last executing test programs: 9m12.101893874s ago: executing program 0 (id=50): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x58, &(0x7f0000000240)}, 0x10) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140c, 0x100, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20080040) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, 0x3d, 0x301, 0x70bda7, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008808}, 0x24008002) 9m10.802748662s ago: executing program 0 (id=51): r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, &(0x7f0000000080)="18", 0x810, 0x0, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 9m10.335351378s ago: executing program 4 (id=55): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES8=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10, 0x100800) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @empty}, 0x10) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x8d, 0xfffffffffffffff9, 0x2000000000009, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xfffffffffffffffe, 0xa, 0x9, 0x5, 0x8000000b, 0x80000000000000, 0xcc3, 0x1, 0x85, 0x17, 0x3, 0x100000000, 0x5, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x14) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000006c0)={r2, &(0x7f00000004c0)="6023f43f7cf695d3b0be9f6c2a1198d4b1a3e77a9870b2e9a538cecf59ea3ee99eb9060f32281967ab6b37722415cbaca3c02dd1e9d6e55635141c93a8a332fb78fca3009740d58d2df39349ccfe0404dd4d4730e9368aa527b4332cc760ee5a7d4f1f1f470614127f5d6cba77312d8a75c3d6070d495a0de6e20b498144e764541dcf8a455fa6bdd0b696f1a425c3312ae5cde98068f6c3bb0526b4c088876025f400dafdf54795bbe62e6f733329ae1af9adf78ee2699e638f751b5cae471db4f92b20d9e82ea5b16c806cc178beb05aa08135bdd8a41ad91ddcffe6db32f7a4a0b5fdce304154ecbdb61262", &(0x7f00000005c0)=""/243, 0x4}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000000)="c3", 0x1) setsockopt$inet6_int(r4, 0x29, 0x4a, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c800600f3445626000006000300", @ANYRES16=r5], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4004080) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x24, 0x11, 0x0, 0x1, [@generic="31f9e05e2f82591487b094f5cbed0a33ec55488635157213ba426e9c8fe61b5c"]}]}, 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m10.334699587s ago: executing program 0 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0x69, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="19000000040000000400000002000000a08c", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="ebb2093fd88d80336fe149d558d979148ca473906c4b35aa9927848788e3ce6a0b51be33ac82c77a5182115fd00313eec535f10db5458681265f176983a4df2bbc04abe65898be521b5dd117d9d015cbd2850b3370167ebc52acb3ec3a5ff6250fadb1a12ff1f1c702e47e10eb44b437bbca48012d2988d25d3547b9f8011a750a4f45c08dad287f8a0a686def04b101fd3646f1e03fc6a8ea424f090e52a63b1a3baf81cec91f0a9d0cebfd92663c154129d5a5c00ee18361af2b9fb4f7ed15", @ANYRESDEC=r1, @ANYBLOB="d6bad16dd7bd13b1c479"], 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)) add_key$user(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="af", 0x1, 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x6c, 0x0, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) syz_open_dev$usbfs(0x0, 0x77, 0x41341) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048010) r3 = socket(0x2c, 0x4, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000800000000000010000010900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000640000000180a0101000b000000000000010000000900010073797a30000000001400038008000140000000000800024000"], 0xc8}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x20) sendmmsg(r6, &(0x7f00000030c0), 0x0, 0x9200000000000000) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r9) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)}, 0x20) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 9m8.981442497s ago: executing program 4 (id=61): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x181080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x7) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a040065ed0500c7f5d76066"], 0x34}}, 0x8000002) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x141800) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000040)={0x0, 0x1000, 0xa5}) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x94, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x2}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x200088c4}, 0x2400c0c0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000080)) ioctl$sock_bt_hci(r7, 0x400448e7, &(0x7f0000000240)) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed100000800", @ANYRES32=r8], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) 9m8.895249585s ago: executing program 3 (id=62): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000200"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x7ff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x200}}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100227bd7000fddbdf250000000014000b002001004627000000000000000000000008000700", @ANYRES32=r3, @ANYBLOB="080004007f00000114000c00fc0100"/28], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000080) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0xfffffffffffffffc, 0x6, 0xa395, 0x5, 0x8, 0x4, 0x80000000, 0x80000, 0x2, 0x1, 0x100, 0xfffffffffffffffc, 0x0, 0x2000000000000, 0x3, 0x3, 0x1, 0x4000000000200, 0x0, 0x0, 0x816, 0x80000001, 0x37, 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, 0x0, &(0x7f0000001500)=""/87, 0x0, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001680)) r6 = eventfd2(0x801, 0x80000) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000001c0)={0x0, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x0, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000140)={@my=0x1}) capset(&(0x7f0000000500)={0x20080522}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) 9m6.358793414s ago: executing program 3 (id=65): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lld, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c4620040302088000000000000002003e00ebffffff62030000000000004000000000000000850300000000000000000000060038"], 0xb4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e1d, @broadcast}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xffffff41, 0x734, 0x0, 0xfffffffffffffecb) 9m6.165780939s ago: executing program 3 (id=67): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0x2, &(0x7f00000000c0)={0x100000001, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000000)=0x7, 0x4) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) 9m6.142916733s ago: executing program 4 (id=68): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20028840) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x200c0) close(0x3) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80c00) shutdown(r4, 0x1) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) set_mempolicy(0x8002, &(0x7f0000000040)=0x3, 0x4) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) signalfd(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000001b40)=0x2, 0x7f) readv(r5, &(0x7f0000001d40)=[{&(0x7f0000000000)=""/44, 0x20}, {0x0, 0x17}], 0x2) 9m4.052352366s ago: executing program 3 (id=70): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0xfffd, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000022c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000020000000200000003000000000000000000000105000000080000000000000001000005000000000000000001000000000000000000a122d481344281c0bb15a77142f5c1de50b2f0400350b2d8548651b10d6af451b983e9cc134849cab4c6f15d498ee0804617d6d5975d6e49fedca8af49f989048cfc5304b1bba50752a9811f359c8e9e101de17491f5ceea003b03"], 0x0, 0x5a}, 0x28) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x181e40, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000030000000500000007000000c1000000", @ANYRES32, @ANYBLOB="0000000000000000000000d142748e0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100), 0x3f, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r4, &(0x7f0000000200), &(0x7f0000000280)=""/14}, 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x89ff, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000002060300000000000000000000000000140007800800124000000000050015000200000005000100060000000500050002000000050004000000000009"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000002380)=ANY=[@ANYBLOB="1800000002000100000000000000000095194ebfb49fa87c0be0351dae74021434b21207cdb1d1542b6a85b9d4ef7571d67c3be4f731cb687d84467c4f59ebfd90868fa795d3ff2e433548f1ed59a1a547b7225cfe0ffba23b25bb7d7765dc57002e3f6df55350befc0133f091596423761251c65aaf57bae954dcb1f75f70d4a008b9a766e8796977b4d4c1d1057053e3a64e4246efed5f0b0608aa5eb708077f8a722ef2112f5496a74ed99054dfc394f72f3e3dbdc781e82df64ead5b5bfb968700"/210], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9m3.402269229s ago: executing program 0 (id=73): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x24, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x8, 0x1}}}}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b4"], 0x0) syz_usb_connect$uac2(0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x85, &(0x7f0000000280)={0x5, 0xf, 0x85, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "d40393690d9be2928dadb068e0180e6f"}, @generic={0x5c, 0x10, 0x1, "0d968d09054395bdfc730649093c88b473d69a89b75c357d59ea56bc4d43be488666cd80a1e4eccdda47f9f76a14b23eeb46840c3ab5b4f2e7d115f9f18510fe52c87a6034b2015e5b3d9690ae31e898599bd70a2403a16b06"}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x9, 0x1100f, 0x3ff, [0x3f]}]}}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xc, [@var={0xa, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x0, 0x5f, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x5c}, 0x28) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000140)={0x0, 0x0, 0x0}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)="039456", 0x3}], 0x1) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000180)={0x2, r3, 0x0, 0x3, 0x62, 0x4, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000280)={0x0, 0x0, 0x0, r6, 0xbbbbbbbb}) accept4(0xffffffffffffffff, 0x0, &(0x7f0000004380), 0x800) syz_usb_connect(0x4, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, &(0x7f0000001980)=[{&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/108, 0x6c}, {&(0x7f0000001500)=""/104, 0x68}, {&(0x7f0000001580)=""/1, 0x1}, {&(0x7f00000015c0)=""/215, 0xd7}, {&(0x7f00000016c0)=""/120, 0x78}, {&(0x7f0000001740)=""/167, 0xa7}, {&(0x7f0000001800)=""/232, 0xe8}, {&(0x7f0000001900)=""/77, 0x4d}], 0xa) 9m2.580354799s ago: executing program 3 (id=75): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0x10, 0x803, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40600, 0x0) ioctl$FBIOGET_FSCREENINFO(r4, 0x4602, &(0x7f0000000100)) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="cbc12dbd7000fb0300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x2008, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) r8 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r8, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x31c000, 0x800, 0x9}, 0x20) 9m1.397268401s ago: executing program 4 (id=78): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) iopl(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb7}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_usb_connect(0x5, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b3090400b20102020194052406"], 0x0) 9m1.213215934s ago: executing program 2 (id=79): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000200"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x7ff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x200}}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100227bd7000fddbdf250000000014000b002001004627000000000000000000000008000700", @ANYRES32=r3, @ANYBLOB="080004007f00000114000c00fc0100"/28], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000080) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0xfffffffffffffffc, 0x6, 0xa395, 0x5, 0x8, 0x4, 0x80000000, 0x80000, 0x2, 0x1, 0x100, 0xfffffffffffffffc, 0x0, 0x2000000000000, 0x3, 0x3, 0x1, 0x4000000000200, 0x0, 0x0, 0x816, 0x80000001, 0x37, 0x6}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, 0x0, &(0x7f0000001500)=""/87, 0x0, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001680)) r6 = eventfd2(0x801, 0x80000) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000001c0)={0x0, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x0, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000140)={@my=0x1}) capset(&(0x7f0000000500)={0x20080522}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) 8m57.726757711s ago: executing program 0 (id=80): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x1953) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 8m57.627452085s ago: executing program 2 (id=81): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000001c0)={0x5, 0x7f, 0xffffffff, 0x8000, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') socket$kcm(0x23, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) recvmsg$unix(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)=""/88, 0x58}], 0x1}, 0x120) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f00000007c0)}, 0x20) write$cgroup_pid(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)="43aa9646ee6427aa636d4e09d5b7215c", 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x4e23, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000001c0)={r8, @in6={{0xa, 0x4e20, 0x3, @private2, 0x8}}, 0x0, 0x2}, 0x90) 8m56.227418003s ago: executing program 4 (id=83): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000090bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000003130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316", @ANYRES16=r0, @ANYRES32=r0], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000040)={0x3}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000}, 0x50) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'b\x8a\xfe\xce\xb5\x93\xd7Z\xdfZ\xc7\x15]lksize'}}]}}) 8m56.219819593s ago: executing program 2 (id=84): pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x7d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) open_tree(0xffffffffffffffff, 0x0, 0x9000) io_setup(0x3fb, &(0x7f0000000500)) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, &(0x7f0000000040)) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0xf) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, '.\x00'}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r1) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r3, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x2d1, 0x8, 0x9, 0x1]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x2]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff8000}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0x3]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x70}}, 0x4004002) 8m55.18090825s ago: executing program 2 (id=86): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010007, 0xec000000, 0xcd}]}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x33, 0x0, 0x0) 8m54.664416341s ago: executing program 3 (id=88): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000bc0)={&(0x7f0000000980), 0x0, 0x0, 0x0, 0x1000, r0}, 0x38) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi5\x00', 0xbb7e76807872ec74, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x32, 0x301, 0x70bd25, 0x25dfdbff, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000", @ANYRES8=r4], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$COMEDI_INSNLIST(r1, 0x8008640b, &(0x7f0000000100)={0x1, &(0x7f0000000300)=[{0xa000005, 0x0, 0x0, 0x10001, 0x642f}]}) sched_setscheduler(0x0, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x10000, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') 8m54.204754986s ago: executing program 2 (id=89): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@mmap={0x5, 0x1, 0x4, 0x1000, 0x6, {0x0, 0xea60}, {0x1, 0xc, 0x10, 0xaa, 0x4, 0x65, "a0c87911"}, 0x3, 0x1, {}, 0xc5, 0x0, r1}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r4 = syz_io_uring_setup(0x309a, &(0x7f0000000080)={0x0, 0x4ddb, 0x10000, 0x1, 0x381}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, 0x0, 0x0) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r3, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/220, 0xdc}, 0x5}, {{0x0, 0x0, 0x0}, 0x10001}], 0x2, 0x60010000, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x5) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000340301000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x54) 8m54.204240246s ago: executing program 4 (id=90): ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f00000010c0)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) pselect6(0x40, &(0x7f0000000340)={0xd, 0xa3cd, 0x6, 0x7, 0x9, 0x9, 0x5, 0x1}, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000c00)=0x11) 8m39.907164413s ago: executing program 0 (id=92): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000039c0), 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x80, 0x80, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x80, 0x8000, 0xfff, 0x80000006, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x5f, 0x0, 0xd9, 0x2f, 0x0, @local, @broadcast}}}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r5}, 0x38) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r7 = dup(r6) write$USERIO_CMD_REGISTER(r7, &(0x7f0000000040), 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1}) unshare(0x40400) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') lseek(r8, 0x9, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f00000001c0)={{0x2, 0x3, 0x0, 0x3, 0x957}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1}) 8m39.906091901s ago: executing program 2 (id=93): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x501, 0x5, 0x7, 0x7ffc0001}]}) inotify_init() (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e2"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) (async, rerun: 64) getpid() (rerun: 64) 8m37.363574028s ago: executing program 32 (id=88): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000bc0)={&(0x7f0000000980), 0x0, 0x0, 0x0, 0x1000, r0}, 0x38) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi5\x00', 0xbb7e76807872ec74, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x32, 0x301, 0x70bd25, 0x25dfdbff, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000", @ANYRES8=r4], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$COMEDI_INSNLIST(r1, 0x8008640b, &(0x7f0000000100)={0x1, &(0x7f0000000300)=[{0xa000005, 0x0, 0x0, 0x10001, 0x642f}]}) sched_setscheduler(0x0, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x10000, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') 8m37.070012272s ago: executing program 33 (id=92): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000039c0), 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x80, 0x80, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x80, 0x8000, 0xfff, 0x80000006, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x5f, 0x0, 0xd9, 0x2f, 0x0, @local, @broadcast}}}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r5}, 0x38) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r7 = dup(r6) write$USERIO_CMD_REGISTER(r7, &(0x7f0000000040), 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1}) unshare(0x40400) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') lseek(r8, 0x9, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f00000001c0)={{0x2, 0x3, 0x0, 0x3, 0x957}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1}) 8m36.837235753s ago: executing program 34 (id=93): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x501, 0x5, 0x7, 0x7ffc0001}]}) inotify_init() (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e2"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) (async, rerun: 64) getpid() (rerun: 64) 8m36.306404896s ago: executing program 35 (id=90): ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f00000010c0)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) pselect6(0x40, &(0x7f0000000340)={0xd, 0xa3cd, 0x6, 0x7, 0x9, 0x9, 0x5, 0x1}, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000c00)=0x11) 4m0.4713992s ago: executing program 8 (id=554): r0 = socket(0x2a, 0x80808, 0xfffffff8) getsockname$qrtr(r0, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000107000000000000000001"], 0x114}], 0x1}, 0x0) 3m59.972312018s ago: executing program 8 (id=555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000b00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008041}, 0x4004000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f0000000600)=@generic={0x0, 0x11, 0x10}, 0xc) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (fail_nth: 4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000001400)=""/4090, 0x3fc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, 0x0, 0x50) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) 3m58.958042161s ago: executing program 8 (id=556): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000000)=0xa2, 0x4) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) read(r0, &(0x7f0000000080)=""/130, 0x82) 3m57.719474477s ago: executing program 8 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000013"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000002780)=""/4073, 0xfe7}], 0x12, 0x0, 0x0, 0x406}, 0x40020000) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 3m57.411273484s ago: executing program 8 (id=562): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x1, 0x70bda9, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4236, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x7}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0x800) 3m56.855259254s ago: executing program 8 (id=565): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0xd6, 0x0, &(0x7f0000000200)=""/214, 0x40, 0x0, 0x13, 0x46, &(0x7f0000000140)="bd5eaa2edd2d2781ba6b2ad4c9e8876956cc7b", &(0x7f0000000300)="bf30d685f67e9c05d82bfc823f94734dd05c598b6bc542a8f16e5787e73f8df443db040e2226f576c9b05386d4153abf4022380f61e1c3653ec00b684b2e4aa8ccef437189ea", 0x2, 0x0, 0xc}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) readahead(0xffffffffffffffff, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0xd, @ipv4={'\x00', '\xff\xff', @loopback}, @private2={0xfc, 0x2, '\x00', 0x10}, 0x700, 0x0, 0xfffffffc}}) 3m41.765362172s ago: executing program 36 (id=565): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0xd6, 0x0, &(0x7f0000000200)=""/214, 0x40, 0x0, 0x13, 0x46, &(0x7f0000000140)="bd5eaa2edd2d2781ba6b2ad4c9e8876956cc7b", &(0x7f0000000300)="bf30d685f67e9c05d82bfc823f94734dd05c598b6bc542a8f16e5787e73f8df443db040e2226f576c9b05386d4153abf4022380f61e1c3653ec00b684b2e4aa8ccef437189ea", 0x2, 0x0, 0xc}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) readahead(0xffffffffffffffff, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0xd, @ipv4={'\x00', '\xff\xff', @loopback}, @private2={0xfc, 0x2, '\x00', 0x10}, 0x700, 0x0, 0xfffffffc}}) 2m40.638437467s ago: executing program 9 (id=586): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e26}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100)=0x200000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x4000400, 0x0, 'queue0\x00', 0x6}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x3, 0x0, @tick, {}, {0xfe}, @control={0xfb, 0x5}}], 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x45) syz_emit_ethernet(0x121, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x5}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010700000000000000000b0000000e0001733d2d213270b8272736db4b88024f624840fa24ae04e2890479a12945c191d4be35bff9068d21d0aa01d079d0db4e37df989d5e2415f9dd3ad535055fbeb085c206"], 0x34}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r6) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYRES32=r4], 0x0) 2m40.588225518s ago: executing program 9 (id=658): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0xa0480, 0x0) ioctl$FIGETBSZ(r0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$IPC_INFO(0x0, 0x1, 0x3, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc010) epoll_create1(0x80000) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r4, 0x40044591, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000001f40)=""/4123, 0x101b) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd2a, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 2m24.055762993s ago: executing program 37 (id=658): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0xa0480, 0x0) ioctl$FIGETBSZ(r0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$IPC_INFO(0x0, 0x1, 0x3, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc010) epoll_create1(0x80000) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r4, 0x40044591, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000001f40)=""/4123, 0x101b) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd2a, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1m41.670780692s ago: executing program 5 (id=752): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x840) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0xc91, 0x20c00) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000400)={0x0, 0x0}) 1m41.041860476s ago: executing program 5 (id=754): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1m39.075873835s ago: executing program 5 (id=758): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400019b4abd70010000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="000002000000000000000000000000000000000186dd"], 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0xffffffffffffffff, 0x0, 0x3, {}, [{0x58, 0x1, [@m_bpf={0x10, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x2, 0x6}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r7, r8+60000000}, &(0x7f0000000140)) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) dup2(r0, r0) 1m36.419386624s ago: executing program 5 (id=762): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x61, 0x37, 0x64, 0x66, 0x35, 0x66, 0x61, 0x65, 0x35, 0x65, 0x66, 0x63, 0x30, 0x0, 0x37, 0x30]}, &(0x7f00000000c0)={0x0, "73999747ba6abe6984ac3929b06855e671a917a4c6ead13f7b7cac0923505f1953da3783bbdb11f8b8e08f89a8917f7653e5e24fffda720748d5012b19f9b626", 0x26}, 0x48, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x103002) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x4, 0xf, 0x1, 0x6, 0x9, 0x3}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x11) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x20, 0x8000}, 0x24040001) 1m35.563667526s ago: executing program 5 (id=767): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="10007d", @ANYRES8=0x0, @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmmsg$sock(r2, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b40900d088bf9df64822defce2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd4290afb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000640)="82f294054d05970300ac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c82aa17c4743cba3f355bb9c70a81a8bd70d253db68e17cdd561fab504479f723388dda974e2fdfb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0c4061776d9e119224335301af049594a2cdbbbc02528ed9b5366f3aa", 0xa3}, {&(0x7f0000000b00)="8ff2f15bd0017ce4b36b6bc43356341d4cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47daa9e0015ecc86c80dc53f053c5ac29f83aed3ae9968fe8", 0x6b}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xb35}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x10}}], 0x78}}], 0x2, 0x44885) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000004c00)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf307a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c446e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000800)="043cc37e8cc16bc323913ce0cc6f938906fa74c92b135369b0eff6cf324f571ce753b819bd8d2ab7dd820f22a32808780dfd4353c2981d49b7541accd171709954c1ebce85ba7f40eb5af3555eeebc75022f639fd9db0a4a67cd9e6b3a31821113431a11ddbc62df35322b2215d92e7e547890feb982ca8222580543d385adaf3311e0fbb33424799e9a9fe280f38e20b842248d76561fef1a834c4b47b61966bbda5b0dd6c1986cbe94a85ab799d329be59f0d6562f653c5ae1a7abe7d66c6adb0a55760d187df39255889255eb9c01b250dbc90f", 0xd5}, {&(0x7f0000000900)="e15a1d0006b9ab21cf763609c3f014353a3478a19f251828297d6ed8adea9bf5ccb438678519eb151283ea914229e58c2937e7f2b34cd3d8a39477175b75e1069eabdb7ec64f651fc8e6b6c219667d0abb704faad790015cf0a83986c90430e836d59c5024e8a9265616de9c9b994ccda869551e65ab0cb7c38890c65c1564c7dcbce0e7002510ac77f7b2a1dbdec9d62591a15146057b68a9607401e094bf979193a9e8571f55baa01b8b3d553679e69dee92150c3aaf", 0xb7}], 0x2, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0xffff0280}, @iv={0x40, 0x117, 0x2, 0x27, "a3684e455abf8664bfbdb7f415e4cf41e2e424da0f92979dec344ea966959e711f1702554319be"}, @assoc={0x18, 0x117, 0x4, 0xa2}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x10a0, 0x24000000}, {0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001e00)="bc724536381a5c4968947cb644172a77771981b5d69820fb37af3e91289617e11907f58293e214bc8e8e81e037da76f21917595ef9f53d698e532137f3f4f4f683", 0x41}, {&(0x7f0000001e80)="741e4819e2a7d998d130a80071bb8341f75ab540696711ded55ed2f87380ee255d7022900a137bdb1adc9f6a3981bac6e8042fa021db579a623a189ff86911a0ce71d504863ddfebf8a721b306499b1951de5f1946a4a9593613a0a011038bdcba529719c6f24d5ff47a4e296908b44c5dd437d4d9e2294bfb9e10cef9301c53c57c649c0d868f850356fe46", 0x8c}, {&(0x7f0000001f40)="ed1f1c0ec5b3fc980c5643abe8f6986d7d97731ad901", 0x16}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000002f80)="4ccd9c392ddae35d7ce226184ac98c9a7e42b57972", 0x15}, {&(0x7f0000002fc0)="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", 0xff}, {&(0x7f00000030c0)="4b312f5c6262e5d310116a853f14e57f0066278b3ce4eca04f6afdc5c3d55d237f043a9f1d6d50360ccf7a541e1149e5b4a9de9ea8db32231085f43f74f768229345fcc59adac16bf3bfa959adb480eb3f977dcb603ec1ce1979de85a8ac9b1877cfca21da71c0775e4e9365951b8d37a0aef228ce42", 0x76}, {&(0x7f0000003140)="4b4fb51cffc715672db9529e7f97cc2082e73f72e7ab71de8a115f1142a5da2f38db435d", 0x24}, {&(0x7f0000003180)="3c2e40e3e6c8017f2ffb62a393b01337c3372b05f4802042ed93436fd5f8703a7876c56cf5277e251b6c2c4f2b3764444a096f3684e26faebb3571d3e4fdf8f11b4fea778ab54dea87c58a08b3dba056e17e805946f24bcd392b6ccd732cc66dda3a33c2d3065fe92c402c083db0fdc5e98c949c24d37c330db979d056d1a9546acdec7d14449d9e5d8a8c22ec917c29cf08a4a69ec5ded5069a51e552176989060c91e6b3f5a8ce5d3d5fd79cf1da8f3ade0f895f181d77e566e7ab59880db16af9", 0xc2}], 0x9, &(0x7f0000003bc0)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1018, 0x20048805}], 0x3, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m33.301126936s ago: executing program 5 (id=768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000000200000000000000000020000000050a01040000000000000000020000080900010073797a3000000000140000001100010000000000000000000500000a"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) syz_clone(0xc0080000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) preadv(r1, &(0x7f0000001c00)=[{&(0x7f0000000000)=""/114, 0x72}, {&(0x7f0000000100)=""/210, 0xd2}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/87, 0x57}, {&(0x7f0000001ac0)=""/231, 0xe7}, {&(0x7f0000001bc0)=""/30, 0x1e}], 0x6, 0x5, 0x7) 1m17.814274875s ago: executing program 38 (id=768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000000200000000000000000020000000050a01040000000000000000020000080900010073797a3000000000140000001100010000000000000000000500000a"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) syz_clone(0xc0080000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) preadv(r1, &(0x7f0000001c00)=[{&(0x7f0000000000)=""/114, 0x72}, {&(0x7f0000000100)=""/210, 0xd2}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/87, 0x57}, {&(0x7f0000001ac0)=""/231, 0xe7}, {&(0x7f0000001bc0)=""/30, 0x1e}], 0x6, 0x5, 0x7) 1m5.006539044s ago: executing program 7 (id=819): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) mount$nfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6161a1f9627efd950374bbc0745550a966be8f404d4a14f4fc3307a8a572c4a094d01b3a7d6166e7"]) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000240)="f2", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) listen(r0, 0x8b25714e) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4ff3913b, 0xca0, 0xffffffff}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070000000000fedbdf250500943daa7b8f90134f9f450000180001801400020073797a5f74756e00000000000000"], 0x34}}, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000002ec0), 0x0, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000036c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x15a4, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x434, 0x3, 0x0, 0x1, [{0x128, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x14, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_ELEM_USERDATA={0xcc, 0x6, 0x1, 0x0, "c092694b4233261619433ce4ff7fc7d7588f5acab450ad1c9aab3b6705e93f10c8423cea590430730291dc0c4e4966a5f10f0fd0e3d2e2e941661aa0994047c4f4d92fad38b3212e6303a860aa1b96a817fed7b09fae44dfe9353daaae6d3c402351968976baa6dd227c1392bcefb0684fdba20f13a7314389f652f3c942da9394ebc996e48e0dab318ec54f1801dedcef32f7f94947dfd1c98b3c9242f628ec9f1f90679b714195bd41422921cb942b407c1dea8468823de617c8857ecf376015f37083d7b8befb"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @range={{0xa}, @void}}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xe9}]}, {0x158, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x90}, @NFTA_SET_ELEM_USERDATA={0xf5, 0x6, 0x1, 0x0, "b1998541afb83a8a2f9f28ac033fb5df120adfc7630d9bb1bd61ddd0e3ad9b7fa14881d847c614a430cf552f29f4b005ff3ae434b7a2d594f6be8b6c877e355fbaf710df0d2262c29fede055758d56491bfc99712e033c4c092e686221fac1acd7cbc5757521a70c1ea0a707ad6976a9eeab19d9f23702991dc6f6e7392d7c62e46234fede3614b5afa9954fca0657629e56acf8e329e12a497a01c405d9e0e23f214321e33012e7f9f12711211aa71db6eb49af7a0e978c32bb7c595fbf10c1684c3d18f3596b62f4412b3254087959c4f89582180e6ecf9084dc62a2226148f2ab3d30c74d439c90ef96c11f6af8ce4f"}]}, {0x198, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x194, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xcd, 0x1, "0f9df31ecee0b238ed06621aa57df5a1da21149e7d0c105aa555bef7589f6d4d5b1c9599deecd392b73f4e508050dec61d19ca70d564bbeb72f7b9fe17f900e7e2829a42543f3fd239268523c5c8e935c8d4c3295f735c2ea914d0a8c25047f2a0be3b6926e7ca3ac8ed8da16a23536b4695ef4655fecdc489c55fc947da6c77c05e71360d18a08da408aaa34140f39fe296520b4beee87980998fa402f8242aec8ee34dfc935fe2899c5f38a075decbbf63ee576c9eb88ea6250719c0c7c994d25b265100359aaba0"}, @NFTA_DATA_VALUE={0x80, 0x1, "ad050642245e62eb3863b83b9aee5670fb6969986559f89eb761ecee1d900030b5abcec84d7b2f09e3d5d24878f54a4da7bebdd4d00185d6cfc164b3be6f1ba180f78d8f34a23822ae10e5720d5ba8a7af2f0054231e2ea6959b550df982873e95fa5e5c4b78f1f7b2591a4dea013db1bc9601c665ef77ac3cc3babd"}]}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1148, 0x3, 0x0, 0x1, [{0x2c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xb8409034757aaa8f}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x1f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "8c689490c8f89f716e74bbc7fdb729df3c425d05c294"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xc7, 0x1, "45034c6a8f59711041ce402fc2e0fa139e200d842a120c6fa51eff7ad09ab29cd1cbed447006a45ec94efc826b1bb5df52de1a0c408f2f280239fdd8fbd25ba6783b69ef9996602a76c8aa48500c99e679647d13bacaf9d70e2b1ff67db71630719e2a6796c604a50e462532d70a0c7635b0660719d4ddd909e70fbe2c5444b2059e6a0866823fcc7d4ea79d4d9d7666177e5c8d61eada0dffab2e0f66cfc53017106ea9f7a129271b75392db6f0e349aecb88d0729cfdc8ddc3eadcf747c1a146c92d"}, @NFTA_DATA_VALUE={0x74, 0x1, "a044d5eeaa4772c2fc9b37201142cf3ead386cb1687b73f232c8ec58c347d4ff07de80a8ea32faa3b772239e0632fdbf989aaa47a9162a036f80aee816ff0a7faac9ac5b2bb1fd224dedd2875328df4092ebb98f918453c540da873cc04dbc0a8f29dae795db1587c1ab7d08acd5de0a"}]}, @NFTA_SET_ELEM_EXPR={0x5c, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1d}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8}]}}}]}, {0x40c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0xa0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x58, 0x1, "5fe845f125f1fb9e62b296c91100abd12cdcb8f4ff5f5a7079130251f6ab43b587f19912e98c39cef79520fd6f94d0e540a17c2a416f74965800036eee31bd4432961c3e62e6789d44bf6be7c1cf8e22df016676"}, @NFTA_DATA_VALUE={0x44, 0x1, "34a5d2d86c6021806569787bfbc238dc4509f82788dd491f0e08da8b8b623a31be8a57a2207093528ff0fd076e3ff91a1e1f205d32ee0fe24868b2befa385ff7"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x350, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe1, 0x1, "2748bb776b48acd8d5249d44a7170051cd16c89832272a4ea8aa9915312624b61dab1ccd766aaa9f8c1c01972278f46a83533c5d7d7037e0412342f5c43fcbddf821fd143ea3e57ad10dbd605f2a22c9841dd82a3944ae23e7095cb3411c709e6bc4c8c5702a133254b3db997651b7d6962bbedd9c81d6f47a30f42215e5ce3f3a1b495ae5bae80e6bf85584d6e8fe177bd55f1569a3b527196a46f2fe783fd8ddcb53a45c0ce5e9ab3784372a39cf64d489581bb71091968ab8ae1e36b2d3d03a6e3264c68fab8fab5306ceae12f56f00405cba2228f51798b7dfa7ed"}, @NFTA_DATA_VALUE={0xa7, 0x1, "af60d0dd979b540cb560319d7caebf1cc81de1f397c224cafe900e5eb94ac3aff32f0a3c950159735d3a0a184fae9ae4b93f480c96b4cc6c5fe6eee02eb636232c8fa3c76e239754e087f423bfed3ebd5f9cb418e30b3d847d0a14abbd56db1684327c771661ea0d75f068f73e0196272f12fe3b802418b6d48a6399a3786c34d735b9ee78d043350eb0646a5d71f217f0a5b0bcffebe34460ec3c92915dd2eb0c9aa7"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x14, 0x1, "a6b535d4ac10f1f0fa32c22188a87e13"}, @NFTA_DATA_VALUE={0x7d, 0x1, "38c97a4a9beeac818a40e681fe364d69648c2f0fdfaa5b258eb1a53c39cc9e33c4103899cb2048f36d0ad09f1e2f93752f8eca2b0a3235e13625aae530589883b891c39150a343033fd88be304c84822972217079d1d7046834e26ca76bb80a0cfdd62916effa71480f2dc4d9fa70467d7de449d7cca55b578"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "dbdfe6e7e5301efe2184edc3fc5f9ffceaa1ec7483cfd2210d58ea330359054a9846b187defc946fc304f0adc7f663ec562fc129ffe83de961bd05051ba5580eabbf04282e0b979140"}]}]}, {0x88, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x68, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1b}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x222806ab}]}}}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8}]}}}]}, {0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x54, 0x6, 0x1, 0x0, "8e2df74e637d4e00b1e51f87da7ef0db3cf111ea718ea42c61d74f009d4b23fd6c6ace20cf4c1a1629b4e7db1ef9c8aa70ebe6b455e54f698426627d82cb221aa45deba9399077bb9b78eb5db13268c0"}]}, {0x2c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @numgen={{0xb}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0xa8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x88, 0x1, "190b9b7c0d84383cf1a8563380ece424f3ea01337d539722ecea5ee26950fa08164cc92ba1c9795d2874bdb5393a930a2e94df2dd4fef5ca2af427b375626d5f35aa21ab6caa9240b514045cdd58771ade809d714095ff1c77a2e5ae3fb39250089168532816ab96ac8ec1e649876fd986e514659462aa4b119f241d35db31fc6a1dd301"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0xef, 0x6, 0x1, 0x0, "ef32b5baf1ea86863a8687fea54a781f46aa2c35ef98dd5ced9b6d195ae535f9b1f22ffbc3e45057f0801bcd824271c35961ee053f7e693fa036375b1e36055d97c9efa64a1db05e149e169cd052e22a4f4eb6968b2d1fa93368ff112c0ba653c18331bc8df1fe506ba4c9d4fe1662a7fab2491e7754765cf46c1d6d10a777b76eafe18392e7ebd569c81bf2bf0c6c3b5384fd621b9662725351575abde481ba29e75b019281365c9628f5b367dd88707a6889048db9cd6a71d2c14b4da644bf760b7c9a14c6a39efef5ba6b7a61d983ba1839defa669299c12ee7bb96a6b387e7ab3319958a7fe530fdd3"}, @NFTA_SET_ELEM_EXPRESSIONS={0x54, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x3c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x20}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xac, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x64, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xfffffffffffffebd, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}]}}}]}]}, {0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x174, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9a, 0x1, "3ce4b53f785d39b24350619907607257ca1c319719d6fb45e37aba0cf3f84c3869595a2f719954869cef6619681f8b0f494d8316efa8a689b662526cbf4c5932b5d6ef805227d90b1cfcb1a027c4e8b7073a4a2f4e16458be59cd36fcaf4bf017834e397f82c75c4a9e56976eee9337778b56a2eb15f1778d11fd095761f4eacbd54c68cff8ddadc19c4488a5f0607ffb2e9ede98b97"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0x510, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_DATA={0x180, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9f, 0x1, "4be2c3114cf496686f4e9c9d985c7547c3ffaa58ca522f162a71d4308853ce35658a48bb69214c9bcca394c2f21bd7f3707806475d909dedbf59e5c9cf3c758df22168be2bdd8e81e6a659d77bfdbd513d01a4d1adad0ba8e954833769ea6a9c633410f47c40a1988a69bb3ee7bf7cf88e6ab4d19e3464b85c789ebe26ce1f9968f94ced8f6a743eb7167c11ff913acb37d40230c9f5ddd29eaa97"}, @NFTA_DATA_VALUE={0xca, 0x1, "1aff13373f63ba8304229d7d66d158d11e951950f20c30dc68ac7017895ed209252fb76d774946c021847881b90ad83c3f8104e28372d551d61a8bf1a606c2aa303fa24868f60eef73afd5099548dbf0feac3d96e1afc29e4a92643511ff7cf5072d2ec8a173502be5a1bf3a53096641d4992664b8b4e3c1a104738c18af9d21ce1ba6096a79f3ffe1780f7bb8a2e47af170e58ed8eb405bcd1cc9a5891404693521ecb0d37e872137d19b33fdedd4a46bf3878fc054adcf9363ad9e08fc4b2c1a1a681a370c"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @limit={{0xa}, @void}}, @NFTA_SET_ELEM_KEY={0x364, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd6, 0x1, "fdd9d10c20b8fb5b64d5cd25a143706256827d551413e76afa5601e230c1139ed0f17606a48893da78aaf24b0e0cc936a33b35ddfe88332becca11ee2fca277b5cb6329065ea688cb13f70e8ef25b55eaadaf0398e19c059999b3e2a3d8d33a6cb8eb60c3f8c7c5491c94d38f40fb35a4b2ec2f0352088ccdd97813e1d3f9e256d92f7fc666e6ea29e7252f811ddc6b1ee06eddc4e83f4c168dd6b01f1882d9872b5eb95b6e896d8b8b9763e7fad5bac3dcd45a2592bfd6a66a8fe56882b9594a896a9f7e27354df93ef0fb5f09939b7687c"}, @NFTA_DATA_VALUE={0x100, 0x1, "6b30fb0a144fc04ad672e5bb4a4e368384198fc1f288db8cc1025a6de94ac7f0a8f93a3d331c34250eb9ed648b85ddd405df069c4f88d35a3abc05af9aa19ea1b53c51cbe2f2817107282f2a60bdfc3cee32c0ec4ccd2447afc46db6a73c13fd96b691b1c7069a33ea74d96941b7e4accaabf0e00dc83221c74a469d04a4a27f09c33e0222ba5c8a60daa4e61660b76af002b7be43d5534ea6dfc5f670fa0f80772f47b40a4ce1d2f0647fb4fc65fcf0794eae0b9def49c35525006e45ac2e8f2716f30c03ea1a0632f3e9714e24d4cadbf3cf1207b4335dd815fd538bc4d70a878dc20c875a9e59597a6327521cc947fccbde105504209cc2d75e4a"}, @NFTA_DATA_VALUE={0x56, 0x1, "2963bf56da0d518fe0f83009ea6500dfbd13b9b1708f667d7c50353d4d18fb93944763d703cdfca791335829a6950c719fc45137856946fa6ac1e312a614a6a013048a242c3e4ec24bc5034871320563da5a"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "e4e7805674233f1de56a7e04d4872a697a55c0d482850d25427d3d3091e9ba8b3cded6c46ba57a88b56559ae38dfcf98ffe331b948c4e0232c778a0f7d6d66191e0c9f3b5bfeeb8f223ce0081969d3d5c6b61c3ab5e9881b6a9947dae8a7de7e09fc4ff42a8e2eb9d4c4b8d9d63dadd34a3b418508c9143f6b2f7b24cb52436ce0af9ce64ae34451123338cb1605d172d213f4be84409a4249eb5e56930c3e0bc828efe7cc2efff0f14c3537f13903b556039dc3db95bb8e3e71eec845dd63006defaa8879f50d712b8db56ef5f2fed31d4a9c3eda076e93694a6779e6f9447ff544d6aa9a1cc4b223edf66390dcdae9c6d5"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", ""]}}}, @NFTA_SET_EXPR={0x54, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10023}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}], {0x14}}, 0x16a8}, 0x1, 0x0, 0x0, 0x4000004}, 0x4c0c4) sched_setaffinity(r2, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x10040881) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 1m4.801483218s ago: executing program 1 (id=820): rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x44054) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x20009, 0x2, 0x18, 0x5, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x20000006, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xfffffffe, 0x400, 0xe, 0x4, 0xffffffff, 0x6c, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x35, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x200025, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x5, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x68, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0x9, 0x2, 0x0, 0x200, 0x401, 0xc, 0x2, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x5, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0x5, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f96, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x6, 0x5, 0x80, 0x9, 0x7ffe, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0xfffffffc, 0x8, 0x3, 0x3ff, 0x20000006, 0x9, 0x95e, 0xffffffff, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x7], [0x108e, 0x10002, 0x1, 0x3, 0x88, 0x2, 0xffffff80, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x6, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xfffff730, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x82, 0x44, 0x409, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x1f3, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0x1f, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 1m4.273701656s ago: executing program 1 (id=822): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x61c7, 0x4) sendto$packet(r0, 0x0, 0x0, 0x40088c4, &(0x7f0000000240), 0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000007d000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m1.797738539s ago: executing program 1 (id=825): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2c", 0xd}], 0x1}}], 0x1, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x359, 0x10008095, 0x0, 0x0) 1m1.520219917s ago: executing program 7 (id=826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a0101000000000000000007000000090002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20044845) 1m0.26378501s ago: executing program 7 (id=827): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x61, 0x37, 0x64, 0x66, 0x35, 0x66, 0x61, 0x65, 0x35, 0x65, 0x66, 0x63, 0x30, 0x0, 0x37, 0x30]}, &(0x7f00000000c0)={0x0, "73999747ba6abe6984ac3929b06855e671a917a4c6ead13f7b7cac0923505f1953da3783bbdb11f8b8e08f89a8917f7653e5e24fffda720748d5012b19f9b626", 0x26}, 0x48, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x103002) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x4, 0xf, 0x1, 0x6, 0x9, 0x3}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x11) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x24040001) 59.837191578s ago: executing program 7 (id=829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x14, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}}, 0x14}}, 0x4800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0x76be, 0xc000, 0x3, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005081000418e000000", 0x55}, {&(0x7f0000000180)="f1772d", 0x3}], 0x2) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000f14100026bd700d05cdfbfbdf2508000300000000001100000000000000006c74696301737402000000090018084830e50fcd2e73736d003d6300"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24000011) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4) 59.558802229s ago: executing program 1 (id=830): rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x44054) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x20009, 0x2, 0x18, 0x5, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x20000006, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xfffffffe, 0x400, 0xe, 0x4, 0xffffffff, 0x6c, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x35, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x200025, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x5, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x68, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0x9, 0x2, 0x0, 0x200, 0x401, 0xc, 0x2, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x5, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0x5, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f96, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x6, 0x5, 0x80, 0x9, 0x7ffe, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0xfffffffc, 0x8, 0x3, 0x3ff, 0x20000006, 0x9, 0x95e, 0xffffffff, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x7], [0x108e, 0x10002, 0x1, 0x3, 0x88, 0x2, 0xffffff80, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x6, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xfffff730, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x82, 0x44, 0x409, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x1f3, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0x1f, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 58.380984443s ago: executing program 1 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x24}}, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='cgroup\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000001b000800fca9001c0000000000119078ac1e0101e00000014e244e2000089078"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r6 = memfd_create(&(0x7f00000005c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9L\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd87\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4\x00v&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x8a)\xfa\x93J\xb9\x8d\xf3\xa8\xbe\x83\x12\xb6b\xef^\x1a\x81\xe9\xfa\x11g\nZ \xb7u\xf2\xf2\x06\x04\xb0\xb0Z\xd8\xf5\x13\xb6I', 0x2) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x80044dff, 0x1000000000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x80044940, &(0x7f0000000280)) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) 58.106866037s ago: executing program 7 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000013"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000002780)=""/4073, 0xfe7}], 0x12, 0x0, 0x0, 0x406}, 0x40020000) sendmsg$inet(r3, 0x0, 0x0) 56.396072753s ago: executing program 7 (id=834): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x1}], 0x1, 0x40800) recvmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000003a00000000000000000000000000000100000000200002000a00000000000001fe8000000000000000000000000004bb000000000d0001007564703a"], 0x6c}}, 0x0) sendto$inet6(r0, &(0x7f0000000600)='d', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffffc}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9) shutdown(r0, 0x1) 56.395618802s ago: executing program 1 (id=835): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100)=0x200000) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x3, 0x0, @tick, {}, {0xfe}, @control={0xfb, 0x5}}], 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x45) syz_emit_ethernet(0x121, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x5}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010700000000000000000b0000000e0001733d2d213270b8272736db4b88024f624840fa24ae04e2890479a12945c191d4be35bff9068d21d0aa01d079d0db4e37df989d5e2415f9dd3ad535055fbeb085c206"], 0x34}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r6) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYRES32=r4], 0x0) 39.703729694s ago: executing program 39 (id=835): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100)=0x200000) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x3, 0x0, @tick, {}, {0xfe}, @control={0xfb, 0x5}}], 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x45) syz_emit_ethernet(0x121, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x5}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010700000000000000000b0000000e0001733d2d213270b8272736db4b88024f624840fa24ae04e2890479a12945c191d4be35bff9068d21d0aa01d079d0db4e37df989d5e2415f9dd3ad535055fbeb085c206"], 0x34}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r6) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYRES32=r4], 0x0) 38.205839013s ago: executing program 40 (id=834): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x1}], 0x1, 0x40800) recvmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000003a00000000000000000000000000000100000000200002000a00000000000001fe8000000000000000000000000004bb000000000d0001007564703a"], 0x6c}}, 0x0) sendto$inet6(r0, &(0x7f0000000600)='d', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffffc}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9) shutdown(r0, 0x1) 32.287807536s ago: executing program 6 (id=843): syz_emit_vhci(&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) socket(0x15, 0x5, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xff9b, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r5}, 0x38) 28.707138012s ago: executing program 6 (id=844): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x61c7, 0x4) sendto$packet(r0, 0x0, 0x0, 0x40088c4, &(0x7f0000000240), 0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000007d000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 24.852415129s ago: executing program 6 (id=845): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x400, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xbc, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e24, @in=@private=0xa010102}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x46, 0x0, &(0x7f0000002240)="b9ffddc10000000000000008888edfcef60cff24fc8342f03e00000022a052408cc354da47c8fb7bde52f95a9e7928c9086dcba62174027457717adabf66f1ea2b540f9edbf5", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.094798202s ago: executing program 6 (id=846): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 20.451029228s ago: executing program 6 (id=847): r0 = socket(0x15, 0xa, 0x808) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002e80)={{0x1, 0xffffffffffffffff}, &(0x7f0000002dc0), &(0x7f0000002e40)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000002ec0)=r1}, 0x20) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb323, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0xb0, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0x2b}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000002e00)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0xfffc, 0x0, 0x1, {0x22, 0x80}}}}, 0x0) getresgid(0x0, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)) r6 = getegid() setregid(r6, 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000000d80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(r5, r6, r7) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x11, 0x55, {0x55, 0xd, "76ff154a496151aff79291207b6e311816d31c696f87f5aa626008cb3e9b580475ec3effbab42d99455b140c5c49a57513d6323c2a3eb3e736c75ddf04f302a33ce344d05ba6af502036a31c9498553b9e2e8a"}}, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000280)={0x0, 0xf, 0xb2, {0x5, 0xf, 0xb2, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "984fd1a01811de64ab0f11b1816a460b"}, @generic={0x82, 0x10, 0x3, "1c682f3555aff4eef9c8f68469894dd0b98f7c8e5e4a768a632cc8ba360a067ce4481d8a4fb6f9df015d6d058f934760fed4bfd526d0490faca2037030db4626cc20bdb84f3a1bc63914020c7f44209c65a900e1060eb916c40a07d7db79c5ab3e2f8cd8eb088ee7aea2aef15e21b50cecec023ce3132a7498c7ff7e14a543"}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x9, 0x0, 0xe223, [0x28, 0xc0]}, @ptm_cap={0x3}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0x3, 0xd4, "a58b1e17", "607c45ce"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x8, 0x47, 0x8, 0x5, 0xc}}}, &(0x7f0000000800)={0x84, &(0x7f0000000400)={0x40, 0xa, 0x1c, "2d98dfc9c5751fe46184956d5ab77dce2281f4df34a8b64add9ed114"}, &(0x7f0000000440)={0x0, 0xa, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1000, 0x20}}, 0x0, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "6ff8"}, 0x0, &(0x7f0000000640)={0x40, 0x13, 0x6, @random="d6ee3158b34f"}, &(0x7f0000000680)={0x40, 0x17, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "172a"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x72}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x6}}) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f00000008c0)) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000003000)={0x14, &(0x7f0000002f00)={0x40, 0x21, 0x1e, {0x1e, 0x1, "ebdc4e4ea19afae58bd16fb4c7b022cae28e7ed14d8880bf20465676"}}, &(0x7f0000002f40)={0x0, 0x3, 0x87, @string={0x87, 0x3, "c491ed2e7bb2539c1f89197de1218b0bb4ff5394b226e967062a806fc676c8529796640f69f25e7d41fc63d96adc9325ba9db9660836dfde472aa915f7d297c12a284c282610ea70ac7592d6388948924481442e8c6b90e6508d0ec8e4f4390ed794ed7f11cd602f235cf39ea9ebb84d6bd8ecb35fd420a92e6f49cbe4054a78cb9d4f636e"}}}, &(0x7f0000003280)={0x34, &(0x7f0000003040)={0x40, 0x15, 0xe0, "ebfc34cdb565cbb28d6851287be80a856a0ea38d253037c1d0f86ceef799d9e7d9219be770843826b656214de7e4ad75c1ba9bce9a49390326b21befaad09d9c66e26dc9032b549d5d4902db5e74aace44da02367bcf2187442018e105b18ea1db56ffaafeb948743fa692911df371f1844ec21bc38dbb429729cfb4b57253011f7b0d393973f380f7c4e5a280613e81f058bfaed7686a0136e25195a71ffa5ae9abecd635488162346d4ee65e809679c63e53ce861e6cb2a23ba3aadf378c930fcbd21b96dbc353a6c3ec58544953764c41da227d3e64f1b889d556860fd8df"}, &(0x7f0000003140)={0x0, 0xa, 0x1, 0x1e}, &(0x7f0000003180)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000031c0)={0xc0, 0xa1, 0x4, 0xc8c}, &(0x7f0000003200)={0x40, 0xa0, 0x4, 0xffff24a7}, &(0x7f0000003240)={0xc0, 0xa2, 0x2f, "3690effc7900078db35797ddc4941853a2b2e0d0accc12b6c05a31fcea5c78254a26668d7f34a94ab6602c04bd855c"}}) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fefffffffffffffff4000f00fd000000", 0x24) 16.396432076s ago: executing program 6 (id=848): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000140)="94", 0x1}, {0x0}], 0x2) socket(0x2b, 0x80801, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000840) capset(&(0x7f0000019340)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000, 0xfffffffc, 0x9, 0x80}}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) ftruncate(r3, 0x1) fcntl$setlease(r4, 0x400, 0x1) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000100)={0x21, &(0x7f0000000000)=[{0xe, '\x00', @data=0x52, 0xfffffbff}, {0x2d, '\x00', @data=0x101, 0x8}]}) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x1) read$sequencer(r3, &(0x7f00000003c0)=""/244, 0xf4) syz_open_dev$usbfs(&(0x7f0000000180), 0x8, 0x101800) 0s ago: executing program 41 (id=848): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e0302000000000c2604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000140)="94", 0x1}, {0x0}], 0x2) socket(0x2b, 0x80801, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000840) capset(&(0x7f0000019340)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000, 0xfffffffc, 0x9, 0x80}}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) ftruncate(r3, 0x1) fcntl$setlease(r4, 0x400, 0x1) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000100)={0x21, &(0x7f0000000000)=[{0xe, '\x00', @data=0x52, 0xfffffbff}, {0x2d, '\x00', @data=0x101, 0x8}]}) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x1) read$sequencer(r3, &(0x7f00000003c0)=""/244, 0xf4) syz_open_dev$usbfs(&(0x7f0000000180), 0x8, 0x101800) kernel console output (not intermixed with test programs): VLAN 0 to HW filter on device netdevsim3 [ 401.556777][ T37] kauditd_printk_skb: 162 callbacks suppressed [ 401.556793][ T37] audit: type=1804 audit(1779942906.231:906): pid=8177 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.424" name="/newroot/199/file0" dev="tmpfs" ino=1068 res=1 errno=0 [ 403.106709][ T7750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.204468][ T7750] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.235164][ T8178] uprobe: syz.1.424:8178 failed to unregister, leaking uprobe [ 403.236531][ T8178] uprobe: syz.1.424:8178 failed to unregister, leaking uprobe [ 403.310707][ T1477] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.313071][ T1477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.373018][ T7759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.375520][ T1477] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.375656][ T1477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.524974][ T7759] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.611673][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.614768][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.734024][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.734206][ T6202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.901394][ T821] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 404.070056][ T821] usb 6-1: Using ep0 maxpacket: 32 [ 404.095926][ T821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.095956][ T821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.096006][ T821] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 404.096028][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.208548][ T821] usb 6-1: config 0 descriptor?? [ 405.392023][ T8228] netlink: 36 bytes leftover after parsing attributes in process `syz.1.437'. [ 405.430451][ T821] ft260 0003:0403:6030.0007: failed to retrieve chip version [ 405.456332][ T821] ft260 0003:0403:6030.0007: probe with driver ft260 failed with error -71 [ 405.562434][ T821] usb 6-1: USB disconnect, device number 14 [ 406.137590][ T7750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.496516][ T7759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.241425][ T7750] veth0_vlan: entered promiscuous mode [ 407.300771][ T7750] veth1_vlan: entered promiscuous mode [ 407.514485][ T7750] veth0_macvtap: entered promiscuous mode [ 407.576226][ T7759] veth0_vlan: entered promiscuous mode [ 407.593298][ T7750] veth1_macvtap: entered promiscuous mode [ 407.677963][ T7759] veth1_vlan: entered promiscuous mode [ 407.740339][ T7750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.796395][ T7750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.849227][ T1477] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.867369][ T6201] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.869271][ T6201] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.877415][ T6201] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.008402][ T7759] veth0_macvtap: entered promiscuous mode [ 408.056233][ T8273] netlink: 24 bytes leftover after parsing attributes in process `syz.8.447'. [ 408.141729][ T8275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.174691][ T7759] veth1_macvtap: entered promiscuous mode [ 408.946850][ T7759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.048442][ T7759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.090870][ T1424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.090891][ T1424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.149346][ T1029] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.161950][ T1029] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.167733][ T1029] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.337017][ T1424] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.510864][ T1304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.510885][ T1304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.694906][ T8302] FAULT_INJECTION: forcing a failure. [ 409.694906][ T8302] name failslab, interval 1, probability 0, space 0, times 0 [ 409.694942][ T8302] CPU: 1 UID: 0 PID: 8302 Comm: syz.8.456 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 409.694967][ T8302] Tainted: [L]=SOFTLOCKUP [ 409.694974][ T8302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 409.695005][ T8302] Call Trace: [ 409.695012][ T8302] [ 409.695021][ T8302] dump_stack_lvl+0xe8/0x150 [ 409.695053][ T8302] should_fail_ex+0x46b/0x600 [ 409.695093][ T8302] should_failslab+0xa8/0x100 [ 409.695121][ T8302] __kmalloc_noprof+0xdf/0x7b0 [ 409.695145][ T8302] ? trace_kmem_cache_alloc+0x29/0xe0 [ 409.695167][ T8302] ? security_prepare_creds+0x52/0x360 [ 409.695204][ T8302] security_prepare_creds+0x52/0x360 [ 409.695239][ T8302] prepare_creds+0x57d/0x820 [ 409.695276][ T8302] join_session_keyring+0x1b/0x440 [ 409.695312][ T8302] __se_sys_keyctl+0x91c/0x9e0 [ 409.695345][ T8302] ? __pfx___se_sys_keyctl+0x10/0x10 [ 409.695376][ T8302] ? lockdep_hardirqs_on+0x7a/0x110 [ 409.695410][ T8302] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 409.695447][ T8302] ? rt_mutex_slowunlock+0x1cb/0x300 [ 409.695476][ T8302] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 409.695514][ T8302] ? fput+0xa0/0xd0 [ 409.695547][ T8302] ? ksys_write+0x248/0x270 [ 409.695574][ T8302] ? __pfx_ksys_write+0x10/0x10 [ 409.695605][ T8302] ? __x64_sys_keyctl+0x20/0xc0 [ 409.695634][ T8302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.695660][ T8302] do_syscall_64+0x15f/0xf80 [ 409.695681][ T8302] ? trace_irq_disable+0x3b/0x140 [ 409.695707][ T8302] ? clear_bhb_loop+0x40/0x90 [ 409.695735][ T8302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.695758][ T8302] RIP: 0033:0x7fcb1006cdd9 [ 409.695778][ T8302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.695797][ T8302] RSP: 002b:00007fcb0e29d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 409.695819][ T8302] RAX: ffffffffffffffda RBX: 00007fcb102e6090 RCX: 00007fcb1006cdd9 [ 409.695846][ T8302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 409.695859][ T8302] RBP: 00007fcb0e29d090 R08: 0000000000000000 R09: 0000000000000000 [ 409.695873][ T8302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.695886][ T8302] R13: 00007fcb102e6128 R14: 00007fcb102e6090 R15: 00007ffc9915f788 [ 409.695922][ T8302] [ 410.740840][ T8311] Bluetooth: MGMT ver 1.23 [ 410.779369][ T8311] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 410.901246][ T6002] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 410.920918][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.920948][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.134153][ T6002] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 411.134192][ T6002] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 411.134233][ T6002] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 411.134258][ T6002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.215209][ T8308] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 411.271846][ T6002] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 411.488069][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.488092][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.490547][ T8314] binder: 8313:8314 ioctl c0189377 200000000200 returned -22 [ 411.839087][ T8308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.849089][ T8308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.936721][ T821] usb 6-1: USB disconnect, device number 15 [ 417.655598][ T5597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 417.770591][ T5597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 417.795342][ T5597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 417.808529][ T5597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 417.811238][ T5597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 417.917545][ T8351] netlink: 56 bytes leftover after parsing attributes in process `syz.8.468'. [ 420.005265][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 420.009626][ T5597] Bluetooth: hci5: command tx timeout [ 420.158188][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 420.160944][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 420.161075][ T10] usb 7-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 420.161100][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.207524][ T10] usb 7-1: config 0 descriptor?? [ 421.853425][ T10] thrustmaster 0003:044F:B323.0008: invalid report_size 5631 [ 421.853452][ T10] thrustmaster 0003:044F:B323.0008: item 0 2 1 7 parsing failed [ 421.855955][ T10] thrustmaster 0003:044F:B323.0008: parse failed [ 421.856034][ T10] thrustmaster 0003:044F:B323.0008: probe with driver thrustmaster failed with error -22 [ 422.046312][ T10] usb 7-1: USB disconnect, device number 2 [ 422.381315][ T5597] Bluetooth: hci5: command tx timeout [ 424.078541][ T157] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.161893][ T8404] binder: 8399:8404 ioctl 40046205 0 returned -22 [ 424.420296][ T5597] Bluetooth: hci5: command tx timeout [ 424.697029][ T8416] input: syz1 as /devices/virtual/input/input10 [ 425.646793][ T157] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.503318][ T5597] Bluetooth: hci5: command tx timeout [ 427.028455][ T157] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.620507][ T157] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.658157][ T8452] FAULT_INJECTION: forcing a failure. [ 427.658157][ T8452] name failslab, interval 1, probability 0, space 0, times 0 [ 427.658197][ T8452] CPU: 0 UID: 0 PID: 8452 Comm: syz.6.496 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 427.658227][ T8452] Tainted: [L]=SOFTLOCKUP [ 427.658235][ T8452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 427.658248][ T8452] Call Trace: [ 427.658256][ T8452] [ 427.658265][ T8452] dump_stack_lvl+0xe8/0x150 [ 427.658298][ T8452] should_fail_ex+0x46b/0x600 [ 427.658350][ T8452] should_failslab+0xa8/0x100 [ 427.658380][ T8452] __kmalloc_cache_noprof+0x84/0x690 [ 427.658408][ T8452] ? hash_ipport_create+0x713/0x14a0 [ 427.658446][ T8452] hash_ipport_create+0x713/0x14a0 [ 427.658496][ T8452] ? __pfx_hash_ipport_create+0x10/0x10 [ 427.658531][ T8452] ? __nla_parse+0x40/0x60 [ 427.658556][ T8452] ? __pfx_hash_ipport_create+0x10/0x10 [ 427.658589][ T8452] ip_set_create+0xae8/0x1a40 [ 427.658618][ T8452] ? ip_set_create+0x4f3/0x1a40 [ 427.658659][ T8452] ? __pfx_ip_set_create+0x10/0x10 [ 427.658709][ T8452] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 427.658747][ T8452] ? lockdep_hardirqs_on+0x7a/0x110 [ 427.658781][ T8452] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 427.658823][ T8452] nfnetlink_rcv_msg+0xbc9/0x1260 [ 427.658844][ T8452] ? arch_stack_walk+0xfb/0x150 [ 427.658871][ T8452] ? nfnetlink_rcv_msg+0x230/0x1260 [ 427.658914][ T8452] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 427.658987][ T8452] netlink_rcv_skb+0x232/0x4b0 [ 427.659015][ T8452] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 427.659040][ T8452] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 427.659074][ T8452] ? rcu_is_watching+0x15/0xb0 [ 427.659119][ T8452] ? bpf_lsm_capable+0x9/0x20 [ 427.659148][ T8452] ? security_capable+0x7e/0x2c0 [ 427.659189][ T8452] nfnetlink_rcv+0x2c0/0x27b0 [ 427.659226][ T8452] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 427.659251][ T8452] ? lockdep_hardirqs_on+0x7a/0x110 [ 427.659286][ T8452] ? __dev_queue_xmit+0x2b3/0x3900 [ 427.659317][ T8452] ? __dev_queue_xmit+0x1eaf/0x3900 [ 427.659351][ T8452] ? __netlink_deliver_tap+0x404/0x850 [ 427.659373][ T8452] ? netlink_deliver_tap+0x19c/0x1b0 [ 427.659395][ T8452] ? netlink_unicast+0x754/0x920 [ 427.659436][ T8452] ? __dev_queue_xmit+0x2b3/0x3900 [ 427.659469][ T8452] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 427.659515][ T8452] ? __pfx___dev_queue_xmit+0x10/0x10 [ 427.659551][ T8452] ? ref_tracker_free+0x673/0x820 [ 427.659577][ T8452] ? __pfx_ref_tracker_free+0x10/0x10 [ 427.659596][ T8452] ? __asan_memcpy+0x40/0x70 [ 427.659627][ T8452] ? __skb_clone+0x63/0x7a0 [ 427.659657][ T8452] ? __skb_clone+0x483/0x7a0 [ 427.659689][ T8452] ? skb_clone+0x246/0x3a0 [ 427.659719][ T8452] ? __netlink_deliver_tap+0x807/0x850 [ 427.659743][ T8452] ? netlink_deliver_tap+0x2e/0x1b0 [ 427.659774][ T8452] ? netlink_deliver_tap+0x2e/0x1b0 [ 427.659796][ T8452] ? netlink_deliver_tap+0x2e/0x1b0 [ 427.659824][ T8452] netlink_unicast+0x780/0x920 [ 427.659868][ T8452] netlink_sendmsg+0x813/0xb40 [ 427.659903][ T8452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.659930][ T8452] ? unwind_get_return_address+0x4d/0x90 [ 427.659964][ T8452] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 427.659991][ T8452] ____sys_sendmsg+0x94c/0x9c0 [ 427.660024][ T8452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.660060][ T8452] ? import_iovec+0x73/0xa0 [ 427.660089][ T8452] ___sys_sendmsg+0x2a5/0x360 [ 427.660114][ T8452] ? __lock_acquire+0x6b5/0x2cf0 [ 427.660149][ T8452] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.660214][ T8452] ? __fget_files+0x2a/0x420 [ 427.660247][ T8452] ? __fget_files+0x3a6/0x420 [ 427.660292][ T8452] __x64_sys_sendmsg+0x1c3/0x2a0 [ 427.660322][ T8452] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.660366][ T8452] ? __pfx_ksys_write+0x10/0x10 [ 427.660401][ T8452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.660427][ T8452] do_syscall_64+0x15f/0xf80 [ 427.660447][ T8452] ? trace_irq_disable+0x3b/0x140 [ 427.660474][ T8452] ? clear_bhb_loop+0x40/0x90 [ 427.660501][ T8452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.660524][ T8452] RIP: 0033:0x7f7a2a73cdd9 [ 427.660544][ T8452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.660564][ T8452] RSP: 002b:00007f7a28996028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.660587][ T8452] RAX: ffffffffffffffda RBX: 00007f7a2a9b5fa0 RCX: 00007f7a2a73cdd9 [ 427.660604][ T8452] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 427.660618][ T8452] RBP: 00007f7a28996090 R08: 0000000000000000 R09: 0000000000000000 [ 427.660631][ T8452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.660644][ T8452] R13: 00007f7a2a9b6038 R14: 00007f7a2a9b5fa0 R15: 00007fff7d1921f8 [ 427.660679][ T8452] [ 428.636205][ T8461] IPVS: set_ctl: invalid protocol: 12 172.20.20.50:20001 [ 430.460125][ T8490] overlayfs: failed to resolve './file0': -2 [ 430.745180][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 430.896842][ T10] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 430.896873][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.134185][ T10] usb 9-1: config 0 descriptor?? [ 431.624611][ T157] bridge_slave_1: left allmulticast mode [ 431.624649][ T157] bridge_slave_1: left promiscuous mode [ 431.624921][ T157] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.721803][ T10] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 431.722256][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 431.843974][ T10] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 431.843999][ T10] [drm] Initialized udl on minor 2 [ 431.849690][ T10] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 431.850072][ T10] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 431.904317][ T6002] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 431.942188][ T157] bridge_slave_0: left allmulticast mode [ 431.942220][ T157] bridge_slave_0: left promiscuous mode [ 431.942478][ T157] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.973021][ T6002] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 431.973256][ T6002] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 431.973661][ T10] usb 9-1: USB disconnect, device number 11 [ 432.253700][ T8516] netlink: 156 bytes leftover after parsing attributes in process `syz.1.509'. [ 432.253747][ T8516] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 433.802974][ T37] audit: type=1326 audit(1779942938.555:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8525 comm="syz.8.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1006cdd9 code=0x7ffc0000 [ 433.803030][ T37] audit: type=1326 audit(1779942938.555:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8525 comm="syz.8.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1006cdd9 code=0x7ffc0000 [ 433.852470][ T37] audit: type=1326 audit(1779942938.555:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8525 comm="syz.8.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1006cdd9 code=0x7ffc0000 [ 433.852540][ T37] audit: type=1326 audit(1779942938.555:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8525 comm="syz.8.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fcb1006cdd9 code=0x7ffc0000 [ 433.852584][ T37] audit: type=1326 audit(1779942938.555:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8525 comm="syz.8.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1006cdd9 code=0x7ffc0000 [ 433.852630][ T37] audit: type=1326 audit(1779942938.555:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8525 comm="syz.8.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1006cdd9 code=0x7ffc0000 [ 433.852679][ T37] audit: type=1326 audit(1779942938.605:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8525 comm="syz.8.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1006cdd9 code=0x7ffc0000 [ 433.852784][ T37] audit: type=1326 audit(1779942938.605:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8525 comm="syz.8.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1006cdd9 code=0x7ffc0000 [ 433.852831][ T37] audit: type=1326 audit(1779942938.605:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8525 comm="syz.8.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcb1006cdd9 code=0x7ffc0000 [ 433.852876][ T37] audit: type=1326 audit(1779942938.605:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8525 comm="syz.8.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1006cdd9 code=0x7ffc0000 [ 434.050078][ T8527] "syz.8.512" (8527) uses obsolete ecb(arc4) skcipher [ 434.436572][ T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.516549][ T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.573218][ T157] bond0 (unregistering): Released all slaves [ 434.783089][ T5258] 8021q: adding VLAN 0 to HW filter on device eth17 [ 434.946318][ T8346] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.948076][ T8346] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.948327][ T8346] bridge_slave_0: entered allmulticast mode [ 435.057983][ T8346] bridge_slave_0: entered promiscuous mode [ 435.083920][ T8346] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.084022][ T8346] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.084207][ T8346] bridge_slave_1: entered allmulticast mode [ 435.110811][ T8346] bridge_slave_1: entered promiscuous mode [ 435.316202][ T8533] netlink: 56 bytes leftover after parsing attributes in process `syz.6.515'. [ 436.236847][ T8346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.283771][ T8556] netlink: 20 bytes leftover after parsing attributes in process `syz.6.521'. [ 436.296743][ T5736] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 436.330195][ T8346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.542042][ T5736] usb 2-1: device descriptor read/64, error -71 [ 436.861224][ T5736] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 437.526975][ T5736] usb 2-1: device descriptor read/64, error -71 [ 437.637439][ T5736] usb usb2-port1: attempt power cycle [ 437.900633][ T8346] team0: Port device team_slave_0 added [ 437.997104][ T5736] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 438.029916][ T5736] usb 2-1: device descriptor read/8, error -71 [ 438.035480][ T8346] team0: Port device team_slave_1 added [ 438.097205][ T5698] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 438.259825][ T157] hsr_slave_0: left promiscuous mode [ 438.262542][ T5698] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.262576][ T5698] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.262602][ T5698] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 438.262620][ T5698] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.297212][ T5736] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 438.320795][ T5698] usb 9-1: config 0 descriptor?? [ 438.333406][ T5736] usb 2-1: device descriptor read/8, error -71 [ 438.347659][ T157] hsr_slave_1: left promiscuous mode [ 438.356525][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.356547][ T157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.408898][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.408965][ T157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.437669][ T5736] usb usb2-port1: unable to enumerate USB device [ 438.450367][ T6002] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 438.531453][ T5698] usbhid 9-1:0.0: can't add hid device: -71 [ 438.531573][ T5698] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 438.551794][ T5698] usb 9-1: USB disconnect, device number 12 [ 438.581852][ T157] veth1_macvtap: left promiscuous mode [ 438.581953][ T157] veth0_macvtap: left promiscuous mode [ 438.582323][ T157] veth1_vlan: left promiscuous mode [ 438.582500][ T157] veth0_vlan: left promiscuous mode [ 438.597850][ T6002] usb 7-1: Using ep0 maxpacket: 32 [ 438.612684][ T6002] usb 7-1: config 0 interface 0 has no altsetting 0 [ 438.612788][ T6002] usb 7-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 438.612850][ T6002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.650913][ T6002] usb 7-1: config 0 descriptor?? [ 439.099366][ T5698] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 439.267876][ T6002] thrustmaster 0003:044F:B323.0009: invalid report_size 5631 [ 439.267894][ T6002] thrustmaster 0003:044F:B323.0009: item 0 2 1 7 parsing failed [ 439.268333][ T6002] thrustmaster 0003:044F:B323.0009: parse failed [ 439.268376][ T6002] thrustmaster 0003:044F:B323.0009: probe with driver thrustmaster failed with error -22 [ 439.311293][ T5698] usb 9-1: Using ep0 maxpacket: 8 [ 439.322961][ T5698] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 439.322996][ T5698] usb 9-1: config 0 has no interface number 0 [ 439.323039][ T5698] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.323065][ T5698] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.323087][ T5698] usb 9-1: config 0 interface 52 has no altsetting 0 [ 439.323119][ T5698] usb 9-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 439.323141][ T5698] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.388543][ T5698] usb 9-1: config 0 descriptor?? [ 439.476892][ T5862] usb 7-1: USB disconnect, device number 3 [ 439.603733][ T5698] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.52/input/input12 [ 439.655417][ T4948] synaptics_usb 9-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 439.718991][ T4948] synaptics_usb 9-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 439.771592][ T8355] synaptics_usb 9-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 439.825170][ T8565] synaptics_usb 9-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 439.862398][ T4948] synaptics_usb 9-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 439.907447][ T5733] usb 9-1: USB disconnect, device number 13 [ 440.098844][ T157] team0 (unregistering): Port device team_slave_1 removed [ 440.180682][ T157] team0 (unregistering): Port device team_slave_0 removed [ 440.513698][ T163] Bluetooth: hci3: Frame reassembly failed (-84) [ 440.810528][ T8346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.810555][ T8346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.810586][ T8346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.838810][ T8346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.838855][ T8346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.838936][ T8346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.297777][ T8346] hsr_slave_0: entered promiscuous mode [ 441.307307][ T8346] hsr_slave_1: entered promiscuous mode [ 441.308122][ T8346] debugfs: 'hsr0' already exists in 'hsr' [ 441.308142][ T8346] Cannot create hsr debugfs directory [ 441.873334][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.873392][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.514257][ T5597] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 442.624274][ T5258] 8021q: adding VLAN 0 to HW filter on device eth18 [ 443.180202][ T6002] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 443.311104][ T6002] usb 2-1: device descriptor read/64, error -71 [ 443.549865][ T6002] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 443.769975][ T6002] usb 2-1: device descriptor read/64, error -71 [ 444.115893][ T6002] usb usb2-port1: attempt power cycle [ 444.479112][ T6002] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 444.492344][ T6002] usb 2-1: device descriptor read/8, error -71 [ 444.730452][ T6002] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 444.760630][ T6002] usb 2-1: device descriptor read/8, error -71 [ 444.871122][ T6002] usb usb2-port1: unable to enumerate USB device [ 445.420751][ T6002] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 445.570897][ T6002] usb 7-1: Using ep0 maxpacket: 32 [ 445.579020][ T6002] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 445.579051][ T6002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.609308][ T6002] usb 7-1: config 0 descriptor?? [ 445.635259][ T6002] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 446.451642][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 446.651873][ T8690] netlink: 256 bytes leftover after parsing attributes in process `syz.8.554'. [ 446.741484][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 446.748461][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 446.782110][ T9] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 446.782143][ T9] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 446.782165][ T9] usb 2-1: Product: syz [ 446.782180][ T9] usb 2-1: Manufacturer: syz [ 446.782195][ T9] usb 2-1: SerialNumber: syz [ 447.333048][ T8696] FAULT_INJECTION: forcing a failure. [ 447.333048][ T8696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.333112][ T8696] CPU: 1 UID: 0 PID: 8696 Comm: syz.8.555 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 447.333142][ T8696] Tainted: [L]=SOFTLOCKUP [ 447.333150][ T8696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 447.333163][ T8696] Call Trace: [ 447.333171][ T8696] [ 447.333180][ T8696] dump_stack_lvl+0xe8/0x150 [ 447.333211][ T8696] should_fail_ex+0x46b/0x600 [ 447.333251][ T8696] _copy_from_user+0x2d/0xb0 [ 447.333278][ T8696] __se_sys_mount+0x18b/0x420 [ 447.333319][ T8696] ? __pfx___se_sys_mount+0x10/0x10 [ 447.333359][ T8696] ? __x64_sys_mount+0x20/0xc0 [ 447.333391][ T8696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.333416][ T8696] do_syscall_64+0x15f/0xf80 [ 447.333439][ T8696] ? clear_bhb_loop+0x40/0x90 [ 447.333467][ T8696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.333489][ T8696] RIP: 0033:0x7fcb1006cdd9 [ 447.333509][ T8696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.333528][ T8696] RSP: 002b:00007fcb0e27c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 447.333569][ T8696] RAX: ffffffffffffffda RBX: 00007fcb102e6180 RCX: 00007fcb1006cdd9 [ 447.333596][ T8696] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 447.333612][ T8696] RBP: 00007fcb0e27c090 R08: 0000200000000040 R09: 0000000000000000 [ 447.333627][ T8696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.333640][ T8696] R13: 00007fcb102e6218 R14: 00007fcb102e6180 R15: 00007ffc9915f788 [ 447.333676][ T8696] [ 448.114367][ T6002] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.216359][ T9] usb 2-1: Invalid connection information received from device [ 448.318884][ T8669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.319420][ T8669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.357488][ T8669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.358055][ T8669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.468703][ T8346] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 448.481163][ T8704] sctp: [Deprecated]: syz.5.558 (pid 8704) Use of int in max_burst socket option. [ 448.481163][ T8704] Use struct sctp_assoc_value instead [ 448.536281][ T8346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 448.540301][ T8346] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 448.561665][ T8669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.573239][ T8669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.575182][ T8669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.575796][ T8669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.616317][ T8346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.617490][ T8346] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 448.693400][ T8346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 448.695522][ T8346] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 448.970572][ T8346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 449.291029][ T9] usb 2-1: USB disconnect, device number 40 [ 449.335895][ T6002] gspca_vc032x: reg_w err -71 [ 449.335914][ T6002] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.335926][ T6002] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.335936][ T6002] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.335946][ T6002] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.335955][ T6002] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.335964][ T6002] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.335972][ T6002] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.335981][ T6002] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.335990][ T6002] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.335999][ T6002] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.336008][ T6002] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.336017][ T6002] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.336027][ T6002] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.336036][ T6002] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.336045][ T6002] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.336054][ T6002] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.336064][ T6002] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.336073][ T6002] gspca_vc032x: Unknown sensor... [ 449.336171][ T6002] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 449.418546][ T6002] usb 7-1: USB disconnect, device number 4 [ 449.860254][ T8731] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 449.861542][ T8731] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 450.146193][ T8346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.197088][ T8346] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.231858][ T1572] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.232057][ T1572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.280768][ T8732] syzkaller0: entered promiscuous mode [ 450.280805][ T8732] syzkaller0: entered allmulticast mode [ 450.878329][ T1289] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.882865][ T1289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.233724][ T5733] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 451.386404][ T5733] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 451.386439][ T5733] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 451.386478][ T5733] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 451.386501][ T5733] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.463155][ T8761] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 451.529031][ T5733] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 451.983073][ T8761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.983709][ T8761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.434227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 452.454197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 452.464199][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 452.474236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 452.484209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 452.494209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 452.504211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 461.049740][ T5733] usb 7-1: USB disconnect, device number 5 [ 461.390829][ T8789] netlink: 20 bytes leftover after parsing attributes in process `syz.5.573'. [ 461.478394][ T8796] 9p: Bad value for 'rfdno' [ 462.452033][ T5733] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 462.613868][ T5733] usb 7-1: unable to get BOS descriptor or descriptor too short [ 462.617120][ T5733] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 462.622162][ T5733] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 462.622261][ T5733] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.622353][ T5733] usb 7-1: Product: syz [ 462.622405][ T5733] usb 7-1: Manufacturer: syz [ 462.622438][ T5733] usb 7-1: SerialNumber: syz [ 462.674634][ T8346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.982396][ T5733] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 463.397510][ T8793] netlink: 20 bytes leftover after parsing attributes in process `syz.6.574'. [ 463.426131][ T8819] netlink: 56 bytes leftover after parsing attributes in process `syz.1.580'. [ 464.055511][ T5733] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 464.055541][ T5733] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 464.089161][ T5733] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 464.205070][ T5733] usb 7-1: USB disconnect, device number 6 [ 464.638766][ T8568] udevd[8568]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.752023][ T5726] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 464.808132][ T163] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.854873][ T163] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.854920][ T163] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.854953][ T163] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.901257][ T5726] usb 6-1: Using ep0 maxpacket: 8 [ 464.951274][ T5726] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.951353][ T5726] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 464.951380][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 464.951405][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 464.951426][ T5726] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 464.954933][ T5726] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 464.954958][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 464.954977][ T5726] usb 6-1: Product: syz [ 464.954992][ T5726] usb 6-1: Manufacturer: syz [ 464.955007][ T5726] usb 6-1: SerialNumber: syz [ 465.090227][ T5726] usb 6-1: config 0 descriptor?? [ 465.238304][ T8346] veth0_vlan: entered promiscuous mode [ 465.272163][ T8346] veth1_vlan: entered promiscuous mode [ 465.484063][ T5604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 465.549974][ T5604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 465.574486][ T5604] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 465.588215][ T5604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 465.602572][ T5604] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 466.313357][ T8346] veth0_macvtap: entered promiscuous mode [ 466.357501][ T8346] veth1_macvtap: entered promiscuous mode [ 466.510673][ T8346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.524915][ T8867] input: syz1 as /devices/virtual/input/input13 [ 466.575151][ T8346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.646934][ T1289] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.648673][ T1289] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.673174][ T1289] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.695223][ T1289] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.369315][ T8877] netlink: 52 bytes leftover after parsing attributes in process `syz.1.591'. [ 467.652194][ T5726] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 467.654374][ T5726] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 467.746687][ T5726] usb 6-1: USB disconnect, device number 16 [ 467.805543][ T5604] Bluetooth: hci3: command tx timeout [ 468.382780][ T821] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 468.581752][ T821] usb 7-1: Using ep0 maxpacket: 16 [ 468.591679][ T821] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.591732][ T821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 468.591760][ T821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 468.591849][ T821] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.598729][ T821] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 468.598818][ T821] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 468.598880][ T821] usb 7-1: Manufacturer: syz [ 468.712987][ T821] usb 7-1: config 0 descriptor?? [ 468.951819][ T821] usb 7-1: USB disconnect, device number 7 [ 469.152255][ T6201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.152278][ T6201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.873014][ T5604] Bluetooth: hci3: command tx timeout [ 469.973075][ T821] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 470.002270][ T6201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.002293][ T6201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.128540][ T821] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 470.128577][ T821] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 470.128618][ T821] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 470.128652][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.343981][ T8903] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 470.385905][ T821] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 470.744214][ T8901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.744900][ T8901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.363741][ T821] usb 2-1: USB disconnect, device number 41 [ 471.954408][ T5604] Bluetooth: hci3: command tx timeout [ 472.166317][ T8926] tipc: Started in network mode [ 472.166348][ T8926] tipc: Node identity 3a000000000000000000000000000001, cluster identity 4711 [ 472.166401][ T8926] tipc: Enabling of bearer rejected, failed to enable media [ 472.264429][ T8856] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.264663][ T8856] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.264875][ T8856] bridge_slave_0: entered allmulticast mode [ 472.270270][ T8856] bridge_slave_0: entered promiscuous mode [ 472.303295][ T8856] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.303572][ T8856] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.320175][ T8856] bridge_slave_1: entered allmulticast mode [ 472.323578][ T8856] bridge_slave_1: entered promiscuous mode [ 472.420040][ T8856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.444071][ T8856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.538986][ T8934] netlink: 28 bytes leftover after parsing attributes in process `syz.5.606'. [ 474.633366][ T8856] team0: Port device team_slave_0 added [ 474.636830][ T8934] netlink: 28 bytes leftover after parsing attributes in process `syz.5.606'. [ 475.157199][ T5604] Bluetooth: hci3: command tx timeout [ 475.356922][ T8940] cgroup: noprefix used incorrectly [ 475.626282][ T8856] team0: Port device team_slave_1 added [ 475.766915][ T37] kauditd_printk_skb: 77 callbacks suppressed [ 475.766936][ T37] audit: type=1326 audit(1779942980.504:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.5.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0526f1cdd9 code=0x7ffc0000 [ 475.768956][ T37] audit: type=1326 audit(1779942980.504:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.5.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0526f1cdd9 code=0x7ffc0000 [ 475.769536][ T37] audit: type=1326 audit(1779942980.504:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.5.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0526f1cdd9 code=0x7ffc0000 [ 475.769858][ T37] audit: type=1326 audit(1779942980.504:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.5.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f0526f1cdd9 code=0x7ffc0000 [ 475.770337][ T37] audit: type=1326 audit(1779942980.504:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.5.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0526f1cdd9 code=0x7ffc0000 [ 475.770665][ T37] audit: type=1326 audit(1779942980.504:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.5.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0526f1cdd9 code=0x7ffc0000 [ 475.770939][ T37] audit: type=1326 audit(1779942980.504:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.5.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0526f1cdd9 code=0x7ffc0000 [ 475.772690][ T37] audit: type=1326 audit(1779942980.504:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.5.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0526f1cdd9 code=0x7ffc0000 [ 475.772991][ T37] audit: type=1326 audit(1779942980.504:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.5.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0526edd60e code=0x7ffc0000 [ 476.007682][ T37] audit: type=1326 audit(1779942980.734:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.5.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0526f1cdd9 code=0x7ffc0000 [ 476.077883][ T5736] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 476.117883][ T8944] netlink: 'syz.7.608': attribute type 1 has an invalid length. [ 476.240935][ T8943] sctp: [Deprecated]: syz.5.609 (pid 8943) Use of int in max_burst socket option deprecated. [ 476.240935][ T8943] Use struct sctp_assoc_value instead [ 476.265161][ T8943] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 476.290198][ T5736] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt [ 476.290232][ T5736] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 476.290256][ T5736] usb 7-1: config 1 interface 0 has no altsetting 0 [ 476.340188][ T5736] usb 7-1: string descriptor 0 read error: -22 [ 476.340338][ T5736] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 476.340364][ T5736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.419207][ T8947] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 476.470352][ T8949] FAULT_INJECTION: forcing a failure. [ 476.470352][ T8949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.470393][ T8949] CPU: 1 UID: 0 PID: 8949 Comm: syz.7.611 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 476.470442][ T8949] Tainted: [L]=SOFTLOCKUP [ 476.470455][ T8949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 476.470478][ T8949] Call Trace: [ 476.470485][ T8949] [ 476.470495][ T8949] dump_stack_lvl+0xe8/0x150 [ 476.470545][ T8949] should_fail_ex+0x46b/0x600 [ 476.470585][ T8949] _copy_to_user+0x31/0xb0 [ 476.470614][ T8949] simple_read_from_buffer+0xe1/0x170 [ 476.470655][ T8949] proc_fail_nth_read+0x1be/0x230 [ 476.470694][ T8949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 476.470735][ T8949] ? rw_verify_area+0x2ac/0x4e0 [ 476.470759][ T8949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 476.470798][ T8949] vfs_read+0x212/0xa80 [ 476.470832][ T8949] ? __pfx_vfs_read+0x10/0x10 [ 476.470861][ T8949] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 476.470898][ T8949] ? lockdep_hardirqs_on+0x7a/0x110 [ 476.470932][ T8949] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 476.470968][ T8949] ? mutex_lock_nested+0x152/0x1d0 [ 476.470995][ T8949] ? fdget_pos+0x252/0x320 [ 476.471024][ T8949] ksys_read+0x156/0x270 [ 476.471064][ T8949] ? __pfx_ksys_read+0x10/0x10 [ 476.471091][ T8949] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 476.471135][ T8949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.471159][ T8949] do_syscall_64+0x15f/0xf80 [ 476.471178][ T8949] ? trace_irq_disable+0x3b/0x140 [ 476.471204][ T8949] ? clear_bhb_loop+0x40/0x90 [ 476.471232][ T8949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.471253][ T8949] RIP: 0033:0x7f2338e9d60e [ 476.471272][ T8949] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 476.471291][ T8949] RSP: 002b:00007f233712dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 476.471314][ T8949] RAX: ffffffffffffffda RBX: 00007f233712e6c0 RCX: 00007f2338e9d60e [ 476.471329][ T8949] RDX: 000000000000000f RSI: 00007f233712e0a0 RDI: 0000000000000004 [ 476.471343][ T8949] RBP: 00007f233712e090 R08: 0000000000000000 R09: 0000000000000000 [ 476.471355][ T8949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.471367][ T8949] R13: 00007f2339156038 R14: 00007f2339155fa0 R15: 00007ffce7ce5b68 [ 476.471401][ T8949] [ 476.780351][ T8940] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 476.780480][ T8940] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 477.002706][ T8856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.002726][ T8856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.002757][ T8856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.111324][ T8856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.111341][ T8856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.111370][ T8856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.286307][ T8968] FAULT_INJECTION: forcing a failure. [ 478.286307][ T8968] name failslab, interval 1, probability 0, space 0, times 0 [ 478.286351][ T8968] CPU: 0 UID: 0 PID: 8968 Comm: syz.6.616 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 478.286387][ T8968] Tainted: [L]=SOFTLOCKUP [ 478.286395][ T8968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 478.286408][ T8968] Call Trace: [ 478.286417][ T8968] [ 478.286427][ T8968] dump_stack_lvl+0xe8/0x150 [ 478.286460][ T8968] should_fail_ex+0x46b/0x600 [ 478.286503][ T8968] should_failslab+0xa8/0x100 [ 478.286534][ T8968] kmem_cache_alloc_noprof+0x87/0x680 [ 478.286561][ T8968] ? alloc_empty_file+0x5b/0x1d0 [ 478.286600][ T8968] alloc_empty_file+0x5b/0x1d0 [ 478.286636][ T8968] path_openat+0x11b/0x38a0 [ 478.286669][ T8968] ? __lock_acquire+0x6b5/0x2cf0 [ 478.286711][ T8968] ? is_bpf_text_address+0x292/0x2b0 [ 478.286743][ T8968] ? is_bpf_text_address+0x26/0x2b0 [ 478.286782][ T8968] ? __kernel_text_address+0xd/0x30 [ 478.286821][ T8968] ? __pfx_path_openat+0x10/0x10 [ 478.286845][ T8968] ? do_raw_spin_lock+0x12b/0x2f0 [ 478.286884][ T8968] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 478.286922][ T8968] ? lockdep_hardirqs_on+0x7a/0x110 [ 478.286957][ T8968] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 478.286994][ T8968] ? stack_depot_save_flags+0x3f3/0x810 [ 478.287038][ T8968] do_file_open+0x23e/0x4a0 [ 478.287061][ T8968] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 478.287085][ T8968] ? do_getname_kernel+0x54/0x230 [ 478.287115][ T8968] ? open_exec+0x17/0x40 [ 478.287141][ T8968] ? __pfx_do_file_open+0x10/0x10 [ 478.287207][ T8968] ? do_open_execat+0xad/0x590 [ 478.287237][ T8968] do_open_execat+0x12b/0x590 [ 478.287265][ T8968] ? __pfx_do_open_execat+0x10/0x10 [ 478.287289][ T8968] ? do_getname_kernel+0x97/0x230 [ 478.287329][ T8968] ? do_getname_kernel+0x183/0x230 [ 478.287367][ T8968] open_exec+0x29/0x40 [ 478.287388][ T8968] bm_register_write+0x233/0x1770 [ 478.287424][ T8968] ? __pfx_bm_register_write+0x10/0x10 [ 478.287458][ T8968] vfs_write+0x2a3/0xba0 [ 478.287493][ T8968] ? __pfx_vfs_write+0x10/0x10 [ 478.287523][ T8968] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 478.287560][ T8968] ? lockdep_hardirqs_on+0x7a/0x110 [ 478.287594][ T8968] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 478.287631][ T8968] ? mutex_lock_nested+0x152/0x1d0 [ 478.287658][ T8968] ? fdget_pos+0x252/0x320 [ 478.287690][ T8968] ksys_write+0x156/0x270 [ 478.287719][ T8968] ? __pfx_ksys_write+0x10/0x10 [ 478.287755][ T8968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.287781][ T8968] do_syscall_64+0x15f/0xf80 [ 478.287802][ T8968] ? trace_irq_disable+0x3b/0x140 [ 478.287829][ T8968] ? clear_bhb_loop+0x40/0x90 [ 478.287858][ T8968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.287881][ T8968] RIP: 0033:0x7f7a2a73cdd9 [ 478.287903][ T8968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.287922][ T8968] RSP: 002b:00007f7a28996028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 478.287946][ T8968] RAX: ffffffffffffffda RBX: 00007f7a2a9b5fa0 RCX: 00007f7a2a73cdd9 [ 478.287963][ T8968] RDX: 000000000000002c RSI: 0000200000000280 RDI: 0000000000000003 [ 478.287977][ T8968] RBP: 00007f7a28996090 R08: 0000000000000000 R09: 0000000000000000 [ 478.287991][ T8968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.288004][ T8968] R13: 00007f7a2a9b6038 R14: 00007f7a2a9b5fa0 R15: 00007fff7d1921f8 [ 478.288041][ T8968] [ 478.536519][ T8968] binfmt_misc: register: failed to install interpreter file ./file0 [ 479.198468][ T821] usb 7-1: USB disconnect, device number 8 [ 479.616438][ T8856] hsr_slave_0: entered promiscuous mode [ 479.627257][ T8856] hsr_slave_1: entered promiscuous mode [ 479.641049][ T8856] debugfs: 'hsr0' already exists in 'hsr' [ 479.641079][ T8856] Cannot create hsr debugfs directory [ 479.801945][ T5604] Bluetooth: hci1: command 0x0406 tx timeout [ 480.174862][ T8983] overlayfs: workdir and upperdir must be separate subtrees [ 480.210952][ T8983] program syz.6.621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.795595][ T8994] netlink: 56 bytes leftover after parsing attributes in process `syz.7.624'. [ 481.726493][ T9002] FAULT_INJECTION: forcing a failure. [ 481.726493][ T9002] name failslab, interval 1, probability 0, space 0, times 0 [ 481.726548][ T9002] CPU: 0 UID: 0 PID: 9002 Comm: syz.5.627 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 481.726577][ T9002] Tainted: [L]=SOFTLOCKUP [ 481.726585][ T9002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 481.726598][ T9002] Call Trace: [ 481.726606][ T9002] [ 481.726615][ T9002] dump_stack_lvl+0xe8/0x150 [ 481.726646][ T9002] should_fail_ex+0x46b/0x600 [ 481.726686][ T9002] should_failslab+0xa8/0x100 [ 481.726715][ T9002] kmem_cache_alloc_noprof+0x87/0x680 [ 481.726740][ T9002] ? do_getname+0x2e/0x250 [ 481.726776][ T9002] do_getname+0x2e/0x250 [ 481.726804][ T9002] ? user_path_at+0x1e/0x160 [ 481.726830][ T9002] user_path_at+0x2a/0x160 [ 481.726855][ T9002] __se_sys_mount+0x2dc/0x420 [ 481.726896][ T9002] ? __pfx___se_sys_mount+0x10/0x10 [ 481.726942][ T9002] ? __x64_sys_mount+0x20/0xc0 [ 481.726975][ T9002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.727000][ T9002] do_syscall_64+0x15f/0xf80 [ 481.727021][ T9002] ? trace_irq_disable+0x3b/0x140 [ 481.727047][ T9002] ? clear_bhb_loop+0x40/0x90 [ 481.727075][ T9002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.727096][ T9002] RIP: 0033:0x7f0526f1cdd9 [ 481.727117][ T9002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.727136][ T9002] RSP: 002b:00007f052516e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 481.727159][ T9002] RAX: ffffffffffffffda RBX: 00007f0527195fa0 RCX: 00007f0526f1cdd9 [ 481.727175][ T9002] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 481.727190][ T9002] RBP: 00007f052516e090 R08: 0000200000000300 R09: 0000000000000000 [ 481.727204][ T9002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.727217][ T9002] R13: 00007f0527196038 R14: 00007f0527195fa0 R15: 00007ffe2df8f9e8 [ 481.727252][ T9002] [ 482.370028][ T5726] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 482.539947][ T5726] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 482.539984][ T5726] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 482.540023][ T5726] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 482.540063][ T5726] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.703084][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.630'. [ 482.710012][ T9000] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 482.782451][ T5726] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 483.119072][ T8999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.119768][ T8999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.520082][ T9014] netlink: 64 bytes leftover after parsing attributes in process `syz.5.631'. [ 483.639127][ T8856] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 483.762871][ T5726] usb 8-1: USB disconnect, device number 2 [ 483.871712][ T8856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 483.873959][ T8856] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 483.920024][ T6002] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 483.964371][ T8856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 483.965679][ T8856] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 483.990523][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 484.036964][ T8856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.037942][ T8856] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 484.072485][ T6002] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 484.072517][ T6002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.252724][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.252768][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.252810][ T10] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 484.252836][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.367738][ T10] usb 7-1: config 0 descriptor?? [ 485.368180][ T6002] usb 2-1: config 0 descriptor?? [ 485.368792][ T8856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.675867][ T6002] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 487.676359][ T6002] [drm:udl_init] *ERROR* Selecting channel failed [ 487.899160][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 487.899290][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 488.696551][ T10] usb 7-1: USB disconnect, device number 9 [ 488.936252][ T6002] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 488.936280][ T6002] [drm] Initialized udl on minor 2 [ 489.020578][ T6002] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 489.046348][ T6002] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 489.072250][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 489.112822][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 489.129758][ T6002] usb 2-1: USB disconnect, device number 42 [ 489.970255][ T9048] kvm: kvm [9047]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x400003 [ 490.173249][ T821] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 490.178713][ T6002] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 490.353310][ T6002] usb 6-1: Using ep0 maxpacket: 16 [ 490.356348][ T6002] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.356382][ T6002] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.356405][ T6002] usb 6-1: config 0 interface 0 has no altsetting 0 [ 490.356447][ T6002] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 490.356470][ T6002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.366161][ T821] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 490.366199][ T821] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 490.366241][ T821] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 490.366266][ T821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.475066][ T6002] usb 6-1: config 0 descriptor?? [ 490.608669][ T9045] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 490.672324][ T821] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 490.874051][ T9045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.874713][ T9045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.188770][ T821] usb 7-1: USB disconnect, device number 10 [ 491.427330][ T6002] usb 6-1: USB disconnect, device number 17 [ 491.553481][ T68] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.493240][ T8856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.978509][ T8856] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.094346][ T1289] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.094494][ T1289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.237228][ T821] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 498.357960][ T68] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.390050][ T821] usb 8-1: config 0 interface 0 has no altsetting 0 [ 498.390103][ T821] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 498.390131][ T821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.395930][ T821] usb 8-1: config 0 descriptor?? [ 498.465943][ T1304] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.466117][ T1304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.033446][ T68] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.507312][ T821] radio-keene 8-1:0.0: V4L2 device registered as radio48 [ 499.555620][ T68] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.726447][ T821] usb 8-1: USB disconnect, device number 3 [ 500.613584][ T8856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.189562][ T68] bridge_slave_1: left allmulticast mode [ 501.189602][ T68] bridge_slave_1: left promiscuous mode [ 501.189877][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.300561][ T68] bridge_slave_0: left allmulticast mode [ 501.300599][ T68] bridge_slave_0: left promiscuous mode [ 501.300855][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.195270][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.271461][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.294021][ T68] bond0 (unregistering): Released all slaves [ 502.372591][ T5258] 8021q: adding VLAN 0 to HW filter on device eth17 [ 502.567915][ T8856] veth0_vlan: entered promiscuous mode [ 502.652961][ T8856] veth1_vlan: entered promiscuous mode [ 502.688658][ T8856] veth0_macvtap: entered promiscuous mode [ 502.775542][ T8856] veth1_macvtap: entered promiscuous mode [ 502.819137][ T8856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.029875][ T8856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.041655][ T1029] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.042101][ T1029] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.042700][ T1029] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.042806][ T1029] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.334007][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.334090][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.554490][ T5258] 8021q: adding VLAN 0 to HW filter on device eth18 [ 504.661319][ T68] hsr_slave_0: left promiscuous mode [ 504.700522][ T68] hsr_slave_1: left promiscuous mode [ 504.701584][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.701610][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.732479][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.732511][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.800178][ T68] veth1_macvtap: left promiscuous mode [ 504.810512][ T68] veth0_macvtap: left promiscuous mode [ 504.810991][ T68] veth1_vlan: left promiscuous mode [ 504.811170][ T68] veth0_vlan: left promiscuous mode [ 505.674846][ T68] team0 (unregistering): Port device team_slave_1 removed [ 505.735093][ T68] team0 (unregistering): Port device team_slave_0 removed [ 505.988994][ T1289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.989017][ T1289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.154661][ T6201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.154685][ T6201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.792059][ T5258] 8021q: adding VLAN 0 to HW filter on device eth19 [ 507.572658][ T5726] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 507.767217][ T5726] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 507.767257][ T5726] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 507.767298][ T5726] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 507.767323][ T5726] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.770899][ T5258] 8021q: adding VLAN 0 to HW filter on device eth20 [ 507.858850][ T9148] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 507.890742][ T5726] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 508.172957][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.177172][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.495516][ T5726] usb 10-1: USB disconnect, device number 2 [ 526.377327][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.6.654'. [ 526.380082][ T9242] netlink: 20 bytes leftover after parsing attributes in process `syz.6.654'. [ 533.962877][ T9260] program syz.1.659 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 537.827633][ T5329] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 538.201568][ T5329] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 538.201600][ T5329] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.235343][ T5329] usb 8-1: config 0 descriptor?? [ 539.975144][ T5329] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 539.998459][ T5329] [drm:udl_init] *ERROR* Selecting channel failed [ 540.038325][ T5329] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 540.038354][ T5329] [drm] Initialized udl on minor 2 [ 540.040513][ T5329] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 540.041026][ T5329] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 540.054087][ T5329] usb 8-1: USB disconnect, device number 4 [ 540.060281][ T6002] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 540.061551][ T6002] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 541.276170][ T5597] Bluetooth: hci5: command 0x0406 tx timeout [ 542.996309][ T9297] program syz.6.667 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 542.999214][ T9297] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 543.119018][ T9302] program syz.7.668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 544.109571][ T5597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 544.184374][ T5597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 544.186665][ T5597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 544.193273][ T5597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 544.200209][ T5597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 544.362866][ T5698] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 544.562831][ T5698] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 544.562872][ T5698] usb 2-1: config 0 interface 0 has no altsetting 0 [ 544.562907][ T5698] usb 2-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 544.562933][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.610441][ T5862] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 544.614800][ T5698] usb 2-1: config 0 descriptor?? [ 544.616025][ T9307] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 544.883767][ T5862] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 544.884443][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.152175][ T9317] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 545.242314][ T9317] cramfs: wrong magic [ 545.625739][ T5862] usb 7-1: config 0 descriptor?? [ 546.311253][ T5604] Bluetooth: hci4: command tx timeout [ 548.077587][ T5862] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 548.106462][ T5862] [drm:udl_init] *ERROR* Selecting channel failed [ 548.394171][ T5604] Bluetooth: hci4: command tx timeout [ 548.615074][ T5329] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 548.803945][ T5329] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 548.803982][ T5329] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 548.804033][ T5329] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 548.804058][ T5329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.908155][ T9324] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 548.939733][ T5329] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 549.191788][ T9324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.192415][ T9324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.461948][ T5698] usbhid 2-1:0.0: can't add hid device: -32 [ 550.479681][ T5604] Bluetooth: hci4: command tx timeout [ 550.614371][ T5698] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 550.615367][ T5862] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 550.615384][ T5862] [drm] Initialized udl on minor 2 [ 550.645778][ T5862] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 550.711548][ T5862] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 550.773210][ T821] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 550.841052][ T821] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 550.955949][ T5862] usb 7-1: USB disconnect, device number 11 [ 550.963766][ T5698] usb 2-1: USB disconnect, device number 43 [ 551.504377][ T6002] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 552.998898][ T5329] usb 6-1: USB disconnect, device number 18 [ 553.195109][ T5604] Bluetooth: hci4: command tx timeout [ 553.346209][ T6002] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 553.346239][ T6002] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.453335][ T6002] usb 8-1: config 0 descriptor?? [ 553.605067][ T5726] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 553.759707][ T5726] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 553.759747][ T5726] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 553.759807][ T5726] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 553.759833][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.837550][ T6002] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 553.838036][ T6002] [drm:udl_init] *ERROR* Selecting channel failed [ 553.890551][ T9354] input: syz1 as /devices/virtual/input/input14 [ 554.030407][ T6002] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 3 [ 554.030433][ T6002] [drm] Initialized udl on minor 3 [ 554.049272][ T6002] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 554.049780][ T6002] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 554.050924][ T10] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 554.051718][ T10] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 554.051953][ T10] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 554.103400][ T6002] usb 8-1: USB disconnect, device number 5 [ 554.141328][ T9347] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 554.178769][ T5726] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 554.391492][ T9347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.392029][ T9347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.398984][ T5862] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 554.569533][ T5862] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 554.569572][ T5862] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 554.569633][ T5862] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 554.569659][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.966195][ T9358] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 555.301784][ T9366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.302548][ T9366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.377326][ T5862] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 555.475253][ T5726] usb 6-1: USB disconnect, device number 19 [ 555.763701][ T1572] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.305294][ T6002] usb 7-1: USB disconnect, device number 12 [ 557.556928][ T5726] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 557.887009][ T5726] usb 6-1: Using ep0 maxpacket: 32 [ 557.895407][ T5726] usb 6-1: config 0 interface 0 has no altsetting 0 [ 557.895448][ T5726] usb 6-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 557.895472][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.947505][ T5726] usb 6-1: config 0 descriptor?? [ 559.184197][ T1572] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.223422][ T5726] thrustmaster 0003:044F:B323.000B: invalid report_size 5631 [ 559.223445][ T5726] thrustmaster 0003:044F:B323.000B: item 0 2 1 7 parsing failed [ 559.224084][ T5726] thrustmaster 0003:044F:B323.000B: parse failed [ 559.251438][ T5726] thrustmaster 0003:044F:B323.000B: probe with driver thrustmaster failed with error -22 [ 559.422011][ T5726] usb 6-1: USB disconnect, device number 20 [ 559.477851][ T6002] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 559.627842][ T6002] usb 7-1: Using ep0 maxpacket: 16 [ 559.631503][ T6002] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 559.631534][ T6002] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 559.631556][ T6002] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.631577][ T6002] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 559.631600][ T6002] usb 7-1: config 0 has no interface number 0 [ 559.631634][ T6002] usb 7-1: config 0 interface 104 has no altsetting 1 [ 559.636492][ T6002] usb 7-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 559.636517][ T6002] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.636536][ T6002] usb 7-1: Product: syz [ 559.636548][ T6002] usb 7-1: Manufacturer: syz [ 559.636560][ T6002] usb 7-1: SerialNumber: syz [ 559.767399][ T6002] usb 7-1: config 0 descriptor?? [ 559.790518][ T6002] asix 7-1:0.104: probe with driver asix failed with error -22 [ 559.808960][ T9409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.696'. [ 560.193426][ T10] usb 7-1: USB disconnect, device number 13 [ 560.241540][ T1572] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.380771][ T9409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.696'. [ 563.821263][ T5726] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 566.031613][ T5726] usb 2-1: Using ep0 maxpacket: 32 [ 566.037673][ T5726] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 566.037704][ T5726] usb 2-1: config 0 has no interface number 0 [ 566.069263][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.069415][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.071170][ T5726] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 566.071200][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.071240][ T5726] usb 2-1: Product: syz [ 566.071256][ T5726] usb 2-1: Manufacturer: syz [ 566.071273][ T5726] usb 2-1: SerialNumber: syz [ 566.189220][ T5726] usb 2-1: config 0 descriptor?? [ 566.212574][ T5726] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 566.494991][ T1572] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.779492][ T5726] usb 2-1: qt2_attach - failed to power on unit: -71 [ 567.779747][ T5726] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 567.827017][ T5726] usb 2-1: USB disconnect, device number 44 [ 568.281132][ T5726] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 568.346604][ T9461] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 568.452158][ T9306] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.452405][ T9306] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.452437][ T5726] usb 2-1: Using ep0 maxpacket: 32 [ 568.452740][ T9306] bridge_slave_0: entered allmulticast mode [ 568.474072][ T9306] bridge_slave_0: entered promiscuous mode [ 568.501365][ T9306] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.501495][ T9306] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.501734][ T9306] bridge_slave_1: entered allmulticast mode [ 568.526155][ T5726] usb 2-1: config 0 interface 0 has no altsetting 0 [ 568.526193][ T5726] usb 2-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 568.526215][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.557114][ T9306] bridge_slave_1: entered promiscuous mode [ 568.577772][ T5726] usb 2-1: config 0 descriptor?? [ 569.371482][ T9306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.554997][ T5726] thrustmaster 0003:044F:B323.000C: invalid report_size 5631 [ 569.555031][ T5726] thrustmaster 0003:044F:B323.000C: item 0 2 1 7 parsing failed [ 569.559298][ T5726] thrustmaster 0003:044F:B323.000C: parse failed [ 569.559381][ T5726] thrustmaster 0003:044F:B323.000C: probe with driver thrustmaster failed with error -22 [ 569.685413][ T9306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.807656][ T6002] usb 2-1: USB disconnect, device number 45 [ 570.013123][ T31] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 570.059868][ T9306] team0: Port device team_slave_0 added [ 570.069955][ T9306] team0: Port device team_slave_1 added [ 570.188938][ T31] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 570.188976][ T31] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 570.189035][ T31] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 570.189060][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.279230][ T9466] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 570.371304][ T31] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 570.555049][ T9483] 9p: Bad value for 'rfdno' [ 570.558035][ T9466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.560039][ T9466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.797393][ T31] usb 7-1: USB disconnect, device number 14 [ 570.906608][ T1572] bridge_slave_1: left allmulticast mode [ 570.906644][ T1572] bridge_slave_1: left promiscuous mode [ 570.906922][ T1572] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.032331][ T1572] bridge_slave_0: left allmulticast mode [ 571.032368][ T1572] bridge_slave_0: left promiscuous mode [ 571.032618][ T1572] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.005992][ T37] kauditd_printk_skb: 120 callbacks suppressed [ 572.006012][ T37] audit: type=1326 audit(1779943076.696:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9499 comm="syz.6.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a73cdd9 code=0x7ffc0000 [ 572.006064][ T37] audit: type=1326 audit(1779943076.696:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9499 comm="syz.6.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a73cdd9 code=0x7ffc0000 [ 572.008197][ T37] audit: type=1326 audit(1779943076.696:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9499 comm="syz.6.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a73cdd9 code=0x7ffc0000 [ 572.008255][ T37] audit: type=1326 audit(1779943076.696:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9499 comm="syz.6.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a73cdd9 code=0x7ffc0000 [ 572.008311][ T37] audit: type=1326 audit(1779943076.696:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9499 comm="syz.6.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f7a2a73cdd9 code=0x7ffc0000 [ 572.008358][ T37] audit: type=1326 audit(1779943076.696:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9499 comm="syz.6.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a73cdd9 code=0x7ffc0000 [ 572.008405][ T37] audit: type=1326 audit(1779943076.696:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9499 comm="syz.6.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a73cdd9 code=0x7ffc0000 [ 572.008450][ T37] audit: type=1326 audit(1779943076.696:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9499 comm="syz.6.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a73cdd9 code=0x7ffc0000 [ 572.008495][ T37] audit: type=1326 audit(1779943076.696:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9499 comm="syz.6.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a73cdd9 code=0x7ffc0000 [ 572.008542][ T37] audit: type=1326 audit(1779943076.696:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9499 comm="syz.6.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a2a73cdd9 code=0x7ffc0000 [ 574.822584][ T1572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.876322][ T1572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.908284][ T1572] bond0 (unregistering): Released all slaves [ 574.990582][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.990600][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.990631][ T9306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.430560][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 575.430583][ T9495] tc_dump_action: action bad kind [ 575.473210][ T9524] binder: BINDER_SET_CONTEXT_MGR already set [ 575.473227][ T9524] binder: 9523:9524 ioctl 4018620d 200000001000 returned -16 [ 575.475577][ T9524] binder: 9523:9524 ioctl c0306201 200000000680 returned -14 [ 575.647298][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.647318][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.647349][ T9306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.793688][ T9306] hsr_slave_0: entered promiscuous mode [ 575.795323][ T9306] hsr_slave_1: entered promiscuous mode [ 576.385946][ T36] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 577.201757][ T36] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 577.201787][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.227214][ T36] usb 6-1: config 0 descriptor?? [ 578.476582][ T36] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 578.479210][ T36] [drm:udl_init] *ERROR* Selecting channel failed [ 578.591953][ T36] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 578.591980][ T36] [drm] Initialized udl on minor 2 [ 578.634123][ T36] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 578.634622][ T36] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 578.779621][ T31] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 578.809547][ T31] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 578.809781][ T31] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 578.813266][ T36] usb 6-1: USB disconnect, device number 21 [ 578.952276][ T9556] netlink: 'syz.7.737': attribute type 1 has an invalid length. [ 579.776253][ T9568] overlayfs: missing 'lowerdir' [ 581.832094][ T5258] 8021q: adding VLAN 0 to HW filter on device eth21 [ 582.379256][ T5329] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 582.380544][ T5862] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 582.532912][ T5329] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 582.532944][ T5329] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.559415][ T5329] usb 7-1: config 0 descriptor?? [ 582.576189][ T5862] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 582.576221][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.616100][ T5862] usb 2-1: config 0 descriptor?? [ 583.150806][ T5329] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 583.151246][ T5329] [drm:udl_init] *ERROR* Selecting channel failed [ 583.217958][ T5862] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 583.218493][ T5862] [drm:udl_init] *ERROR* Selecting channel failed [ 583.266789][ T5862] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3 [ 583.266817][ T5862] [drm] Initialized udl on minor 3 [ 583.305935][ T5862] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 583.306468][ T5862] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 583.307670][ T5726] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 583.308434][ T5726] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 583.308665][ T5726] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 583.353443][ T5862] usb 2-1: USB disconnect, device number 46 [ 583.694115][ T5329] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 583.694142][ T5329] [drm] Initialized udl on minor 2 [ 583.706538][ T5329] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 583.790559][ T5329] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 583.839250][ T10] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 583.839482][ T10] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 583.908245][ T5329] usb 7-1: USB disconnect, device number 15 [ 583.942399][ T9596] FAULT_INJECTION: forcing a failure. [ 583.942399][ T9596] name failslab, interval 1, probability 0, space 0, times 0 [ 583.942441][ T9596] CPU: 0 UID: 0 PID: 9596 Comm: syz.5.745 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 583.942472][ T9596] Tainted: [L]=SOFTLOCKUP [ 583.942480][ T9596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 583.942493][ T9596] Call Trace: [ 583.942501][ T9596] [ 583.942511][ T9596] dump_stack_lvl+0xe8/0x150 [ 583.942543][ T9596] should_fail_ex+0x46b/0x600 [ 583.942586][ T9596] should_failslab+0xa8/0x100 [ 583.942616][ T9596] __kmalloc_cache_noprof+0x84/0x690 [ 583.942644][ T9596] ? proc_self_get_link+0xe5/0x180 [ 583.942674][ T9596] ? __task_pid_nr_ns+0x399/0x470 [ 583.942716][ T9596] proc_self_get_link+0xe5/0x180 [ 583.942739][ T9596] ? __pfx_proc_self_get_link+0x10/0x10 [ 583.942763][ T9596] pick_link+0x727/0xfe0 [ 583.942797][ T9596] step_into_slowpath+0x547/0x7e0 [ 583.942826][ T9596] ? __pfx_step_into_slowpath+0x10/0x10 [ 583.942860][ T9596] link_path_walk+0xd50/0x18d0 [ 583.942916][ T9596] path_openat+0x2d5/0x38a0 [ 583.942978][ T9596] ? __pfx_path_openat+0x10/0x10 [ 583.943008][ T9596] ? kasan_save_track+0x4f/0x80 [ 583.943029][ T9596] ? kasan_save_track+0x3e/0x80 [ 583.943050][ T9596] ? __kasan_slab_alloc+0x6c/0x80 [ 583.943071][ T9596] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 583.943103][ T9596] ? do_raw_spin_lock+0x12b/0x2f0 [ 583.943142][ T9596] do_file_open+0x23e/0x4a0 [ 583.943167][ T9596] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 583.943216][ T9596] ? __pfx_do_file_open+0x10/0x10 [ 583.943238][ T9596] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 583.943293][ T9596] ? alloc_fd+0x64e/0x6c0 [ 583.943338][ T9596] do_sys_openat2+0x113/0x200 [ 583.943375][ T9596] ? __pfx_do_sys_openat2+0x10/0x10 [ 583.943411][ T9596] ? ksys_write+0x248/0x270 [ 583.943438][ T9596] ? __pfx_ksys_write+0x10/0x10 [ 583.943468][ T9596] __x64_sys_openat+0x138/0x170 [ 583.943506][ T9596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.943531][ T9596] do_syscall_64+0x15f/0xf80 [ 583.943551][ T9596] ? trace_irq_disable+0x3b/0x140 [ 583.943579][ T9596] ? clear_bhb_loop+0x40/0x90 [ 583.943607][ T9596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.943630][ T9596] RIP: 0033:0x7f0526edd60e [ 583.943653][ T9596] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 583.943673][ T9596] RSP: 002b:00007f052516dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 583.943696][ T9596] RAX: ffffffffffffffda RBX: 00007f052516e6c0 RCX: 00007f0526edd60e [ 583.943713][ T9596] RDX: 0000000000000002 RSI: 00007f052516df90 RDI: ffffffffffffff9c [ 583.943728][ T9596] RBP: 00007f052516e090 R08: 0000000000000000 R09: 0000000000000000 [ 583.943743][ T9596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.943756][ T9596] R13: 00007f0527196038 R14: 00007f0527195fa0 R15: 00007ffe2df8f9e8 [ 583.943792][ T9596] [ 585.114585][ T6002] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 585.274712][ T6002] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 585.274752][ T6002] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 585.274795][ T6002] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 585.274829][ T6002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.362363][ T9603] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 585.402738][ T6002] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 585.792232][ T9600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.793029][ T9600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.314057][ T6002] usb 2-1: USB disconnect, device number 47 [ 588.313228][ T6002] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 588.442416][ T5329] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 588.465061][ T6002] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 588.465095][ T6002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.545400][ T6002] usb 2-1: config 0 descriptor?? [ 588.595006][ T5329] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 588.595044][ T5329] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 588.595085][ T5329] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 588.595110][ T5329] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.657347][ T9646] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 588.748669][ T5329] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 588.952144][ T6002] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 588.960223][ T6002] [drm:udl_init] *ERROR* Selecting channel failed [ 589.024729][ T9643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.025293][ T9643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.099439][ T6002] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 589.099466][ T6002] [drm] Initialized udl on minor 2 [ 589.114690][ T6002] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 589.115182][ T6002] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 589.116752][ T1241] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 589.117415][ T1241] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 589.117614][ T1241] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 589.173044][ T6002] usb 2-1: USB disconnect, device number 48 [ 589.301881][ T5329] usb 7-1: USB disconnect, device number 16 [ 589.356815][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.758'. [ 589.356843][ T9642] netlink: 20 bytes leftover after parsing attributes in process `syz.5.758'. [ 589.386297][ T5258] 8021q: adding VLAN 0 to HW filter on device eth22 [ 591.183618][ T5329] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 591.336141][ T5329] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 591.336180][ T5329] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 591.336223][ T5329] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 591.336247][ T5329] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.397532][ T9663] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 591.422232][ T5329] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 591.583807][ T1241] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 591.748515][ T1241] usb 8-1: unable to get BOS descriptor or descriptor too short [ 591.778129][ T1241] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.778160][ T1241] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 591.778214][ T1241] usb 8-1: config 1 interface 1 has no altsetting 0 [ 591.912432][ T1241] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 591.912706][ T1241] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.912730][ T1241] usb 8-1: Product: syz [ 591.912746][ T1241] usb 8-1: Manufacturer: syz [ 591.912762][ T1241] usb 8-1: SerialNumber: syz [ 592.035197][ T9660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.035752][ T9660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.066863][ T1241] usb 8-1: selecting invalid altsetting 1 [ 592.067764][ T1241] usb 8-1: unit 6 not found! [ 592.122497][ T5329] usb 7-1: USB disconnect, device number 17 [ 592.222404][ T1241] usb 8-1: 2:0: cannot get min/max values for control 1 (id 2) [ 593.818004][ T5698] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 593.857235][ T1241] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 593.917175][ T1241] usb 8-1: selecting invalid altsetting 1 [ 594.440725][ T1241] usb 8-1: unit 6 not found! [ 594.455394][ T5698] usb 2-1: device descriptor read/64, error -71 [ 594.820286][ T1241] usb 8-1: 2:0: cannot get min/max values for control 1 (id 2) [ 594.895997][ T5329] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 594.916946][ T1241] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 594.923921][ T1241] usb 8-1: USB disconnect, device number 6 [ 594.995611][ T5698] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 595.030411][ T9271] udevd[9271]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 595.054849][ T1572] hsr_slave_0: left promiscuous mode [ 595.055238][ T5329] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 595.055280][ T5329] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 595.055332][ T5329] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 595.055370][ T5329] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.109462][ T9685] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 595.124689][ T1572] hsr_slave_1: left promiscuous mode [ 595.135758][ T1572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.135789][ T1572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.137884][ T5329] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 595.178871][ T5698] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 595.178902][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.185287][ T1572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.185318][ T1572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.252089][ T5698] usb 2-1: config 0 descriptor?? [ 596.611978][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 596.671414][ T5698] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 596.671891][ T5698] [drm:udl_init] *ERROR* Selecting channel failed [ 596.703080][ T1572] veth1_macvtap: left promiscuous mode [ 596.703186][ T1572] veth0_macvtap: left promiscuous mode [ 596.703440][ T1572] veth1_vlan: left promiscuous mode [ 596.703641][ T1572] veth0_vlan: left promiscuous mode [ 596.751214][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.751855][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.787678][ T5698] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 596.787712][ T5698] [drm] Initialized udl on minor 2 [ 596.801247][ T5726] usb 7-1: USB disconnect, device number 18 [ 596.849724][ T5698] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 596.850055][ T5698] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 596.938269][ T5862] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 596.941919][ T5862] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 596.942156][ T5862] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 597.087795][ T5698] usb 2-1: USB disconnect, device number 50 [ 598.996372][ T9714] overlay: ./file1 is not a directory [ 599.394449][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.6.779'. [ 599.448519][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.6.779'. [ 599.999826][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 600.530717][ T10] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 600.530750][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.542333][ T10] usb 8-1: config 0 descriptor?? [ 601.426510][ T10] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 601.426967][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 601.461862][ T10] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 601.461884][ T10] [drm] Initialized udl on minor 2 [ 601.463118][ T10] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 601.463520][ T10] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 601.496201][ T5329] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 601.498467][ T5329] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 601.518170][ T10] usb 8-1: USB disconnect, device number 7 [ 601.530275][ T5329] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 603.554788][ T5597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 603.611184][ T5597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 603.614256][ T5597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 603.616649][ T5597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 603.617759][ T5597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 604.070041][ T5862] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 604.222673][ T5862] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 604.222722][ T5862] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 604.222765][ T5862] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 604.222791][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.316928][ T9739] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 604.361632][ T5862] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 604.923909][ T9739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.924550][ T9739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.286961][ T9755] netlink: 120 bytes leftover after parsing attributes in process `syz.6.791'. [ 605.286998][ T9755] netlink: 'syz.6.791': attribute type 1 has an invalid length. [ 605.287012][ T9755] netlink: 64 bytes leftover after parsing attributes in process `syz.6.791'. [ 605.418314][ T9758] loop5: detected capacity change from 0 to 7 [ 605.839229][ T5604] Bluetooth: hci3: command tx timeout [ 606.576427][ T1572] team0 (unregistering): Port device team_slave_1 removed [ 606.624177][ T5862] usb 2-1: USB disconnect, device number 51 [ 606.674988][ T1572] team0 (unregistering): Port device team_slave_0 removed [ 606.770904][ T9758] Dev loop5: unable to read RDB block 7 [ 606.770947][ T9758] loop5: AHDI p2 p3 [ 606.770975][ T9758] loop5: partition table partially beyond EOD, truncated [ 606.818073][ T9758] loop5: p2 start 1702059890 is beyond EOD, truncated [ 608.626999][ T5604] Bluetooth: hci3: command tx timeout [ 609.762998][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 609.822544][ T9790] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 609.854822][ T9799] input: syz1 as /devices/virtual/input/input15 [ 609.917341][ T10] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 609.917376][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.950067][ T10] usb 8-1: config 0 descriptor?? [ 610.355523][ T5597] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 610.404000][ T5597] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 610.420950][ T5597] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 610.492461][ T5597] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 610.529836][ T5597] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 610.566915][ T10] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 610.567370][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 610.685040][ T5597] Bluetooth: hci3: command tx timeout [ 610.731456][ T10] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 610.731482][ T10] [drm] Initialized udl on minor 2 [ 610.732817][ T10] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 610.733373][ T10] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 610.910397][ T10] usb 8-1: USB disconnect, device number 8 [ 610.923100][ T5329] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 610.983304][ T5329] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 612.584408][ T5698] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 612.682931][ T5862] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 612.759680][ T5604] Bluetooth: hci3: command tx timeout [ 612.817920][ T5698] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 612.817958][ T5698] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 612.818001][ T5698] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 612.818026][ T5698] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.828144][ T5604] Bluetooth: hci6: command tx timeout [ 612.873523][ T5862] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 612.873562][ T5862] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 612.873605][ T5862] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 612.873630][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.920069][ T9818] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 612.967756][ T9821] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 612.970256][ T5258] 8021q: adding VLAN 0 to HW filter on device eth23 [ 613.022401][ T5698] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 613.138288][ T9818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.138937][ T9818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.459213][ T9817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.459888][ T9817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.714097][ T5604] Bluetooth: hci6: command tx timeout [ 615.769924][ T5862] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 616.029481][ T5698] usb 8-1: USB disconnect, device number 9 [ 616.085334][ T9847] netlink: 40 bytes leftover after parsing attributes in process `syz.6.805'. [ 616.412969][ T9847] netlink: 40 bytes leftover after parsing attributes in process `syz.6.805'. [ 616.414244][ T9681] team0: Port device syz_tun removed [ 616.439229][ T9855] input: syz1 as /devices/virtual/input/input16 [ 616.535633][ T5862] usb 7-1: USB disconnect, device number 19 [ 616.625623][ T9847] netlink: 40 bytes leftover after parsing attributes in process `syz.6.805'. [ 617.237644][ T36] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 617.442629][ T36] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 617.442653][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.486581][ T36] usb 2-1: config 0 descriptor?? [ 617.759765][ T36] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 617.760253][ T36] [drm:udl_init] *ERROR* Selecting channel failed [ 617.800263][ T5604] Bluetooth: hci6: command tx timeout [ 617.854064][ T36] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 617.854092][ T36] [drm] Initialized udl on minor 2 [ 617.990335][ T1572] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.990375][ T1572] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.002209][ T36] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 618.005708][ T36] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 618.036153][ T5698] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 618.036843][ T5698] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 618.193579][ T36] usb 2-1: USB disconnect, device number 52 [ 619.868270][ T5604] Bluetooth: hci6: command tx timeout [ 620.033603][ T5329] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 620.085468][ T5258] 8021q: adding VLAN 0 to HW filter on device eth24 [ 620.183954][ T5329] usb 8-1: Using ep0 maxpacket: 32 [ 620.198508][ T5329] usb 8-1: config 0 interface 0 has no altsetting 0 [ 620.198551][ T5329] usb 8-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 620.198576][ T5329] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.204924][ T5329] usb 8-1: config 0 descriptor?? [ 620.328201][ T5733] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 620.525228][ T5733] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 620.525269][ T5733] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 620.525311][ T5733] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 620.525400][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.576324][ T1572] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.576364][ T1572] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.611558][ T9896] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 620.657147][ T5733] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 620.860948][ T5329] thrustmaster 0003:044F:B323.000D: invalid report_size 5631 [ 620.860974][ T5329] thrustmaster 0003:044F:B323.000D: item 0 2 1 7 parsing failed [ 620.861792][ T5329] thrustmaster 0003:044F:B323.000D: parse failed [ 620.861877][ T5329] thrustmaster 0003:044F:B323.000D: probe with driver thrustmaster failed with error -22 [ 620.884828][ T9892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.885490][ T9892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.119476][ T5329] usb 8-1: USB disconnect, device number 10 [ 621.210730][ T5733] usb 2-1: USB disconnect, device number 53 [ 621.852643][ T1572] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.873030][ T1572] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.277693][ T9926] input: syz1 as /devices/virtual/input/input17 [ 622.609418][ T5698] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 622.783188][ T5698] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 622.783220][ T5698] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.820233][ T5698] usb 7-1: config 0 descriptor?? [ 622.884180][ T1572] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.884221][ T1572] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.019598][ T5862] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 623.106121][ T5698] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 623.106543][ T5698] [drm:udl_init] *ERROR* Selecting channel failed [ 623.144279][ T5698] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 623.144306][ T5698] [drm] Initialized udl on minor 2 [ 623.145829][ T5698] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 623.146292][ T5698] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 623.148449][ T9922] netlink: 32 bytes leftover after parsing attributes in process `syz.7.819'. [ 623.148857][ T36] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 623.209112][ T36] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 623.219146][ T5862] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 623.219177][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.238249][ T36] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 623.249941][ T5698] usb 7-1: USB disconnect, device number 20 [ 623.250599][ T9922] netlink: 84 bytes leftover after parsing attributes in process `syz.7.819'. [ 623.295213][ T5862] usb 2-1: config 0 descriptor?? [ 623.587839][ T5862] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 623.588319][ T5862] [drm:udl_init] *ERROR* Selecting channel failed [ 623.779344][ T5862] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3 [ 623.779372][ T5862] [drm] Initialized udl on minor 3 [ 623.851242][ T5862] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 623.885305][ T5698] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 623.940318][ T5862] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 623.941633][ T5698] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 623.941861][ T5698] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 623.982899][ T5862] usb 2-1: USB disconnect, device number 54 [ 625.469276][ T9962] netlink: 120 bytes leftover after parsing attributes in process `syz.7.826'. [ 626.462654][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.492639][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.122578][ T5862] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 629.270945][ T9740] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.271756][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.271968][ T9740] bridge_slave_0: entered allmulticast mode [ 629.306794][ T5862] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 629.306826][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.306610][ T9740] bridge_slave_0: entered promiscuous mode [ 630.335157][ T5862] usb 7-1: config 0 descriptor?? [ 630.641846][ T9740] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.642166][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.642692][ T9740] bridge_slave_1: entered allmulticast mode [ 630.736269][ T9740] bridge_slave_1: entered promiscuous mode [ 630.769881][ T5862] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 630.770521][ T5862] [drm:udl_init] *ERROR* Selecting channel failed [ 630.849195][ T5862] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 630.849221][ T5862] [drm] Initialized udl on minor 2 [ 630.851242][ T5862] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 630.851693][ T5862] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 630.885902][ T5698] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 630.908075][ T5862] usb 7-1: USB disconnect, device number 21 [ 630.922789][ T5698] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 632.294123][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 632.611320][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 632.611359][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 632.611401][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 632.611426][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.680423][T10007] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 632.732597][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 633.181879][T10018] netlink: 92 bytes leftover after parsing attributes in process `syz.6.836'. [ 633.181906][T10018] netlink: 92 bytes leftover after parsing attributes in process `syz.6.836'. [ 633.231568][T10019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.232357][T10019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.531300][ T1572] bridge_slave_1: left allmulticast mode [ 636.531337][ T1572] bridge_slave_1: left promiscuous mode [ 636.531617][ T1572] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.474020][ T1572] bridge_slave_0: left allmulticast mode [ 637.474056][ T1572] bridge_slave_0: left promiscuous mode [ 637.474337][ T1572] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.605984][ C0] sched: DL replenish lagged too much [ 642.331292][ T1572] bridge_slave_1: left allmulticast mode [ 642.331330][ T1572] bridge_slave_1: left promiscuous mode [ 642.331591][ T1572] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.699652][ T1572] bridge_slave_0: left allmulticast mode [ 643.699736][ T1572] bridge_slave_0: left promiscuous mode [ 643.699989][ T1572] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.125348][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 652.163834][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 652.193874][ T5597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 652.230086][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 652.259745][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 652.850736][ T5601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 653.002117][ T5601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 653.013333][ T5601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 653.040434][ T5601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 653.046726][ T5601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 654.969906][ T5597] Bluetooth: hci2: command tx timeout [ 655.097114][ T5597] Bluetooth: hci4: command tx timeout [ 657.851874][ T5597] Bluetooth: hci2: command tx timeout [ 657.851915][ T5601] Bluetooth: hci4: command tx timeout [ 659.918165][ T5597] Bluetooth: hci4: command tx timeout [ 660.296939][ T5597] Bluetooth: hci2: command tx timeout [ 660.832924][ T5329] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 661.968963][ T5597] Bluetooth: hci4: command tx timeout [ 662.439229][ T5597] Bluetooth: hci2: command tx timeout [ 666.499063][ T5601] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 666.571987][ T5601] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 666.574696][ T5601] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 666.657295][ T5601] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 666.658289][ T5601] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 668.852806][ T5597] Bluetooth: hci7: command tx timeout [ 669.339716][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 670.933498][ T5597] Bluetooth: hci7: command tx timeout [ 673.014697][ T5597] Bluetooth: hci7: command tx timeout [ 675.201424][ T5597] Bluetooth: hci7: command tx timeout [ 678.112330][ T5601] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 678.175355][ T5601] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 678.185336][ T5601] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 678.231978][ T5601] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 678.234490][ T5601] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 680.378598][ T5597] Bluetooth: hci8: command tx timeout [ 680.666407][ T1572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.202777][ T1572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.459430][ T5597] Bluetooth: hci8: command tx timeout [ 682.747309][ T1572] bond0 (unregistering): Released all slaves [ 684.540474][ T5597] Bluetooth: hci8: command tx timeout [ 686.621674][ T5597] Bluetooth: hci8: command tx timeout [ 688.028305][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.028380][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.555690][ T5601] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 693.752656][ T5601] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 693.795149][ T5601] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 693.799937][ T5601] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 693.801889][ T5601] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 695.906195][ T5597] Bluetooth: hci9: command tx timeout [ 697.987648][ T5597] Bluetooth: hci9: command tx timeout [ 700.078029][ T5597] Bluetooth: hci9: command tx timeout [ 702.149438][ T5597] Bluetooth: hci9: command tx timeout [ 715.919044][ T5601] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 715.962341][ T5601] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 715.981280][ T5601] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 715.994702][ T5601] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 715.995545][ T5601] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 716.437848][ T5601] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 716.521654][ T5601] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 716.560021][ T5601] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 716.562549][ T5601] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 716.563370][ T5601] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 718.237187][ T5597] Bluetooth: hci10: command tx timeout [ 718.727396][ T5597] Bluetooth: hci11: command tx timeout [ 720.318130][ T5597] Bluetooth: hci10: command tx timeout [ 720.808469][ T5597] Bluetooth: hci11: command tx timeout [ 722.399158][ T5597] Bluetooth: hci10: command tx timeout [ 722.889495][ T5597] Bluetooth: hci11: command tx timeout [ 724.490241][ T5597] Bluetooth: hci10: command tx timeout [ 724.960453][ T5597] Bluetooth: hci11: command tx timeout [ 729.781518][T10049] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 729.978919][T10049] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 729.981408][T10049] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 730.014628][T10049] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 730.015542][T10049] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 730.822623][ T5597] Bluetooth: hci3: command 0x0406 tx timeout [ 732.389073][ T5597] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 732.436033][ T5597] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 732.439167][ T5597] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 732.442793][ T5597] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 732.450396][ T5597] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 732.804580][ T5601] Bluetooth: hci12: command tx timeout [ 734.645325][ T5597] Bluetooth: hci13: command tx timeout [ 734.885486][ T5597] Bluetooth: hci12: command tx timeout [ 735.926023][ T5597] Bluetooth: hci6: command 0x0406 tx timeout [ 736.726479][ T5597] Bluetooth: hci13: command tx timeout [ 736.966434][ T5597] Bluetooth: hci12: command tx timeout [ 739.022002][ T5601] Bluetooth: hci13: command tx timeout [ 739.110667][ T5601] Bluetooth: hci12: command tx timeout [ 741.058609][ T5601] Bluetooth: hci13: command tx timeout [ 749.953193][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.953263][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.316252][ T5597] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 760.389636][ T5597] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 760.391271][ T5597] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 760.395957][ T5597] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 760.397120][ T5597] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 762.507193][ T5601] Bluetooth: hci14: command tx timeout [ 764.590622][ T5601] Bluetooth: hci14: command tx timeout [ 766.661419][ T5601] Bluetooth: hci14: command tx timeout [ 768.742329][ T5601] Bluetooth: hci14: command tx timeout [ 776.996952][T10049] Bluetooth: hci2: command 0x0406 tx timeout [ 776.997000][T10049] Bluetooth: hci4: command 0x0406 tx timeout [ 781.104971][ T5601] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 781.277403][ T5601] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 781.291691][ T5601] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 781.296688][ T5601] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 781.323469][ T5601] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 782.656271][ T5597] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 782.866623][ T5597] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 782.888348][ T5597] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 782.907304][ T5597] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 782.917148][ T5597] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 783.985725][ T5597] Bluetooth: hci15: command tx timeout [ 785.081601][ T5597] Bluetooth: hci16: command tx timeout [ 786.111065][ T5597] Bluetooth: hci15: command tx timeout [ 787.152320][ T5597] Bluetooth: hci16: command tx timeout [ 788.202004][ T5597] Bluetooth: hci15: command tx timeout [ 788.282015][ T38] INFO: task kworker/u8:1:13 blocked for more than 143 seconds. [ 788.282043][ T38] Tainted: G L syzkaller #0 [ 788.282054][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 788.282065][ T38] task:kworker/u8:1 state:D stack:21504 pid:13 tgid:13 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 788.282125][ T38] Workqueue: events_unbound linkwatch_event [ 788.282158][ T38] Call Trace: [ 788.282165][ T38] [ 788.282179][ T38] __schedule+0x1681/0x54c0 [ 788.282243][ T38] ? __pfx___schedule+0x10/0x10 [ 788.282289][ T38] rt_mutex_schedule+0x76/0xf0 [ 788.282312][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 788.282357][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 788.282387][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 788.282416][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 788.282462][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 788.282499][ T38] ? linkwatch_event+0xe/0x60 [ 788.282537][ T38] mutex_lock_nested+0x168/0x1d0 [ 788.282564][ T38] ? linkwatch_event+0xe/0x60 [ 788.282589][ T38] ? process_scheduled_works+0xa70/0x1860 [ 788.282615][ T38] linkwatch_event+0xe/0x60 [ 788.282639][ T38] process_scheduled_works+0xb5d/0x1860 [ 788.282693][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 788.282723][ T38] ? assign_work+0x3d5/0x5e0 [ 788.282750][ T38] worker_thread+0xa53/0xfc0 [ 788.282807][ T38] kthread+0x388/0x470 [ 788.282836][ T38] ? __pfx_worker_thread+0x10/0x10 [ 788.282858][ T38] ? __pfx_kthread+0x10/0x10 [ 788.282888][ T38] ret_from_fork+0x514/0xb70 [ 788.282914][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 788.282938][ T38] ? __switch_to+0xc79/0x1410 [ 788.282974][ T38] ? __pfx_kthread+0x10/0x10 [ 788.283003][ T38] ret_from_fork_asm+0x1a/0x30 [ 788.283046][ T38] [ 788.283061][ T38] INFO: task kworker/1:0:31 blocked for more than 143 seconds. [ 788.283079][ T38] Tainted: G L syzkaller #0 [ 788.283090][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 788.283099][ T38] task:kworker/1:0 state:D stack:20744 pid:31 tgid:31 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 788.283153][ T38] Workqueue: events switchdev_deferred_process_work [ 788.283175][ T38] Call Trace: [ 788.283182][ T38] [ 788.283194][ T38] __schedule+0x1681/0x54c0 [ 788.283255][ T38] ? __pfx___schedule+0x10/0x10 [ 788.283300][ T38] rt_mutex_schedule+0x76/0xf0 [ 788.283321][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 788.283367][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 788.283397][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 788.283424][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 788.283460][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 788.283496][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 788.283516][ T38] mutex_lock_nested+0x168/0x1d0 [ 788.283543][ T38] ? process_scheduled_works+0xa70/0x1860 [ 788.283568][ T38] switchdev_deferred_process_work+0xe/0x20 [ 788.283588][ T38] process_scheduled_works+0xb5d/0x1860 [ 788.283642][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 788.283673][ T38] ? assign_work+0x3d5/0x5e0 [ 788.283719][ T38] worker_thread+0xa53/0xfc0 [ 788.283779][ T38] kthread+0x388/0x470 [ 788.283812][ T38] ? __pfx_worker_thread+0x10/0x10 [ 788.283837][ T38] ? __pfx_kthread+0x10/0x10 [ 788.283870][ T38] ret_from_fork+0x514/0xb70 [ 788.283900][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 788.283927][ T38] ? __switch_to+0xc79/0x1410 [ 788.283965][ T38] ? __pfx_kthread+0x10/0x10 [ 788.283999][ T38] ret_from_fork_asm+0x1a/0x30 [ 788.284048][ T38] [ 788.284112][ T38] INFO: task kworker/u8:12:1424 blocked for more than 143 seconds. [ 788.284132][ T38] Tainted: G L syzkaller #0 [ 788.284144][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 788.284155][ T38] task:kworker/u8:12 state:D stack:19944 pid:1424 tgid:1424 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 788.284213][ T38] Workqueue: ipv6_addrconf addrconf_verify_work [ 788.284241][ T38] Call Trace: [ 788.284248][ T38] [ 788.284261][ T38] __schedule+0x1681/0x54c0 [ 788.284329][ T38] ? __pfx___schedule+0x10/0x10 [ 788.284380][ T38] rt_mutex_schedule+0x76/0xf0 [ 788.284405][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 788.284454][ T38] rt_mutex_slowlock+0x2dc/0x780 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 788.284488][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 788.284519][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 788.284561][ T38] ? addrconf_verify_work+0x19/0x30 [ 788.284594][ T38] ? addrconf_verify_work+0x19/0x30 [ 788.284626][ T38] ? addrconf_verify_work+0x19/0x30 [ 788.284626][ T38] ? addrconf_verify_work+0x19/0x30 [ 788.284652][ T38] mutex_lock_nested+0x168/0x1d0 [ 788.284688][ T38] addrconf_verify_work+0x19/0x30 [ 788.284714][ T38] ? process_scheduled_works+0xa70/0x1860 [ 788.284738][ T38] process_scheduled_works+0xb5d/0x1860 [ 788.284804][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 788.284839][ T38] ? assign_work+0x3d5/0x5e0 [ 788.284870][ T38] worker_thread+0xa53/0xfc0 [ 788.284936][ T38] kthread+0x388/0x470 [ 788.284964][ T38] ? __pfx_worker_thread+0x10/0x10 [ 788.284986][ T38] ? __pfx_kthread+0x10/0x10 [ 788.285017][ T38] ret_from_fork+0x514/0xb70 [ 788.285043][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 788.285067][ T38] ? __switch_to+0xc79/0x1410 [ 788.285102][ T38] ? __pfx_kthread+0x10/0x10 [ 788.285132][ T38] ret_from_fork_asm+0x1a/0x30 [ 788.285184][ T38] [ 788.285257][ T38] INFO: task dhcpcd:5258 blocked for more than 143 seconds. [ 788.285274][ T38] Tainted: G L syzkaller #0 [ 788.285284][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 788.285293][ T38] task:dhcpcd state:D stack:21464 pid:5258 tgid:5258 ppid:5257 task_flags:0x400140 flags:0x00080000 [ 788.285342][ T38] Call Trace: [ 788.285348][ T38] [ 788.285360][ T38] __schedule+0x1681/0x54c0 [ 788.285387][ T38] ? unwind_next_frame+0xa6/0x2550 [ 788.285440][ T38] ? __pfx___schedule+0x10/0x10 [ 788.285484][ T38] rt_mutex_schedule+0x76/0xf0 [ 788.285504][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 788.285547][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 788.285574][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 788.285600][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 788.285624][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 788.285662][ T38] ? inet6_rtm_deladdr+0x23d/0x370 [ 788.285692][ T38] ? inet6_rtm_deladdr+0x23d/0x370 [ 788.285723][ T38] ? inet6_rtm_deladdr+0x23d/0x370 [ 788.285748][ T38] mutex_lock_nested+0x168/0x1d0 [ 788.285784][ T38] inet6_rtm_deladdr+0x23d/0x370 [ 788.285814][ T38] ? __pfx_inet6_rtm_deladdr+0x10/0x10 [ 788.285857][ T38] ? __pfx_inet6_rtm_deladdr+0x10/0x10 [ 788.285882][ T38] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 788.285912][ T38] ? kasan_save_track+0x3e/0x80 [ 788.285935][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 788.285966][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 788.285999][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 788.286037][ T38] netlink_rcv_skb+0x232/0x4b0 [ 788.286059][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 788.286091][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 788.286123][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 788.286144][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 788.286170][ T38] netlink_unicast+0x780/0x920 [ 788.286209][ T38] netlink_sendmsg+0x813/0xb40 [ 788.286256][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.286288][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 788.286314][ T38] ____sys_sendmsg+0x94c/0x9c0 [ 788.286344][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 788.725299][ T38] ? import_iovec+0x73/0xa0 [ 788.725339][ T38] ___sys_sendmsg+0x2a5/0x360 [ 788.725366][ T38] ? __asan_memcpy+0x40/0x70 [ 788.725400][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.725462][ T38] ? __pfx_vfs_read+0x10/0x10 [ 788.725503][ T38] __x64_sys_sendmsg+0x1c3/0x2a0 [ 788.725531][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 788.725566][ T38] ? __pfx_ksys_read+0x10/0x10 [ 788.725598][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.725622][ T38] do_syscall_64+0x15f/0xf80 [ 788.725641][ T38] ? trace_irq_disable+0x3b/0x140 [ 788.725666][ T38] ? clear_bhb_loop+0x40/0x90 [ 788.725692][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.725714][ T38] RIP: 0033:0x7f1df7d06407 [ 788.725733][ T38] RSP: 002b:00007ffd97b723e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 788.725757][ T38] RAX: ffffffffffffffda RBX: 00007f1df7c7c780 RCX: 00007f1df7d06407 [ 788.725773][ T38] RDX: 0000000000000000 RSI: 00007ffd97b865c0 RDI: 0000000000000004 [ 788.725785][ T38] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 788.725797][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd97b967f0 [ 788.725811][ T38] R13: 00007f1df7c7c708 R14: 000000000000002c R15: 00007ffd97b865c0 [ 788.725843][ T38] [ 788.725918][ T38] INFO: task syz-executor:9740 blocked for more than 143 seconds. [ 788.725936][ T38] Tainted: G L syzkaller #0 [ 788.725947][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 788.725956][ T38] task:syz-executor state:D stack:22624 pid:9740 tgid:9740 ppid:1 task_flags:0x400140 flags:0x00080002 [ 788.726010][ T38] Call Trace: [ 788.726016][ T38] [ 788.726029][ T38] __schedule+0x1681/0x54c0 [ 788.726057][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 788.726097][ T38] ? kernel_text_address+0xa5/0xe0 [ 788.726144][ T38] ? __pfx___schedule+0x10/0x10 [ 788.726190][ T38] rt_mutex_schedule+0x76/0xf0 [ 788.726210][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 788.726255][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 788.726284][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 788.726311][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 788.726357][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 788.726393][ T38] ? rtnl_newlink+0x883/0x1bb0 [ 788.726411][ T38] mutex_lock_nested+0x168/0x1d0 [ 788.726437][ T38] ? rtnl_newlink+0x883/0x1bb0 [ 788.726459][ T38] rtnl_newlink+0x883/0x1bb0 [ 788.726500][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 788.726537][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 788.726574][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 788.726665][ T38] ? kernel_text_address+0xa5/0xe0 [ 788.726697][ T38] ? __kernel_text_address+0xd/0x30 [ 788.865009][ T38] ? unwind_get_return_address+0x4d/0x90 [ 788.865103][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 788.865129][ T38] ? arch_stack_walk+0xfb/0x150 [ 788.865163][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 788.865310][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 788.865334][ T38] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 788.865370][ T38] ? kasan_save_track+0x3e/0x80 [ 788.865394][ T38] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 788.866513][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 788.866551][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 788.866585][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 788.868019][ T38] netlink_rcv_skb+0x232/0x4b0 [ 788.868048][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 788.868083][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 788.870424][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 788.870453][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 788.870481][ T38] netlink_unicast+0x780/0x920 [ 788.871792][ T38] netlink_sendmsg+0x813/0xb40 [ 788.871829][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.871862][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 788.873305][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.873333][ T38] __sys_sendto+0x67f/0x710 [ 788.873360][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 788.874654][ T38] ? rcu_is_watching+0x15/0xb0 [ 788.874701][ T38] __x64_sys_sendto+0xde/0x100 [ 788.874735][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.875838][ T38] do_syscall_64+0x15f/0xf80 [ 788.875863][ T38] ? clear_bhb_loop+0x40/0x90 [ 788.875889][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.875909][ T38] RIP: 0033:0x7f97ef1cd60e [ 788.875927][ T38] RSP: 002b:00007ffd0b77bef8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 788.876979][ T38] RAX: ffffffffffffffda RBX: 000055556ea1b500 RCX: 00007f97ef1cd60e [ 788.876994][ T38] RDX: 0000000000000088 RSI: 00007f97effb4670 RDI: 0000000000000003 [ 788.877007][ T38] RBP: 0000000000000001 R08: 00007ffd0b77bf74 R09: 000000000000000c [ 788.877019][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 788.877031][ T38] R13: 0000000000000000 R14: 00007f97effb4670 R15: 0000000000000000 [ 788.877060][ T38] [ 788.878102][ T38] INFO: task syz-executor:9804 blocked for more than 143 seconds. [ 788.878122][ T38] Tainted: G L syzkaller #0 [ 788.878133][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 788.880107][ T38] task:syz-executor state:D stack:23200 pid:9804 tgid:9804 ppid:1 task_flags:0x400140 flags:0x00080002 [ 788.880173][ T38] Call Trace: [ 788.880182][ T38] [ 788.880195][ T38] __schedule+0x1681/0x54c0 [ 788.880792][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 788.880837][ T38] ? kernel_text_address+0xa5/0xe0 [ 788.880885][ T38] ? __pfx___schedule+0x10/0x10 [ 788.882788][ T38] rt_mutex_schedule+0x76/0xf0 [ 788.882814][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 788.882858][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 788.882886][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 788.884161][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 788.884219][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 788.886043][ T38] ? rtnl_newlink+0x883/0x1bb0 [ 788.886108][ T38] mutex_lock_nested+0x168/0x1d0 [ 788.888838][ T38] ? rtnl_newlink+0x883/0x1bb0 [ 788.890809][ T38] rtnl_newlink+0x883/0x1bb0 [ 788.892523][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 788.892547][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 788.892580][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 788.894417][ T38] ? kernel_text_address+0xa5/0xe0 [ 788.894459][ T38] ? __kernel_text_address+0xd/0x30 [ 788.895505][ T38] ? unwind_get_return_address+0x4d/0x90 [ 788.895535][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 788.895560][ T38] ? arch_stack_walk+0xfb/0x150 [ 788.897483][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 788.897532][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 788.897552][ T38] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 788.897635][ T38] ? kasan_save_track+0x3e/0x80 [ 788.897656][ T38] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 788.897681][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 788.897712][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 788.898848][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 788.898894][ T38] netlink_rcv_skb+0x232/0x4b0 [ 788.899478][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 788.899515][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 788.899549][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 788.899570][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 788.900804][ T38] netlink_unicast+0x780/0x920 [ 788.900854][ T38] netlink_sendmsg+0x813/0xb40 [ 788.900887][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.901950][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 788.901976][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.901999][ T38] __sys_sendto+0x67f/0x710 [ 788.902027][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 788.903008][ T38] ? rcu_is_watching+0x15/0xb0 [ 788.903054][ T38] __x64_sys_sendto+0xde/0x100 [ 788.904085][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.904679][ T38] do_syscall_64+0x15f/0xf80 [ 788.904705][ T38] ? trace_irq_disable+0x3b/0x140 [ 788.904741][ T38] ? clear_bhb_loop+0x40/0x90 [ 788.904771][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.905755][ T38] RIP: 0033:0x7fb48119d60e [ 788.905776][ T38] RSP: 002b:00007ffcf89ec588 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 788.905798][ T38] RAX: ffffffffffffffda RBX: 000055558b999500 RCX: 00007fb48119d60e [ 788.905813][ T38] RDX: 000000000000008c RSI: 00007fb481f84670 RDI: 0000000000000003 [ 788.905825][ T38] RBP: 0000000000000001 R08: 00007ffcf89ec604 R09: 000000000000000c [ 788.905837][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 788.906603][ T38] R13: 0000000000000000 R14: 00007fb481f84670 R15: 0000000000000000 [ 788.906639][ T38] [ 788.906654][ T38] INFO: task syz.7.834:10005 blocked for more than 143 seconds. [ 788.906673][ T38] Tainted: G L syzkaller #0 [ 788.906684][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 788.906694][ T38] task:syz.7.834 state:D stack:24536 pid:10005 tgid:10003 ppid:8346 task_flags:0x400140 flags:0x00080002 [ 788.907949][ T38] Call Trace: [ 788.907957][ T38] [ 788.907970][ T38] __schedule+0x1681/0x54c0 [ 788.909265][ T38] ? __pfx___schedule+0x10/0x10 [ 788.909311][ T38] rt_mutex_schedule+0x76/0xf0 [ 788.909332][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 788.909429][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 788.909457][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 788.909484][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 788.910224][ T38] ? tipc_nl_bearer_enable+0x17/0x40 [ 788.910255][ T38] ? tipc_nl_bearer_enable+0x17/0x40 [ 788.910273][ T38] mutex_lock_nested+0x168/0x1d0 [ 788.910297][ T38] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 788.911233][ T38] tipc_nl_bearer_enable+0x17/0x40 [ 788.911259][ T38] genl_family_rcv_msg_doit+0x22a/0x330 [ 788.911291][ T38] ? __asan_memcpy+0x40/0x70 [ 788.911922][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 788.911966][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 788.913031][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 788.913073][ T38] genl_rcv_msg+0x61c/0x7a0 [ 788.913107][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 788.913131][ T38] ? ref_tracker_free+0x673/0x820 [ 788.913880][ T38] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 788.913911][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 788.913934][ T38] ? __asan_memcpy+0x40/0x70 [ 788.913967][ T38] ? __skb_clone+0x63/0x7a0 [ 788.915091][ T38] netlink_rcv_skb+0x232/0x4b0 [ 788.915117][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 788.915145][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 788.915177][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 788.915770][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 788.915800][ T38] genl_rcv+0x28/0x40 [ 788.915826][ T38] netlink_unicast+0x780/0x920 [ 788.916604][ T38] netlink_sendmsg+0x813/0xb40 [ 788.916638][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.916668][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 788.916693][ T38] ____sys_sendmsg+0x94c/0x9c0 [ 788.917797][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 788.917836][ T38] ? import_iovec+0x73/0xa0 [ 788.917864][ T38] ___sys_sendmsg+0x2a5/0x360 [ 788.918290][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 788.918323][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.919128][ T38] ? futex_wait+0x2a2/0x390 [ 788.919183][ T38] ? __fget_files+0x2a/0x420 [ 788.919214][ T38] ? __fget_files+0x3a6/0x420 [ 788.919637][ T38] __x64_sys_sendmsg+0x1c3/0x2a0 [ 788.919669][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 788.919704][ T38] ? rcu_is_watching+0x15/0xb0 [ 788.920308][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.920333][ T38] do_syscall_64+0x15f/0xf80 [ 788.920351][ T38] ? trace_irq_disable+0x3b/0x140 [ 788.920374][ T38] ? clear_bhb_loop+0x40/0x90 [ 788.920399][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.921118][ T38] RIP: 0033:0x7f2338edcdd9 [ 788.921139][ T38] RSP: 002b:00007f233712e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 788.921158][ T38] RAX: ffffffffffffffda RBX: 00007f2339155fa0 RCX: 00007f2338edcdd9 [ 788.921174][ T38] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 788.921186][ T38] RBP: 00007f2338f72d69 R08: 0000000000000000 R09: 0000000000000000 [ 788.921198][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.921209][ T38] R13: 00007f2339156038 R14: 00007f2339155fa0 R15: 00007ffce7ce5b68 [ 788.921802][ T38] [ 788.921814][ T38] INFO: task syz.1.835:10007 blocked for more than 144 seconds. [ 788.921833][ T38] Tainted: G L syzkaller #0 [ 788.921844][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 788.921853][ T38] task:syz.1.835 state:D stack:24184 pid:10007 tgid:10006 ppid:5593 task_flags:0x400140 flags:0x00080002 [ 788.922503][ T38] Call Trace: [ 788.922510][ T38] [ 788.922522][ T38] __schedule+0x1681/0x54c0 [ 788.922981][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 788.923028][ T38] ? __pfx___schedule+0x10/0x10 [ 788.923057][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 788.923577][ T38] rt_mutex_schedule+0x76/0xf0 [ 788.924002][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 788.924050][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 788.924084][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 788.924700][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 788.924741][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 788.924783][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 788.925389][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 788.925422][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 788.925447][ T38] mutex_lock_nested+0x168/0x1d0 [ 788.925471][ T38] ? radix_tree_lookup+0x243/0x290 [ 788.926039][ T38] genl_rcv_msg+0x10b/0x7a0 [ 788.926075][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 788.926529][ T38] ? ref_tracker_free+0x673/0x820 [ 788.926555][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 788.926574][ T38] ? __asan_memcpy+0x40/0x70 [ 788.926602][ T38] ? __skb_clone+0x63/0x7a0 [ 788.927511][ T38] netlink_rcv_skb+0x232/0x4b0 [ 788.927537][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 788.927566][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 788.927599][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 788.928181][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 788.928211][ T38] genl_rcv+0x28/0x40 [ 788.928237][ T38] netlink_unicast+0x780/0x920 [ 788.928280][ T38] netlink_sendmsg+0x813/0xb40 [ 788.928869][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.928900][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 788.928921][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.928944][ T38] __sys_sendto+0x67f/0x710 [ 788.929510][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 788.929560][ T38] ? fd_install+0x97/0x3e0 [ 788.929590][ T38] ? fd_install+0x30c/0x3e0 [ 788.930485][ T38] __x64_sys_sendto+0xde/0x100 [ 788.930511][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.930533][ T38] do_syscall_64+0x15f/0xf80 [ 788.930552][ T38] ? trace_irq_disable+0x3b/0x140 [ 788.930575][ T38] ? clear_bhb_loop+0x40/0x90 [ 788.931140][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.931164][ T38] RIP: 0033:0x7f984342d60e [ 788.931181][ T38] RSP: 002b:00007f98416c4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 788.931202][ T38] RAX: ffffffffffffffda RBX: 00007f98416c66c0 RCX: 00007f984342d60e [ 788.931216][ T38] RDX: 0000000000000020 RSI: 00007f98416c5000 RDI: 0000000000000008 [ 788.931228][ T38] RBP: 0000000000000000 R08: 00007f98416c4f04 R09: 000000000000000c [ 788.931841][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 788.931868][ T38] R13: 00007f98416c4f58 R14: 00007f98416c5000 R15: 0000000000000000 [ 788.932348][ T38] [ 788.932381][ T38] [ 788.932381][ T38] Showing all locks held in the system: [ 788.932611][ T38] 6 locks held by kworker/u8:0/12: [ 788.932624][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 788.932682][ T38] #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 788.933446][ T38] #2: ffff88806eb10310 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 788.933505][ T38] #3: ffff888038215120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 788.934310][ T38] #4: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 788.934371][ T38] #5: ffff88801a00ad58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x87/0x560 [ 788.936339][ T38] 3 locks held by kworker/u8:1/13: [ 788.936350][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 788.937096][ T38] #1: ffffc90000127c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 788.937149][ T38] #2: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 788.937199][ T38] 4 locks held by ksoftirqd/0/15: [ 788.937759][ T38] 4 locks held by pr/legacy/17: [ 788.937774][ T38] 7 locks held by ktimers/1/29: [ 788.937785][ T38] 3 locks held by kworker/1:0/31: [ 788.937795][ T38] #0: ffff88801a037938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 788.937845][ T38] #1: ffffc90000a5fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 788.938770][ T38] #2: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 788.938819][ T38] 1 lock held by khungtaskd/38: [ 788.938830][ T38] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 788.939766][ T38] 7 locks held by kworker/u8:2/43: [ 788.939779][ T38] 3 locks held by kworker/u8:3/56: [ 788.939791][ T38] 6 locks held by kworker/u8:4/66: [ 788.939805][ T38] 6 locks held by kworker/u8:6/146: [ 788.939818][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 788.941111][ T38] #1: ffffc9000387fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 788.941224][ T38] #2: ffff8880203c6310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 788.941288][ T38] #3: ffff88806665c120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 788.942044][ T38] #4: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 788.942102][ T38] #5: ffff88801a00ad58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x87/0x560 [ 788.943325][ T38] 3 locks held by kworker/u8:7/157: [ 788.943341][ T38] 6 locks held by kworker/u8:8/163: [ 788.943353][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 788.943853][ T38] #1: ffffc9000392fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 788.946643][ T38] #2: ffff888057556310 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 788.951572][ T38] #3: ffff88805f3cd520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 788.952462][ T38] #4: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 788.952516][ T38] #5: ffff88801a00ad58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x87/0x560 [ 788.954948][ T38] 3 locks held by kworker/u8:12/1424: [ 788.954965][ T38] #0: ffff88803216c138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 788.955033][ T38] #1: ffffc90005ef7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 788.956820][ T38] #2: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 788.956875][ T38] 3 locks held by kworker/u8:14/1520: [ 788.957691][ T38] 5 locks held by kworker/u8:15/1572: [ 788.958617][ T38] #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 788.958675][ T38] #1: ffffc90006397c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 788.959468][ T38] #2: ffffffff8f3471c0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 788.959517][ T38] #3: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940 [ 788.960983][ T38] #4: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 788.961051][ T38] 1 lock held by klogd/4952: [ 788.962699][ T38] 1 lock held by dhcpcd/5258: [ 788.962722][ T38] #0: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_deladdr+0x23d/0x370 [ 788.962787][ T38] 2 locks held by getty/5352: [ 788.964198][ T38] #0: ffff888036d3c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 788.964261][ T38] #1: ffffc90003cb62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 788.967179][ T38] 5 locks held by syz-executor/5581: [ 788.967195][ T38] 3 locks held by kworker/1:3/5698: [ 788.967206][ T38] #0: ffff88801a036538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 788.967258][ T38] #1: ffffc90004e7fc40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 788.968062][ T38] #2: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xab/0x1090 [ 788.968115][ T38] 3 locks held by kworker/1:5/5726: [ 788.968127][ T38] #0: ffff88801a037938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 788.968938][ T38] #1: ffffc9000511fc40 (rx_mode_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 788.969069][ T38] #2: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x1c/0x450 [ 788.969127][ T38] 5 locks held by kworker/u8:16/6201: [ 788.969144][ T38] 4 locks held by kworker/u8:18/7152: [ 788.969911][ T38] 1 lock held by syz.1.665/9291: [ 788.969925][ T38] #0: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 788.969978][ T38] 2 locks held by kworker/1:9/9321: [ 788.969991][ T38] 2 locks held by syz-executor/9740: [ 788.970002][ T38] #0: ffffffff8eabef68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 788.971607][ T38] #1: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 788.972041][ T38] 6 locks held by kworker/u8:20/9776: [ 788.972056][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 788.972109][ T38] #1: ffffc9000450fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 788.973368][ T38] #2: ffff88801fe88310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 788.973435][ T38] #3: ffff88803c64bd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 788.974387][ T38] #4: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 788.974452][ T38] #5: ffff88801a00ad58 (&n->list_lock){+.+.}-{3:3}, at: get_from_partial_node+0x54/0x480 [ 788.975596][ T38] 2 locks held by syz-executor/9804: [ 788.975610][ T38] #0: ffffffff8eabef68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 788.975664][ T38] #1: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 788.976464][ T38] 3 locks held by syz.7.834/10005: [ 788.976478][ T38] #0: ffffffff8f3c5b00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 788.977073][ T38] #1: ffffffff8f3c5918 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 788.977128][ T38] #2: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_bearer_enable+0x17/0x40 [ 788.978118][ T38] 2 locks held by syz.1.835/10007: [ 788.978130][ T38] #0: ffffffff8f3c5b00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 788.978180][ T38] #1: ffffffff8f3c5918 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 788.978786][ T38] 1 lock held by syz-executor/10038: [ 788.978798][ T38] #0: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 788.979552][ T38] 1 lock held by syz-executor/10045: [ 788.979564][ T38] #0: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 788.979610][ T38] 1 lock held by syz-executor/10069: [ 788.979621][ T38] #0: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 788.980378][ T38] 1 lock held by syz.6.848/10081: [ 788.980390][ T38] #0: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 788.980445][ T38] 1 lock held by syz-executor/10087: [ 788.981493][ T38] #0: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 788.981544][ T38] 1 lock held by syz-executor/10095: [ 788.981556][ T38] #0: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 788.982343][ T38] 1 lock held by syz-executor/10104: [ 788.982357][ T38] #0: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 788.982405][ T38] 1 lock held by syz-executor/10105: [ 788.982417][ T38] #0: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 788.983051][ T38] 1 lock held by syz-executor/10116: [ 788.983064][ T38] #0: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 788.983112][ T38] 1 lock held by syz-executor/10123: [ 788.984733][ T38] #0: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 788.988725][ T38] 1 lock held by syz-executor/10129: [ 788.988762][ T38] #0: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 788.995658][ T38] 1 lock held by syz-executor/10139: [ 788.995673][ T38] #0: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 788.995730][ T38] 1 lock held by syz-executor/10140: [ 788.995741][ T38] #0: ffffffff8f355ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 788.995998][ T38] 9 locks held by syz-executor/10148: [ 788.996012][ T38] [ 788.996018][ T38] ============================================= [ 788.996018][ T38] [ 788.996038][ T38] NMI backtrace for cpu 0 [ 788.996057][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 788.996105][ T38] Tainted: [L]=SOFTLOCKUP [ 788.996112][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 788.996122][ T38] Call Trace: [ 788.996129][ T38] [ 788.996137][ T38] dump_stack_lvl+0xe8/0x150 [ 788.996161][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 788.996185][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 788.996208][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 788.996235][ T38] sys_info+0x135/0x170 [ 788.996255][ T38] watchdog+0xfd3/0x1030 [ 788.996284][ T38] ? watchdog+0x1c9/0x1030 [ 788.996312][ T38] kthread+0x388/0x470 [ 788.996338][ T38] ? __pfx_watchdog+0x10/0x10 [ 788.996357][ T38] ? __pfx_kthread+0x10/0x10 [ 788.996385][ T38] ret_from_fork+0x514/0xb70 [ 788.996408][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 788.996430][ T38] ? __switch_to+0xc79/0x1410 [ 788.996461][ T38] ? __pfx_kthread+0x10/0x10 [ 788.996488][ T38] ret_from_fork_asm+0x1a/0x30 [ 788.996526][ T38] [ 788.996546][ T38] Sending NMI from CPU 0 to CPUs 1: [ 788.996574][ C1] NMI backtrace for cpu 1 [ 788.996588][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 788.996610][ C1] Tainted: [L]=SOFTLOCKUP [ 788.996615][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 788.996624][ C1] RIP: 0010:lock_release+0xe/0x3c0 [ 788.996648][ C1] Code: 00 00 e9 0e ff ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 <48> 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 70 c1 c9 10 48 89 44 24 [ 788.996661][ C1] RSP: 0018:ffffc90000a3f828 EFLAGS: 00000246 [ 788.996675][ C1] RAX: ffffffff89c7df90 RBX: ffff88805127cdd0 RCX: ffff88801d6dbd80 [ 788.996687][ C1] RDX: 0000000000000100 RSI: ffffffff89c7de23 RDI: ffffffff8dfc8140 [ 788.996699][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 788.996709][ C1] R10: 0000000000000100 R11: 0000000000000003 R12: ffff888037a0ab40 [ 788.996720][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 1ffff1100a24f9ba [ 788.996731][ C1] FS: 0000000000000000(0000) GS:ffff88812627d000(0000) knlGS:0000000000000000 [ 788.996743][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 788.996753][ C1] CR2: 00007f27c3217e20 CR3: 00000000111ea000 CR4: 00000000003526f0 [ 788.996767][ C1] Call Trace: [ 788.996772][ C1] [ 788.996780][ C1] ip6_input+0x221/0x270 [ 788.996801][ C1] ? ip6_input+0x23/0x270 [ 788.996821][ C1] NF_HOOK+0x336/0x3c0 [ 788.996841][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 788.996860][ C1] ? NF_HOOK+0x9e/0x3c0 [ 788.996878][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 788.996898][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 788.996921][ C1] ? process_backlog+0x271/0xc60 [ 788.996945][ C1] process_backlog+0x3ce/0xc60 [ 788.996966][ C1] ? get_jiffies_update+0x44/0x140 [ 788.996994][ C1] __napi_poll+0xab/0x550 [ 788.997017][ C1] net_rx_action+0x696/0xe00 [ 788.997039][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 788.997068][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 788.997105][ C1] handle_softirqs+0x1de/0x6d0 [ 788.997126][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 788.997144][ C1] run_ktimerd+0x69/0x100 [ 788.997162][ C1] smpboot_thread_fn+0x541/0xa50 [ 788.997180][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 788.997202][ C1] kthread+0x388/0x470 [ 788.997222][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 788.997240][ C1] ? __pfx_kthread+0x10/0x10 [ 788.997260][ C1] ret_from_fork+0x514/0xb70 [ 788.997278][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 788.997295][ C1] ? __switch_to+0xc79/0x1410 [ 788.997319][ C1] ? __pfx_kthread+0x10/0x10 [ 788.997340][ C1] ret_from_fork_asm+0x1a/0x30 [ 788.997366][ C1] [ 789.007136][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 789.007155][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 789.007181][ T38] Tainted: [L]=SOFTLOCKUP [ 789.007188][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 789.007199][ T38] Call Trace: [ 789.007206][ T38] [ 789.007217][ T38] vpanic+0x56c/0xa60 [ 789.007244][ T38] ? __pfx___schedule+0x10/0x10 [ 789.007272][ T38] ? __pfx_vpanic+0x10/0x10 [ 789.007304][ T38] panic+0xc5/0xd0 [ 789.007327][ T38] ? __pfx_panic+0x10/0x10 [ 789.007353][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 789.007386][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 789.007415][ T38] watchdog+0x102c/0x1030 [ 789.007444][ T38] ? watchdog+0x1c9/0x1030 [ 789.007471][ T38] kthread+0x388/0x470 [ 789.007499][ T38] ? __pfx_watchdog+0x10/0x10 [ 789.007518][ T38] ? __pfx_kthread+0x10/0x10 [ 789.007546][ T38] ret_from_fork+0x514/0xb70 [ 789.007570][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 789.007592][ T38] ? __switch_to+0xc79/0x1410 [ 789.007624][ T38] ? __pfx_kthread+0x10/0x10 [ 789.007652][ T38] ret_from_fork_asm+0x1a/0x30 [ 789.007690][ T38] [ 789.008295][ T38] Kernel Offset: disabled