usb 7-1: config 0 interface 72 altsetting 199 has 0 endpoint descriptors, different from the interface descriptor's value: 192 [ 675.022852][ T121] usb 7-1: config 0 interface 72 has no altsetting 0 [ 675.042379][ T121] usb 7-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 675.054926][ T121] usb 7-1: New USB device strings: Mfr=1, Product=51, SerialNumber=161 [ 675.063944][ T121] usb 7-1: Product: syz [ 675.087246][ T121] usb 7-1: Manufacturer: syz [ 675.096325][ T121] usb 7-1: SerialNumber: syz [ 675.117499][ T121] usb 7-1: config 0 descriptor?? [ 675.161765][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 675.169853][ T5931] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 675.194120][ T5931] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 675.204295][ T5931] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 675.229063][ T5931] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 675.245894][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.254172][ T5931] usb 4-1: Product: syz [ 675.258927][ T5931] usb 4-1: Manufacturer: syz [ 675.263625][ T5931] usb 4-1: SerialNumber: syz [ 675.359056][ T978] usb 7-1: USB disconnect, device number 11 [ 675.397210][ T5834] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 675.730129][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.741367][ T5834] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 675.744732][ T5931] usb 4-1: 0:2 : does not exist [ 675.750523][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.764278][ T5834] usb 3-1: config 0 descriptor?? [ 676.568985][ T5834] usbhid 3-1:0.0: can't add hid device: -71 [ 676.586902][ T5834] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 676.608692][ T5834] usb 3-1: USB disconnect, device number 20 [ 676.901970][ T5931] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 676.957959][ T5931] usb 4-1: USB disconnect, device number 15 [ 677.131503][ T5834] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 677.172076][ T10] usb 2-1: reset high-speed USB device number 20 using dummy_hcd [ 677.311384][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 677.318522][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.329859][ T5834] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 677.339639][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.355274][ T5834] usb 3-1: config 0 descriptor?? [ 677.363095][ T5834] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 677.365081][ T10] usb 2-1: device firmware changed [ 677.375324][ T5834] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 677.416886][ T6227] usb 2-1: USB disconnect, device number 20 [ 677.449683][ T5912] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 677.613312][ T6227] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 677.621570][ T5912] usb 7-1: Using ep0 maxpacket: 32 [ 677.647127][ T5912] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 677.663442][ T5912] usb 7-1: config 0 has no interface number 0 [ 677.747797][ T5912] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 677.779127][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.814110][ T5912] usb 7-1: Product: syz [ 677.829550][ T6227] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 677.845033][ T5912] usb 7-1: Manufacturer: syz [ 677.849769][ T5912] usb 7-1: SerialNumber: syz [ 677.862307][ T6227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.876198][ T5834] usb 3-1: USB disconnect, device number 21 [ 677.899139][ T5912] usb 7-1: config 0 descriptor?? [ 677.905492][ T5834] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 677.919505][ T6227] usb 2-1: config 0 descriptor?? [ 677.932744][ T5912] smsc95xx v2.0.0 [ 679.366315][ T5912] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 679.599220][ T5912] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 679.602006][T11030] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 679.621821][ T5912] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 679.639744][ T5912] usb 7-1: USB disconnect, device number 12 [ 679.654389][ T8908] udevd[8908]: setting owner of /dev/bus/usb/007/012 to uid=0, gid=0 failed: No such file or directory [ 680.004931][T11036] IPVS: Unknown mcast interface: vcan0 [ 680.020292][ T6227] usb 2-1: Cannot set autoneg [ 680.046402][ T6227] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 680.646113][ T6227] usb 2-1: USB disconnect, device number 21 [ 680.897022][ T30] audit: type=1326 audit(1752004117.170:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11041 comm="syz.6.1244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4ee18e929 code=0x0 [ 680.914958][T11035] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1242'. [ 681.413312][ T6227] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 681.759872][ T6227] usb 3-1: Using ep0 maxpacket: 16 [ 681.826931][ T6227] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 681.989680][ T6227] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.225131][ T6227] usb 3-1: config 0 has no interface number 0 [ 682.233869][ T6227] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 682.244425][ T6227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.252730][ T6227] usb 3-1: Product: syz [ 682.257323][ T6227] usb 3-1: Manufacturer: syz [ 682.273407][ T6227] usb 3-1: SerialNumber: syz [ 682.281000][ T6227] usb 3-1: config 0 descriptor?? [ 682.655130][ T6227] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 682.740422][ T6227] usb 3-1: No valid video chain found. [ 682.859039][ T6227] usb 3-1: USB disconnect, device number 22 [ 683.070830][ T30] audit: type=1326 audit(1752004119.200:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11070 comm="syz.3.1253" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b1698e929 code=0x0 [ 683.091860][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.169043][ T5912] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 683.336000][ T5912] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.382778][ T5912] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 683.995619][ T5912] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 684.012891][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 684.021290][ T5912] usb 2-1: SerialNumber: syz [ 684.373478][ T5912] usb 2-1: 0:2 : does not exist [ 684.425458][ T5912] usb 2-1: unit 2 not found! [ 684.478903][ T5912] usb 2-1: USB disconnect, device number 22 [ 685.352024][ T8908] udevd[8908]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.198625][T11105] loop2: detected capacity change from 0 to 7 [ 686.233703][T11105] loop2: [POWERTEC] p1 p2 p3 [ 686.254592][T11105] loop2: p2 start 4294967287 is beyond EOD, truncated [ 686.262031][T11105] loop2: p3 start 1932423285 is beyond EOD, truncated [ 686.361588][ T8908] udevd[8908]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 687.381409][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1268'. [ 690.727319][ T6227] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 690.902038][ T6227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.914066][ T6227] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 690.943200][ T6227] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 690.961384][ T6227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.014212][ T6227] usb 2-1: config 0 descriptor?? [ 691.057297][ T6227] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 691.330105][ T6227] usb 2-1: USB disconnect, device number 23 [ 691.411445][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 691.572047][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 691.589223][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 691.622429][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 691.635636][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.649885][ T9] usb 3-1: Product: syz [ 691.654128][ T9] usb 3-1: Manufacturer: syz [ 691.660146][ T9] usb 3-1: SerialNumber: syz [ 691.684163][ T9] usb 3-1: config 0 descriptor?? [ 691.693005][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 691.706696][ T9] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 692.063543][T11192] serio: Serial port ttyS3 [ 692.553173][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 692.886336][T11203] loop6: detected capacity change from 0 to 7 [ 692.894653][T11203] Dev loop6: unable to read RDB block 7 [ 692.902550][T11203] loop6: AHDI p4 [ 692.906347][T11203] loop6: partition table partially beyond EOD, truncated [ 692.962623][T11201] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 693.441618][ T9] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 693.451012][ T9] em28xx 3-1:0.0: board has no eeprom [ 693.496330][ T7909] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 693.528452][ T9] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 693.536834][ T9] em28xx 3-1:0.0: dvb set to bulk mode. [ 693.544198][ T5931] em28xx 3-1:0.0: Binding DVB extension [ 693.558928][ T9] usb 3-1: USB disconnect, device number 23 [ 693.575885][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 693.637608][ T5931] em28xx 3-1:0.0: Registering input extension [ 693.644007][ T9] em28xx 3-1:0.0: Closing input extension [ 693.661121][ T7909] usb 7-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.676075][ T7909] usb 7-1: config 0 interface 0 has no altsetting 0 [ 693.682083][ T9] em28xx 3-1:0.0: Freeing device [ 693.685749][ T7909] usb 7-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 693.703714][ T7909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.719865][ T7909] usb 7-1: config 0 descriptor?? [ 694.053958][T11220] netlink: 'syz.2.1301': attribute type 12 has an invalid length. [ 694.062033][T11220] netlink: 'syz.2.1301': attribute type 29 has an invalid length. [ 694.093009][T11220] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1301'. [ 694.121302][T11220] netlink: 'syz.2.1301': attribute type 2 has an invalid length. [ 694.148271][T11220] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1301'. [ 694.213262][ T7909] apple 0003:05AC:027A.0010: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.6-1/input0 [ 694.408227][ T9] usb 7-1: USB disconnect, device number 13 [ 694.532239][T11236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 694.666483][T11238] netlink: 'syz.3.1308': attribute type 5 has an invalid length. [ 694.820721][T11243] xt_CT: No such helper "pptp" [ 696.196028][T11265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 696.630142][T11281] loop2: detected capacity change from 0 to 7 [ 696.641249][T11281] loop2: [ 696.649497][T11281] loop2: partition table partially beyond EOD, truncated [ 696.824165][T11289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1324'. [ 696.870284][T11291] loop6: detected capacity change from 0 to 524287999 [ 697.040321][T11294] loop2: detected capacity change from 0 to 7 [ 697.119734][T11294] loop2: [ 697.140822][T11294] loop2: partition table partially beyond EOD, truncated [ 697.220736][T11296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 697.588412][T11299] pim6reg1: entered allmulticast mode [ 697.599066][T11299] pim6reg1: left allmulticast mode [ 697.734765][T11300] IPVS: Error connecting to the multicast addr [ 698.152452][T11301] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1328'. [ 698.372139][T11315] loop2: detected capacity change from 0 to 7 [ 698.380451][T11315] loop2: [ 698.389188][T11315] loop2: partition table partially beyond EOD, truncated [ 699.632585][T11332] IPVS: Error connecting to the multicast addr [ 699.914740][T11328] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1334'. [ 700.642663][ T7909] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 700.862098][ T7909] usb 3-1: Using ep0 maxpacket: 32 [ 700.871357][ T7909] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 700.924235][ T7909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 700.958128][ T7909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 700.979505][ T7909] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 700.988568][ T7909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.050047][ T7909] usb 3-1: config 0 descriptor?? [ 701.077289][T11343] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 701.086929][ T7909] hub 3-1:0.0: USB hub found [ 701.398095][ T7909] hub 3-1:0.0: 2 ports detected [ 701.871897][ T7909] hub 3-1:0.0: set hub depth failed [ 701.892839][ T7909] usb 3-1: USB disconnect, device number 24 [ 703.652650][T11364] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1349'. [ 703.682597][T11364] unsupported nlmsg_type 40 [ 705.010625][ T7909] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 705.171940][ T7909] usb 4-1: Using ep0 maxpacket: 8 [ 705.191101][ T7909] usb 4-1: config 0 has an invalid interface number: 124 but max is 0 [ 705.201986][ T7909] usb 4-1: config 0 has no interface number 0 [ 705.238403][ T7909] usb 4-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01 [ 705.247771][ T7909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.255986][ T7909] usb 4-1: Product: syz [ 705.260361][ T7909] usb 4-1: Manufacturer: syz [ 705.265009][ T7909] usb 4-1: SerialNumber: syz [ 705.288208][ T7909] usb 4-1: config 0 descriptor?? [ 705.584150][ T121] usb 4-1: USB disconnect, device number 16 [ 705.822907][T11376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1352'. [ 706.256352][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 706.265500][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 706.489781][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 706.501926][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 706.518442][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 706.537390][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 706.551693][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 706.866325][T11389] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 706.948326][ T55] block nbd0: Possible stuck request ffff888025650000: control (read@0,1024B). Runtime 90 seconds [ 706.965406][ T55] block nbd0: Possible stuck request ffff8880256501c0: control (read@1024,1024B). Runtime 90 seconds [ 706.978487][ T55] block nbd0: Possible stuck request ffff888025650380: control (read@2048,1024B). Runtime 90 seconds [ 707.041120][ T55] block nbd0: Possible stuck request ffff888025650540: control (read@3072,1024B). Runtime 90 seconds [ 707.814575][T11406] netlink: 'syz.3.1361': attribute type 1 has an invalid length. [ 707.825176][T11406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1361'. [ 707.944621][ T5912] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 708.238798][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 708.256590][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 708.280009][T11380] chnl_net:caif_netlink_parms(): no params data found [ 708.301628][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 708.332143][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 708.374565][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 708.428850][ T5912] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 708.449521][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.511548][ T5912] usb 2-1: Product: syz [ 708.523988][ T5912] usb 2-1: Manufacturer: syz [ 708.546351][ T5912] usb 2-1: SerialNumber: syz [ 708.597265][ T5912] usb 2-1: config 0 descriptor?? [ 708.730598][ T5840] Bluetooth: hci5: command tx timeout [ 708.837859][ T5912] appledisplay 2-1:0.0: Error while getting initial brightness: -71 [ 708.860354][ T5912] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71 [ 708.928650][ T5912] usb 2-1: USB disconnect, device number 24 [ 709.032942][T11380] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.090744][T11380] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.108856][T11380] bridge_slave_0: entered allmulticast mode [ 709.130117][T11380] bridge_slave_0: entered promiscuous mode [ 709.153116][T11380] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.182038][T11380] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.199037][T11380] bridge_slave_1: entered allmulticast mode [ 709.382780][T11380] bridge_slave_1: entered promiscuous mode [ 709.739289][T11380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.910732][T11380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.246725][T11434] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 710.695655][T11380] team0: Port device team_slave_0 added [ 710.955431][ T5840] Bluetooth: hci5: command tx timeout [ 711.374037][T11454] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1373'. [ 711.394944][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1373'. [ 711.432899][T11454] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1373'. [ 711.566946][T11454] netlink: 'syz.2.1373': attribute type 3 has an invalid length. [ 711.589531][T11454] netlink: 'syz.2.1373': attribute type 2 has an invalid length. [ 711.601191][T11454] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1373'. [ 713.180103][ T5840] Bluetooth: hci5: command tx timeout [ 714.195558][T11486] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1383'. [ 715.401348][ T5840] Bluetooth: hci5: command tx timeout [ 715.646561][T11380] team0: Port device team_slave_1 added [ 715.710530][T11485] IPVS: Error connecting to the multicast addr [ 716.018561][T11380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.042799][T11380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.117425][T11380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.144988][T11380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.157659][T11380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.269133][T11380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.406375][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 717.005614][ T30] audit: type=1326 audit(1752004150.938:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11506 comm="syz.2.1390" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f311bf8e929 code=0x0 [ 717.160690][T11380] hsr_slave_0: entered promiscuous mode [ 717.193530][T11380] hsr_slave_1: entered promiscuous mode [ 717.226250][T11380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 717.250584][T11380] Cannot create hsr debugfs directory [ 717.267137][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 717.275606][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 717.285230][ T9] usb 4-1: config 4 interface 0 has no altsetting 0 [ 717.295184][ T9] usb 4-1: string descriptor 0 read error: -22 [ 717.301551][ T9] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 717.323896][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.432901][ T9] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 717.509746][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 717.538847][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 717.556792][ T9] usb 4-1: media controller created [ 717.607941][T11505] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 717.639433][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 717.730925][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 717.877896][ T9] usb 4-1: USB disconnect, device number 17 [ 718.231570][T11380] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 718.261539][T11380] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 718.298015][T11380] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 718.362978][T11380] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 718.708206][T11380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.776391][T11380] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.882080][ T6791] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.889410][ T6791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.945253][ T6791] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.952651][ T6791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.414492][T11548] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1400'. [ 719.722583][T11553] IPVS: Unknown mcast interface: vcan0 [ 720.109756][T11567] fuse: Bad value for 'fd' [ 720.167913][T11569] netlink: 'syz.6.1403': attribute type 10 has an invalid length. [ 720.211982][ T5912] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 720.224630][T11569] bridge0: port 3(team0) entered blocking state [ 720.240821][T11569] bridge0: port 3(team0) entered disabled state [ 720.258654][T11569] team0: entered allmulticast mode [ 720.269251][T11569] team_slave_0: entered allmulticast mode [ 720.288503][T11569] team_slave_1: entered allmulticast mode [ 720.313317][T11569] team0: entered promiscuous mode [ 720.340079][T11569] team_slave_0: entered promiscuous mode [ 720.346164][T11569] team_slave_1: entered promiscuous mode [ 720.359582][T11569] bridge0: port 3(team0) entered blocking state [ 720.367323][T11569] bridge0: port 3(team0) entered listening state [ 720.399388][ T5912] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 720.424463][ T5912] usb 2-1: config 0 has no interface number 0 [ 720.452912][ T5912] usb 2-1: config 0 interface 41 has no altsetting 0 [ 720.559556][ T5912] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 720.575490][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.594387][ T5912] usb 2-1: Product: syz [ 720.605163][ T5912] usb 2-1: Manufacturer: syz [ 720.609968][ T5912] usb 2-1: SerialNumber: syz [ 720.770208][ T5912] usb 2-1: config 0 descriptor?? [ 720.826480][T11380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.709618][ T5912] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 722.156838][T11380] veth0_vlan: entered promiscuous mode [ 722.231871][T11380] veth1_vlan: entered promiscuous mode [ 722.278220][T11605] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1415'. [ 722.288176][T11605] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1415'. [ 722.321978][T11605] ip6gretap0: entered promiscuous mode [ 722.338876][T11605] syz_tun: entered promiscuous mode [ 722.570770][T11380] veth0_macvtap: entered promiscuous mode [ 722.620023][T11380] veth1_macvtap: entered promiscuous mode [ 722.753158][T11380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.785191][T11380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.833080][T11380] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.853595][T11380] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.882434][T11380] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.906068][T11380] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.068397][ T5912] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 723.098933][ T5912] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 723.147399][ T5912] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 723.191594][ T5912] usb 2-1: USB disconnect, device number 25 [ 723.267428][ T6149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.356746][ T6149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.407557][T11611] kvm: pic: level sensitive irq not supported [ 723.407818][T11611] kvm: pic: non byte read [ 723.456138][T11611] kvm: pic: level sensitive irq not supported [ 723.456542][T11611] kvm: pic: non byte read [ 723.494350][T11611] kvm: pic: level sensitive irq not supported [ 723.494463][T11611] kvm: pic: non byte read [ 723.498252][ T6149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.531383][T11611] kvm: pic: level sensitive irq not supported [ 723.531602][T11611] kvm: pic: non byte read [ 723.575574][ T6149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.582996][T11611] kvm: pic: level sensitive irq not supported [ 723.587596][T11611] kvm: pic: non byte read [ 723.620392][T11611] kvm: pic: level sensitive irq not supported [ 723.620528][T11611] kvm: pic: non byte read [ 723.674148][T11611] kvm: pic: level sensitive irq not supported [ 723.674267][T11611] kvm: pic: non byte read [ 723.734183][T11611] kvm: pic: level sensitive irq not supported [ 723.734465][T11611] kvm: pic: non byte read [ 727.094098][T11649] JFS: charset not found [ 728.702496][T11669] netlink: 'syz.1.1435': attribute type 10 has an invalid length. [ 728.720536][T11669] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.735412][T11673] netlink: 'syz.2.1436': attribute type 20 has an invalid length. [ 728.813624][T11669] team_slave_0: entered promiscuous mode [ 728.819964][T11669] team_slave_1: entered promiscuous mode [ 728.875501][T11669] bond0: (slave team0): Enslaving as an active interface with an up link [ 729.061239][T11684] @: renamed from vlan0 (while UP) [ 729.542069][T11697] netlink: 'syz.7.1446': attribute type 1 has an invalid length. [ 729.562247][T11697] vlan2: entered allmulticast mode [ 729.568761][T11697] veth1: entered allmulticast mode [ 729.605895][T11697] team0: Port device vlan2 added [ 729.611375][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 729.790701][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 729.807582][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 729.846588][ T10] usb 4-1: config 179 has no interface number 0 [ 730.020191][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 730.796039][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 730.843751][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 730.879254][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 730.909649][ T30] audit: type=1326 audit(1752004163.950:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ee18e929 code=0x7ffc0000 [ 730.932977][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 731.008771][ T30] audit: type=1326 audit(1752004163.978:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ee18e929 code=0x7ffc0000 [ 731.096667][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 731.198122][T11711] block nbd1: NBD_DISCONNECT [ 731.247067][ T30] audit: type=1326 audit(1752004164.071:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4ee18d290 code=0x7ffc0000 [ 731.447632][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.459794][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1449'. [ 731.479957][ T30] audit: type=1326 audit(1752004164.071:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd4ee190157 code=0x7ffc0000 [ 731.521679][T11694] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 731.583453][ T30] audit: type=1326 audit(1752004164.146:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4ee18e929 code=0x7ffc0000 [ 731.715002][ T30] audit: type=1326 audit(1752004164.156:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd4ee190157 code=0x7ffc0000 [ 731.981383][ T30] audit: type=1326 audit(1752004164.156:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd4ee18d58a code=0x7ffc0000 [ 732.217884][ T30] audit: type=1326 audit(1752004164.156:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ee18e929 code=0x7ffc0000 [ 732.352611][ T5834] usb 4-1: USB disconnect, device number 18 [ 732.352640][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 732.367910][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 732.482615][ T30] audit: type=1326 audit(1752004164.156:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ee18e929 code=0x7ffc0000 [ 732.514112][ T30] audit: type=1326 audit(1752004164.474:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.6.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4ee18e929 code=0x7ffc0000 [ 734.933675][T11758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1463'. [ 735.033020][T11760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.043793][ T7909] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 735.102107][T11763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'. [ 735.131835][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1465'. [ 735.140379][T11761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.188358][T11760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.240120][ T7909] usb 4-1: Using ep0 maxpacket: 16 [ 735.256300][ T7909] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 735.286079][ T7909] usb 4-1: config 0 has no interface number 0 [ 735.292636][ T7909] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 735.310175][ T7909] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 735.321134][ T7909] usb 4-1: config 0 interface 41 has no altsetting 0 [ 735.330957][ T7909] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 735.341053][ T7909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.349179][ T7909] usb 4-1: Product: syz [ 735.358691][ T7909] usb 4-1: Manufacturer: syz [ 735.382181][ T7909] usb 4-1: SerialNumber: syz [ 735.399972][ T7909] usb 4-1: config 0 descriptor?? [ 735.420907][T11756] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 735.431076][T11756] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 735.722786][T11756] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 735.801538][T11756] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 736.426366][T11779] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 736.630223][ T7909] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 736.692334][ T5931] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 736.869734][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 736.895197][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 736.946294][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 736.957339][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 736.976608][ T5931] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 736.989980][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.015366][ T5931] usb 2-1: config 0 descriptor?? [ 737.611162][ T5931] plantronics 0003:047F:FFFF.0011: ignoring exceeding usage max [ 737.667391][ T5931] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 738.025863][ T7909] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 738.048779][ T7909] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 738.076249][ T7909] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 738.103318][ T7909] usb 4-1: USB disconnect, device number 19 [ 738.318101][T11809] syzkaller0: entered allmulticast mode [ 739.722953][ T7943] block nbd0: Possible stuck request ffff888025650000: control (read@0,1024B). Runtime 120 seconds [ 739.738272][ T7943] block nbd0: Possible stuck request ffff8880256501c0: control (read@1024,1024B). Runtime 120 seconds [ 739.750368][ T7943] block nbd0: Possible stuck request ffff888025650380: control (read@2048,1024B). Runtime 120 seconds [ 739.761769][ T7943] block nbd0: Possible stuck request ffff888025650540: control (read@3072,1024B). Runtime 120 seconds [ 739.810052][ T5840] Bluetooth: Unexpected continuation frame (len 69) [ 740.394023][ T5912] usb 2-1: USB disconnect, device number 26 [ 741.080485][T11837] overlayfs: statfs failed on './file0' [ 741.540665][T11848] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1496'. [ 741.549659][T11848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1496'. [ 742.183974][T11848] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1496'. [ 744.818282][T11882] netlink: 'syz.6.1506': attribute type 1 has an invalid length. [ 744.899868][T11882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 745.024902][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 745.871305][T11886] bond1: (slave gretap1): making interface the new active one [ 745.902814][T11886] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 746.007976][T11889] overlayfs: failed to clone upperpath [ 746.021591][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 746.032640][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 746.115214][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 746.163073][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 746.179366][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 746.217270][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 746.227005][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 746.243508][ T10] usb 4-1: Product: syz [ 746.383184][ T10] usb 4-1: Manufacturer: syz [ 746.555778][T11898] overlayfs: failed to clone upperpath [ 746.631464][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 746.639671][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 746.658369][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 746.674231][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 747.097589][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 747.102336][ T10] usb 4-1: USB disconnect, device number 20 [ 747.104231][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 747.104252][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 747.125728][T11905] cdc_wdm 4-1:1.0: Tx URB error: -19 [ 748.031798][ T10] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 748.083674][ T10] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 748.307922][ T78] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 748.447701][ T6302] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 748.563980][ T6801] wlan1: authentication with 08:02:11:00:00:00 timed out [ 751.374907][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 751.394372][ T30] audit: type=1800 audit(1752004183.097:144): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1533" name="SYSV798dd818" dev="tmpfs" ino=0 res=0 errno=0 [ 751.402663][T11957] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 752.778542][ C1] bridge0: port 3(team0) entered learning state [ 754.282988][ T6227] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 754.454280][ T6227] usb 4-1: Using ep0 maxpacket: 32 [ 754.461149][ T6227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.485162][ T6227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.505033][ T6227] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 754.522237][ T6227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.544463][ T6227] usb 4-1: config 0 descriptor?? [ 754.558640][ T6227] hub 4-1:0.0: USB hub found [ 754.844874][ T6227] hub 4-1:0.0: 1 port detected [ 755.815811][T12003] netlink: 'syz.7.1546': attribute type 7 has an invalid length. [ 755.839717][T12003] netlink: 'syz.7.1546': attribute type 8 has an invalid length. [ 755.949464][ T6227] hub 4-1:0.0: activate --> -90 [ 755.988627][ T30] audit: type=1800 audit(1752004187.410:145): pid=12008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1549" name="SYSV798dd82c" dev="tmpfs" ino=0 res=0 errno=0 [ 756.213136][ T121] usb 4-1: USB disconnect, device number 21 [ 756.213548][ T6227] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 758.582891][T12035] netlink: 'syz.3.1558': attribute type 10 has an invalid length. [ 758.712428][T12035] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 760.045239][ T121] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 760.113041][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1564'. [ 760.478355][ T121] usb 2-1: Using ep0 maxpacket: 32 [ 760.502034][ T121] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 760.518801][ T121] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 760.566699][ T121] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 760.617843][ T121] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 760.675601][ T121] usb 2-1: config 0 interface 0 has no altsetting 0 [ 760.716710][ T121] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 760.758720][ T121] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 760.787802][ T121] usb 2-1: Product: syz [ 760.801385][ T121] usb 2-1: Manufacturer: syz [ 760.832925][ T121] usb 2-1: SerialNumber: syz [ 760.867384][ T121] usb 2-1: config 0 descriptor?? [ 760.892906][ T121] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 760.950457][ T121] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 761.184060][T12065] syz_tun: entered allmulticast mode [ 761.202893][ T7909] usb 2-1: USB disconnect, device number 27 [ 761.216119][ T7909] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 761.336958][ T121] syz_tun: left allmulticast mode [ 763.699134][ T5840] Bluetooth: hci5: link tx timeout [ 763.704826][ T5840] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 763.725540][ T5840] Bluetooth: hci5: link tx timeout [ 763.730731][ T5840] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 763.739330][ T5840] Bluetooth: hci5: link tx timeout [ 763.744827][ T5840] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 763.776258][ T5840] Bluetooth: hci5: link tx timeout [ 763.781437][ T5840] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 763.789519][ T5840] Bluetooth: hci5: link tx timeout [ 763.794660][ T5840] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 764.305716][T12111] tipc: Started in network mode [ 764.315897][T12111] tipc: Node identity 460af3f464a, cluster identity 4711 [ 764.327888][T12111] tipc: Enabled bearer , priority 0 [ 764.341602][T12111] syzkaller0: entered promiscuous mode [ 764.347641][T12111] syzkaller0: entered allmulticast mode [ 764.376983][T12111] tipc: Resetting bearer [ 764.385158][T12108] tipc: Resetting bearer [ 764.413124][T12108] tipc: Disabling bearer [ 764.683038][ T30] audit: type=1800 audit(1752004195.548:146): pid=12121 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1585" name="/" dev="9p" ino=524290 res=0 errno=0 [ 765.862403][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 767.017477][T12149] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1596'. [ 769.709477][T12153] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 769.717882][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 770.017757][T12153] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 770.041068][T12153] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 770.060623][T12153] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 770.113874][T12153] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 770.132634][T12153] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 770.140626][T12153] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 771.052140][T12185] kvm: pic: single mode not supported [ 772.060704][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 772.060775][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 772.063829][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 772.215250][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 772.256003][ T7943] block nbd0: Possible stuck request ffff888025650000: control (read@0,1024B). Runtime 150 seconds [ 772.268226][ T7943] block nbd0: Possible stuck request ffff8880256501c0: control (read@1024,1024B). Runtime 150 seconds [ 772.279796][ T7943] block nbd0: Possible stuck request ffff888025650380: control (read@2048,1024B). Runtime 150 seconds [ 772.290972][ T7943] block nbd0: Possible stuck request ffff888025650540: control (read@3072,1024B). Runtime 150 seconds [ 772.296747][ T5846] Bluetooth: hci5: command 0x0406 tx timeout [ 773.340098][ T5912] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 773.597712][ T5912] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 773.792168][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.811662][ T5912] usb 4-1: Product: syz [ 773.944026][ T5912] usb 4-1: Manufacturer: syz [ 773.948681][ T5912] usb 4-1: SerialNumber: syz [ 773.957282][ T5912] usb 4-1: config 0 descriptor?? [ 773.966653][ T5912] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 774.183514][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 774.403149][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 774.413421][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 774.569886][ T10] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 774.584843][ T5846] Bluetooth: hci5: command 0x0406 tx timeout [ 774.628341][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.841265][ T10] usb 2-1: config 0 has no interface number 0 [ 774.862472][ T10] usb 2-1: config 0 interface 239 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 775.365600][ T5912] gspca_sonixj: reg_r err -110 [ 775.463080][ T10] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 775.475159][ T5912] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 775.493234][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.501444][ T10] usb 2-1: Product: syz [ 775.525519][ T10] usb 2-1: Manufacturer: syz [ 775.531921][ T10] usb 2-1: SerialNumber: syz [ 775.543751][ T10] usb 2-1: config 0 descriptor?? [ 775.767807][T12239] hsr0: entered promiscuous mode [ 775.774216][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 775.777069][T12239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1623'. [ 775.798885][T12239] hsr_slave_0: left promiscuous mode [ 775.814503][T12239] hsr_slave_1: left promiscuous mode [ 775.853062][T12239] hsr0 (unregistering): left promiscuous mode [ 775.955278][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 775.992492][ T9] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 776.004553][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.015878][ T9] usb 7-1: config 0 has no interface number 0 [ 776.025052][ T9] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 776.241671][ T9] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 776.255669][ T9] usb 7-1: config 0 interface 52 has no altsetting 0 [ 776.268651][ T9] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 776.278273][ T9] usb 7-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 776.286793][ T9] usb 7-1: Manufacturer: syz [ 776.303264][ T9] usb 7-1: config 0 descriptor?? [ 776.545011][ T9] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.52/input/input27 [ 776.641937][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 776.737520][ T10] ath6kl: Failed to submit usb control message: -110 [ 776.756416][ T10] ath6kl: unable to send the bmi data to the device: -110 [ 776.778279][ T10] ath6kl: Unable to send get target info: -110 [ 776.808263][ T10] ath6kl: Failed to init ath6kl core: -110 [ 776.821073][ T10] ath6kl_usb 2-1:0.239: probe with driver ath6kl_usb failed with error -110 [ 776.822949][ T7909] usb 7-1: USB disconnect, device number 14 [ 776.829957][ C0] synaptics_usb 7-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 776.966276][ T5912] usb 4-1: USB disconnect, device number 22 [ 777.108562][ T10] usb 2-1: USB disconnect, device number 28 [ 777.326124][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1629'. [ 777.449526][ T5912] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 777.675572][ T5912] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 777.707790][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.749330][ T5912] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 777.793733][ T5912] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 777.829234][ T5912] usb 4-1: Manufacturer: syz [ 778.578767][ T5912] usb 4-1: config 0 descriptor?? [ 778.924966][ T5912] rc_core: IR keymap rc-hauppauge not found [ 778.931300][ T5912] Registered IR keymap rc-empty [ 778.959382][ T5912] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 778.990125][ T5912] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input28 [ 779.320786][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 781.009251][ T10] usb 4-1: USB disconnect, device number 23 [ 782.317147][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'. [ 782.565903][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1640'. [ 783.009677][T12302] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 784.933130][ C1] bridge0: port 3(team0) entered forwarding state [ 784.939663][ C1] bridge0: topology change detected, propagating [ 786.601280][T12329] IPVS: Error connecting to the multicast addr [ 787.712876][T12337] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1648'. [ 789.103664][ T30] audit: type=1326 audit(1752004218.390:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12348 comm="syz.2.1656" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f311bf8e929 code=0x0 [ 789.228085][T12352] binder: 12350:12352 ioctl c0306201 200000000640 returned -22 [ 795.123451][ T5208] udevd[5208]: worker [8944] /devices/virtual/block/nbd0 is taking a long time [ 795.724161][T12372] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608) [ 795.734861][T12372] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 805.091874][ T5208] udevd[5208]: worker [8944] /devices/virtual/block/nbd0 timeout; kill it [ 805.147527][ T5208] udevd[5208]: seq 14359 '/devices/virtual/block/nbd0' killed [ 805.382849][ T7943] block nbd0: Possible stuck request ffff888025650000: control (read@0,1024B). Runtime 180 seconds [ 805.394363][ T7943] block nbd0: Possible stuck request ffff8880256501c0: control (read@1024,1024B). Runtime 180 seconds [ 805.405687][ T7943] block nbd0: Possible stuck request ffff888025650380: control (read@2048,1024B). Runtime 180 seconds [ 805.417309][ T7943] block nbd0: Possible stuck request ffff888025650540: control (read@3072,1024B). Runtime 180 seconds [ 807.347918][T12479] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 807.356399][T12479] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 812.083634][T12510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1701'. [ 812.092866][T12510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1701'. [ 812.227101][T12510] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 812.339768][T12510] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 814.193230][ T6227] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 814.719436][ T6227] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 814.719464][ T6227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.719483][ T6227] usb 4-1: Product: syz [ 814.719496][ T6227] usb 4-1: Manufacturer: syz [ 814.719510][ T6227] usb 4-1: SerialNumber: syz [ 814.725885][ T6227] usb 4-1: config 0 descriptor?? [ 814.748065][ T6227] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 814.748128][ T6227] usb 4-1: setting power ON [ 814.748602][ T6227] dvb-usb: bulk message failed: -22 (2/0) [ 814.797780][T12532] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 814.799724][T12532] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 814.914074][T12532] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 814.918254][T12532] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 814.920910][ T6227] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 814.936473][T12532] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 814.985762][ T6227] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 814.986772][ T6227] dvb_usb_cxusb 4-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 816.797652][ T10] usb 4-1: USB disconnect, device number 24 [ 817.024672][T12554] overlayfs: failed to clone upperpath [ 817.053611][T12529] chnl_net:caif_netlink_parms(): no params data found [ 817.175920][ T5846] Bluetooth: hci6: command tx timeout [ 817.989502][T12566] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 818.312954][T12529] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.348190][T12529] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.358412][T12529] bridge_slave_0: entered allmulticast mode [ 818.369868][T12529] bridge_slave_0: entered promiscuous mode [ 818.414838][T12529] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.422845][T12529] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.434286][T12529] bridge_slave_1: entered allmulticast mode [ 818.443957][T12529] bridge_slave_1: entered promiscuous mode [ 818.588430][T12529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.637917][T12529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.262696][T12529] team0: Port device team_slave_0 added [ 819.290452][T12572] syzkaller0: entered promiscuous mode [ 819.298586][T12572] syzkaller0: entered allmulticast mode [ 819.310977][T12529] team0: Port device team_slave_1 added [ 819.344151][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1720'. [ 819.386664][T12570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 819.400073][ T5846] Bluetooth: hci6: command tx timeout [ 819.439576][T12570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.542988][T12584] tipc: Enabled bearer , priority 0 [ 819.589902][T12529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.597398][T12529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.632711][T12529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.665494][T12529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.679529][T12529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.705532][ C0] vkms_vblank_simulate: vblank timer overrun [ 819.726700][T12529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.743579][T12581] syzkaller0: entered promiscuous mode [ 819.749067][T12581] syzkaller0: entered allmulticast mode [ 819.990030][T12590] tipc: Resetting bearer [ 819.999029][T12594] netlink: zone id is out of range [ 820.101677][T12594] netlink: set zone limit has 4 unknown bytes [ 820.932638][ T121] tipc: Node number set to 581628916 [ 821.013993][T12580] tipc: Resetting bearer [ 821.066056][T12580] tipc: Disabling bearer [ 821.108802][T12529] hsr_slave_0: entered promiscuous mode [ 821.199685][T12529] hsr_slave_1: entered promiscuous mode [ 821.206953][T12529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 821.227583][T12529] Cannot create hsr debugfs directory [ 821.553372][T12603] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 821.630656][ T5846] Bluetooth: hci6: command tx timeout [ 822.558687][T12613] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1729'. [ 822.725972][T12606] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 823.819570][T12529] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 823.849063][ T5846] Bluetooth: hci6: command tx timeout [ 823.880957][T12529] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 823.928333][T12529] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 823.969246][T12529] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 824.845606][T12647] bio_check_eod: 2 callbacks suppressed [ 824.845650][T12647] syz.6.1735: attempt to access beyond end of device [ 824.845650][T12647] nbd6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 824.867331][T12647] gfs2: error -5 reading superblock [ 826.507062][T12529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.805722][T12529] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.549756][T12666] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 827.567587][T12666] Error validating options; rc = [-22] [ 827.970809][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.978403][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.048895][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.056320][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.938814][T12529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.523608][T12529] veth0_vlan: entered promiscuous mode [ 830.650677][T12529] veth1_vlan: entered promiscuous mode [ 830.798346][T12529] veth0_macvtap: entered promiscuous mode [ 830.826304][T12529] veth1_macvtap: entered promiscuous mode [ 830.887380][T12529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.070483][T12529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.797950][T12529] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.807104][T12529] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.828786][T12529] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.905126][T12529] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.041610][T12706] syz_tun: entered allmulticast mode [ 832.070793][T12701] syz_tun: left allmulticast mode [ 834.284177][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.328662][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.751664][T12732] syz.6.1754: attempt to access beyond end of device [ 834.751664][T12732] nbd6: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 834.765787][T12732] EXT4-fs (nbd6): unable to read superblock [ 835.507879][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.555185][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.634469][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1760'. [ 837.638054][ T7943] block nbd0: Possible stuck request ffff888025650000: control (read@0,1024B). Runtime 210 seconds [ 837.654995][ T7943] block nbd0: Possible stuck request ffff8880256501c0: control (read@1024,1024B). Runtime 210 seconds [ 837.666740][ T7943] block nbd0: Possible stuck request ffff888025650380: control (read@2048,1024B). Runtime 210 seconds [ 837.678913][ T7943] block nbd0: Possible stuck request ffff888025650540: control (read@3072,1024B). Runtime 210 seconds [ 837.690685][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 837.698172][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 837.796936][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1760'. [ 847.394465][T12820] tipc: Enabled bearer , priority 0 [ 847.409680][T12820] syzkaller0: entered promiscuous mode [ 847.480041][T12820] syzkaller0: entered allmulticast mode [ 848.328766][T12820] tipc: Resetting bearer [ 848.457734][T12819] tipc: Resetting bearer [ 848.566163][ T31] INFO: task syz.0.1280:11159 blocked for more than 143 seconds. [ 848.587217][T12830] netlink: 'syz.6.1782': attribute type 1 has an invalid length. [ 848.596568][T12819] tipc: Disabling bearer [ 848.598265][ T31] Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 848.626207][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 848.651777][ T31] task:syz.0.1280 state:D stack:26952 pid:11159 tgid:11157 ppid:5837 task_flags:0x400140 flags:0x00004004 [ 848.803337][ T31] Call Trace: [ 848.806738][ T31] [ 848.820246][ T31] __schedule+0x16a2/0x4cb0 [ 848.824907][ T31] ? __lock_acquire+0xa01/0xd20 [ 848.829868][ T31] ? schedule+0x165/0x360 [ 849.435581][ T31] ? __pfx___schedule+0x10/0x10 [ 849.440699][ T31] ? schedule+0x91/0x360 [ 849.445054][ T31] schedule+0x165/0x360 [ 849.449945][ T31] schedule_preempt_disabled+0x13/0x30 [ 849.489564][ T31] __mutex_lock+0x724/0xe80 [ 849.607209][ T31] ? __mutex_lock+0x51b/0xe80 [ 849.617139][ T31] ? sync_bdevs+0x1ac/0x340 [ 849.621838][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 849.626946][ T31] ? iput+0x398/0x9d0 [ 849.631020][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 849.636390][ T31] sync_bdevs+0x1ac/0x340 [ 849.640817][ T31] ksys_sync+0xb9/0x150 [ 849.647245][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 849.652102][ T31] ? rcu_is_watching+0x15/0xb0 [ 849.664521][ T31] ? do_syscall_64+0xbe/0x3b0 [ 849.669882][ T31] __ia32_sys_sync+0xe/0x20 [ 849.674458][ T31] do_syscall_64+0xfa/0x3b0 [ 849.718021][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 849.726046][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.732401][ T31] ? clear_bhb_loop+0x60/0xb0 [ 849.741905][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.758697][ T31] RIP: 0033:0x7fac7978e929 [ 849.769846][ T31] RSP: 002b:00007fac7a573038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 849.793041][ T31] RAX: ffffffffffffffda RBX: 00007fac799b5fa0 RCX: 00007fac7978e929 [ 849.801066][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 849.809324][ T31] RBP: 00007fac799b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 849.817724][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.831561][ T31] R13: 0000000000000000 R14: 00007fac799b5fa0 R15: 00007fff04b16d98 [ 849.840858][ T31] [ 849.844019][ T31] [ 849.844019][ T31] Showing all locks held in the system: [ 849.860002][ T31] 2 locks held by ksoftirqd/1/23: [ 849.903963][ T31] #0: ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 849.931854][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x318/0x6d0 [ 849.974565][ T31] 1 lock held by khungtaskd/31: [ 849.979488][ T31] #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 850.017484][ T31] 2 locks held by getty/5601: [ 850.022223][ T31] #0: ffff8880344ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 850.060416][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 850.081450][ T31] 3 locks held by kworker/1:6/6227: [ 850.086693][ T31] 3 locks held by kworker/u8:17/6795: [ 850.103397][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 850.124211][ T31] #1: ffffc9001c32fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 850.154671][ T31] #2: ffffffff8f50b508 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 850.178370][ T31] 3 locks held by kworker/u8:22/6801: [ 850.183788][ T31] #0: ffff888030311948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 850.216575][ T31] #1: ffffc9001c40fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 850.252691][ T31] #2: ffffffff8f50b508 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 850.270363][ T31] 1 lock held by udevd/8944: [ 850.278159][ T31] #0: ffff8880255b7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 850.287527][ T31] 1 lock held by syz.0.1280/11159: [ 850.292800][ T31] #0: ffff8880255b7358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 850.302483][ T31] 1 lock held by syz-executor/11380: [ 850.308007][ T31] 1 lock held by syz.1.1665/12387: [ 850.313157][ T31] #0: ffff888053e72428 (sb_writers#3){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160 [ 850.323128][ T31] 1 lock held by syz.2.1733/12633: [ 850.328307][ T31] #0: ffffffff8f50b508 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 850.337454][ T31] 3 locks held by kworker/0:3/12715: [ 850.343299][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 850.354455][ T31] #1: ffffc90002ed7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 850.365407][ T31] #2: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 850.376896][ T31] 1 lock held by syz.3.1779/12819: [ 850.382175][ T31] #0: ffffffff8f50b508 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 850.391205][ T31] 2 locks held by syz.6.1782/12830: [ 850.396662][ T31] #0: ffffffff8fa0fcc8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 850.407839][ T31] #1: ffffffff8f50b508 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 850.417068][ T31] 2 locks held by syz.6.1782/12833: [ 850.422291][ T31] #0: ffffffff8fa29900 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 850.432555][ T31] #1: ffffffff8f50b508 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 850.442187][ T31] 1 lock held by syz.6.1782/12834: [ 850.447802][ T31] #0: ffffffff8f50b508 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 850.457367][ T31] 2 locks held by syz.6.1782/12838: [ 850.462580][ T31] #0: ffffffff8ec92a60 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 850.472220][ T31] #1: ffffffff8f50b508 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 850.483115][ T31] 1 lock held by syz.8.1783/12832: [ 850.488633][ T31] #0: ffffffff8f50b508 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 850.498407][ T31] [ 850.500783][ T31] ============================================= [ 850.500783][ T31] [ 850.511947][ T31] NMI backtrace for cpu 1 [ 850.511967][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 850.511989][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 850.512000][ T31] Call Trace: [ 850.512007][ T31] [ 850.512015][ T31] dump_stack_lvl+0x189/0x250 [ 850.512058][ T31] ? __wake_up_klogd+0xd9/0x110 [ 850.512113][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 850.512136][ T31] ? __pfx__printk+0x10/0x10 [ 850.512174][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 850.512204][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 850.512226][ T31] ? _printk+0xcf/0x120 [ 850.512255][ T31] ? __pfx__printk+0x10/0x10 [ 850.512283][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 850.512320][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 850.512348][ T31] watchdog+0xfee/0x1030 [ 850.512379][ T31] ? watchdog+0x1de/0x1030 [ 850.512416][ T31] kthread+0x711/0x8a0 [ 850.512446][ T31] ? __pfx_watchdog+0x10/0x10 [ 850.512473][ T31] ? __pfx_kthread+0x10/0x10 [ 850.512501][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 850.512527][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 850.512555][ T31] ? __pfx_kthread+0x10/0x10 [ 850.512582][ T31] ret_from_fork+0x3f9/0x770 [ 850.512604][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 850.512630][ T31] ? __switch_to_asm+0x39/0x70 [ 850.512653][ T31] ? __switch_to_asm+0x33/0x70 [ 850.512675][ T31] ? __pfx_kthread+0x10/0x10 [ 850.512702][ T31] ret_from_fork_asm+0x1a/0x30 [ 850.512743][ T31] [ 850.512750][ T31] Sending NMI from CPU 1 to CPUs 0: [ 850.675491][ C0] NMI backtrace for cpu 0 [ 850.675507][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 850.675528][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 850.675539][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 850.675569][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 3d 20 00 f3 0f 1e fa fb f4 88 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 850.675585][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 850.675601][ C0] RAX: aba9b29663f29500 RBX: ffffffff81975b68 RCX: aba9b29663f29500 [ 850.675614][ C0] RDX: 0000000000000001 RSI: ffffffff8d984d62 RDI: ffffffff8be1ca40 [ 850.675626][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 850.675639][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa0c5f0 [ 850.675651][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 850.675663][ C0] FS: 0000000000000000(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 850.675677][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 850.675688][ C0] CR2: 00007f1050202f98 CR3: 000000003255e000 CR4: 00000000003526f0 [ 850.675704][ C0] Call Trace: [ 850.675710][ C0] [ 850.675716][ C0] default_idle+0x13/0x20 [ 850.675734][ C0] default_idle_call+0x74/0xb0 [ 850.675751][ C0] do_idle+0x1e8/0x510 [ 850.675770][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 850.675797][ C0] ? __pfx_do_idle+0x10/0x10 [ 850.675819][ C0] ? do_idle+0x10/0x510 [ 850.675839][ C0] cpu_startup_entry+0x44/0x60 [ 850.675858][ C0] rest_init+0x2de/0x300 [ 850.675876][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 850.675902][ C0] start_kernel+0x47d/0x500 [ 850.675933][ C0] x86_64_start_reservations+0x24/0x30 [ 850.675955][ C0] x86_64_start_kernel+0x143/0x1c0 [ 850.675976][ C0] common_startup_64+0x13e/0x147 [ 850.676016][ C0] [ 850.883602][T12830] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 850.891711][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 850.906860][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 850.918676][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 850.928742][ T31] Call Trace: [ 850.932068][ T31] [ 850.935026][ T31] dump_stack_lvl+0x99/0x250 [ 850.939652][ T31] ? __asan_memcpy+0x40/0x70 [ 850.944273][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 850.949490][ T31] ? __pfx__printk+0x10/0x10 [ 850.954123][ T31] panic+0x2db/0x790 [ 850.958042][ T31] ? __pfx_panic+0x10/0x10 [ 850.962488][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 850.968303][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 850.973686][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 850.979861][ T31] watchdog+0x102d/0x1030 [ 850.984218][ T31] ? watchdog+0x1de/0x1030 [ 850.988644][ T31] kthread+0x711/0x8a0 [ 850.992732][ T31] ? __pfx_watchdog+0x10/0x10 [ 850.997446][ T31] ? __pfx_kthread+0x10/0x10 [ 851.002070][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 851.007293][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 851.012502][ T31] ? __pfx_kthread+0x10/0x10 [ 851.017128][ T31] ret_from_fork+0x3f9/0x770 [ 851.021727][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 851.026857][ T31] ? __switch_to_asm+0x39/0x70 [ 851.031626][ T31] ? __switch_to_asm+0x33/0x70 [ 851.036402][ T31] ? __pfx_kthread+0x10/0x10 [ 851.041042][ T31] ret_from_fork_asm+0x1a/0x30 [ 851.045845][ T31] [ 851.049279][ T31] Kernel Offset: disabled [ 851.053605][ T31] Rebooting in 86400 seconds..