last executing test programs: 2m39.316417937s ago: executing program 0 (id=332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x1, 0xffffffff, 0x20, {0x60, 0x0, 0x0, 0x0, {}, {}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40040c0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) fanotify_init(0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000300)=0x8) 2m38.611348839s ago: executing program 0 (id=335): r0 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d72646d612c708472743d307830303030303030"]) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="54010000100001002bbd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="0000000008200200140003006e657464657673696d300000000000000c011680980001800c00070006000000030000000c000700bafbffff"], 0x154}}, 0x0) 2m36.68065981s ago: executing program 0 (id=337): socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}}, 0x0) 2m35.450952682s ago: executing program 0 (id=339): creat(&(0x7f0000000200)='./file0\x00', 0x3f) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000408010200000000000000000a0080592e39646d007608050003003a0000000600020500070000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x60003, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fstatfs(r1, &(0x7f0000000240)=""/207) 2m35.257886972s ago: executing program 0 (id=341): stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000680)) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYBLOB="01000000000000000000460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c00900000000000000000000c0090000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xa2, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527a006c3c002001000000000000000020"], 0x0) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, 0x0, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x1c}}, 0x20008060) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000004c0)={0x1, @raw_data="a425e2f1a54d24f15241313260608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e000000040002800800", @ANYRES64=r4], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 2m31.295611904s ago: executing program 0 (id=352): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x101, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x15, 0x0, "94ac873f1692ddbc702d69407eca10eedeb5dcd05446c2b07ec23159acd334e8058957bcee65a1721541ac7db2be2af67fd949859fc48a758e5d9ec2dc28f3fb330ea6b887a32239b1f039ba45bc1bc1"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3d, 0x0, "2e52f463273974700fa6345b251d8975a34ce626db167dbf6e168d9e14bf1a87e7d0c4f843ff6a8a6123980b1debd6932fac4bcaeba676b4b24488db18f9f12d733e613a3a1ff563aca36e8f20b950a7"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x19, 0x0, "41d2989d48db1764d991250db913d6dfbb2f5caa40b6ed2b6456aa8bb8a90f0c731f71573c64d277eeebae965ed6036a31420eb51c739e71e500c814c07f5659e1e1721bccc9b4894588115461cf0776"}, 0xd8) close(r3) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x1a0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_red={{0x8}, {0x16c, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x7, 0xf}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7}, @TCA_RED_MAX_P={0x8, 0x3, 0x5}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x4}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6c00}, @TCA_RED_PARMS={0x14, 0x1, {0xffffffff, 0x4, 0x4, 0xa, 0xa, 0xa}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x4}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x7}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}, @TCA_RATE={0x6}]}, 0x1a0}}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "08000054c1078500000000000000000000000000000000000000000000000010", 0x31384142}) unshare(0x60030700) 2m16.150926252s ago: executing program 32 (id=352): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x101, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x15, 0x0, "94ac873f1692ddbc702d69407eca10eedeb5dcd05446c2b07ec23159acd334e8058957bcee65a1721541ac7db2be2af67fd949859fc48a758e5d9ec2dc28f3fb330ea6b887a32239b1f039ba45bc1bc1"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3d, 0x0, "2e52f463273974700fa6345b251d8975a34ce626db167dbf6e168d9e14bf1a87e7d0c4f843ff6a8a6123980b1debd6932fac4bcaeba676b4b24488db18f9f12d733e613a3a1ff563aca36e8f20b950a7"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x19, 0x0, "41d2989d48db1764d991250db913d6dfbb2f5caa40b6ed2b6456aa8bb8a90f0c731f71573c64d277eeebae965ed6036a31420eb51c739e71e500c814c07f5659e1e1721bccc9b4894588115461cf0776"}, 0xd8) close(r3) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x1a0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_red={{0x8}, {0x16c, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x7, 0xf}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7}, @TCA_RED_MAX_P={0x8, 0x3, 0x5}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x4}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6c00}, @TCA_RED_PARMS={0x14, 0x1, {0xffffffff, 0x4, 0x4, 0xa, 0xa, 0xa}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x4}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x7}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}, @TCA_RATE={0x6}]}, 0x1a0}}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "08000054c1078500000000000000000000000000000000000000000000000010", 0x31384142}) unshare(0x60030700) 2m5.474338037s ago: executing program 3 (id=448): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000ffff000001"], 0x18, 0x404}, 0x0) 2m5.22983737s ago: executing program 3 (id=453): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x80}, 0x20) mount$9p_fd(0x0, 0x0, &(0x7f0000000400), 0x6, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d0007010000000000000000047c0000"], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x19, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 2m3.662379778s ago: executing program 3 (id=455): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x10000, 0x1, 0x1, 0x800, 0xee01, 0x0, 0x2000, '\x00', 0xffff, 0xffffffffffff8001, 0xb4e7, 0x2, {0x8003, 0x8}, {0x10000, 0x5}, {0x0, 0x9}, {0x200000008, 0xa00}, 0x7ffc, 0xa, 0x401, 0x6}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) 2m3.646082271s ago: executing program 1 (id=456): readlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="8f", 0x1, 0xfffffffffffffffe) r1 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r0}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={'nhpoly1305\x00'}}) 2m3.37200518s ago: executing program 3 (id=458): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa1) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x88, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69d403c0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a8d}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r3], 0x90}}, 0x0) 2m3.289912727s ago: executing program 1 (id=459): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getpgrp(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100000000da00000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300), 0x204000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="00a2637e4c9f46871603e8408d95b1fdbaf83a77a4fb07258a9b3312f6cb845eb51c8f44aa7369091d172d70ea503b1dcbb487529d204c497a465a4433", @ANYRES16=r1, @ANYBLOB="00032abd7000fbdbdf255500000008000100030000000c009900010000002a000000"], 0x28}}, 0x4004010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000380)={{0x3}}) r3 = getpid() writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c0001000a0c10000000000000000000", 0x58}], 0x1) sched_setscheduler(r3, 0x6, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000001000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="cc000000210001000000000004000000fc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000000000050001100ff0200000000010a0101000000000000000000000000000a010100000000000000000000000000000000060000000000000000000000003c000000000000000a000a002c0013007f000001000000000000000000000000e0000001000000000000000000000000000000000a00"/132], 0xcc}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100021040200"/20, @ANYRES32=r10, @ANYBLOB="f900000000000000240012800c0001006d6163766c616e00140002800800010010000000080003"], 0x4c}}, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001fffffff3000000000001"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) 1m58.735721573s ago: executing program 3 (id=467): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x10000, 0x1, 0x1, 0x800, 0xee01, 0x0, 0x2000, '\x00', 0xffff, 0xffffffffffff8001, 0xb4e7, 0x2, {0x8003, 0x8}, {0x10000, 0x5}, {0x0, 0x9}, {0x200000008, 0xa00}, 0x7ffc, 0xa, 0x401, 0x6}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) 1m58.069735367s ago: executing program 1 (id=470): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) r2 = socket$nl_crypto(0x10, 0x3, 0x15) recvmmsg(r2, &(0x7f0000000180)=[{{&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/236, 0xec}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/142, 0x8e}], 0x3}, 0x8}], 0x1, 0x0, &(0x7f0000000300)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000015000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0x8, 0x100000, 0x0, 0xffffffffffffffff, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x53, &(0x7f0000000180)=[@cr4={0x1, 0x140002}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f92d", 0x2}], 0x1}, 0x4000080) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000001780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)={0x54, 0xb, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m58.054464554s ago: executing program 3 (id=471): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x101, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x15, 0x0, "94ac873f1692ddbc702d69407eca10eedeb5dcd05446c2b07ec23159acd334e8058957bcee65a1721541ac7db2be2af67fd949859fc48a758e5d9ec2dc28f3fb330ea6b887a32239b1f039ba45bc1bc1"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3d, 0x0, "2e52f463273974700fa6345b251d8975a34ce626db167dbf6e168d9e14bf1a87e7d0c4f843ff6a8a6123980b1debd6932fac4bcaeba676b4b24488db18f9f12d733e613a3a1ff563aca36e8f20b950a7"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x19, 0x0, "41d2989d48db1764d991250db913d6dfbb2f5caa40b6ed2b6456aa8bb8a90f0c731f71573c64d277eeebae965ed6036a31420eb51c739e71e500c814c07f5659e1e1721bccc9b4894588115461cf0776"}, 0xd8) close(r3) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x1a0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_red={{0x8}, {0x16c, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x7, 0xf}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7}, @TCA_RED_MAX_P={0x8, 0x3, 0x5}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x4}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6c00}, @TCA_RED_PARMS={0x14, 0x1, {0xffffffff, 0x4, 0x4, 0xa, 0xa, 0xa}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x4}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x7}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}, @TCA_RATE={0x6}]}, 0x1a0}}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "08000054c1078500000000000000000000000000000000000000000000000010", 0x31384142}) unshare(0x60030700) 1m54.855736732s ago: executing program 1 (id=478): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2], 0x90}}, 0x0) 1m54.509053381s ago: executing program 1 (id=479): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x9, 0x800000000000, 0x0, 0x0, 0x10, 0x1d, "2401010000000000000d0ec0c1b4e9b1c4369d03740250ceaac500b1b3d741dd17c1c50d38ef2a565ef1e85c58d36500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d20000000100", "24431a1e58a68e174f0000000000ef8a07580000000000002000", [0x5]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000020601080000000000000000000000000d0003006c6973743a7365740000000005000500000000000500010007000000050004000000000009b2415f5842891ec1f6b4f1a9eedc9a63478a2c9080a2e5ff7509cf9a5a0ee123b710bf27937920164eea40d908661427a0b01aa4e50bf7444ae6e000"/134], 0x48}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000028c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000002c0)=[{{&(0x7f0000000580)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002800)=[{&(0x7f0000000240)=""/40, 0x28}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/82, 0x52}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/94, 0x5e}, {&(0x7f0000002700)=""/206, 0xce}], 0x6}, 0x6}], 0x1, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = gettid() clock_nanosleep(0xb, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) rt_sigqueueinfo(r7, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100), &(0x7f00000001c0)='./cgroup\x00', 0x9, 0x3) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x40, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x1, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44080}, 0x40002) 1m52.609029063s ago: executing program 1 (id=482): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e26, 0x3, 'dh\x00', 0x1, 0x7, 0x4b}, 0x2c) r5 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x10000}) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) setrlimit(0x2, &(0x7f0000000240)={0x5, 0x6}) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000300)="57f88e5e7d7ca8d453b6b27acebe9bff98297bcd068e797adb3faf5b66b7fe568270302a6ee18b0c6ed2634584390d278cf42cee51e755eb61e13a8f9dea51a85cbffe8b63d2e1", 0x47}, {&(0x7f0000000b00)="e46861eec8a17fdfc0b61f7f40773822ece7d655448e499b75dfc022319b86ecd93345fc92bb829c7b182f8b21c7abd8330b387122d22f2e2ef35ed2022ede2c01451dcfab122eff34d73651", 0x4c}, {&(0x7f0000000100)="53cf94cb0f5b6dbe7368c89d6fb3d293d10eacfd1d840727d493ecfb916f9963eee22a2ce2cad38d734fe9e65386e48274b309557290a901", 0x38}, {&(0x7f0000000b80)="291a9e7651f97291e799d43841445f37bfd9084d1200c8e8a6a2edaf616492b1c82dc925e5075c1221093300a31634a36f1e10db2eb281990a5f24754fa87f9968c12865a906e5ed01dbd762254640b65d38a5605be3d0c87abefc6c9305401c7977ecb930caddfbeda0b275292dc039d448b3212b04efb824b432f43a879f45e0a7c697a8ebf5d2bc888b80f06d141ed1325ba42caca3000d39", 0x9a}, {&(0x7f0000001ac0)="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", 0xf00}], 0x5) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@broadcast, 0x4e21, 0x10000, 0xc24, 0x0, 0xfffffffb}}, 0x44) r7 = fsopen(&(0x7f00000001c0)='btrfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\a\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) getpriority(0x2, r8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'dummy0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 1m50.9685494s ago: executing program 5 (id=488): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x80000000}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0xff95, 0x0, 0x0) 1m50.886538449s ago: executing program 5 (id=489): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2], 0x90}}, 0x0) 1m50.713862632s ago: executing program 5 (id=490): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000004c850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="00feffffff000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x3, 0x9, 0xf6}}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x9, 0x6, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000640)='virtio_transport_alloc_pkt\x00'}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) write$FUSE_GETXATTR(r3, &(0x7f0000000c40)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) chmod(&(0x7f0000000140)='./file0\x00', 0xc0) 1m49.794603879s ago: executing program 5 (id=494): unshare(0x2c020400) 1m49.59152708s ago: executing program 5 (id=496): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100, 0x75653100}, 0x0, {0x3}, 0x0, 0x1}) 1m48.878798906s ago: executing program 5 (id=497): r0 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000001640)={0x2020}, 0x2020) r4 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x17, 0x0, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e2b, @local}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sync() ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000004680)={{0x0, 0x8, 0x4, 0x1000, 0x5, 0x5, 0x7, 0x5, 0x5, 0x2, 0xfff, 0x5, 0x7ff, 0x5, 0x1000000006}}) syz_emit_ethernet(0x60, &(0x7f0000000840)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x2a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1, [{0x2}]}}}}}}, 0x0) write$smackfs_ipv6host(r0, &(0x7f0000000180)=@l1={{0x2, 0x3a, 0x4, 0x3a, 0x3, 0x3a, 0x0, 0x3a, 0x5, 0x3a, 0x8, 0x3a, 0xffffffffffffff00, 0x3a, 0x8003}, 0x20, '[)C\xac,,'}, 0x9f) 1m42.699538881s ago: executing program 33 (id=471): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x101, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x15, 0x0, "94ac873f1692ddbc702d69407eca10eedeb5dcd05446c2b07ec23159acd334e8058957bcee65a1721541ac7db2be2af67fd949859fc48a758e5d9ec2dc28f3fb330ea6b887a32239b1f039ba45bc1bc1"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3d, 0x0, "2e52f463273974700fa6345b251d8975a34ce626db167dbf6e168d9e14bf1a87e7d0c4f843ff6a8a6123980b1debd6932fac4bcaeba676b4b24488db18f9f12d733e613a3a1ff563aca36e8f20b950a7"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x19, 0x0, "41d2989d48db1764d991250db913d6dfbb2f5caa40b6ed2b6456aa8bb8a90f0c731f71573c64d277eeebae965ed6036a31420eb51c739e71e500c814c07f5659e1e1721bccc9b4894588115461cf0776"}, 0xd8) close(r3) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x1a0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_red={{0x8}, {0x16c, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x7, 0xf}}, @TCA_RED_STAB={0x104, 0x2, "cd400e35299466f4c80939ef29dce1b81e8afa34dad50abf2ae3c3ae10a12bb043a38d098ee2b72b0f1854d702bfc647bcf18782d2da76c797c6a5eef7dfe1ed623987a2af987ea632a8b23dcace413e6fddf75b4e3a41ad177f0cab9f36ca1fe349145099fd316282ab319e834d49c9473603ae649a7958feac58874e1445500efee3fc1464afb8baabfb59356c4d7754cb4b8c8d5cd9342d89a44021a45e9cfe90bbeaa73e4351fa1a0c5f4ab919b7e2b399cd54f6a9871e9add215e046f6c4713dd1af4a0e224809b455c72a65a456a33ff8414ee600e4c8342963ddb6fb226b99a3e723cf332f6ba12719762356d0cfec8293b12bb73b99c4c03cd6156ce"}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7}, @TCA_RED_MAX_P={0x8, 0x3, 0x5}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x4}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6c00}, @TCA_RED_PARMS={0x14, 0x1, {0xffffffff, 0x4, 0x4, 0xa, 0xa, 0xa}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x4}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x7}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}, @TCA_RATE={0x6}]}, 0x1a0}}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "08000054c1078500000000000000000000000000000000000000000000000010", 0x31384142}) unshare(0x60030700) 1m37.53184596s ago: executing program 34 (id=482): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e26, 0x3, 'dh\x00', 0x1, 0x7, 0x4b}, 0x2c) r5 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x10000}) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) setrlimit(0x2, &(0x7f0000000240)={0x5, 0x6}) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000300)="57f88e5e7d7ca8d453b6b27acebe9bff98297bcd068e797adb3faf5b66b7fe568270302a6ee18b0c6ed2634584390d278cf42cee51e755eb61e13a8f9dea51a85cbffe8b63d2e1", 0x47}, {&(0x7f0000000b00)="e46861eec8a17fdfc0b61f7f40773822ece7d655448e499b75dfc022319b86ecd93345fc92bb829c7b182f8b21c7abd8330b387122d22f2e2ef35ed2022ede2c01451dcfab122eff34d73651", 0x4c}, {&(0x7f0000000100)="53cf94cb0f5b6dbe7368c89d6fb3d293d10eacfd1d840727d493ecfb916f9963eee22a2ce2cad38d734fe9e65386e48274b309557290a901", 0x38}, {&(0x7f0000000b80)="291a9e7651f97291e799d43841445f37bfd9084d1200c8e8a6a2edaf616492b1c82dc925e5075c1221093300a31634a36f1e10db2eb281990a5f24754fa87f9968c12865a906e5ed01dbd762254640b65d38a5605be3d0c87abefc6c9305401c7977ecb930caddfbeda0b275292dc039d448b3212b04efb824b432f43a879f45e0a7c697a8ebf5d2bc888b80f06d141ed1325ba42caca3000d39", 0x9a}, {&(0x7f0000001ac0)="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", 0xf00}], 0x5) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@broadcast, 0x4e21, 0x10000, 0xc24, 0x0, 0xfffffffb}}, 0x44) r7 = fsopen(&(0x7f00000001c0)='btrfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\a\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) getpriority(0x2, r8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'dummy0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 1m33.155945848s ago: executing program 35 (id=497): r0 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000001640)={0x2020}, 0x2020) r4 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x17, 0x0, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e2b, @local}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sync() ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000004680)={{0x0, 0x8, 0x4, 0x1000, 0x5, 0x5, 0x7, 0x5, 0x5, 0x2, 0xfff, 0x5, 0x7ff, 0x5, 0x1000000006}}) syz_emit_ethernet(0x60, &(0x7f0000000840)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x2a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1, [{0x2}]}}}}}}, 0x0) write$smackfs_ipv6host(r0, &(0x7f0000000180)=@l1={{0x2, 0x3a, 0x4, 0x3a, 0x3, 0x3a, 0x0, 0x3a, 0x5, 0x3a, 0x8, 0x3a, 0xffffffffffffff00, 0x3a, 0x8003}, 0x20, '[)C\xac,,'}, 0x9f) 16.709972288s ago: executing program 8 (id=696): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) io_setup(0x7e, &(0x7f0000000080)=0x0) r6 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x200000000000000, 0x0, 0x0, 0x7, 0x0, r6, &(0x7f0000000340), 0x0, 0xeffdffffffffffff}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82D\x80'}, 0x30) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) 13.220587098s ago: executing program 6 (id=702): recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x1, 0x80000) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x100010, 0xffffffffffffffff, 0x1000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000480)={0x7f, 0xfffffffd, 0x0, 'queue0\x00', 0x80000000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(r3, 0x0, 0x4044010) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300090c00000000000000000000000300060000000e0002000000e0000009000000000000c3000400030008000000f8ffffffffffffff7805000000000000080000000000000003000500"/96], 0x60}}, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000008c4d600000000000000009562936a3e1fde7833ac8358bd47d7c06b793fe46217ed", @ANYRES16=r9, @ANYBLOB="010000000000000000000a0000000400018004000680"], 0x1c}}, 0xc0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000300)={r10, 0x7, 0x10000, 0x401, 0x5, 0x4, 0x1, 0x9, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x0, 0xe, 0x4, 0x2, 0x6}}, &(0x7f0000000100)=0xb0) read(0xffffffffffffffff, &(0x7f0000000240)=""/110, 0x6e) 12.769763239s ago: executing program 8 (id=705): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x141842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="b2ff", 0x2}], 0x1) 11.989421993s ago: executing program 8 (id=706): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000700)={0x0, 0xfffffffe, 0x100, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(r0, 0x47f5, 0x6021, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 11.213609124s ago: executing program 6 (id=712): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001600)=ANY=[@ANYRES8=r0, @ANYRES8, @ANYRES64=r2, @ANYRES32=r2, @ANYBLOB="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", @ANYRESDEC=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='sched_kthread_work_queue_work\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x61) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r3) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0xfff5) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r10, 0xffffffffffffffff, 0x2) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x4e23, @multicast1}, 0x0, 0x0, 0x3, 0x2}}, 0x26) socket$unix(0x1, 0x2, 0x0) setitimer(0x3, 0x0, 0x0) 10.671430413s ago: executing program 8 (id=713): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x1, 0x400}) 10.537260819s ago: executing program 7 (id=715): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'veth0_to_team\x00', 0x2000}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) set_mempolicy(0x3, 0x0, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KDGKBDIACR(r3, 0x4bfb, &(0x7f0000000440)=""/252) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000023c0)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xbc}}, 0x0) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) 9.369685971s ago: executing program 8 (id=716): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) 9.172772411s ago: executing program 4 (id=717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0x7fe2, 0x2, 0x140, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0}, &(0x7f00000003c0), &(0x7f0000000440)='%+9llu \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r0, &(0x7f0000000700)="d0", &(0x7f00000008c0)=""/170}, 0x20) getpgid(0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12d25a80648c2594f90124fc60100c034003000000", 0x1c}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x33, 0x1, 0x70bd2a, 0x25dbdbff, {0x1}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) 8.704710113s ago: executing program 2 (id=718): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x3, 0x5004) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r7, &(0x7f00000013c0)=""/67, 0x43, 0x3) syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r8, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) 8.689625833s ago: executing program 7 (id=719): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)='n', 0x1}], 0x1, 0x65, 0x0) 8.640506425s ago: executing program 8 (id=720): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = epoll_create(0x9) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8) shutdown(r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000180)={0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket(0x400000000010, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0) openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x5411, 0x1000000000000) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000c40)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffffc0}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) process_madvise(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)='n', 0x1}], 0x1, 0x65, 0x0) unshare(0x4000000) 8.490522687s ago: executing program 7 (id=721): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_flowlabel\x00') preadv2(r2, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/147, 0x93}], 0x1, 0x9, 0x80000000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x2, 0x3, 0xff) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r7, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0xc000000) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000180)={0x6, 0xe3b0, {}, {0xffffffffffffffff}, 0xb, 0x5}) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000380)=0x2, 0x4) listen(0xffffffffffffffff, 0x3) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000500)=@req3={0x6, 0x6, 0x4ce3, 0x400, 0xfff, 0x8, 0x6}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8.415366764s ago: executing program 6 (id=722): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xa1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x88, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69d403c0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a8d}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r4], 0x90}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r5, 0x81044804, &(0x7f0000000000)={0x40001, 0x100, 0xfffffffd}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r6) 7.514520081s ago: executing program 4 (id=723): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000700)={0x0, 0xfffffffe, 0x100, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(r0, 0x47f5, 0x6021, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 7.441145668s ago: executing program 2 (id=724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002380), 0x0, 0x0) read$fb(r0, &(0x7f0000000040)=""/12, 0xc) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000003c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000400)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000580)={r4, @in={{0x2, 0x4e24, @loopback}}, 0x9, 0x5}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}}, 0x0) mremap(&(0x7f0000314000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000ffc000/0x4000)=nil) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 5.668415568s ago: executing program 2 (id=725): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 5.66558195s ago: executing program 4 (id=726): r0 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r4, r0, 0x7, 0x0, @val=@kprobe_multi=@syms={0x1, 0x6, &(0x7f0000000500)=[&(0x7f00000002c0)='\x00', &(0x7f0000000340)='$^]))\x00', &(0x7f0000000400)='fuse\x00', &(0x7f0000000440)='rcu_utilization\x00', &(0x7f0000000480)='+#\x00', &(0x7f00000004c0)='@\x00'], 0x0, 0x9c}}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r7, 0x4008af10, &(0x7f0000000000)={0x1, 0x400}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) read$FUSE(r6, &(0x7f000000e0c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 4.658009198s ago: executing program 6 (id=727): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500170000000800130000170000080014"], 0x4c}}, 0x0) io_uring_setup(0x4612, &(0x7f0000000080)={0x0, 0xc401, 0x1000, 0x2, 0x1d0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b00070066696c74"], 0xc4}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a200000b80202578a662f8540040000009c0000001500000000000000ffcef3aecfd90795d7df145a1cfaa082f88d203e02844e56c631c51887dee1ce", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x38, r9, 0x5, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x38}}, 0x0) r10 = getpgid(0xffffffffffffffff) getpgrp(r10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES64=r7], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) syz_create_resource$binfmt(&(0x7f0000000200)='./file0\x00') ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'vlan0\x00'}) 4.657663082s ago: executing program 2 (id=728): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000004"], 0x50) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)=0xfffffffc}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r4, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r5}, 0x10) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) shutdown(r6, 0x0) ioperm(0x4, 0x9fe6, 0xfffffffffffffff7) sendmsg(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001100)="877d4d2d", 0x4}], 0x1}, 0x0) clock_gettime(0x6, &(0x7f0000000100)={0x0, 0x0}) clock_settime(0x2, &(0x7f00000000c0)={r7, r8+60000000}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) 4.596612597s ago: executing program 4 (id=729): syz_open_dev$vivid(0x0, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x2000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280), 0x2, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000200), &(0x7f0000000380)=[r6], &(0x7f0000000340)}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=r2, 0x1d, 0x0, 0x20000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f00000004c0)=""/102392, 0x18ff8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 4.510342621s ago: executing program 7 (id=730): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'veth0_to_team\x00', 0x2000}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) set_mempolicy(0x3, 0x0, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KDGKBDIACR(r3, 0x4bfb, &(0x7f0000000440)=""/252) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000023c0)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xbc}}, 0x0) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) 2.533709418s ago: executing program 7 (id=731): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='s\b\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) syz_usbip_server_init(0x4) syz_io_uring_setup(0x239, &(0x7f0000000440)={0x0, 0x1000, 0x1, 0x2, 0x1}, &(0x7f0000000180), &(0x7f0000000300)) r2 = fsopen(&(0x7f0000000500)='cgroup\x00', 0x0) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load2\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000a40)={0x4fc, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x4d0, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffffd, @mcast1, 0x9}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf1f2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x35c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8493f78ac9a554560e5c9d8816e2df3173033e0829025a08310f195a43de80f8"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x2cc, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3d}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "66a36db075a72864c4f9a1d90f551db045920b62c200c2ef5204ab4c6fe33940"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cb441e77b44fe5d485ae77d01bf449c0fdbfbabc2f23bd46bcc9c94f4f209160"}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0xf}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8ab95b8a7117bb5e712b3001eabf0e7ee4298a822eef0e246387a12d80f4ec11"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1000, @local, 0x9}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd3}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x373a}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8a7e8164090247695e4246cbd653a3488dc4acc8c471276dc57522d973a75337"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3c}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x40000}, 0x14001) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019640)=""/102400, 0x19000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000f90000000000000000000000000000000000001a30b62e6bc0cd4a1f5ae472fad83bc2c56837e7e0c3a48a736b121bd5468fec6a3f05730ecad037b37198698d66912d00"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socket$inet6(0x10, 0x2, 0x6) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000040)) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @dev, @loopback, 0x0, 0x0, 0x0, 0x4007}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000500050001007560e93babf458550e000005000300000000000800030001000000"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) 2.490737577s ago: executing program 2 (id=732): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x2, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xfffffffffffffffc}}}, 0xb8}}, 0x0) 2.451164245s ago: executing program 6 (id=733): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0x7fe2, 0x2, 0x140, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0}, &(0x7f00000003c0), &(0x7f0000000440)='%+9llu \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r0, &(0x7f0000000700)="d0", &(0x7f00000008c0)=""/170}, 0x20) getpgid(0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12d25a80648c2594f90124fc60100c034003000000", 0x1c}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x33, 0x1, 0x70bd2a, 0x25dbdbff, {0x1}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) 2.397775678s ago: executing program 4 (id=734): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x3, 0x5004) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r7, &(0x7f00000013c0)=""/67, 0x43, 0x3) syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r8, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) 2.116835489s ago: executing program 2 (id=735): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x68000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r5, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048011}, 0x40000) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='ns\x00') sendmsg$NFT_BATCH(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r0) syz_io_uring_setup(0x162f, &(0x7f0000000640)={0x0, 0xff48, 0x400, 0x9655, 0xa2}, &(0x7f00000006c0), &(0x7f0000000700)) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2400c090) r8 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x12, r8, 0x42c47000) sendmsg$nl_route(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@getnetconf={0x14, 0x52, 0x200, 0x6, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000980)=0x4) r9 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x30008000}, 0x24040000) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), r7) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r7, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x11c, r10, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x68}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7aab8ddc}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4a5b81409513064b}, 0x20000081) getsockopt$ARPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x63, &(0x7f0000000d00)={'HL\x00'}, &(0x7f0000000d40)=0x1e) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r7) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, r11, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6932}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2000, 0x0) pipe(&(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r9, &(0x7f0000000f40)={0x2004}) sendmsg$nl_route(r13, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)=@dellinkprop={0xf0, 0x6d, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40004, 0x440}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_hsr\x00'}, @IFLA_AF_SPEC={0x98, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_MPLS={0x4}, @AF_INET6={0x4c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xd}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xea}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xe}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7f}]}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0xa, 0x0, 0x0, 0xe}, {0x8, 0x5, 0x0, 0x0, 0x1}, {0x8, 0x21, 0x0, 0x0, 0x4}]}}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x80000000}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_LINK_NETNSID={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x6d}]}, 0xf0}}, 0x20000000) 965.666153ms ago: executing program 7 (id=736): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x101800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) (fail_nth: 1) socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0xffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a010800000000000000000100000174700c2300000001080006400800ff0008000a400000000308000f40000000090c000b4000000000000001010900020073797a3000b2bc57928ffb15e7000000000000041497c704731e0000001100010000000000000000000000000a"], 0x80}}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r7) 167.220507ms ago: executing program 6 (id=737): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xa1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x88, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69d403c0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a8d}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r4], 0x90}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r5, 0x81044804, &(0x7f0000000000)={0x40001, 0x100, 0xfffffffd}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r6) 0s ago: executing program 4 (id=738): getrandom(&(0x7f0000000040)=""/113, 0x71, 0x3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) socket$kcm(0x2b, 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): : 16 [ 151.477097][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.497310][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.539463][ T5867] usb 5-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 151.581166][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.631626][ T5867] usb 5-1: config 0 descriptor?? [ 152.106072][ T6570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.146490][ T6570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.258730][ T5867] usbhid 5-1:0.0: can't add hid device: -71 [ 152.281922][ T5867] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 152.328053][ T5867] usb 5-1: USB disconnect, device number 5 [ 152.559918][ T6573] speed is unknown, defaulting to 1000 [ 152.865671][ T6594] fuse: Unknown parameter 'use00000000000000000000' [ 155.562635][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'. [ 156.021172][ T6634] xt_TCPMSS: Only works on TCP SYN packets [ 156.857026][ T6641] netlink: 32 bytes leftover after parsing attributes in process `syz.3.211'. [ 156.879960][ T6641] netlink: 32 bytes leftover after parsing attributes in process `syz.3.211'. [ 156.902510][ T6626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.911662][ T6626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.989103][ T5819] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 157.098670][ T6647] fuse: Unknown parameter 'user_i00000000000000000000' [ 157.209356][ T2152] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 157.411827][ T2152] usb 5-1: Using ep0 maxpacket: 16 [ 157.439380][ T2152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.456969][ T2152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.513091][ T2152] usb 5-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 157.532630][ T2152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.927838][ T2152] usb 5-1: config 0 descriptor?? [ 158.058815][ T6656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.217'. [ 158.403106][ T6642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.211711][ T6642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.362215][ T2152] usbhid 5-1:0.0: can't add hid device: -71 [ 159.381280][ T2152] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 159.438739][ T2152] usb 5-1: USB disconnect, device number 6 [ 159.531644][ T6670] capability: warning: `syz.1.221' uses 32-bit capabilities (legacy support in use) [ 159.825256][ T79] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 160.144033][ T79] usb 1-1: Using ep0 maxpacket: 8 [ 160.618437][ T29] audit: type=1326 audit(1740789659.219:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6678 comm="syz.2.225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb84f98d169 code=0x0 [ 160.663964][ T79] usb 1-1: unable to get BOS descriptor or descriptor too short [ 160.677040][ T79] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.885925][ T79] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 160.907120][ T79] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 160.921012][ T79] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.932010][ T79] usb 1-1: Product: syz [ 160.936747][ T79] usb 1-1: Manufacturer: syz [ 160.942046][ T79] usb 1-1: SerialNumber: syz [ 160.957823][ T6687] fuse: Unknown parameter 'user_i00000000000000000000' [ 160.977634][ T79] usb 1-1: config 0 descriptor?? [ 161.006257][ T79] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.078092][ T6691] netlink: 'syz.1.229': attribute type 5 has an invalid length. [ 161.186229][ T79] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 161.268641][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.276386][ T9] usb 1-1: USB disconnect, device number 7 [ 161.382051][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 161.611033][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 161.636535][ T8] usb 3-1: config 162 has an invalid interface number: 143 but max is 0 [ 161.666686][ T8] usb 3-1: config 162 has no interface number 0 [ 161.749097][ T6700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.231'. [ 162.381694][ T8] usb 3-1: config 162 interface 143 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 162.391870][ T8] usb 3-1: config 162 interface 143 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 162.403962][ T8] usb 3-1: config 162 interface 143 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 162.416877][ T8] usb 3-1: config 162 interface 143 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 162.440914][ T8] usb 3-1: config 162 interface 143 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 162.482306][ T8] usb 3-1: config 162 interface 143 has no altsetting 0 [ 162.504852][ T8] usb 3-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 162.527909][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.546813][ T8] usb 3-1: Product: syz [ 162.556978][ T8] usb 3-1: Manufacturer: syz [ 162.567253][ T8] usb 3-1: SerialNumber: syz [ 162.587927][ T6693] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 162.598160][ T6706] netlink: 71 bytes leftover after parsing attributes in process `syz.1.233'. [ 162.865231][ T8] usb 3-1: USB disconnect, device number 7 [ 164.087252][ T79] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 164.145660][ T6728] fuse: Unknown parameter 'grou00000000000000000000' [ 164.270176][ T6734] netlink: 'syz.2.240': attribute type 5 has an invalid length. [ 164.271215][ T79] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.319690][ T79] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.338622][ T79] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 164.358277][ T79] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.398802][ T79] usb 5-1: config 0 descriptor?? [ 164.701563][ T6744] fuse: Unknown parameter 'user_i00000000000000000000' [ 165.567115][ T79] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0001/input/input5 [ 165.702226][ T5924] kernel read not supported for file /bus/input/devices (pid: 5924 comm: kworker/1:8) [ 165.760397][ T79] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0001/input/input6 [ 165.775914][ T6755] netlink: 71 bytes leftover after parsing attributes in process `syz.3.247'. [ 166.094300][ T79] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0001/input/input7 [ 166.304611][ T79] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0001/input/input8 [ 166.382314][ T79] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 166.420337][ T79] usb 5-1: USB disconnect, device number 7 [ 167.467231][ T6766] ip6gretap0: entered promiscuous mode [ 167.475241][ T6768] netlink: 'syz.0.252': attribute type 5 has an invalid length. [ 167.521973][ T6766] batadv_slave_0: entered promiscuous mode [ 167.566069][ T6746] vlan2: entered promiscuous mode [ 169.094002][ T6783] fuse: Unknown parameter 'user_id00000000000000000000' [ 169.652010][ T6800] netlink: 124 bytes leftover after parsing attributes in process `syz.3.259'. [ 170.080964][ T6804] veth1_to_team: entered promiscuous mode [ 170.159045][ T6807] netlink: 71 bytes leftover after parsing attributes in process `syz.1.261'. [ 170.986785][ T6815] syz.0.262 (6815): drop_caches: 2 [ 171.710268][ T6822] sp0: Synchronizing with TNC [ 172.009809][ T6817] [U] ` [ 172.210977][ T79] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 172.381088][ T79] usb 1-1: Using ep0 maxpacket: 16 [ 172.394149][ T79] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 172.404231][ T79] usb 1-1: config 0 has no interface number 0 [ 172.410738][ T79] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.430740][ T79] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.441014][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 172.485007][ T79] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 172.511883][ T79] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.533103][ T79] usb 1-1: config 0 descriptor?? [ 172.622930][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 172.646651][ T9] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 172.660447][ T9] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 172.686153][ T9] usb 2-1: config 1 interface 0 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 172.705499][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 172.967819][ T79] usbhid 1-1:0.1: can't add hid device: -71 [ 172.985495][ T79] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 173.029743][ T79] usb 1-1: USB disconnect, device number 8 [ 173.192260][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.272'. [ 173.213588][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.272'. [ 173.238007][ T6847] fuse: Unknown parameter 'user_id00000000000000000000' [ 173.515109][ T6851] netlink: 71 bytes leftover after parsing attributes in process `syz.3.273'. [ 174.311837][ T6862] netlink: 32 bytes leftover after parsing attributes in process `syz.3.277'. [ 174.322299][ T6862] netlink: 32 bytes leftover after parsing attributes in process `syz.3.277'. [ 175.677620][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.715908][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.226077][ T9] usb 2-1: Product: ᤦ䓡潁ꕰ␛徥絫䤩댺€ [ 176.567951][ T9] usb 2-1: Manufacturer: 膕신ꕭ짤灻ﮐ㈨㱒㧺쾜ࠞ2ꔉ﫱憼淝룘軨ꮉВ䰨堸跗䦪㔪혒㦢ཅ̽箨旬跮鱘㪂୻∌鏲ꝋ躡哆䃽ⶸම檽唀凜鼋浟곑ኙ鼉䌓鯱轠䧜嗑좑䐶㘛鯬Ꮀ粫澑ꔻ旱洆娼荜城⣺ﱵ㓨犰ﱷ坁소毧젓劀獆仝᪹Ꜳ鵽⢹ [ 176.597888][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.165665][ T6892] Illegal XDP return value 38 on prog (id 61) dev syz_tun, expect packet loss! [ 177.563603][ T9] usb 2-1: can't set config #1, error -71 [ 177.683174][ T9] usb 2-1: USB disconnect, device number 3 [ 179.111920][ T5867] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.280917][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 179.309167][ T5867] usb 3-1: config 0 interface 0 has no altsetting 0 [ 179.324569][ T5867] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 179.339028][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.391298][ T5867] usb 3-1: Product: syz [ 179.498599][ T6911] sp0: Synchronizing with TNC [ 179.590147][ T5867] usb 3-1: Manufacturer: syz [ 179.608150][ T5867] usb 3-1: SerialNumber: syz [ 179.781869][ T5867] usb 3-1: config 0 descriptor?? [ 179.910293][ T6904] [U] ` [ 180.211872][ T5867] gs_usb 3-1:0.0: Configuring for 101 interfaces [ 180.218290][ T5867] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 180.243630][ T5867] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 180.984445][ T5867] usb 3-1: USB disconnect, device number 8 [ 181.991142][ T79] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 182.329255][ T5867] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 182.367700][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 182.377101][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'. [ 182.504368][ T79] usb 1-1: config 0 has an invalid interface number: 167 but max is 0 [ 182.513560][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 182.514752][ T79] usb 1-1: config 0 has no interface number 0 [ 182.535668][ T5867] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 182.539022][ T79] usb 1-1: config 0 interface 167 altsetting 0 endpoint 0x8A has invalid maxpacket 512, setting to 64 [ 182.549700][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.565738][ T6949] netlink: 32 bytes leftover after parsing attributes in process `syz.3.305'. [ 182.576549][ T6949] netlink: 32 bytes leftover after parsing attributes in process `syz.3.305'. [ 182.579648][ T79] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=f1.04 [ 182.597907][ T5867] usb 3-1: config 0 descriptor?? [ 182.609163][ T79] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.613142][ T5867] gspca_main: sq930x-2.14.0 probing 041e:403c [ 182.644248][ T79] usb 1-1: Product: syz [ 182.657583][ T79] usb 1-1: Manufacturer: syz [ 182.663571][ T2152] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 182.675363][ T79] usb 1-1: SerialNumber: syz [ 182.693712][ T79] usb 1-1: config 0 descriptor?? [ 182.707607][ T6929] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 182.718689][ T79] kvaser_usb 1-1:0.167: error -ENODEV: Cannot get usb endpoint(s) [ 182.837665][ T2152] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 182.837690][ T2152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.839756][ T2152] usb 2-1: config 0 descriptor?? [ 182.841811][ T2152] cp210x 2-1:0.0: cp210x converter detected [ 182.962652][ T79] usb 1-1: USB disconnect, device number 9 [ 183.247014][ T2152] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 183.264926][ T2152] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 183.273023][ T2152] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 183.287260][ T2152] usb 2-1: cp210x converter now attached to ttyUSB0 [ 183.366019][ T2152] usb 2-1: USB disconnect, device number 4 [ 183.401475][ T2152] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 183.417629][ T2152] cp210x 2-1:0.0: device disconnected [ 183.714674][ T6956] fuse: Bad value for 'fd' [ 184.551028][ T5867] gspca_sq930x: reg_w 0105 bf00 failed -110 [ 184.557051][ T5867] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 184.603899][ T5867] usb 3-1: USB disconnect, device number 9 [ 184.649790][ T6965] mmap: syz.0.310 (6965) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 186.608313][ T6982] syz.4.314 (6982): drop_caches: 2 [ 188.401196][ T79] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 188.581569][ T79] usb 5-1: Using ep0 maxpacket: 16 [ 188.589217][ T79] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.598415][ T79] usb 5-1: config 0 has no interface number 0 [ 188.605412][ T79] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.616813][ T79] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.627067][ T79] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 188.636732][ T79] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.647434][ T79] usb 5-1: config 0 descriptor?? [ 188.768944][ T8] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 188.806206][ T6999] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 188.835191][ T6999] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 188.845744][ T6998] fuse: Bad value for 'fd' [ 188.942903][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 188.955171][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.969202][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 189.216393][ T79] usbhid 5-1:0.1: can't add hid device: -71 [ 189.223868][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.292783][ T8] usb 1-1: config 0 descriptor?? [ 189.299004][ T79] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 189.324146][ T8] hub 1-1:0.0: USB hub found [ 189.334069][ T79] usb 5-1: USB disconnect, device number 8 [ 189.527713][ T8] hub 1-1:0.0: 1 port detected [ 189.655996][ T7007] netlink: 308 bytes leftover after parsing attributes in process `syz.3.321'. [ 189.685414][ T8] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 189.729011][ T8] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 189.800414][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 189.840934][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 189.895416][ T8] usb 1-1: USB disconnect, device number 10 [ 189.931082][ T29] audit: type=1326 audit(1740789688.529:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1118d169 code=0x7ffc0000 [ 190.130443][ T29] audit: type=1326 audit(1740789688.529:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1118d169 code=0x7ffc0000 [ 190.338798][ T29] audit: type=1326 audit(1740789688.569:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7ffa1118d169 code=0x7ffc0000 [ 190.537831][ T29] audit: type=1326 audit(1740789688.569:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1118d169 code=0x7ffc0000 [ 191.541565][ T29] audit: type=1326 audit(1740789688.569:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1118d169 code=0x7ffc0000 [ 191.590378][ T29] audit: type=1326 audit(1740789688.569:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ffa1118d169 code=0x7ffc0000 [ 191.728801][ T29] audit: type=1326 audit(1740789688.569:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1118d169 code=0x7ffc0000 [ 191.768378][ T7029] netlink: 32 bytes leftover after parsing attributes in process `syz.2.329'. [ 191.809206][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 191.821570][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 191.827637][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 191.835184][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 191.841705][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 191.870626][ T7029] netlink: 32 bytes leftover after parsing attributes in process `syz.2.329'. [ 191.917748][ T29] audit: type=1326 audit(1740789688.569:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1118d169 code=0x7ffc0000 [ 191.976134][ T29] audit: type=1326 audit(1740789688.579:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa1118bad0 code=0x7ffc0000 [ 192.018567][ T29] audit: type=1326 audit(1740789688.579:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1118d169 code=0x7ffc0000 [ 192.847765][ T7042] Bluetooth: MGMT ver 1.23 [ 193.046646][ T7048] FAULT_INJECTION: forcing a failure. [ 193.046646][ T7048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.060100][ T7048] CPU: 0 UID: 0 PID: 7048 Comm: syz.3.334 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 193.060122][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 193.060133][ T7048] Call Trace: [ 193.060139][ T7048] [ 193.060147][ T7048] dump_stack_lvl+0x241/0x360 [ 193.060181][ T7048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.060197][ T7048] ? __pfx__printk+0x10/0x10 [ 193.060220][ T7048] ? __pfx_lock_release+0x10/0x10 [ 193.060249][ T7048] should_fail_ex+0x40a/0x550 [ 193.060271][ T7048] _copy_from_user+0x2d/0xb0 [ 193.060287][ T7048] do_sock_getsockopt+0x1d1/0x740 [ 193.060311][ T7048] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 193.060328][ T7048] ? __fget_files+0x2a/0x410 [ 193.060344][ T7048] ? __fget_files+0x395/0x410 [ 193.060355][ T7048] ? __fget_files+0x2a/0x410 [ 193.060382][ T7048] __x64_sys_getsockopt+0x2a1/0x370 [ 193.060404][ T7048] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 193.060422][ T7048] ? do_syscall_64+0x100/0x230 [ 193.060441][ T7048] ? do_syscall_64+0xb6/0x230 [ 193.060458][ T7048] do_syscall_64+0xf3/0x230 [ 193.060473][ T7048] ? clear_bhb_loop+0x35/0x90 [ 193.060493][ T7048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.060509][ T7048] RIP: 0033:0x7ffa1118d169 [ 193.060527][ T7048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.060537][ T7048] RSP: 002b:00007ffa11f7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 193.060558][ T7048] RAX: ffffffffffffffda RBX: 00007ffa113a6080 RCX: 00007ffa1118d169 [ 193.060567][ T7048] RDX: 0000000000000075 RSI: 0000000000000084 RDI: 0000000000000005 [ 193.060574][ T7048] RBP: 00007ffa11f7b090 R08: 0000400000000300 R09: 0000000000000000 [ 193.060582][ T7048] R10: 0000400000000040 R11: 0000000000000246 R12: 0000000000000001 [ 193.060590][ T7048] R13: 0000000000000000 R14: 00007ffa113a6080 R15: 00007ffd6255d178 [ 193.060609][ T7048] [ 194.175294][ T7051] netlink: 308 bytes leftover after parsing attributes in process `syz.0.335'. [ 194.347807][ T7056] kvm: apic: phys broadcast and lowest prio [ 194.609468][ T7042] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 194.726208][ T7042] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 194.860441][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.870007][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.964058][ T7042] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 195.022394][ T7042] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 196.043581][ T7042] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 196.133278][ T7042] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 196.154166][ T7073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.339'. [ 196.244090][ T7042] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 196.312182][ T7042] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 196.428707][ T7042] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 196.481036][ T7042] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 197.319444][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 197.482451][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 197.524770][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.587885][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.621953][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 198.099216][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 198.130857][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 198.180020][ T9] usb 2-1: Manufacturer: syz [ 198.251853][ T9] usb 2-1: config 0 descriptor?? [ 198.488516][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 198.498818][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 198.651558][ T7086] nbd0: detected capacity change from 0 to 256 [ 198.772148][ T9] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 198.779560][ T9] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 198.816405][ T9] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 198.852800][ T79] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 198.982223][ T5924] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 199.040857][ T79] usb 5-1: Using ep0 maxpacket: 16 [ 199.059424][ T79] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.069953][ T5134] block nbd0: Receive control failed (result -104) [ 199.082748][ T9] usb 2-1: USB disconnect, device number 5 [ 199.090921][ T79] usb 5-1: config 0 has no interface number 0 [ 199.099957][ T79] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.133992][ T79] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.144274][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 199.347152][ T79] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 199.356580][ T79] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.383768][ T5924] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 199.401545][ T79] usb 5-1: config 0 descriptor?? [ 199.406715][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.422876][ T5924] usb 4-1: config 0 descriptor?? [ 199.471762][ T5924] gspca_main: sq930x-2.14.0 probing 041e:403c [ 200.076922][ T5924] gspca_sq930x: reg_r 001f failed -110 [ 200.191901][ T5924] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 200.485077][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 200.557033][ T7122] speed is unknown, defaulting to 1000 [ 200.650659][ T79] uclogic 0003:28BD:0071.0003: pen parameters not found [ 200.698249][ T79] uclogic 0003:28BD:0071.0003: interface is invalid, ignoring [ 200.914274][ T79] usb 5-1: USB disconnect, device number 9 [ 202.003532][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 202.162216][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 202.180170][ T9] usb 2-1: config 162 has an invalid interface number: 197 but max is 1 [ 202.199262][ T9] usb 2-1: config 162 has an invalid interface number: 143 but max is 1 [ 202.208420][ T9] usb 2-1: config 162 has no interface number 0 [ 202.215889][ T9] usb 2-1: config 162 has no interface number 1 [ 202.223533][ T9] usb 2-1: config 162 interface 197 altsetting 4 endpoint 0x86 has invalid maxpacket 1024, setting to 64 [ 202.275427][ T9] usb 2-1: config 162 interface 143 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 202.313687][ T9] usb 2-1: config 162 interface 143 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 202.453496][ T9] usb 2-1: config 162 interface 143 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 202.466732][ T9] usb 2-1: config 162 interface 143 altsetting 1 has a duplicate endpoint with address 0x86, skipping [ 202.480585][ T9] usb 2-1: config 162 interface 143 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 202.551577][ T7193] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 202.577583][ T7193] fuse: Unknown parameter '0xffffffffffffffff' [ 202.592661][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 202.592702][ T29] audit: type=1107 audit(1740789701.189:25): pid=7189 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=']YbH4:&,1л1x' [ 203.156369][ T9] usb 2-1: config 162 interface 197 has no altsetting 0 [ 203.163756][ T9] usb 2-1: config 162 interface 143 has no altsetting 0 [ 203.173921][ T9] usb 2-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 203.265939][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.310899][ T9] usb 2-1: Product: syz [ 203.322239][ T9] usb 2-1: Manufacturer: syz [ 203.331304][ T9] usb 2-1: SerialNumber: syz [ 203.798927][ T9] usb 2-1: USB disconnect, device number 6 [ 203.982304][ T5896] usb 4-1: USB disconnect, device number 9 [ 204.724843][ T7214] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 204.888603][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 204.913961][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 205.205256][ T7206] ceph: No mds server is up or the cluster is laggy [ 205.241404][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 205.247534][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 205.626075][ T7230] vlan2: entered promiscuous mode [ 205.701645][ T7234] usb usb1: usbfs: process 7234 (syz.4.363) did not claim interface 0 before use [ 206.080904][ T5867] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 206.761128][ T7245] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 207.440189][ T7245] fuse: Unknown parameter '0xffffffffffffffff' [ 207.664041][ T29] audit: type=1107 audit(1740789706.259:26): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=']YbH4:&,1л1x' [ 208.076379][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 208.108330][ T5867] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 208.120309][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.201796][ T5867] usb 3-1: config 0 descriptor?? [ 208.382440][ T5867] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 208.910430][ T5867] gspca_nw80x: reg_w err -110 [ 208.926478][ T5867] nw80x 3-1:0.0: probe with driver nw80x failed with error -110 [ 208.929727][ T7253] netlink: 40 bytes leftover after parsing attributes in process `syz.2.367'. [ 209.362398][ T8] usb 3-1: USB disconnect, device number 10 [ 209.638111][ T7261] netlink: 48 bytes leftover after parsing attributes in process `syz.4.372'. [ 209.647519][ T7261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.372'. [ 209.954128][ T7266] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 209.968499][ T8] IPVS: starting estimator thread 0... [ 210.111630][ T7272] IPVS: using max 21 ests per chain, 50400 per kthread [ 210.766707][ T7281] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 211.070866][ T7286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.377'. [ 212.590986][ T5867] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 212.753404][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 212.769009][ T5867] usb 3-1: config 162 has an invalid interface number: 197 but max is 1 [ 212.790458][ T5867] usb 3-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 212.832667][ T5867] usb 3-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 212.906920][ T5867] usb 3-1: config 162 has no interface number 0 [ 212.914095][ T5867] usb 3-1: config 162 interface 197 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.935523][ T5867] usb 3-1: config 162 interface 197 has no altsetting 0 [ 212.949332][ T5867] usb 3-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 212.965192][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.975109][ T5867] usb 3-1: Product: syz [ 212.979435][ T5867] usb 3-1: Manufacturer: syz [ 212.989068][ T5867] usb 3-1: SerialNumber: syz [ 213.863093][ T5867] usb 3-1: USB disconnect, device number 11 [ 214.096958][ T7300] 9pnet_fd: Insufficient options for proto=fd [ 215.689763][ T5924] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 215.834650][ T5924] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 216.550982][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 216.689698][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.715354][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.722428][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 216.729639][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.731280][ T8] usb 3-1: config 162 has an invalid interface number: 197 but max is 1 [ 216.751980][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.759832][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.768256][ T8] usb 3-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 216.779605][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.812036][ T8] usb 3-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 216.835197][ T8] usb 3-1: config 162 has no interface number 0 [ 216.858039][ T8] usb 3-1: config 162 interface 197 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.901681][ T8] usb 3-1: config 162 interface 197 has no altsetting 0 [ 216.938494][ T8] usb 3-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 216.948584][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.958818][ T7334] 9pnet_fd: Insufficient options for proto=fd [ 216.965283][ T8] usb 3-1: Product: syz [ 216.986258][ T8] usb 3-1: Manufacturer: syz [ 216.991904][ T5134] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.015107][ T5134] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.027698][ T5134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.200417][ T5134] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.215649][ T5134] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.225972][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.644844][ T8] usb 3-1: SerialNumber: syz [ 217.709663][ T7327] speed is unknown, defaulting to 1000 [ 217.909750][ T8] usb 3-1: USB disconnect, device number 12 [ 218.641141][ T5924] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 219.371207][ T53] Bluetooth: hci5: command tx timeout [ 219.477492][ T7327] speed is unknown, defaulting to 1000 [ 219.495935][ T5924] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 219.520538][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.559243][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.590868][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 219.605982][ T5924] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 219.623286][ T5924] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 219.631872][ T5924] usb 2-1: Manufacturer: syz [ 219.637969][ T5924] usb 2-1: config 0 descriptor?? [ 219.707183][ T7354] xt_hashlimit: size too large, truncated to 1048576 [ 219.810268][ T7327] chnl_net:caif_netlink_parms(): no params data found [ 219.883397][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 219.911080][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 220.591339][ T7369] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 220.892071][ T29] audit: type=1107 audit(1740789719.219:27): pid=7360 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=']YbH4:&,1л1x' [ 221.764274][ T53] Bluetooth: hci5: command tx timeout [ 221.918163][ T7376] 9pnet_fd: Insufficient options for proto=fd [ 222.141445][ T7338] nbd1: detected capacity change from 0 to 256 [ 222.199526][ T53] block nbd1: Receive control failed (result -104) [ 222.214797][ T5924] usbhid 2-1:0.0: can't add hid device: -71 [ 222.220991][ T5924] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 222.237157][ T5924] usb 2-1: USB disconnect, device number 7 [ 222.360911][ T7327] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.415126][ T7327] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.451732][ T7327] bridge_slave_0: entered allmulticast mode [ 222.458763][ T7327] bridge_slave_0: entered promiscuous mode [ 222.475342][ T7327] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.484161][ T5867] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 222.489539][ T7327] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.523949][ T7327] bridge_slave_1: entered allmulticast mode [ 222.786048][ T7327] bridge_slave_1: entered promiscuous mode [ 222.901240][ T5924] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 223.122476][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 223.143227][ T5924] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 223.157539][ T5924] usb 2-1: config 0 has no interface number 0 [ 223.181073][ T5924] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=f9.12 [ 223.190345][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.198783][ T5924] usb 2-1: Product: syz [ 223.203202][ T5924] usb 2-1: Manufacturer: syz [ 223.207819][ T5924] usb 2-1: SerialNumber: syz [ 223.222301][ T5924] usb 2-1: config 0 descriptor?? [ 223.233836][ T7327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.252760][ T5924] mct_u232 2-1:0.25: MCT U232 converter detected [ 223.265141][ T7327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.286273][ T5924] mct_u232 ttyUSB0: expected endpoint missing [ 223.351126][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 223.361785][ T5867] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 223.386659][ T5867] usb 5-1: config 0 has no interface number 0 [ 223.404236][ T7327] team0: Port device team_slave_0 added [ 223.407201][ T5867] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 223.418238][ T7327] team0: Port device team_slave_1 added [ 223.435574][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.476710][ T5867] usb 5-1: Product: syz [ 223.481266][ T5867] usb 5-1: Manufacturer: syz [ 223.485908][ T5867] usb 5-1: SerialNumber: syz [ 223.494717][ T5924] usb 2-1: USB disconnect, device number 8 [ 223.515344][ T5867] usb 5-1: config 0 descriptor?? [ 223.531823][ T5924] mct_u232 2-1:0.25: device disconnected [ 223.533265][ T5867] smsc95xx v2.0.0 [ 223.588182][ T7327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.596924][ T7327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.653169][ T7327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.667755][ T7327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.675559][ T7327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.709746][ T7327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.735783][ T5867] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 223.748114][ T5867] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 223.801437][ T7327] hsr_slave_0: entered promiscuous mode [ 223.808202][ T7327] hsr_slave_1: entered promiscuous mode [ 223.815543][ T7327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.823629][ T7327] Cannot create hsr debugfs directory [ 223.831202][ T5896] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 223.850959][ T53] Bluetooth: hci5: command tx timeout [ 223.991247][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 224.001448][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 224.015736][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 224.036287][ T5896] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 224.066092][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.082280][ T5896] usb 3-1: Product: syz [ 224.101009][ T5896] usb 3-1: Manufacturer: syz [ 224.122119][ T5896] usb 3-1: SerialNumber: syz [ 224.123033][ T7327] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 224.141226][ T5896] usb 3-1: config 0 descriptor?? [ 224.169635][ T5896] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 224.175416][ T5867] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 224.204297][ T5896] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 224.221561][ T5867] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 224.235524][ T7327] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 224.248801][ T5867] usb 5-1: USB disconnect, device number 10 [ 224.277173][ T7327] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 224.319918][ T7327] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 224.484516][ T7327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.525089][ T7327] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.551744][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.558984][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.585475][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.592816][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.781909][ T5896] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 224.799477][ T5896] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 225.026572][ T5896] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 225.035296][ T5896] em28xx 3-1:0.0: No AC97 audio processor [ 225.061209][ T5896] usb 3-1: USB disconnect, device number 13 [ 225.076627][ T5896] em28xx 3-1:0.0: Disconnecting em28xx [ 225.095810][ T7327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.129913][ T5896] em28xx 3-1:0.0: Freeing device [ 225.744462][ T7327] veth0_vlan: entered promiscuous mode [ 225.795058][ T7327] veth1_vlan: entered promiscuous mode [ 225.905260][ T7327] veth0_macvtap: entered promiscuous mode [ 225.923680][ T7327] veth1_macvtap: entered promiscuous mode [ 225.933762][ T53] Bluetooth: hci5: command tx timeout [ 225.996431][ T7327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.064395][ T7327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.102412][ T7327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.124750][ T7327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.160671][ T7327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.197832][ T7327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.222445][ T7327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.242485][ T7327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.260877][ T7327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.285499][ T7327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.312332][ T7327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.577845][ T7327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.903880][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 227.037378][ T7327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.117476][ T7327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.129976][ T7503] netlink: 5056 bytes leftover after parsing attributes in process `syz.3.453'. [ 227.143250][ T7503] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 227.161154][ T7327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.282496][ T7511] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 227.501259][ T7327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.511935][ T7327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.523852][ T7327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.537334][ T7327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.551500][ T7327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.576811][ T7327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.635744][ T7327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.872875][ T7327] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.928792][ T7327] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.961053][ T7327] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.969852][ T7327] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.997445][ T7514] fuse: Bad value for 'fd' [ 228.364621][ T7522] io-wq is not configured for unbound workers [ 228.561444][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 228.748435][ T41] block nbd0: Possible stuck request ffff888025c0e000: control (read@0,4096B). Runtime 30 seconds [ 229.005969][ T5904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.072921][ T5904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.074194][ T6001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.105678][ T6001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.109565][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 229.151627][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.193317][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.233571][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 229.289142][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 229.331086][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 229.409958][ T9] usb 4-1: Manufacturer: syz [ 229.436204][ T9] usb 4-1: config 0 descriptor?? [ 229.501063][ T7529] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 229.547099][ T29] audit: type=1107 audit(1740789728.149:28): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=']YbH4:&,1л1x' [ 230.357231][ T7531] 9pnet_fd: Insufficient options for proto=fd [ 230.402077][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 230.441299][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 230.623418][ T7521] nbd2: detected capacity change from 0 to 256 [ 230.858554][ T53] block nbd2: Receive control failed (result -32) [ 230.931185][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 230.946135][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 230.948110][ T6793] block nbd2: Dead connection, failed to find a fallback [ 231.116807][ T6793] block nbd2: shutting down sockets [ 231.121396][ T9] usb 4-1: USB disconnect, device number 10 [ 231.156275][ T6793] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 231.188436][ T6793] Buffer I/O error on dev nbd2, logical block 0, async page read [ 231.316191][ T6793] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 231.331236][ T7543] netlink: 'syz.2.463': attribute type 1 has an invalid length. [ 231.331471][ T6793] Buffer I/O error on dev nbd2, logical block 0, async page read [ 231.338995][ T7543] netlink: 224 bytes leftover after parsing attributes in process `syz.2.463'. [ 231.347146][ T6793] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 231.371277][ T6793] Buffer I/O error on dev nbd2, logical block 0, async page read [ 231.396819][ T6793] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.081522][ T6793] Buffer I/O error on dev nbd2, logical block 0, async page read [ 232.112456][ T6793] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.176557][ T6793] Buffer I/O error on dev nbd2, logical block 0, async page read [ 232.184726][ T6793] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.195854][ T6793] Buffer I/O error on dev nbd2, logical block 0, async page read [ 232.245598][ T7550] netlink: 5056 bytes leftover after parsing attributes in process `syz.4.465'. [ 232.255208][ T7550] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 232.582741][ T6793] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.770906][ T6793] Buffer I/O error on dev nbd2, logical block 0, async page read [ 232.779098][ T6793] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.809090][ T6793] Buffer I/O error on dev nbd2, logical block 0, async page read [ 232.828349][ T6793] ldm_validate_partition_table(): Disk read failed. [ 232.867197][ T6793] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.890054][ T6793] Buffer I/O error on dev nbd2, logical block 0, async page read [ 232.904348][ T6793] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 233.062218][ T6793] Buffer I/O error on dev nbd2, logical block 0, async page read [ 233.262090][ T6793] Dev nbd2: unable to read RDB block 0 [ 233.419202][ T6793] nbd2: unable to read partition table [ 233.438825][ T7556] fuse: Bad value for 'fd' [ 233.472807][ T6793] ldm_validate_partition_table(): Disk read failed. [ 233.479848][ T6793] Dev nbd2: unable to read RDB block 0 [ 233.714329][ T6793] nbd2: unable to read partition table [ 234.460982][ T8] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 235.385081][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 235.402795][ T8] usb 5-1: not running at top speed; connect to a high speed hub [ 235.419925][ T8] usb 5-1: config 6 has an invalid interface number: 30 but max is 0 [ 235.441054][ T8] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 235.531087][ T8] usb 5-1: config 6 has no interface number 0 [ 235.537288][ T8] usb 5-1: config 6 interface 30 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 235.576876][ T8] usb 5-1: config 6 interface 30 altsetting 0 endpoint 0x8 has invalid maxpacket 255, setting to 64 [ 235.614964][ T8] usb 5-1: config 6 interface 30 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.669014][ T8] usb 5-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=1e.11 [ 235.691796][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 235.721153][ T5867] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 235.749133][ T8] usb 5-1: Product: syz [ 235.778799][ T8] usb 5-1: Manufacturer: syz [ 235.795828][ T8] usb 5-1: SerialNumber: syz [ 236.516405][ T7572] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 236.596827][ T5867] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 236.626821][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.650495][ T5867] usb 6-1: Product: syz [ 236.682213][ T5867] usb 6-1: Manufacturer: syz [ 236.687042][ T5867] usb 6-1: SerialNumber: syz [ 236.741353][ T5867] usb 6-1: config 0 descriptor?? [ 236.780291][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 236.812340][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 236.838976][ T7597] netlink: 52 bytes leftover after parsing attributes in process `syz.1.478'. [ 236.990295][ T5867] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 002 [ 237.339993][ T7586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.541580][ T7586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.891063][ T7604] loop6: detected capacity change from 0 to 524287999 [ 237.929023][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.479'. [ 238.085697][ T5867] i2c i2c-1: failure reading functionality [ 238.102463][ T5867] i2c i2c-1: connected i2c-tiny-usb device [ 238.113056][ T5867] usb 6-1: USB disconnect, device number 2 [ 238.443068][ T7604] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 238.836515][ T7610] fuse: Bad value for 'fd' [ 238.855864][ T29] audit: type=1326 audit(1740789737.459:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7611 comm="syz.5.480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb975f8d169 code=0x0 [ 239.022201][ T8] usbtest 5-1:6.30: couldn't get endpoints, -22 [ 239.028573][ T8] usbtest 5-1:6.30: probe with driver usbtest failed with error -22 [ 239.099298][ T8] usb 5-1: USB disconnect, device number 11 [ 239.750427][ T7628] netlink: 'syz.5.485': attribute type 1 has an invalid length. [ 239.758442][ T7628] netlink: 600 bytes leftover after parsing attributes in process `syz.5.485'. [ 240.750390][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.489'. [ 240.766350][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.489'. [ 240.777455][ T7640] netlink: 52 bytes leftover after parsing attributes in process `syz.5.489'. [ 242.529081][ T7659] netdevsim netdevsim4: Direct firmware load for . [ 242.529081][ T7659] failed with error -2 [ 242.556854][ T7659] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 242.556854][ T7659] [ 242.617635][ T7655] libceph: resolve '0.0' (ret=-3): failed [ 243.252844][ T7665] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 243.273872][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.285077][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.035453][ T7692] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 246.060368][ T7692] fuse: Unknown parameter '0xffffffffffffffff' [ 246.074613][ T29] audit: type=1107 audit(1740789744.679:30): pid=7689 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=']YbH4:&,1л1x' [ 247.200444][ T7703] netlink: 40 bytes leftover after parsing attributes in process `syz.4.506'. [ 247.801683][ T7706] warning: `syz.2.508' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 248.263111][ T7712] kvm: pic: single mode not supported [ 248.263286][ T7712] kvm: pic: level sensitive irq not supported [ 248.277779][ T7712] kvm: pic: single mode not supported [ 248.284043][ T7712] kvm: pic: level sensitive irq not supported [ 248.289681][ T7712] kvm: pic: single mode not supported [ 248.296024][ T7712] kvm: pic: level sensitive irq not supported [ 248.307324][ T29] audit: type=1326 audit(1740789746.909:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7711 comm="syz.2.511" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb84f98d169 code=0x0 [ 248.504617][ T79] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 248.672761][ T79] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 248.683959][ T79] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.695749][ T79] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.707319][ T79] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 248.721941][ T79] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 248.731615][ T79] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 248.739722][ T79] usb 5-1: Manufacturer: syz [ 248.746660][ T79] usb 5-1: config 0 descriptor?? [ 248.979082][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 248.992395][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.512'. [ 249.077451][ T5826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.088991][ T5826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.097915][ T5826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.105910][ T7715] nbd3: detected capacity change from 0 to 256 [ 249.118750][ T5826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.128831][ T5826] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 249.142590][ T5826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 249.186961][ T7719] speed is unknown, defaulting to 1000 [ 249.236826][ T79] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 249.261337][ T79] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 249.275389][ T79] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 249.304556][ T7719] speed is unknown, defaulting to 1000 [ 249.427482][ T7719] chnl_net:caif_netlink_parms(): no params data found [ 249.502745][ T53] block nbd3: Receive control failed (result -104) [ 249.509896][ T5867] usb 5-1: USB disconnect, device number 12 [ 249.512224][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.525275][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.533274][ T7719] bridge_slave_0: entered allmulticast mode [ 249.545055][ T7719] bridge_slave_0: entered promiscuous mode [ 249.553263][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.560480][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.567823][ T7719] bridge_slave_1: entered allmulticast mode [ 249.574969][ T7719] bridge_slave_1: entered promiscuous mode [ 249.600260][ T7719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.614672][ T7719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.640709][ T7719] team0: Port device team_slave_0 added [ 249.651093][ T7719] team0: Port device team_slave_1 added [ 249.674109][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.681876][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.708110][ T7719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.721555][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.728758][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.756147][ T7719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.789798][ T7719] hsr_slave_0: entered promiscuous mode [ 249.797936][ T7719] hsr_slave_1: entered promiscuous mode [ 249.804444][ T7719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.812085][ T7719] Cannot create hsr debugfs directory [ 249.928226][ T7719] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 249.939944][ T7719] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 249.949764][ T7719] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 249.960710][ T7719] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 249.983343][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.990977][ T7719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.000069][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.008448][ T7719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.083177][ T7719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.108842][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.123843][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.164165][ T7719] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.196596][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.203878][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.223871][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.231183][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.510364][ T7719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.776855][ T7719] veth0_vlan: entered promiscuous mode [ 250.799902][ T7719] veth1_vlan: entered promiscuous mode [ 250.859891][ T7719] veth0_macvtap: entered promiscuous mode [ 250.879486][ T7719] veth1_macvtap: entered promiscuous mode [ 250.910153][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.922676][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.933040][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.944203][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.954614][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.967776][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.994395][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.009848][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.029984][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.042532][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.053505][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.066675][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.083926][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.105691][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.116416][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.133112][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.143849][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.154704][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.165742][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.175970][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.186756][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.210944][ T53] Bluetooth: hci6: command tx timeout [ 251.243813][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.262820][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.272838][ T7719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.301036][ T7719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.321989][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.343391][ T7719] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.361551][ T7719] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.380107][ T7719] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.389659][ T7719] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.578988][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 252.096978][ T5904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.115090][ T5904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.158880][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.173886][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.546517][ T99] block nbd1: Possible stuck request ffff888025c30000: control (read@0,4096B). Runtime 30 seconds [ 253.337354][ T53] Bluetooth: hci6: command tx timeout [ 254.071066][ T29] audit: type=1326 audit(1740789752.659:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf438d169 code=0x7ffc0000 [ 254.183939][ T29] audit: type=1326 audit(1740789752.659:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf438d169 code=0x7ffc0000 [ 254.571000][ T29] audit: type=1326 audit(1740789752.679:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbf438d169 code=0x7ffc0000 [ 254.823572][ T29] audit: type=1326 audit(1740789752.679:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf438d169 code=0x7ffc0000 [ 254.921932][ T29] audit: type=1326 audit(1740789752.679:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbf438d169 code=0x7ffc0000 [ 254.980967][ T29] audit: type=1326 audit(1740789752.729:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf438d169 code=0x7ffc0000 [ 255.041487][ T29] audit: type=1326 audit(1740789752.739:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbf4384127 code=0x7ffc0000 [ 255.196856][ T29] audit: type=1326 audit(1740789752.739:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbf4329359 code=0x7ffc0000 [ 255.224547][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.244707][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.287239][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.295018][ T29] audit: type=1326 audit(1740789752.739:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbf4384127 code=0x7ffc0000 [ 255.316833][ T29] audit: type=1326 audit(1740789752.739:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7762 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbf4329359 code=0x7ffc0000 [ 255.364876][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.375002][ T5826] Bluetooth: hci6: command tx timeout [ 255.526303][ T5134] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 255.536514][ T5134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.184188][ T7784] netlink: 16 bytes leftover after parsing attributes in process `syz.6.526'. [ 256.193347][ T7784] netlink: 16 bytes leftover after parsing attributes in process `syz.6.526'. [ 256.221703][ T7779] speed is unknown, defaulting to 1000 [ 256.257924][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.265927][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.492662][ T7779] speed is unknown, defaulting to 1000 [ 257.461842][ T53] Bluetooth: hci6: command tx timeout [ 257.465226][ T7779] chnl_net:caif_netlink_parms(): no params data found [ 257.470579][ T7808] FAULT_INJECTION: forcing a failure. [ 257.470579][ T7808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.488495][ T7808] CPU: 0 UID: 0 PID: 7808 Comm: syz.2.532 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 257.488520][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 257.488531][ T7808] Call Trace: [ 257.488537][ T7808] [ 257.488544][ T7808] dump_stack_lvl+0x241/0x360 [ 257.488579][ T7808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.488601][ T7808] ? __wake_up_klogd+0xcc/0x110 [ 257.488626][ T7808] should_fail_ex+0x40a/0x550 [ 257.488653][ T7808] strncpy_from_user+0x36/0x270 [ 257.488677][ T7808] getname_flags+0xf1/0x540 [ 257.488697][ T7808] user_path_at+0x24/0x60 [ 257.488716][ T7808] __se_sys_mount+0x297/0x3c0 [ 257.488736][ T7808] ? __pfx___se_sys_mount+0x10/0x10 [ 257.488753][ T7808] ? do_syscall_64+0x100/0x230 [ 257.488777][ T7808] ? __x64_sys_mount+0x20/0xc0 [ 257.488795][ T7808] do_syscall_64+0xf3/0x230 [ 257.488814][ T7808] ? clear_bhb_loop+0x35/0x90 [ 257.488838][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.488857][ T7808] RIP: 0033:0x7fb84f98d169 [ 257.488873][ T7808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.488886][ T7808] RSP: 002b:00007fb8507a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 257.488904][ T7808] RAX: ffffffffffffffda RBX: 00007fb84fba6080 RCX: 00007fb84f98d169 [ 257.488916][ T7808] RDX: 0000400000002100 RSI: 00004000000020c0 RDI: 0000000000000000 [ 257.488926][ T7808] RBP: 00007fb8507a3090 R08: 0000400000002140 R09: 0000000000000000 [ 257.488937][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.488946][ T7808] R13: 0000000000000000 R14: 00007fb84fba6080 R15: 00007ffd2e553ef8 [ 257.488970][ T7808] [ 258.093935][ T53] Bluetooth: hci0: command tx timeout [ 258.541839][ T7779] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.576536][ T7779] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.638956][ T7779] bridge_slave_0: entered allmulticast mode [ 258.663924][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 258.823705][ T41] block nbd0: Possible stuck request ffff888025c0e000: control (read@0,4096B). Runtime 60 seconds [ 258.934016][ T7779] bridge_slave_0: entered promiscuous mode [ 259.076093][ T7779] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.110942][ T7779] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.118690][ T7779] bridge_slave_1: entered allmulticast mode [ 259.125819][ T7779] bridge_slave_1: entered promiscuous mode [ 260.171115][ T53] Bluetooth: hci0: command tx timeout [ 260.345866][ T7779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.370994][ T5867] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 260.401931][ T7779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.451581][ T5134] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 260.463256][ T5134] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 260.481136][ T5134] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 260.489098][ T5134] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 260.497445][ T5134] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 260.504928][ T5134] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 260.543529][ T5867] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 260.560916][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.590886][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.613078][ T7779] team0: Port device team_slave_0 added [ 260.635868][ T7779] team0: Port device team_slave_1 added [ 260.641249][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 260.676120][ T5867] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 260.695473][ T5867] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 260.714312][ T5867] usb 5-1: Manufacturer: syz [ 260.733344][ T5867] usb 5-1: config 0 descriptor?? [ 260.747248][ T7779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.775973][ T7779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.819163][ T7779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.850212][ T7827] speed is unknown, defaulting to 1000 [ 260.868034][ T7779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.920978][ T7779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.986080][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 260.990832][ T7779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.005903][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.537'. [ 261.111032][ T7820] nbd4: detected capacity change from 0 to 256 [ 261.129077][ T7779] hsr_slave_0: entered promiscuous mode [ 261.137573][ T7779] hsr_slave_1: entered promiscuous mode [ 261.144043][ T7779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.170505][ T7779] Cannot create hsr debugfs directory [ 261.308065][ T5867] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 261.362759][ T7827] speed is unknown, defaulting to 1000 [ 261.380216][ T5867] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 262.234589][ T53] block nbd4: Receive control failed (result -32) [ 262.251056][ T53] Bluetooth: hci0: command tx timeout [ 262.401661][ T5867] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 262.472735][ T5867] usb 5-1: USB disconnect, device number 13 [ 262.567867][ T8] libceph: connect (1)[c::]:6789 error -101 [ 262.582504][ T53] Bluetooth: hci7: command tx timeout [ 262.611473][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 262.941270][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 262.948445][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 262.963486][ T7837] ceph: No mds server is up or the cluster is laggy [ 263.051005][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 263.126214][ T7779] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 263.182397][ T7827] chnl_net:caif_netlink_parms(): no params data found [ 263.205336][ T7779] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 263.212759][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 263.223449][ T8] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 263.240842][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.276277][ T8] usb 3-1: config 0 has no interface number 0 [ 263.305988][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 263.322591][ T7779] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 263.343235][ T7779] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 263.350263][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.374657][ T8] usb 3-1: config 0 descriptor?? [ 263.412131][ T8] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 263.596537][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.545'. [ 264.153745][ T7827] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.161560][ T7827] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.169021][ T7827] bridge_slave_0: entered allmulticast mode [ 264.197982][ T7827] bridge_slave_0: entered promiscuous mode [ 264.240421][ T7827] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.250392][ T7827] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.270958][ T7827] bridge_slave_1: entered allmulticast mode [ 264.278685][ T7827] bridge_slave_1: entered promiscuous mode [ 264.331444][ T53] Bluetooth: hci0: command tx timeout [ 264.376401][ T7827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.429383][ T7827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.537831][ T7827] team0: Port device team_slave_0 added [ 264.558416][ T7827] team0: Port device team_slave_1 added [ 264.629491][ T79] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 264.661261][ T53] Bluetooth: hci7: command tx timeout [ 264.819013][ T79] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 264.830391][ T79] usb 7-1: New USB device strings: Mfr=223, Product=2, SerialNumber=3 [ 264.839178][ T79] usb 7-1: Product: syz [ 264.844520][ T79] usb 7-1: Manufacturer: syz [ 264.849496][ T79] usb 7-1: SerialNumber: syz [ 264.869201][ T79] usb 7-1: config 0 descriptor?? [ 264.888493][ T79] ch341 7-1:0.0: ch341-uart converter detected [ 265.099133][ T8] gspca_vc032x: reg_w err -71 [ 265.104005][ T8] vc032x 3-1:0.4: probe with driver vc032x failed with error -71 [ 265.114649][ T79] usb 7-1: failed to receive control message: -32 [ 265.127050][ T79] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 265.195634][ T7779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.204503][ T8] usb 3-1: USB disconnect, device number 14 [ 265.283768][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.301041][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.329483][ T7827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.716774][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.6.547'. [ 265.784278][ T7779] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.830506][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.843186][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.880210][ T7827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.285452][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.292822][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.306151][ T8] usb 7-1: USB disconnect, device number 2 [ 266.392205][ T8] ch341 7-1:0.0: device disconnected [ 266.576061][ T7827] hsr_slave_0: entered promiscuous mode [ 266.622689][ T7827] hsr_slave_1: entered promiscuous mode [ 266.628917][ T7827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.648063][ T7827] Cannot create hsr debugfs directory [ 266.662442][ T6127] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.669793][ T6127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.749004][ T53] Bluetooth: hci7: command tx timeout [ 267.114612][ T7779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.210980][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 267.310632][ T7827] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 267.339966][ T7827] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 267.351078][ T5905] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 267.366324][ T7827] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 267.373484][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 267.396289][ T7827] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 267.405370][ T8] usb 7-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 267.414582][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.428425][ T8] usb 7-1: Product: syz [ 267.433035][ T8] usb 7-1: Manufacturer: syz [ 267.437849][ T8] usb 7-1: SerialNumber: syz [ 267.463456][ T8] usb 7-1: config 0 descriptor?? [ 267.469747][ T8] hub 7-1:0.0: bad descriptor, ignoring hub [ 267.475817][ T8] hub 7-1:0.0: probe with driver hub failed with error -5 [ 267.489315][ T7779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.549474][ T5905] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=c7.7e [ 267.573682][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.601157][ T5905] usb 5-1: Product: syz [ 267.605475][ T5905] usb 5-1: Manufacturer: syz [ 267.610095][ T5905] usb 5-1: SerialNumber: syz [ 267.623917][ T7827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.648568][ T5905] usb 5-1: config 0 descriptor?? [ 267.708529][ T5905] mvusb_mdio 5-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 267.721657][ T7827] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.817117][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.821046][ T5905] usb 7-1: USB disconnect, device number 3 [ 267.824329][ T6014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.227705][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.234922][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.517961][ T7909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 268.811480][ T53] Bluetooth: hci7: command tx timeout [ 269.012235][ T7779] veth0_vlan: entered promiscuous mode [ 269.119216][ T7779] veth1_vlan: entered promiscuous mode [ 269.232924][ T7779] veth0_macvtap: entered promiscuous mode [ 269.243092][ T7779] veth1_macvtap: entered promiscuous mode [ 269.309727][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.385100][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.439007][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.499569][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.554606][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.974866][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.035443][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.161795][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.172533][ T9] libceph: connect (1)[c::]:6789 error -101 [ 270.477521][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 270.505258][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.521124][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.572768][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.588910][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.723288][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.824402][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 270.831033][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.841654][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 270.860058][ T7779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.864613][ T5924] usb 5-1: USB disconnect, device number 14 [ 270.870376][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.101626][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.114054][ T7923] ceph: No mds server is up or the cluster is laggy [ 271.123454][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.140938][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.160901][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.175822][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.185738][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.204594][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.214762][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.226205][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.236240][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.246848][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.256988][ T7779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.268021][ T7779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.307215][ T7779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.356057][ T7779] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.372210][ T7779] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.383545][ T7779] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.392503][ T7779] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.608105][ T7827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.620922][ T5905] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 271.671437][ T6127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.679306][ T6127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.799645][ T6014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.808889][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 271.852161][ T5905] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 271.864251][ T6014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.907439][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.952669][ T5905] usb 3-1: config 0 descriptor?? [ 271.968915][ T5905] gspca_main: sq930x-2.14.0 probing 041e:403c [ 271.997627][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.6.563'. [ 273.743851][ T5905] gspca_sq930x: reg_r 001f failed -110 [ 274.020360][ T5905] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 274.766332][ T7827] veth0_vlan: entered promiscuous mode [ 274.837768][ T7827] veth1_vlan: entered promiscuous mode [ 274.960398][ T7827] veth0_macvtap: entered promiscuous mode [ 274.985187][ T7827] veth1_macvtap: entered promiscuous mode [ 275.014322][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.046412][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.071156][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.103719][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.122286][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.161854][ T5905] usb 3-1: USB disconnect, device number 15 [ 275.178284][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.211048][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.230975][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.257150][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.301551][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.323482][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.408663][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.565'. [ 275.587379][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.239807][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.271300][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.291021][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.319007][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.334867][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.360313][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.378327][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.396001][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.410378][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.421038][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.432001][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.443929][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.456574][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.467037][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.478077][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.490268][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.506030][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.516206][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.527382][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.537599][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.549129][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.561369][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.618245][ T7827] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.630902][ T8] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 276.645538][ T7827] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.646679][ T7966] xt_hashlimit: size too large, truncated to 1048576 [ 276.669232][ T7827] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.720947][ T7827] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.797513][ T8] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 276.811023][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.843757][ T8] usb 3-1: config 0 has no interface number 0 [ 276.850741][ T8] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 276.892876][ T8] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 276.955896][ T8] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.022094][ T8] usb 3-1: config 0 interface 52 has no altsetting 0 [ 277.079677][ T8] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 277.155514][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 277.292223][ T8] usb 3-1: SerialNumber: syz [ 278.049087][ T8] usb 3-1: config 0 descriptor?? [ 278.314932][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.335023][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.337294][ T8] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 278.386810][ T8] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -5 [ 278.394820][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.428903][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.543251][ T41] block nbd3: Possible stuck request ffff888025d4e000: control (read@0,4096B). Runtime 30 seconds [ 279.618498][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.8.534'. [ 280.011501][ T79] usb 3-1: USB disconnect, device number 16 [ 280.450537][ T8001] netlink: 'syz.6.573': attribute type 3 has an invalid length. [ 280.458364][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.6.573'. [ 282.516258][ T53] Bluetooth: hci7: command tx timeout [ 283.093215][ T8025] speed is unknown, defaulting to 1000 [ 283.278668][ T99] block nbd1: Possible stuck request ffff888025c30000: control (read@0,4096B). Runtime 60 seconds [ 284.123782][ T8025] speed is unknown, defaulting to 1000 [ 284.366480][ T8038] netlink: 28 bytes leftover after parsing attributes in process `syz.7.585'. [ 284.381506][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 284.430113][ T8038] netlink: 'syz.7.585': attribute type 7 has an invalid length. [ 284.459301][ T8038] netlink: 28 bytes leftover after parsing attributes in process `syz.7.585'. [ 284.514229][ T8038] netlink: 'syz.7.585': attribute type 7 has an invalid length. [ 284.538866][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.7.585'. [ 284.561402][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 284.573169][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.609548][ T9] usb 9-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 284.909373][ T8046] xt_TCPMSS: Only works on TCP SYN packets [ 285.441113][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.470603][ T9] usb 9-1: config 0 descriptor?? [ 285.504703][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 285.504720][ T29] audit: type=1326 audit(1740789784.109:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8037 comm="syz.7.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8b18d169 code=0x7ffc0000 [ 285.582114][ T29] audit: type=1326 audit(1740789784.109:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8037 comm="syz.7.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8b18d169 code=0x7ffc0000 [ 285.603945][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.619346][ T29] audit: type=1326 audit(1740789784.109:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8037 comm="syz.7.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f8c8b18d169 code=0x7ffc0000 [ 285.757532][ T29] audit: type=1326 audit(1740789784.109:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8037 comm="syz.7.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8b18d169 code=0x7ffc0000 [ 285.798180][ T29] audit: type=1326 audit(1740789784.109:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8037 comm="syz.7.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8b18d169 code=0x7ffc0000 [ 285.819616][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.826378][ T29] audit: type=1326 audit(1740789784.109:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8037 comm="syz.7.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f8c8b18d169 code=0x7ffc0000 [ 285.848305][ T29] audit: type=1326 audit(1740789784.109:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8037 comm="syz.7.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8b18d169 code=0x7ffc0000 [ 285.869842][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.971748][ T8049] netlink: 71 bytes leftover after parsing attributes in process `syz.2.588'. [ 286.245516][ T8035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.367386][ T8035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.551218][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.7.589'. [ 286.936928][ T29] audit: type=1326 audit(1740789784.109:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8037 comm="syz.7.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8b18d169 code=0x7ffc0000 [ 287.188690][ T8035] Bluetooth: MGMT ver 1.23 [ 287.318380][ T8035] kvm: kvm [8033]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 287.340026][ T8064] netlink: 52 bytes leftover after parsing attributes in process `syz.2.591'. [ 287.398961][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 287.428127][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 287.469513][ T9] usb 9-1: USB disconnect, device number 2 [ 287.614798][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.593'. [ 288.891338][ T41] block nbd0: Possible stuck request ffff888025c0e000: control (read@0,4096B). Runtime 90 seconds [ 289.241645][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 290.162261][ T5924] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 290.346654][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 290.448982][ T5924] usb 8-1: config 0 has an invalid interface number: 114 but max is 0 [ 290.462370][ T5924] usb 8-1: config 0 has no interface number 0 [ 290.469495][ T9] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 290.471723][ T5924] usb 8-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=13.67 [ 290.608888][ T5924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.701704][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.712793][ T5924] usb 8-1: Product: syz [ 290.712878][ T5924] usb 8-1: Manufacturer: syz [ 290.712894][ T5924] usb 8-1: SerialNumber: syz [ 290.718088][ T5924] usb 8-1: config 0 descriptor?? [ 290.931030][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.950868][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 290.976024][ T8097] 9pnet_fd: Insufficient options for proto=fd [ 291.021980][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 291.034606][ T5924] cdc_subset 8-1:0.114: probe with driver cdc_subset failed with error -22 [ 291.051029][ T9] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 291.079098][ T9] usb 9-1: Manufacturer: syz [ 291.091891][ T9] usb 9-1: config 0 descriptor?? [ 291.117257][ T8101] netlink: 44 bytes leftover after parsing attributes in process `syz.2.605'. [ 291.129288][ T8101] netlink: 43 bytes leftover after parsing attributes in process `syz.2.605'. [ 291.139491][ T8101] netlink: 'syz.2.605': attribute type 6 has an invalid length. [ 291.153597][ T8101] netlink: 'syz.2.605': attribute type 5 has an invalid length. [ 291.822079][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.8.596'. [ 291.837896][ T8101] netlink: 43 bytes leftover after parsing attributes in process `syz.2.605'. [ 291.849864][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.8.596'. [ 291.859813][ T8079] dccp_v4_rcv: dropped packet with invalid checksum [ 291.904143][ T5905] usb 8-1: USB disconnect, device number 2 [ 292.010898][ T8077] nbd5: detected capacity change from 0 to 256 [ 292.226927][ T8110] netlink: 71 bytes leftover after parsing attributes in process `syz.2.606'. [ 292.964100][ T9] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 293.037758][ T9] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 293.071218][ T53] block nbd5: Receive control failed (result -32) [ 293.162426][ T9] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 293.211843][ T9] usb 9-1: USB disconnect, device number 3 [ 293.218625][ T8095] speed is unknown, defaulting to 1000 [ 293.585558][ T8095] speed is unknown, defaulting to 1000 [ 294.200550][ T8130] FAULT_INJECTION: forcing a failure. [ 294.200550][ T8130] name failslab, interval 1, probability 0, space 0, times 0 [ 294.213752][ T8130] CPU: 0 UID: 0 PID: 8130 Comm: syz.6.610 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 294.213776][ T8130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 294.213786][ T8130] Call Trace: [ 294.213793][ T8130] [ 294.213800][ T8130] dump_stack_lvl+0x241/0x360 [ 294.213825][ T8130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.213849][ T8130] ? __pfx__printk+0x10/0x10 [ 294.213874][ T8130] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 294.213901][ T8130] ? __pfx___might_resched+0x10/0x10 [ 294.213925][ T8130] should_fail_ex+0x40a/0x550 [ 294.213951][ T8130] should_failslab+0xac/0x100 [ 294.213976][ T8130] kmem_cache_alloc_node_noprof+0x77/0x380 [ 294.214000][ T8130] ? __alloc_skb+0x1c3/0x440 [ 294.214025][ T8130] __alloc_skb+0x1c3/0x440 [ 294.214044][ T8130] ? lockdep_hardirqs_on+0x99/0x150 [ 294.214069][ T8130] ? __pfx___alloc_skb+0x10/0x10 [ 294.214097][ T8130] netlink_sendmsg+0x634/0xcb0 [ 294.214127][ T8130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.214155][ T8130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.214171][ T8130] __sock_sendmsg+0x221/0x270 [ 294.214193][ T8130] ____sys_sendmsg+0x53a/0x860 [ 294.214225][ T8130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.214246][ T8130] ? __fget_files+0x2a/0x410 [ 294.214266][ T8130] ? __fget_files+0x2a/0x410 [ 294.214290][ T8130] __sys_sendmsg+0x269/0x350 [ 294.214310][ T8130] ? finish_task_switch+0x1e5/0x870 [ 294.214338][ T8130] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.214359][ T8130] ? __schedule+0x18c4/0x4c40 [ 294.214415][ T8130] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.214438][ T8130] ? do_syscall_64+0x100/0x230 [ 294.214462][ T8130] ? do_syscall_64+0xb6/0x230 [ 294.214484][ T8130] do_syscall_64+0xf3/0x230 [ 294.214505][ T8130] ? clear_bhb_loop+0x35/0x90 [ 294.214528][ T8130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.214548][ T8130] RIP: 0033:0x7fe46318d169 [ 294.214564][ T8130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.214578][ T8130] RSP: 002b:00007fe460ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.214596][ T8130] RAX: ffffffffffffffda RBX: 00007fe4633a6160 RCX: 00007fe46318d169 [ 294.214608][ T8130] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000007 [ 294.214619][ T8130] RBP: 00007fe460ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 294.214629][ T8130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.214639][ T8130] R13: 0000000000000000 R14: 00007fe4633a6160 R15: 00007ffcf404e008 [ 294.214665][ T8130] [ 294.533404][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 294.540316][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 294.981006][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 294.987040][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 295.283145][ T8128] ceph: No mds server is up or the cluster is laggy [ 295.503885][ T9] libceph: connect (1)[c::]:6789 error -101 [ 296.025516][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 296.629877][ T8154] xt_TCPMSS: Only works on TCP SYN packets [ 297.185751][ T8156] 9pnet_fd: Insufficient options for proto=fd [ 297.988000][ T8169] xt_TCPMSS: Only works on TCP SYN packets [ 299.115514][ T8165] netlink: 71 bytes leftover after parsing attributes in process `syz.7.619'. [ 299.293601][ T2152] libceph: connect (1)[c::]:6789 error -101 [ 299.299690][ T2152] libceph: mon0 (1)[c::]:6789 connect error [ 300.019753][ T8172] ceph: No mds server is up or the cluster is laggy [ 300.862610][ T8190] xt_TCPMSS: Only works on TCP SYN packets [ 301.898306][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 301.944240][ T8200] FAULT_INJECTION: forcing a failure. [ 301.944240][ T8200] name failslab, interval 1, probability 0, space 0, times 0 [ 301.965378][ T8202] 9pnet_fd: Insufficient options for proto=fd [ 301.981551][ T8200] CPU: 1 UID: 0 PID: 8200 Comm: syz.4.628 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 301.981568][ T8200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 301.981575][ T8200] Call Trace: [ 301.981579][ T8200] [ 301.981583][ T8200] dump_stack_lvl+0x241/0x360 [ 301.981599][ T8200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.981609][ T8200] ? __pfx__printk+0x10/0x10 [ 301.981623][ T8200] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 301.981639][ T8200] ? __pfx___might_resched+0x10/0x10 [ 301.981653][ T8200] should_fail_ex+0x40a/0x550 [ 301.981669][ T8200] should_failslab+0xac/0x100 [ 301.981684][ T8200] kmem_cache_alloc_node_noprof+0x77/0x380 [ 301.981697][ T8200] ? __alloc_skb+0x1c3/0x440 [ 301.981712][ T8200] __alloc_skb+0x1c3/0x440 [ 301.981727][ T8200] ? __pfx___alloc_skb+0x10/0x10 [ 301.981744][ T8200] ? netlink_autobind+0xd6/0x2f0 [ 301.981753][ T8200] ? netlink_autobind+0x2b0/0x2f0 [ 301.981765][ T8200] netlink_sendmsg+0x634/0xcb0 [ 301.981780][ T8200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.981796][ T8200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.981804][ T8200] __sock_sendmsg+0x221/0x270 [ 301.981817][ T8200] ____sys_sendmsg+0x53a/0x860 [ 301.981835][ T8200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.981847][ T8200] ? __fget_files+0x2a/0x410 [ 301.981858][ T8200] ? __fget_files+0x2a/0x410 [ 301.981871][ T8200] __sys_sendmsg+0x269/0x350 [ 301.981887][ T8200] ? __pfx___sys_sendmsg+0x10/0x10 [ 301.981919][ T8200] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 301.981933][ T8200] ? do_syscall_64+0x100/0x230 [ 301.981947][ T8200] ? do_syscall_64+0xb6/0x230 [ 301.981960][ T8200] do_syscall_64+0xf3/0x230 [ 301.981972][ T8200] ? clear_bhb_loop+0x35/0x90 [ 301.981986][ T8200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.982007][ T8200] RIP: 0033:0x7fdbf438d169 [ 301.982017][ T8200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.982025][ T8200] RSP: 002b:00007fdbf5205038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.982036][ T8200] RAX: ffffffffffffffda RBX: 00007fdbf45a5fa0 RCX: 00007fdbf438d169 [ 301.982043][ T8200] RDX: 0000000004000000 RSI: 0000400000001200 RDI: 0000000000000004 [ 301.982049][ T8200] RBP: 00007fdbf5205090 R08: 0000000000000000 R09: 0000000000000000 [ 301.982055][ T8200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.982060][ T8200] R13: 0000000000000000 R14: 00007fdbf45a5fa0 R15: 00007ffdd9cd1248 [ 301.982074][ T8200] [ 302.311140][ T79] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 302.467162][ T79] usb 7-1: Using ep0 maxpacket: 32 [ 302.486002][ T79] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 302.497773][ T79] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 302.510562][ T79] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 302.520419][ T79] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.528684][ T79] usb 7-1: Product: syz [ 302.533176][ T79] usb 7-1: Manufacturer: syz [ 302.537819][ T79] usb 7-1: SerialNumber: syz [ 302.621838][ T79] usb 7-1: config 0 descriptor?? [ 302.643506][ T79] usb 7-1: no audio or video endpoints found [ 302.702693][ T8206] FAULT_INJECTION: forcing a failure. [ 302.702693][ T8206] name failslab, interval 1, probability 0, space 0, times 0 [ 302.730559][ T8206] CPU: 0 UID: 0 PID: 8206 Comm: syz.4.631 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 302.730587][ T8206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 302.730598][ T8206] Call Trace: [ 302.730604][ T8206] [ 302.730611][ T8206] dump_stack_lvl+0x241/0x360 [ 302.730636][ T8206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.730653][ T8206] ? __pfx__printk+0x10/0x10 [ 302.730678][ T8206] ? fs_reclaim_acquire+0x93/0x130 [ 302.730698][ T8206] ? __pfx___might_resched+0x10/0x10 [ 302.730722][ T8206] should_fail_ex+0x40a/0x550 [ 302.730758][ T8206] should_failslab+0xac/0x100 [ 302.730779][ T8206] __kmalloc_noprof+0xdd/0x4c0 [ 302.730793][ T8206] ? tomoyo_encode+0x26f/0x540 [ 302.730816][ T8206] tomoyo_encode+0x26f/0x540 [ 302.730836][ T8206] tomoyo_realpath_from_path+0x59e/0x5e0 [ 302.730861][ T8206] tomoyo_mount_permission+0x3bf/0xb80 [ 302.730881][ T8206] ? stack_depot_save_flags+0x37/0x940 [ 302.730900][ T8206] ? tomoyo_mount_permission+0x298/0xb80 [ 302.730918][ T8206] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 302.730973][ T8206] ? hook_sb_mount+0x10b/0x420 [ 302.730990][ T8206] ? security_sb_mount+0x22/0x2f0 [ 302.731012][ T8206] security_sb_mount+0xe0/0x2f0 [ 302.731033][ T8206] path_mount+0xb9/0xfa0 [ 302.731055][ T8206] ? kmem_cache_free+0x195/0x410 [ 302.731069][ T8206] ? user_path_at+0x44/0x60 [ 302.731095][ T8206] __se_sys_mount+0x2d6/0x3c0 [ 302.731112][ T8206] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 302.731134][ T8206] ? __pfx___se_sys_mount+0x10/0x10 [ 302.731151][ T8206] ? do_syscall_64+0x100/0x230 [ 302.731173][ T8206] ? __x64_sys_mount+0x20/0xc0 [ 302.731189][ T8206] do_syscall_64+0xf3/0x230 [ 302.731216][ T8206] ? clear_bhb_loop+0x35/0x90 [ 302.731240][ T8206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.731259][ T8206] RIP: 0033:0x7fdbf438d169 [ 302.731273][ T8206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.731286][ T8206] RSP: 002b:00007fdbf5205038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 302.731305][ T8206] RAX: ffffffffffffffda RBX: 00007fdbf45a5fa0 RCX: 00007fdbf438d169 [ 302.731316][ T8206] RDX: 0000000000000000 RSI: 0000400000001080 RDI: 0000000000000000 [ 302.731326][ T8206] RBP: 00007fdbf5205090 R08: 0000000000000000 R09: 0000000000000000 [ 302.731337][ T8206] R10: 0000000001101020 R11: 0000000000000246 R12: 0000000000000001 [ 302.731347][ T8206] R13: 0000000000000000 R14: 00007fdbf45a5fa0 R15: 00007ffdd9cd1248 [ 302.731373][ T8206] [ 303.029281][ T8206] ERROR: Out of memory at tomoyo_realpath_from_path. [ 304.924709][ T8222] netlink: 71 bytes leftover after parsing attributes in process `syz.4.633'. [ 306.973316][ T9] usb 7-1: USB disconnect, device number 4 [ 307.978336][ T8244] xt_TCPMSS: Only works on TCP SYN packets [ 308.877611][ T8253] 9pnet_fd: Insufficient options for proto=fd [ 309.020881][ T5924] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 309.662163][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 309.669156][ T5924] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 309.702522][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.735580][ T5924] usb 5-1: config 0 descriptor?? [ 309.778392][ T5924] gspca_main: sq930x-2.14.0 probing 041e:403c [ 309.788235][ T8259] fuse: Unknown parameter 'user_id00000000000000000000' [ 310.011490][ T41] block nbd3: Possible stuck request ffff888025d4e000: control (read@0,4096B). Runtime 60 seconds [ 310.221411][ T8268] netlink: 71 bytes leftover after parsing attributes in process `syz.8.646'. [ 310.618724][ T5924] gspca_sq930x: ucbus_write failed -110 [ 310.629620][ T5924] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 311.253473][ T8276] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 311.264454][ T8276] fuse: Unknown parameter '0xffffffffffffffff' [ 311.300163][ T29] audit: type=1107 audit(1740789809.879:108): pid=8269 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=']YbH4:&,1л1x' [ 312.131022][ T2152] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 312.186964][ T9] usb 5-1: USB disconnect, device number 15 [ 312.378218][ T2152] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 312.414621][ T8286] xt_TCPMSS: Only works on TCP SYN packets [ 313.290051][ T2152] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 314.154913][ T99] block nbd1: Possible stuck request ffff888025c30000: control (read@0,4096B). Runtime 90 seconds [ 314.155317][ T8291] 9pnet_fd: Insufficient options for proto=fd [ 314.166950][ T2152] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 314.221428][ T2152] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.320952][ T2152] usb 8-1: can't set config #27, error -71 [ 314.366713][ T2152] usb 8-1: USB disconnect, device number 3 [ 314.811786][ T8303] fuse: Unknown parameter 'user_id00000000000000000000' [ 315.071661][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 316.363865][ T8313] evm: overlay not supported [ 317.726347][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.743589][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.085676][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.662'. [ 318.520981][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 318.695396][ T9] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 318.716666][ T9] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 318.735259][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.822395][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 319.566702][ T41] block nbd0: Possible stuck request ffff888025c0e000: control (read@0,4096B). Runtime 120 seconds [ 319.622830][ T9] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 320.792828][ T8] usb 8-1: USB disconnect, device number 4 [ 321.163634][ T8351] fuse: Unknown parameter 'user_id00000000000000000000' [ 321.981073][ T91] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 322.168156][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.8.671'. [ 322.178045][ T91] usb 7-1: Using ep0 maxpacket: 8 [ 322.207685][ T91] usb 7-1: unable to get BOS descriptor or descriptor too short [ 322.247510][ T91] usb 7-1: config 8 has an invalid interface number: 121 but max is 0 [ 322.300842][ T91] usb 7-1: config 8 has no interface number 0 [ 322.369610][ T91] usb 7-1: config 8 interface 121 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 322.403528][ T91] usb 7-1: config 8 interface 121 has no altsetting 0 [ 322.460551][ T91] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=f0.98 [ 322.491173][ T91] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.499233][ T91] usb 7-1: Product: syz [ 322.522879][ T91] usb 7-1: Manufacturer: syz [ 322.527576][ T91] usb 7-1: SerialNumber: syz [ 322.674974][ T8361] netlink: 19 bytes leftover after parsing attributes in process `syz.7.672'. [ 322.690245][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 322.911021][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 322.967340][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 323.053594][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 323.066030][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.081820][ T8] usb 3-1: Product: syz [ 323.086079][ T8] usb 3-1: Manufacturer: syz [ 323.090710][ T8] usb 3-1: SerialNumber: syz [ 323.129495][ T8374] netlink: 'syz.4.675': attribute type 1 has an invalid length. [ 323.155623][ T8] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input10 [ 323.358615][ T8377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.602370][ T8377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.696515][ T5180] bcm5974 3-1:1.0: could not read from device [ 323.727281][ T5180] bcm5974 3-1:1.0: could not read from device [ 323.760619][ T8] usb 3-1: USB disconnect, device number 17 [ 323.767680][ T5180] bcm5974 3-1:1.0: could not read from device [ 323.905312][ T8380] syzkaller0: entered promiscuous mode [ 323.927131][ T8380] syzkaller0: entered allmulticast mode [ 326.735288][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 326.749201][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 327.026097][ T8] libceph: connect (1)[c::]:6789 error -101 [ 327.032325][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 327.480139][ T8392] ceph: No mds server is up or the cluster is laggy [ 327.738467][ T91] radio-si470x 7-1:8.121: this is not a si470x device. [ 327.783098][ T91] radio-raremono 7-1:8.121: this is not Thanko's Raremono. [ 329.506228][ T5924] usb 7-1: USB disconnect, device number 5 [ 331.550332][ T8428] overlayfs: missing 'lowerdir' [ 334.665845][ T5924] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 335.005866][ T8457] xt_hashlimit: size too large, truncated to 1048576 [ 335.046584][ T5924] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 335.824192][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.888803][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.077348][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 336.156148][ T5924] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 336.437693][ T5924] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 336.595248][ T5924] usb 5-1: Manufacturer: syz [ 336.629154][ T5924] usb 5-1: config 0 descriptor?? [ 336.819575][ T5924] usbhid 5-1:0.0: can't add hid device: -71 [ 336.850942][ T5924] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 336.881846][ T5924] usb 5-1: USB disconnect, device number 16 [ 338.118178][ T5924] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 338.325476][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.356191][ T5924] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 338.389860][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.438817][ T5924] usb 5-1: config 0 descriptor?? [ 338.473165][ T5924] pwc: Askey VC010 type 2 USB webcam detected. [ 338.644658][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.703'. [ 339.097310][ T5924] pwc: recv_control_msg error -32 req 02 val 2b00 [ 339.124135][ T5924] pwc: recv_control_msg error -32 req 02 val 2700 [ 339.217717][ T5924] pwc: recv_control_msg error -32 req 02 val 2c00 [ 339.294557][ T5924] pwc: recv_control_msg error -32 req 04 val 1000 [ 339.386466][ T5924] pwc: recv_control_msg error -32 req 04 val 1300 [ 339.762480][ T8480] netlink: 64 bytes leftover after parsing attributes in process `syz.4.700'. [ 339.997260][ T8507] __vm_enough_memory: pid: 8507, comm: syz.2.709, bytes: 4503599627366400 not enough memory for the allocation [ 340.099897][ T5924] pwc: recv_control_msg error -71 req 02 val 2100 [ 340.112363][ T5924] pwc: recv_control_msg error -71 req 04 val 1500 [ 340.133611][ T5924] pwc: recv_control_msg error -71 req 02 val 2500 [ 340.150578][ T5924] pwc: recv_control_msg error -71 req 02 val 2400 [ 340.182549][ T5924] pwc: recv_control_msg error -71 req 02 val 2600 [ 340.216179][ T5924] pwc: recv_control_msg error -71 req 02 val 2900 [ 340.254368][ T5134] Bluetooth: hci5: command 0x0406 tx timeout [ 340.275937][ T5924] pwc: recv_control_msg error -71 req 02 val 2800 [ 340.314305][ T41] block nbd3: Possible stuck request ffff888025d4e000: control (read@0,4096B). Runtime 90 seconds [ 340.394517][ T5924] pwc: recv_control_msg error -71 req 04 val 1100 [ 340.415619][ T5924] pwc: recv_control_msg error -71 req 04 val 1200 [ 340.931264][ T5924] pwc: Registered as video103. [ 340.962368][ T5924] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 341.009039][ T5924] usb 5-1: USB disconnect, device number 17 [ 341.435989][ T8524] syz.6.712 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 342.946523][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'. [ 343.531060][ T8540] netlink: 28 bytes leftover after parsing attributes in process `syz.8.720'. [ 343.540503][ T8540] netlink: 28 bytes leftover after parsing attributes in process `syz.8.720'. [ 343.582799][ T8540] syz_tun: entered promiscuous mode [ 343.870540][ T8540] syz_tun: left promiscuous mode [ 344.150927][ T5896] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 345.203304][ T5896] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 345.599496][ T8556] xt_TCPMSS: Only works on TCP SYN packets [ 345.861962][ T99] block nbd1: Possible stuck request ffff888025c30000: control (read@0,4096B). Runtime 120 seconds [ 345.874223][ T5134] Bluetooth: hci7: command 0x0405 tx timeout [ 345.894837][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.910854][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.920741][ T5896] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 345.942903][ T5896] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 345.952316][ T5896] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 345.960540][ T5896] usb 7-1: Manufacturer: syz [ 345.988185][ T5896] usb 7-1: config 0 descriptor?? [ 346.824640][ T5896] usbhid 7-1:0.0: can't add hid device: -71 [ 346.863987][ T5896] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 346.945489][ T5896] usb 7-1: USB disconnect, device number 6 [ 348.067749][ T8581] hub 6-0:1.0: USB hub found [ 348.077713][ T8581] hub 6-0:1.0: 1 port detected [ 349.175595][ T8587] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 349.182461][ T8587] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 349.497271][ T8596] netlink: 16 bytes leftover after parsing attributes in process `syz.7.731'. [ 350.210390][ T41] block nbd0: Possible stuck request ffff888025c0e000: control (read@0,4096B). Runtime 150 seconds [ 350.277362][ T8588] vhci_hcd: connection closed [ 350.289780][ T8587] vhci_hcd vhci_hcd.0: Device attached [ 350.326975][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.733'. [ 350.350063][ T12] vhci_hcd: stop threads [ 350.392344][ T5905] vhci_hcd: vhci_device speed not set [ 350.461029][ T5905] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 350.569724][ T12] vhci_hcd: release socket [ 350.582354][ T12] vhci_hcd: disconnect device [ 351.611969][ T30] INFO: task syz.0.352:7153 blocked for more than 143 seconds. [ 351.619955][ T30] Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 351.634849][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.656758][ T30] task:syz.0.352 state:D stack:24656 pid:7153 tgid:7149 ppid:5829 task_flags:0x400140 flags:0x00004004 [ 351.707001][ T30] Call Trace: [ 351.717730][ T30] [ 351.727685][ T30] __schedule+0x18bc/0x4c40 [ 351.745077][ T30] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 351.763397][ T30] ? __pfx___schedule+0x10/0x10 [ 351.768528][ T30] ? __pfx_lock_release+0x10/0x10 [ 351.773961][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 351.780142][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 351.787496][ T30] ? schedule+0x90/0x320 [ 351.792063][ T30] schedule+0x14b/0x320 [ 351.796492][ T30] schedule_preempt_disabled+0x13/0x30 [ 351.802361][ T30] __mutex_lock+0x817/0x1010 [ 351.807925][ T30] ? __mutex_lock+0x602/0x1010 [ 351.813160][ T5896] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 351.823716][ T30] ? bdev_open+0xf0/0xc50 [ 351.828474][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 351.833812][ T30] ? errseq_sample+0x40/0x70 [ 351.838673][ T30] ? alloc_file_pseudo_noaccount+0x2b2/0x3a0 [ 351.845024][ T30] ? disk_block_events+0xa9/0x120 [ 351.850292][ T30] ? bdev_open+0xb1/0xc50 [ 351.854978][ T30] bdev_open+0xf0/0xc50 [ 351.859365][ T30] ? iput+0x3be/0xa50 [ 351.863818][ T30] bdev_file_open_by_dev+0x1b0/0x220 [ 351.869554][ T30] bdev_file_open_by_path+0x1f9/0x480 [ 351.876152][ T30] ? __pfx_bdev_file_open_by_path+0x10/0x10 [ 351.882651][ T30] ? dput+0x37/0x2b0 [ 351.887107][ T30] btrfs_scan_one_device+0x45e/0xec0 [ 351.893961][ T30] ? btrfs_get_tree+0x4bd/0x1a30 [ 351.899222][ T30] ? __pfx_btrfs_scan_one_device+0x10/0x10 [ 351.905484][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 351.912583][ T30] btrfs_get_tree+0x33b/0x1a30 [ 351.917587][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 351.924605][ T30] ? __pfx_btrfs_get_tree+0x10/0x10 [ 351.930217][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 351.935973][ T30] ? __pfx_btrfs_dup_fs_context+0x10/0x10 [ 351.942332][ T30] vfs_get_tree+0x90/0x2b0 [ 351.947109][ T30] fc_mount+0x1b/0xb0 [ 351.955950][ T30] btrfs_get_tree+0x6b1/0x1a30 [ 351.961187][ T30] ? rcu_is_watching+0x15/0xb0 [ 351.966261][ T30] ? vfs_parse_fs_string+0x190/0x230 [ 351.972105][ T30] ? vfs_parse_monolithic_sep+0xe7/0x460 [ 351.973792][ T5896] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 351.990986][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.002256][ T30] ? __pfx_btrfs_get_tree+0x10/0x10 [ 352.007747][ T30] ? vfs_parse_fs_string+0x190/0x230 [ 352.014420][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.024823][ T30] ? rcu_is_watching+0x15/0xb0 [ 352.030107][ T30] ? cap_capable+0x139/0x450 [ 352.035175][ T5896] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 352.048567][ T30] ? safesetid_security_capable+0xb2/0x1d0 [ 352.054776][ T30] vfs_get_tree+0x90/0x2b0 [ 352.059529][ T30] do_new_mount+0x2be/0xb40 [ 352.069443][ T30] ? __pfx_do_new_mount+0x10/0x10 [ 352.075596][ T5896] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 352.085021][ T5896] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 352.093829][ T5896] usb 7-1: Manufacturer: syz [ 352.098914][ T30] ? __se_sys_mount+0x2b7/0x3c0 [ 352.111795][ T30] __se_sys_mount+0x2d6/0x3c0 [ 352.118753][ T5896] usb 7-1: config 0 descriptor?? [ 352.124026][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 352.156876][ T30] ? __pfx___se_sys_mount+0x10/0x10 [ 352.170238][ T30] ? __x64_sys_mount+0x20/0xc0 [ 352.181258][ T30] do_syscall_64+0xf3/0x230 [ 352.188382][ T30] ? clear_bhb_loop+0x35/0x90 [ 352.193258][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.199320][ T30] RIP: 0033:0x7f5a03b8d169 [ 352.216216][ T30] RSP: 002b:00007f5a049e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 352.225124][ T30] RAX: ffffffffffffffda RBX: 00007f5a03da6080 RCX: 00007f5a03b8d169 [ 352.233379][ T30] RDX: 0000400000000000 RSI: 0000400000000100 RDI: 0000400000000140 [ 352.241745][ T30] RBP: 00007f5a03c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 352.250080][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.259507][ T30] R13: 0000000000000000 R14: 00007f5a03da6080 R15: 00007ffea5bcbf68 [ 352.268131][ T30] [ 352.276232][ T30] [ 352.276232][ T30] Showing all locks held in the system: [ 352.292977][ T30] 1 lock held by khungtaskd/30: [ 352.303671][ T30] #0: ffffffff8eb38fa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 352.325304][ T30] 2 locks held by kworker/u8:2/35: [ 352.330610][ T30] #0: ffff88801eb3a948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 352.375837][ T30] #1: ffffc90000ab7c60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 352.447074][ T30] 2 locks held by kworker/u8:3/51: [ 352.456211][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.737'. [ 352.481888][ T30] 2 locks held by getty/5575: [ 352.498421][ T30] #0: ffff8880357320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 352.511025][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.737'. [ 352.529647][ T30] #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 352.540199][ T30] 5 locks held by kworker/1:7/5896: [ 352.545969][ T30] #0: ffff88802228f948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 352.558347][ T30] #1: ffffc900043ffc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 352.589476][ T30] #2: ffff888028bc7190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 [ 352.633385][ T8613] caif:caif_disconnect_client(): nothing to disconnect [ 352.642093][ T30] #3: ffff8880602e4190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 [ 352.651771][ T30] #4: ffff8880602e1160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 [ 352.661668][ T30] 5 locks held by kworker/0:5/5905: [ 352.667248][ T30] #0: ffff88802228f948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 352.679007][ T30] #1: ffffc9000441fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 352.700940][ T30] #2: ffff888145f0d190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 [ 352.710940][ T30] #3: ffff888029c88510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x25b9/0x5150 [ 352.721361][ T30] #4: ffff8880283c9668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x25f7/0x5150 [ 352.734831][ T30] 2 locks held by kworker/u8:9/6001: [ 352.740677][ T30] #0: ffff88801eb3a948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 352.752784][ T30] #1: ffffc9000447fc60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 352.765325][ T30] 1 lock held by udevd/6791: [ 352.770189][ T30] #0: ffff8881433764c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 352.780076][ T30] 1 lock held by udevd/6793: [ 352.784860][ T30] #0: ffff888025bad4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 352.797181][ T5896] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 352.810636][ T30] 1 lock held by udevd/6797: [ 352.817203][ T30] #0: ffff888025bab4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 352.828870][ T5896] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 352.838506][ T30] 2 locks held by syz.0.352/7153: [ 352.844450][ T30] #0: ffffffff8f0c9508 (uuid_mutex){+.+.}-{4:4}, at: btrfs_get_tree+0x309/0x1a30 [ 352.854373][ T30] #1: ffff8881433764c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 352.863861][ T30] 1 lock held by syz.3.471/7571: [ 352.869075][ T30] #0: ffffffff8f0c9508 (uuid_mutex){+.+.}-{4:4}, at: btrfs_get_tree+0x309/0x1a30 [ 352.878650][ T30] 2 locks held by syz.1.482/7621: [ 352.883969][ T30] #0: ffff888033731470 (&fc->uapi_mutex){+.+.}-{4:4}, at: __se_sys_fsconfig+0x9b2/0xf60 [ 352.894801][ T30] #1: ffffffff8f0c9508 (uuid_mutex){+.+.}-{4:4}, at: btrfs_get_tree+0x309/0x1a30 [ 352.904313][ T30] 1 lock held by syz.5.497/7668: [ 352.909546][ T30] #0: ffff888025bab4c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 352.928369][ T5896] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 352.941674][ T30] 1 lock held by syz.5.497/7669: [ 352.947626][ T30] #0: ffff888025bab4c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 352.959820][ T30] 5 locks held by syz.6.737/8612: [ 352.965216][ T30] #0: ffffffff8ff27190 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 352.973810][ T30] #1: ffffffff8ff27048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 352.989866][ T30] #2: ffff888025d0d998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0xc26/0x1c80 [ 353.004756][ T30] #3: ffff88814336b7c8 (&q->q_usage_counter(io)#55){+.+.}-{0:0}, at: nbd_add_socket+0x1fa/0xad0 [ 353.015634][ T30] #4: ffff88814336b800 (&q->q_usage_counter(queue)#39){+.+.}-{0:0}, at: nbd_add_socket+0x1fa/0xad0 [ 353.026707][ T30] 4 locks held by syz.6.737/8620: [ 353.036227][ T30] #0: ffffffff8f7a51b0 (minor_rwsem#2){++++}-{4:4}, at: usb_open+0x30/0x1d0 [ 353.045291][ T30] #1: ffff8880617c7878 (&hiddev->existancelock){+.+.}-{4:4}, at: hiddev_open+0xa4/0x5c0 [ 353.055355][ T30] #2: ffff88803353de20 (&hdev->ll_open_lock){+.+.}-{4:4}, at: hid_hw_open+0x28/0x170 [ 353.066903][ T30] #3: ffffffff8e815708 (rename_lock.seqcount){+.+.}-{0:0}, at: prepend_path+0x2c2/0xd00 [ 353.077050][ T30] 3 locks held by syz.4.738/8613: [ 353.082203][ T30] #0: ffff88805f482008 (&sb->s_type->i_mutex_key#9){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 353.092434][ T30] #1: ffff88802a774258 (sk_lock-AF_CAIF){+.+.}-{0:0}, at: caif_release+0x104/0x370 [ 353.102176][ T30] #2: ffffffff8eb3e478 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 353.113346][ T30] 1 lock held by syz.4.738/8614: [ 353.118351][ T30] #0: ffffffff8fec63c8 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xa0/0xf20 [ 353.129860][ T30] 2 locks held by syz.4.738/8615: [ 353.135177][ T30] #0: ffff888033714258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_setsockopt+0x76d/0x1870 [ 353.146339][ T30] #1: ffffffff8eb3e478 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 353.160881][ T30] [ 353.164078][ T30] ============================================= [ 353.164078][ T30] [ 353.188700][ T30] NMI backtrace for cpu 1 [ 353.188716][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 353.188727][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 353.188733][ T30] Call Trace: [ 353.188738][ T30] [ 353.188742][ T30] dump_stack_lvl+0x241/0x360 [ 353.188759][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.188769][ T30] ? __pfx__printk+0x10/0x10 [ 353.188788][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 353.188801][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 353.188810][ T30] ? _printk+0xd5/0x120 [ 353.188822][ T30] ? __pfx__printk+0x10/0x10 [ 353.188834][ T30] ? __wake_up_klogd+0xcc/0x110 [ 353.188846][ T30] ? __pfx__printk+0x10/0x10 [ 353.188858][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 353.188871][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 353.188885][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 353.188897][ T30] watchdog+0x1058/0x10a0 [ 353.188911][ T30] ? watchdog+0x1ea/0x10a0 [ 353.188924][ T30] ? __pfx_watchdog+0x10/0x10 [ 353.188936][ T30] kthread+0x7a9/0x920 [ 353.188949][ T30] ? __pfx_kthread+0x10/0x10 [ 353.188961][ T30] ? __pfx_watchdog+0x10/0x10 [ 353.188973][ T30] ? __pfx_kthread+0x10/0x10 [ 353.188984][ T30] ? __pfx_kthread+0x10/0x10 [ 353.188997][ T30] ? __pfx_kthread+0x10/0x10 [ 353.189008][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.189019][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 353.189031][ T30] ? __pfx_kthread+0x10/0x10 [ 353.189043][ T30] ret_from_fork+0x4b/0x80 [ 353.189053][ T30] ? __pfx_kthread+0x10/0x10 [ 353.189066][ T30] ret_from_fork_asm+0x1a/0x30 [ 353.189091][ T30] [ 353.189097][ T30] Sending NMI from CPU 1 to CPUs 0: [ 353.364603][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 353.365638][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 353.380723][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 353.391218][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 353.401280][ T30] Call Trace: [ 353.404646][ T30] [ 353.407582][ T30] dump_stack_lvl+0x241/0x360 [ 353.412262][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.417464][ T30] ? __pfx__printk+0x10/0x10 [ 353.422078][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 353.428090][ T30] ? vscnprintf+0x5d/0x90 [ 353.432424][ T30] panic+0x349/0x880 [ 353.436323][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 353.442471][ T30] ? __pfx_panic+0x10/0x10 [ 353.446890][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 353.452266][ T30] ? __irq_work_queue_local+0x137/0x410 [ 353.457827][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 353.463199][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 353.469351][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 353.475597][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 353.481752][ T30] watchdog+0x1097/0x10a0 [ 353.486087][ T30] ? watchdog+0x1ea/0x10a0 [ 353.490513][ T30] ? __pfx_watchdog+0x10/0x10 [ 353.495186][ T30] kthread+0x7a9/0x920 [ 353.499256][ T30] ? __pfx_kthread+0x10/0x10 [ 353.503867][ T30] ? __pfx_watchdog+0x10/0x10 [ 353.508542][ T30] ? __pfx_kthread+0x10/0x10 [ 353.513128][ T30] ? __pfx_kthread+0x10/0x10 [ 353.517719][ T30] ? __pfx_kthread+0x10/0x10 [ 353.522315][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.527601][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 353.532825][ T30] ? __pfx_kthread+0x10/0x10 [ 353.537432][ T30] ret_from_fork+0x4b/0x80 [ 353.541856][ T30] ? __pfx_kthread+0x10/0x10 [ 353.546462][ T30] ret_from_fork_asm+0x1a/0x30 [ 353.551258][ T30] [ 353.554558][ T30] Kernel Offset: disabled [ 353.558880][ T30] Rebooting in 86400 seconds..