last executing test programs: 30m24.365057339s ago: executing program 32 (id=985): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01000400000000c0ffffff000000000000000a000000002e61612e6161000000"], 0x0, 0x22, 0x0, 0x0, 0x7, 0x10000, @value=r0}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xd3, &(0x7f0000000640)=""/211, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, r4}, 0x94) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000940)=0x707987cd) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000fcff72000040"]) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 25m7.568235875s ago: executing program 33 (id=1978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001180)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r1, 0x111, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7ff}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) 24m43.349558983s ago: executing program 34 (id=2033): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) 21m41.773893935s ago: executing program 35 (id=2550): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0xfffffff2, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) 21m39.865664261s ago: executing program 36 (id=2556): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0xc) accept(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0801, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001e000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 21m35.895352653s ago: executing program 37 (id=2565): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8}]}, 0x54}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@inline_xattr_size={'inline_xattr_size', 0x3d, 0x8}}, {@heap}, {@fastboot}, {@inlinecrypt}, {@age_extent_cache}, {@user_xattr}, {@noinline_xattr}, {@fastboot}, {@block_mode}, {@errors_remount}]}, 0x1, 0x5541, &(0x7f00000001c0)="$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") sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 20m14.580668352s ago: executing program 2 (id=2781): clock_adjtime(0x0, &(0x7f00000000c0)={0x742e4e88, 0x5, 0x9ef, 0x0, 0x4, 0x4, 0x1003, 0x3, 0x9, 0x7, 0x93a8, 0x4, 0x9, 0x10000, 0xfffffffffffff8cf, 0x110, 0x3, 0x4, 0x510d, 0x9, 0x7, 0x2, 0xd18, 0x4, 0x18000000, 0x1}) socket$inet(0x2, 0x3, 0x2) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) creat(&(0x7f0000000100)='./file0\x00', 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x19) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r5, 0x1, 0x276f}, 0xc) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl}]}}) 20m13.636723074s ago: executing program 2 (id=2783): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}) syz_emit_ethernet(0xfc1, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "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"}}}}, 0x0) ioctl$TCFLSH(r0, 0x80047437, 0x10004000000006) 20m13.473720862s ago: executing program 2 (id=2784): sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48081}, 0xe1) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x3000000) 20m13.055157364s ago: executing program 2 (id=2785): r0 = fanotify_init(0xf00, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fanotify_mark(r0, 0x105, 0x4800003a, r1, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000000c0)={{0x62, @private=0xa010102, 0x4e24, 0x2, 'sh\x00', 0x4, 0x7, 0x5b}, {@private=0xa010100, 0x4e21, 0x3, 0x9, 0x7, 0xffff11a2}}, 0x44) read$FUSE(r0, &(0x7f0000002f00)={0x2020}, 0x2020) 20m12.495000402s ago: executing program 2 (id=2788): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) openat$vmci(0xffffff9c, &(0x7f0000001180), 0x2, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 20m12.123948762s ago: executing program 2 (id=2789): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x30, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4040) 20m5.295065548s ago: executing program 3 (id=2811): clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x8, 0xa, 0x4, 0x2, 0x4, {r0, r1/1000+10000}, {0x4, 0xc, 0x6, 0x4, 0x4, 0x2, "ccdaae7c"}, 0x5, 0x4, {0xffffffffffffffff}, 0x7f}) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a00000107241400efffff08058103"], 0x0) 20m3.339000814s ago: executing program 3 (id=2817): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000cc0), 0x0, 0x931766f6319eed40) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0xd, 0x0, 0x0, &(0x7f0000000000)=0x2, 0x4) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) sendfile(r1, r0, 0x0, 0x80000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20042800}, 0x24040800) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x6, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) 20m0.367679176s ago: executing program 38 (id=2831): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r0, 0x0, 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x63, 0x0, 0x2000, &(0x7f0000000440)="d1596137509028b4e6973edf1911fbfc4c57a136ff048efb6d1ff9da18c7b520508922e15ef5a43a2403935d48ed4c365d55448dc474f02bfc8c827504ccfccbaca50d6089edf0b48722fa0da7"}, {0x36de, 0x4801, 0x0, 0x0}], 0x2}) 20m0.130959189s ago: executing program 3 (id=2836): socket(0x10, 0x3, 0xffffff45) socket$igmp6(0xa, 0x3, 0x2) unshare(0x2a020400) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x2002, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES32], 0x4, 0x2f7, &(0x7f0000002800)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f000025e000/0x3000)=nil, 0x3000, 0xb635773f07ebbeeb, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$amidi(0x0, 0x2, 0x181) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') read$FUSE(r4, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setregid(r5, r5) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000001740), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e10500000088a80005", 0x1a}, {&(0x7f0000000080)="2103cd7adb8cd2250b11f4ac", 0xc}], 0x2}, 0x24004010) fchdir(r7) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r9 = syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00') fchdir(r9) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x0, 0x188) 19m59.121745114s ago: executing program 3 (id=2837): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) openat$vmci(0xffffff9c, &(0x7f0000001180), 0x2, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19m58.663594441s ago: executing program 3 (id=2838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0xfffffffc, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003610000000b2"], 0x5b0}, 0x20008001) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f00000000c0), &(0x7f00000001c0)=0xc) write(r3, &(0x7f0000000b80)="f293f747086df42842e3d30e530ce1f4c95b3416fa1cd367eb56a5d3bc7c696b01b7dd3958799d9915ef92580b6baefa0d9f98c4488bfbaacf3d3e677b3813991a606a20d88ebd3fc5e36199e75361402608a6a9d581abbc6c21c45e50bcc5eedbfccf9b934edc8179f6131c7d9f1bc7ca9ff4d00b1267bddecf3d56ddb6583d177fc230c94824014a477832b9d2b107f7022156bf250968eddc2f3550c49c60c818e5e4ae4b67625e95571c7809dc6ce491677bf6f191d9ec99253ed9e960b392a55f59add82a233cf8a893ddef4d0a1947aa46a0cb6058e10b69a8d622f3dabc7a5d4bd6c1c22a747a3ad21705fb79c6c7ed622a3aa995efe37a19a36f4e6808a84c4bd878f872b378b7c5290999f39ee1fa36824f402bf06856ddfe61884e795752664cef53a5434395f564e50b9cf2bda0897dd9aa989e0b92dc26385b7096040daf3c61eb8726dbc02be2e2ce4c584663f3a6a72c3d07571b7d8cefc11af49b19b361c1d4095ce2dbbc8dcf0a7bed4c51edaf7a2d5bbc9e9ff20d518e799bed92ada75c6b29eb151019fe8706a92c491fb8fc8df583a2285681acfeb126c1e470a976e22e1636589ef4ccfae9f317e0b1c75690f6c2", 0x1b8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_FPEMU(0x9, 0x0) r4 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) close_range(r7, 0xffffffffffffffff, 0x0) 19m56.692035652s ago: executing program 39 (id=2789): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x30, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4040) 19m55.731482255s ago: executing program 3 (id=2848): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000500)=0xf, 0x4) socket(0x10, 0x80002, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={r1, 0x80000}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup3(0xffffffffffffffff, r2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x41) futex_waitv(&(0x7f0000001080), 0x51, 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000006c0)={0x17, 0xf9, &(0x7f00000005c0)="dffd7d22ffbfd893344a4e6ea02addc0db7309db295fa6a362998da29e66067bacbb0d798dd025364c15889a9d24d0d22349d86177aa948045953ba1d2826d7f282defdd488e7720e6bc49be610a64617e27d9b8da2db2e960fd371e00c00d08a5f372f292ade31b182737ce38591bf695dfbffd59eab65534167c575363e414858c560570fd227c7afeb7d2d9c370247134bea2eb71e871108d9d184b720e143c74555cee941c0f436e76991b2c607885f9d7c9c564a0d6aa3dcc5ec50b11bf3a1399270107c8cac3dfc636f8b2d266ba2e474f183b5ee023fab4bc6193e1b89533673253b07f5ac282fef40e813ea6f6bc4769dd0abda924"}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000540)={0x40002, 0x121, 0x14}, 0x18) chdir(&(0x7f00000000c0)='./bus\x00') r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r7 = fanotify_init(0xf00, 0x1) fanotify_mark(r7, 0x105, 0x4000996f, r6, 0x0) fallocate(r5, 0x0, 0x1000000, 0x3) sendmsg$alg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="df24521ed4989980915f11dd6f6543380d10e31a4559bc2fca3424df3cf4ef3425d325efc2d9e48451264c9cefc1397f2cdae31605382bc24861fb22bd2bd93c4e5dcb8799f3fb6186297598b751a3a6ee11a87c65ee4a98ad3ef2bdfc21254034ca9850985795080b97c5a69db46caedaad", 0x72}, {&(0x7f0000000140)="abc5444898d4e1e21a5167f9e50da9dee40ec40315463da9646a24934debbadbb27895a339bf83f922d10144adc8529289f0b80dce58dbb7f6c6682535", 0x3d}, {&(0x7f0000000200)="a50883a165aab4aee6feca0f43f581c89cbbe652386367c2ee2007ed5af794b06d0bf8851ad2c60fc9f7fe20065ffd43c50e95d8f42de769f2ee74b8895db12dbf7356df2d834192f77499e4257e2bee1d06ee6dac1e213ca7154ad9038a1962cd9bb7245e5417bd79f444b03f6e1e2d59b5fa81122b85db8b8fb20933707443f0c36e4a4ca2027240e9c28a102f8e03ae2213acc1191b26ff559950cd9c4fd78ffc3e", 0xa3}, {&(0x7f00000002c0)="a8d003", 0x3}], 0x4, 0x0, 0x0, 0x4c810}, 0x40010) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0xffffd000) 19m54.938709449s ago: executing program 40 (id=2848): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000500)=0xf, 0x4) socket(0x10, 0x80002, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={r1, 0x80000}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup3(0xffffffffffffffff, r2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x41) futex_waitv(&(0x7f0000001080), 0x51, 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000006c0)={0x17, 0xf9, &(0x7f00000005c0)="dffd7d22ffbfd893344a4e6ea02addc0db7309db295fa6a362998da29e66067bacbb0d798dd025364c15889a9d24d0d22349d86177aa948045953ba1d2826d7f282defdd488e7720e6bc49be610a64617e27d9b8da2db2e960fd371e00c00d08a5f372f292ade31b182737ce38591bf695dfbffd59eab65534167c575363e414858c560570fd227c7afeb7d2d9c370247134bea2eb71e871108d9d184b720e143c74555cee941c0f436e76991b2c607885f9d7c9c564a0d6aa3dcc5ec50b11bf3a1399270107c8cac3dfc636f8b2d266ba2e474f183b5ee023fab4bc6193e1b89533673253b07f5ac282fef40e813ea6f6bc4769dd0abda924"}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000540)={0x40002, 0x121, 0x14}, 0x18) chdir(&(0x7f00000000c0)='./bus\x00') r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r7 = fanotify_init(0xf00, 0x1) fanotify_mark(r7, 0x105, 0x4000996f, r6, 0x0) fallocate(r5, 0x0, 0x1000000, 0x3) sendmsg$alg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="df24521ed4989980915f11dd6f6543380d10e31a4559bc2fca3424df3cf4ef3425d325efc2d9e48451264c9cefc1397f2cdae31605382bc24861fb22bd2bd93c4e5dcb8799f3fb6186297598b751a3a6ee11a87c65ee4a98ad3ef2bdfc21254034ca9850985795080b97c5a69db46caedaad", 0x72}, {&(0x7f0000000140)="abc5444898d4e1e21a5167f9e50da9dee40ec40315463da9646a24934debbadbb27895a339bf83f922d10144adc8529289f0b80dce58dbb7f6c6682535", 0x3d}, {&(0x7f0000000200)="a50883a165aab4aee6feca0f43f581c89cbbe652386367c2ee2007ed5af794b06d0bf8851ad2c60fc9f7fe20065ffd43c50e95d8f42de769f2ee74b8895db12dbf7356df2d834192f77499e4257e2bee1d06ee6dac1e213ca7154ad9038a1962cd9bb7245e5417bd79f444b03f6e1e2d59b5fa81122b85db8b8fb20933707443f0c36e4a4ca2027240e9c28a102f8e03ae2213acc1191b26ff559950cd9c4fd78ffc3e", 0xa3}, {&(0x7f00000002c0)="a8d003", 0x3}], 0x4, 0x0, 0x0, 0x4c810}, 0x40010) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0xffffd000) 13m39.843971461s ago: executing program 9 (id=4062): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x77359400}}, &(0x7f0000000180)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x2000000000000326, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0xfffffdfc}]) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4008004) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'erspan0\x00', {'wlan1\x00'}}) r5 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r5, 0xff000000, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) 13m39.150919221s ago: executing program 9 (id=4068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0x0, 0x2000, 0x1, 0x3}, &(0x7f0000000300)=0x0, &(0x7f0000000240)=0x0) r5 = socket$rds(0x15, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$rds(r5, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0xc, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40084}, 0x8004) ppoll(&(0x7f0000000180)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) ioctl$KVM_SMI(r10, 0xaeb7) io_uring_enter(r2, 0x48ce, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r13, 0x0, 0x482, &(0x7f0000000040)={0x11, @loopback, 0x3, 0x0, 'lblc\x00', 0x0, 0x0, 0x37}, 0x2c) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x30, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x2}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_MPU={0x8, 0xe, 0x6f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008001}, 0x40000) 13m37.798432354s ago: executing program 9 (id=4072): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000380)="ca091cc2e088", 0xffe3) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0x8, 0xd}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x80, 0x7, 0x216, 0x8, {{0xb, 0x4, 0x0, 0x8, 0x2c, 0x64, 0x0, 0x5, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x18, 0x0, [{0x0, 0x12, "2e616bd1024257c7613b31403ff64035"}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r6, 0x30, 0x0, @void}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 13m37.593211278s ago: executing program 9 (id=4073): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c0004"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000006780)=""/4100, 0x1004}, {&(0x7f0000000540)=""/91, 0x5b}], 0x3}, 0x1}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)=""/4099, 0x1003}, {&(0x7f0000001800)=""/4063, 0xfdf}, {&(0x7f00000001c0)=""/105, 0x69}], 0x3}, 0x8}], 0x3, 0x2, 0x0) 13m37.400222738s ago: executing program 9 (id=4075): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020}, 0x2020) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f00000000c0)={0x0, @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x7, 0x0, 0x0, {0x0, 0x0, 0x1}, {}, {0x9, 0x0, 0x3e000000}, {}, 0x0, 0x10, 0x0, 0x200, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004740)={0x20, 0x35, 0x107, 0xfffffffe, 0x25dfdbfd, {0x3, 0x7c}, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32=0x306a}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048091}, 0x8010) 13m36.451246634s ago: executing program 9 (id=4078): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200001800000000", @ANYRES32, @ANYBLOB="0000d55f5b"], 0x48) 13m21.929424703s ago: executing program 41 (id=4078): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200001800000000", @ANYRES32, @ANYBLOB="0000d55f5b"], 0x48) 9m28.323001127s ago: executing program 4 (id=4948): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@acquire={0x22c, 0x17, 0x200, 0x70bd28, 0x25dfdbff, {{@in=@multicast1, 0x4d5, 0x3c}, @in=@private=0xa010101, {@in=@dev={0xac, 0x14, 0x14, 0x43}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x4e21, 0x5, 0x4e24, 0x0, 0x2, 0x80, 0x0, 0x67}, {{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x54, 0x4e20, 0x3, 0xa, 0x90, 0xa0, 0x6c}, {0x4b7c, 0x200, 0x2, 0x5, 0x5, 0x1, 0x3, 0x1}, {0x101, 0x7, 0x7fffffffffffffff, 0x10}, 0x84fa, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x3, 0x4, 0x3aa7, 0x70bd2b}, [@sa={0xe4, 0x6, {{@in=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0xfff6, 0x4e21, 0x0, 0xa, 0x0, 0xa0, 0x1d}, {@in=@multicast2, 0x4d5}, @in=@broadcast, {0xffd6, 0x5, 0x1, 0x1, 0x53c6, 0xa, 0xffff, 0xb}, {0x10000, 0x0, 0x3, 0x10001}, {0x8c, 0x40, 0x5}, 0x70bd29, 0x3507, 0x2, 0x2, 0x5, 0x10}}, @mark={0xc, 0x15, {0x35075d, 0x8}}, @srcaddr={0x14, 0xd, @in=@empty}]}, 0x22c}, 0x1, 0x0, 0x0, 0x24008040}, 0xa0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x2) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/239, 0xef}], 0x1) tkill(r5, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x400c4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) 9m27.335043542s ago: executing program 4 (id=4952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e1f, 0xfffffffe, @empty, 0x3}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 9m27.24005063s ago: executing program 4 (id=4954): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/146, 0x92}, {0x0}, {&(0x7f0000000540)=""/91, 0x5b}], 0x3}, 0x1}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)=""/4099, 0x1003}, {&(0x7f0000001800)=""/4063, 0xfdf}, {&(0x7f00000001c0)=""/105, 0x69}], 0x3}, 0x8}], 0x3, 0x2, 0x0) 9m27.188296757s ago: executing program 4 (id=4955): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) openat$vmci(0xffffff9c, &(0x7f0000001180), 0x2, 0x0) socket(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0xde2e92ecda5c185f, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x1f}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x0, 0x6, 0x42}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x218) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) r2 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 9m27.070791356s ago: executing program 4 (id=4956): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x104, 0x2c, 0xd27, 0xfffd, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x6, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x3, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0xfffffffc, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xebb, 0x1, 0x2, {0x3, 0x2, 0x3, 0x2, 0x6}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x4, 0x0, 0xfafd}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0xc040) 9m26.627172797s ago: executing program 4 (id=4957): r0 = creat(&(0x7f0000000340)='./file0\x00', 0xe8) close(r0) socket(0x10, 0x802, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x208000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 9m26.214220706s ago: executing program 42 (id=4957): r0 = creat(&(0x7f0000000340)='./file0\x00', 0xe8) close(r0) socket(0x10, 0x802, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x208000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6m57.95439307s ago: executing program 8 (id=5481): recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="02c9d01e001a00010001020200e200040110001400c70a0702faff07020a4107020623"], 0x23) set_mempolicy(0x2, 0x0, 0x3ff) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997", @ANYRES16=r0, @ANYRES64=r1], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x5, 0x0, [{0x100000, 0x62, &(0x7f0000000580)=""/98}, {0xdddd6000, 0x6f, &(0x7f0000000280)=""/111}, {0xeeee4000, 0x8a, &(0x7f0000000e00)=""/138}, {0xffff1000, 0xd8, &(0x7f00000012c0)=""/216}, {0xd000, 0x21, &(0x7f0000000300)=""/33}]}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f00000001c0)=""/65, &(0x7f0000000380)=""/94, &(0x7f0000000400)=""/186, 0x2000}) r5 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r5}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0), 0x0, 0x10720, 0x0) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0xf0, 0x4c, 0x2500, 0x0, 0x73, 0x1d0, 0x258, 0x258, 0x1d0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'veth1_to_team\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = socket$netlink(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 6m57.734718086s ago: executing program 8 (id=5484): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e001400028008000800"], 0x54}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 6m57.429485357s ago: executing program 8 (id=5486): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x1, {{0xa, 0x4e21, 0x0, @remote, 0x2}}}, 0x88) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000000000000000001cfcaf0e6b6b805edf7f400000000000893138e1bcaad0946b8d818f0000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x1c) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@getqdisc={0x28, 0x26, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xffe0}, {0xfff3, 0xfff3}, {0xd, 0x1}}, [{0x4}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x1c0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x190, 0x2, [@TCA_FLOW_EMATCHES={0x18c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x178, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0xd03f}, {0x7, 0x2, 0x57, 0x2}}}, @TCF_EM_META={0xa4, 0x2, 0x0, 0x0, {{0xff, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="0444ba81adb3e2adf05b", @TCF_META_TYPE_VAR="ffbc76e0d0b66d18ae67", @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x3, 0x2}, {0x0, 0x0, 0x1}}}, @TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_VAR="a2abe8fdafc1b0", @TCF_META_TYPE_VAR="d343519bac25", @TCF_META_TYPE_VAR="9905f442ae9159db", @TCF_META_TYPE_VAR="bf8446920c5feee9", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="5db28adfd1", @TCF_META_TYPE_VAR="a26d"]}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR="e2495aa8c0", @TCF_META_TYPE_VAR="1a", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="51d2b32c82f5", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="1c90935e93ff", @TCF_META_TYPE_VAR="6fe529", @TCF_META_TYPE_INT=0x7]}]}}, @TCF_EM_CONTAINER={0x74, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x9800}, "6a9fd87433f6b62303a3ab8fa0020d5402440da09a7061fd29de6c2ef2bb0fc52d0032d60b9d29ff985a11fa2571ceeb8481c41477216e9ec625d89e6920c015f8350a6a8d56adb57d97c020abf885e545e337028884430fe2194a661a094d6104bf64e777"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfff6, 0x7, 0x81}, {{0x3, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x4}, {{0x0, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x674b, 0x1, 0xa3aa}, {0x6, 0x1, 0xc09, 0x0, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}}}]}]}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) setsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r10}, 0x14) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x3, r3, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x4) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket$kcm(0x2, 0x5, 0x84) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@initdev}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x8a100, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 6m56.146951294s ago: executing program 8 (id=5488): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r1, &(0x7f0000000cc0)=[{0x0}, {&(0x7f0000000380)='a', 0x1}], 0x2) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x8001) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x74}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {}, {0x3, 0x3, 0x3, 0xa, 0x9}, {}, {}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x62, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m56.04264464s ago: executing program 8 (id=5490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000019300)=ANY=[@ANYRESHEX=r0], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4000000009}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1e1000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000019580)={0x0, 0x5c, &(0x7f00000004c0)={&(0x7f0000019240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a03000000000000000000020000000900020073797a3000000000110001000000007f6910000000000003e6ba02aa0836f0737b00"/93], 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000019200), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x1c, r5, 0x1, 0x703d25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044040}, 0x8842) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000019480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000019540)={&(0x7f00000192c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000019500)={&(0x7f00000194c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000ffebdf2517f3ff000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40084) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 6m54.745582635s ago: executing program 8 (id=5494): syz_usbip_server_init(0x4) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x400) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2400330080400000ffffffffffff080211000000"], 0x40}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[], 0x15) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000003c0)=0x2000) socket$netlink(0x10, 0x3, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(0xffffffffffffffff, 0x80) r8 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r8, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 6m40.245625708s ago: executing program 43 (id=5494): syz_usbip_server_init(0x4) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x400) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2400330080400000ffffffffffff080211000000"], 0x40}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[], 0x15) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000003c0)=0x2000) socket$netlink(0x10, 0x3, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(0xffffffffffffffff, 0x80) r8 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r8, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18.174982007s ago: executing program 1 (id=6537): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r1, 0x551f) 17.920337765s ago: executing program 1 (id=6539): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xbf5, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3, 0x0, 0x8, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x100002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcdb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x78c], 0x1, 0x400}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x90}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f00000000c0)={0x0, 0x800, 0x8, 0xfffffffb, 0x1, [], [0x40000000, 0xd386, 0x401, 0xfff], [0x8, 0x5], [0xffffffffffff7fff, 0x200000000003, 0x5, 0x9]}) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x1, 0x6, 0x62e1a7f2656e332a, 0x0, 0x0, {0x9, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000440)={0x2000000000000000, 0x9ef10a2c1428d47d, 0xfffffffffffffffe, 0x3, 0xfc}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_XSAVE2(r6, 0x9000aecf, &(0x7f0000002000/0x1000)=nil) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x300008c, [{0x1, 0x2}, {0x7, 0xc1}]}, 0x18, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) socket$inet_sctp(0x2, 0x1, 0x84) 16.848912739s ago: executing program 1 (id=6546): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0)=0x7ff, 0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3, 0x7, 0x8, 0x76d, 0x8, 0xffffffffffffffff}) prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0xb620}, 0x0) r3 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x5c, 0x14, 0xa, 0x905, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5caffee7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x114, 0xe, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x100, 0x3, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY={0xec, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "31de30fc2a3615a5bfd7d32338d8f8ada678f3258ea3ec9a20bce4ff0f33eee05bdc061b393404a3196774d92863aa2c2dc8be348c3a64bc62b1da37d43293b61eadecb8e5cced4688c528bd78c82554b4ea7c58452ef6549dd766fb9cc9e0eb290a4d52f5590080216d67943f00ce052232e22b56d7368af0891e1fc608456a8cfe6cc129ba492c500be2f4f638e5998f3371f7e2401b8b14e6f9f33fb9f86ab46b4b8043aab769a8e1b4bb8d89c23bc480e8eea76d2fc9b706a8"}]}]}]}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}}], {0x14}}, 0x1ac}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0xa) r8 = dup(r7) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r8, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) 14.772161822s ago: executing program 1 (id=6548): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000040)=0x22, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0xe6, 0x4b, 0x1000}) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x40, 0x4000, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 14.662694417s ago: executing program 1 (id=6549): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x244080, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x6, 0x603, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000041) statx(r0, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000300)=[0xffffffffffffffff, 0xee01, 0xee00, 0xee00, 0xee01]) r3 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2008001, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}, 0x1, 0x0, &(0x7f0000000400)="faedf91ede7a91af0600dcbd0dec7ac36018") r4 = dup(r0) sendmmsg$sock(r0, &(0x7f0000002280)=[{{&(0x7f0000000440)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)="8cb667fb57568b1e452d948eb6be03591365f20bca2a8bd748", 0x19}, {&(0x7f0000000540)="8b01e558191370f48e64a7388b9ce4daf7f6e5f32ba7359b27e3f2ca76c6060a5b62b71507e54d29626c990a5225687eb726610aa4e752b065ac90d8966d7f7bf37f96d0566ac86ef1059690f704742b0699eb97d717e020f6ec13d7f4a9a0ae958f591c65e0e6a7d747614da27ecb820f393cb9292cf62acb94d7d9e07703633b887419dc2151127f77e78fa63950e67680ac82cb7bdc767f5da50ab8e875ef727542b8c3d36ec76ab84fc6adad202c6abed30e254b52a744061dee1281b9dc929fb3c452763a7175ca4cdeee3969c923", 0xd1}, {&(0x7f0000000640)="c6dc01c712242a73e2b60fd31ddf173b5e3fc382d0ee8302037e68530188885cbe0ecea2071616945c54b987cf480254eb2bb07bd3ee2edea55412a60c9bee0de78850c0ca91a7b3e5794426d4bb747f7e81b242f5", 0x55}, {&(0x7f00000006c0)="0fabf3ab3cf5597ef007e9d228e5f39317de3a910afd53131ef9147aefa9449d21087f0138a088f1b695e9bc52d429c75a05a9a9551847616bd0df1fd308071987ea3782b31fe4a6bc269c502701304acb258695d859a352844c34e569b92c40ed438ecded7db60bd3063e52e598b634056987", 0x73}, {&(0x7f0000000740)="921d4322b8fe853dddd9fb9b768dacd531dec65da48c35b05ce5bc90c9f2b20cb9db6706453776f76ea7dfa4ca419aa84f6c7d7099e31a7f2db8b435c9a99f722ec65483c61b83aa6bd13158", 0x4c}, {&(0x7f00000007c0)="11e4381262c6bfa831c348964e01d8cd7cb5c7a98993b869e90adda65642b3a6aec29303f12b8d38e1daa9a1066c94ff150c130e482fa1", 0x37}, {&(0x7f0000000800)="31333718402ee7bf0b5d5f8b72b34e83346601c259d8260fe63458024128b40338c1ab6df0500d5767791004dea47b818d2d59da0b031ef9a10527897721f90cb4633edfa19f3b0c7209a16c0703c6d27ee08ef593e46a34eb8b0a4fffbdc10c826f33a43dbb39634739d7fd9a92f991c3ad6cbf824c834e0d769c7430587b29ad397a958e9f7fe46a352343afea9914d2839c490b1c05f197beac057cd396fdff648713d82cefc6e2085d3110cb4dd04f1ee20705ca0ec12c8dce82185a010ed3f1", 0xc2}], 0x8, &(0x7f0000000980)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x18}}, {{&(0x7f00000009c0)=@phonet={0x23, 0x7, 0x8, 0xe}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="30c6d44a5c2b7fc56b846453523657ee0f39c5f0a5e312e2c26e5fb88f0744d9e742625dac28fde12cb2a3301351d7f0394eaf1c1edd4d8e3d14585eaa17d3d591971229f9bae333394b045e6924b950", 0x50}], 0x2, &(0x7f0000001b00)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001b80)="aa32a69a48ea02482581b9911a79fc735acf4dd4da9629e37b722d1d14db13c734b2682a061e66e0143b5169d6040dae5fa26ef43f909456d8f659f70a7624b024032216a457d1d565de8097bd996557e034406cdcdf1a02127a216143744a8b1b64d7e0bb2cf7ee37a0cadcae8dd74c53cdcc40e0251cfa584062063f66f247b0539557a5c7aca602b2760a7bd99b136e2ae5fb9035854b45045c11850880a0a2994ef9580600adc6983ef2461fb138e2ed8d1d5a7aa32616f9f7d2c47b6389939a97", 0xc3}], 0x1, &(0x7f0000001cc0)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x30}}, {{&(0x7f0000001d00)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x3, 0x0, 0x2}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001d80)="e63493014c2ab2ca5fc8b98144ad50acd42c8c9e186d7aadb4fe19b97795c68aa0552d2d0a2899891a10e93fe0897539b1ba804c0c264165149e00e50c6f75f9bd1dc1349655e34eddc2dcd9ce7922c59cc16117ca3c8636445fb99cefe4c2f688134ac19b68d6d3f1d073217790a5e6eb9531359034089b208a3576f854a40a5788bb6c545f44320af47b2a34b605f7fffe347c4785ed214d88a18597f8cda8e63c7191", 0xa4}, {&(0x7f0000001e40)="c34a9a25821a0f1b71", 0x9}, {&(0x7f0000001e80)="6b051580c845b9421228c7bab2ee00492f9b39b0c749358990d1153e92d3c51938617edb9b3faf50f8713342f263fb5abc9a09a2df2b27530e1c888461b16ea68ce988afd85cc538095cf4d8d6e52e5ffe1e1397203da571bb5fba5c47322449ec5ff74286a0f060cbaa3e6833e00e7791fd819134fdced811f279dd01837c0b5968b4eb4950b5bbff018f783d1155b992b5a2446b754868105636321f2b64b8091e989d09cf9653f652cbec7c95ea963badf32002a8717dce7703abf6a8f13e50e00148eb", 0xc5}, {&(0x7f0000001f80)="4a25853f0588598971c5248be0917a823fec1c05c90e7a9f60c42535aa118a8c39c49a0de52b406b115c6287009b6eeae4f9e284e80dbd1d2dbd", 0x3a}], 0x4, &(0x7f0000002000)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x60}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000002080)="f747e0b27abf40056a6c29acbdb8c1aa6de7ca21a09cc1d500f1d4e58cb2f5b2c39ab668786a199a2ecec0664e3f8b01068caec6d15497fc85bf7d6c717cfd6a408c3a98d71a31de9d732f8663d087deb908e6c00fc41637e31ddcf80938542efc85bfa94f47fbbbb24248893ab0ac0402fb37ca3ff6b402afda9379eb6d43b8d7ffefb18d818a048f51db1954be650534d063fcd2881898a4a277c1a82188aea828a1d400c12af5633e8d4c4cd61e4979798b63fbf9831bd49bbef1c009a6969807899f7f925f8fae6215c2e7cfae35b5a874126ced635bb2e75faaa68c57354ee398cb5f540ad9c9bbd80cfc57", 0xee}], 0x1, &(0x7f00000021c0)=[@mark={{0x14, 0x1, 0x24, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x7f}}, @mark={{0x14, 0x1, 0x24, 0xfd}}, @timestamping={{0x14}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0xa8}}], 0x5, 0x8000) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000002400)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x400}, @isdn={0x22, 0x7, 0x4, 0x8, 0x6}, @vsock={0x28, 0x0, 0x1}, 0x9, 0x0, 0x0, 0x0, 0x8000, &(0x7f00000023c0)='ipvlan1\x00', 0xffffffffffff2e2e, 0xbb07, 0x6}) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000024c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x14, r5, 0x802, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) write$vhost_msg(r6, &(0x7f00000026c0)={0x1, {&(0x7f0000002600)=""/34, 0x22, &(0x7f0000002640)=""/117, 0x1, 0x4}}, 0x48) quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000200, r1, &(0x7f0000002740)='./file0\x00') socket(0x15, 0x80005, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000002780)={0xfffffffffffffe01, r3}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xe, &(0x7f0000002ac0)={0x10001, 0x0, &(0x7f0000002a40)=[{&(0x7f00000027c0)=""/239, 0xef}, {&(0x7f00000028c0)=""/163, 0xa3}, {&(0x7f0000002980)=""/163, 0xa3}], &(0x7f0000002a80)=[0xffffffffffff7fff, 0x8, 0x4], 0x3}, 0x20) r8 = socket(0x5, 0x1, 0x1) ioctl$TIOCGWINSZ(r7, 0x5413, &(0x7f0000002b00)) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000002b40)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000002b80)={0x48, 0x1, r9, 0x0, 0x4, 0x4}) r10 = syz_open_dev$usbfs(&(0x7f0000002c00), 0xd, 0x202800) ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, &(0x7f0000002c40)={0x7, 0x0, "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"}) futex_waitv(&(0x7f0000004600)=[{0x6, &(0x7f0000002d80)=0x3, 0x82}, {0x81, &(0x7f0000002dc0)=0xfffffffffffffffb, 0x82}, {0xfffffffffffff938, &(0x7f0000002e00)=0x2, 0x2}, {0x2, &(0x7f0000002e40)=0x2, 0x82}, {0x100000000, &(0x7f0000002e80)=0x6, 0x2}, {0x9, &(0x7f0000002ec0)=0x6, 0x2}, {0xffffffff, &(0x7f0000002f00), 0x82}, {0xffffffffffffffff, &(0x7f0000002f40)=0x7fffffff, 0x2}, {0x4, &(0x7f0000002f80)=0x7ff, 0x82}, {0x5ca4, &(0x7f0000002fc0)=0xc, 0x82}, {0x321b1187, &(0x7f0000003000)=0x7, 0x82}, {0xffff, &(0x7f0000003040)=0x2, 0x2}, {0x1ff, &(0x7f0000003080)=0x2cb9, 0x2}, {0x5, &(0x7f00000030c0)=0x5, 0x82}, {0x0, &(0x7f0000003100)=0x6, 0x82}, {0x81, &(0x7f0000003140)=0x8, 0x82}, {0x8000000000000000, &(0x7f0000003180)=0x3f, 0x2}, {0x8000, &(0x7f00000031c0)=0x7fff, 0x82}, {0x80000000, &(0x7f0000003200)=0x6, 0x2}, {0x1, &(0x7f0000003240)=0x1, 0x2}, {0x6, &(0x7f0000003280)=0x4, 0x82}, {0x200, &(0x7f00000032c0)=0x7, 0x82}, {0x3f1, &(0x7f0000003300)=0x4, 0x82}, {0x2, &(0x7f0000003340)=0xffffffff}, {0x4, &(0x7f0000003380)=0x8000000000000000, 0x82}, {0x800, &(0x7f00000033c0)=0x1, 0x82}, {0xd4, &(0x7f0000003400)=0x38, 0x2}, {0x3, &(0x7f0000003440)=0xffffffff, 0x82}, {0xde4c, &(0x7f0000003480)=0x7, 0x2}, {0x5, &(0x7f00000034c0)=0x10, 0x2}, {0x7fff, &(0x7f0000003500)=0xb439, 0x82}, {0xc7e, &(0x7f0000003540)=0x9, 0x2}, {0x3, &(0x7f0000003580)=0x4, 0x2}, {0x3, &(0x7f00000035c0), 0x82}, {0x77cd, &(0x7f0000003600)=0x5, 0x82}, {0x2, &(0x7f0000003640)=0x2, 0x2}, {0x9, &(0x7f0000003680)=0x4855, 0x82}, {0x8000000000000001, &(0x7f00000036c0)=0x31, 0x82}, {0x5, &(0x7f0000003700)=0x10001, 0x82}, {0xb9fc, &(0x7f0000003740)=0x4, 0x2}, {0x40, &(0x7f0000003780)=0xa65, 0x2}, {0x28, &(0x7f00000037c0)=0xfffffffffffffffa}, {0x40, &(0x7f0000003800)=0x9, 0x2}, {0x4, &(0x7f0000003840)=0x8, 0x80}, {0x401, &(0x7f0000003880)=0x4, 0x82}, {0x1, &(0x7f00000038c0)=0x200, 0x2}, {0x7, &(0x7f0000003900)=0x14000000000000, 0x82}, {0x7f, &(0x7f0000003940)=0x7, 0x82}, {0x3, &(0x7f0000003980)=0x6, 0x82}, {0x400, &(0x7f00000039c0)=0x1, 0x2}, {0x138, &(0x7f0000003a00)=0x200, 0x82}, {0x8f5, &(0x7f0000003a40)=0xffff, 0x2}, {0x9, &(0x7f0000003a80)=0x2, 0x2}, {0x2, &(0x7f0000003ac0)=0x67, 0x82}, {0x5, &(0x7f0000003b00)=0x1, 0x4}, {0x80000001, &(0x7f0000003b40)=0xffffffff, 0x2}, {0x81, &(0x7f0000003b80)=0xa, 0x2}, {0x48000000000000, &(0x7f0000003bc0)=0x5, 0x82}, {0xb03, &(0x7f0000003c00)=0x9, 0x2}, {0x7fffffffffffffff, &(0x7f0000003c40)=0xc, 0x82}, {0x0, &(0x7f0000003c80)}, {0x0, &(0x7f0000003cc0)=0x8, 0x2}, {0x0, &(0x7f0000003d00)=0x8001, 0x2}, {0x36, &(0x7f0000003d40)=0x8000000000000001, 0x82}, {0x3, &(0x7f0000003d80)=0x4, 0x2}, {0x1, &(0x7f0000003dc0)=0x401, 0x82}, {0x0, &(0x7f0000003e00)=0xc, 0x2}, {0xffffffffffffff41, &(0x7f0000003e40)=0x8, 0x82}, {0x10001, &(0x7f0000003e80)=0x6, 0x82}, {0x38, &(0x7f0000003ec0)=0x5, 0x82}, {0x4, &(0x7f0000003f00)=0x9, 0x82}, {0x100400000000000, &(0x7f0000003f40)=0x2, 0x82}, {0xd5b1, &(0x7f0000003f80)=0xfffffffffffffffd, 0x82}, {0x0, &(0x7f0000003fc0)=0xff, 0x2}, {0x0, &(0x7f0000004000)=0x8, 0x2}, {0x4, &(0x7f0000004040)=0xfffe00000, 0x82}, {0x1, &(0x7f0000004080)=0x5, 0x2}, {0xff, &(0x7f00000040c0)=0x1, 0x2}, {0x7, &(0x7f0000004100)=0x3000000, 0x2}, {0x400, &(0x7f0000004140)=0x1, 0x2}, {0x9, &(0x7f0000004180)=0x5, 0x82}, {0x6, &(0x7f00000041c0)=0x5, 0x82}, {0x995e, &(0x7f0000004200), 0x82}, {0x6, &(0x7f0000004240)=0x4, 0x2}, {0xcedf, &(0x7f0000004280)=0xffffffffffffffff, 0x2}, {0x8, &(0x7f00000042c0)=0x2, 0x2}, {0x408a, &(0x7f0000004300)=0x6, 0x82}, {0x5, &(0x7f0000004340)=0x162, 0x82}, {0x62, &(0x7f0000004380)=0xfffffffffffffff8, 0x2}, {0x0, &(0x7f00000043c0)=0x3b, 0x82}, {0x200, &(0x7f0000004400)=0x1, 0x82}, {0x1, &(0x7f0000004440)=0x7, 0x82}, {0x81, &(0x7f0000004480)=0x7, 0x2}, {0x3, &(0x7f00000044c0)=0x2, 0x2}, {0x0, &(0x7f0000004500)=0xffff, 0x82}, {0x4, &(0x7f0000004540), 0x82}, {0xb, &(0x7f0000004580)=0x10000, 0x82}, {0x7ff, &(0x7f00000045c0)=0x7, 0x2}], 0x62, 0x0, &(0x7f0000004f40)={0x77359400}, 0x1) r11 = creat(&(0x7f0000004f80)='./file0\x00', 0xa5) ioctl$USBDEVFS_FORBID_SUSPEND(r11, 0x5521) sendmsg$nl_route_sched(r8, &(0x7f0000005240)={&(0x7f0000004fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005200)={&(0x7f0000005000)=@deltaction={0x1f8, 0x31, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdf}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ab}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) r12 = open(&(0x7f0000005280)='./file0\x00', 0x40000, 0x42) setsockopt$ax25_int(r12, 0x101, 0x3, &(0x7f00000052c0), 0x4) ioctl$COMEDI_UNLOCK(r12, 0x6406) 14.098920291s ago: executing program 1 (id=6553): clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, &(0x7f0000000000)=@userptr={0x7, 0x6, 0x4, 0x4000, 0x1, {r0, r1/1000+10000}, {0x5, 0xc, 0x8, 0x7, 0x3, 0x36, "75896a63"}, 0x5, 0x2, {0x0}, 0x8}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 11.470294924s ago: executing program 7 (id=6562): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r0, &(0x7f0000000440)=""/176, 0xb0, 0x200) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020) socket(0x40000000015, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000280)={0x80, 0x400000b4, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x3}}, 0x80, 0x0}, 0x4000080) socket$kcm(0xa, 0x5, 0x0) mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.674902311s ago: executing program 5 (id=6568): socket$netlink(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x1980, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0xffffffff80000000) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) r8 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x800, 0x80002, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r8, 0x11, &(0x7f0000000d40)="01", 0x1) syz_io_uring_setup(0x6bd, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r9, r10, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) dup2(r11, r12) syz_open_dev$sndctrl(0x0, 0x0, 0x0) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) 9.259283733s ago: executing program 7 (id=6569): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x300}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) 7.657357616s ago: executing program 7 (id=6574): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) io_setup(0x800, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f00000004c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0, 0x300, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x47, r1, 0x0, 0x0, 0x5, 0x0, 0x2}]) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.566993151s ago: executing program 6 (id=6576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r5, 0x3, &(0x7f00000002c0)=0x400000b) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0xa, &(0x7f0000000180)=[{0x9, 0x6, 0x7, 0x8000}, {0x0, 0x5, 0x5, 0x269baa89}, {0x4, 0xfc, 0x0, 0x1}, {0x1a0, 0x61, 0x5d, 0x3}, {0x8, 0x2, 0x6, 0x5}, {0x3, 0x0, 0x6, 0x80000001}, {0xe400, 0xb, 0x4, 0x9}, {0x0, 0x7, 0x6, 0x4}, {0x9, 0x4, 0x4, 0x10}, {0x4, 0x7, 0x5, 0x5}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000100)={0x0, 0x2, r4, 0x0, 0x80000}) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) modify_ldt$read_default(0x2, &(0x7f0000000340)=""/88, 0x58) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800", "e7198360", "f7a5c1777af05eaa"}, 0x38) write$binfmt_elf64(r10, 0x0, 0x78) close_range(r4, 0xffffffffffffffff, 0x0) 6.552175967s ago: executing program 7 (id=6577): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000040)=""/114) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',groupWid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x0, 0x9ef1, 0x1000, 0x5, 0x9b, 0xf79c000, 0x2339fdf8, 0x3, 0x8000, 0x538, 0x0, 0xffffffffffffffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) signalfd(r4, &(0x7f00000000c0)={[0x7fff]}, 0x8) utimes(&(0x7f0000000240)='./file0\x00', 0x0) 5.538138042s ago: executing program 0 (id=6578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000800)={0x0}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x30, 0x20, 0x301, 0x7ffd, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'xfrm0\x00'}]}, 0x30}}, 0x0) 5.477203236s ago: executing program 7 (id=6579): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r0, &(0x7f0000000440)=""/176, 0xb0, 0x200) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020) socket(0x40000000015, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000280)={0x80, 0x400000b4, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x3}}, 0x80, 0x0}, 0x4000080) socket$kcm(0xa, 0x5, 0x0) mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.159052429s ago: executing program 0 (id=6580): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'macvlan1\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000540)={0xc9, 0x1, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.096293517s ago: executing program 6 (id=6581): bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0xfffffffffffffd60) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fsopen(0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (fail_nth: 18) 3.955209796s ago: executing program 0 (id=6582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0d4}, 0xc40) 3.518767228s ago: executing program 5 (id=6583): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r1, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") syz_open_pts(0xffffffffffffffff, 0x2800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ustat(0x1, &(0x7f0000000480)) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000010c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000800008f9bef0c00e900000061040000"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc2) close(r6) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$binfmt_format(r5, &(0x7f0000000100)='-1\x00', 0x2) close_range(r5, 0xffffffffffffffff, 0x0) close(r4) 3.496313078s ago: executing program 6 (id=6584): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0x8}) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0", 0x8, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r4, r3}, &(0x7f00000000c0)=""/83, 0x53, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) 3.4765288s ago: executing program 0 (id=6585): unshare(0x22020600) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket(0x840000000002, 0x800, 0xfa) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/244, 0xf4}], 0x1) 2.966445736s ago: executing program 6 (id=6586): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="020100090200edff005fb97be9000000"], 0x10}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x10, 0xffffffffffffffff, 0xb025e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095", @ANYRES16=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r4, 0x0, 0x5}, 0x18) r5 = socket$kcm(0x21, 0x2, 0xa) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000074000000060a010400000000e5000000010000004c000480240001800b00010072656a656374000014000280080001400000000005000200fc000000240001800b000100736f636b6574000014000280080002400000000a080001400000000208000b40000000000900010073797a300000000014000000110001"], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86551ad64fbe04535400fc010000000b00000000000000000000fe8000000000000000000000000000aa0000400128faa7d3381959c5aee537737411b48f337bb4fe34bc676cf47507239d80622a4a0d9c85c245c36c13a65c316ede6454160e76a144a28ce7c216a2fb38114a9ffca29214369c7e4e65067895bf2f4fac27450ea9c73424443cd83a2eb3186466bff98a9a840bdf2afa8bd0ca725b4af537b0a2818f1e0d050dfa5ec20ac1a6fead60b39ff1a4234bff10f4e21d7d5922b172ebf6f21b7501b1a1c1a060482142652735f910c9dca5167b03eb975657", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0xfffc, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800dc00000000000000"], 0x18}, 0xfc00) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ptrace$setregs(0xf, r7, 0x9ce, &(0x7f0000000280)="a485c898a64e55931abcfb864217a1a848a77ec9d88b69d2f61944968d5c8d2826efd66c5d18cd57b6d729f772f5dbe3c67b0732c34359e8b8264818116d6c374abe") r8 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x40010, r8, 0xf648e000) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0xc) ioctl$sock_netdev_private(r9, 0x89f1, &(0x7f0000000000)) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x80080) r11 = fanotify_init(0x200, 0x0) fanotify_mark(r11, 0x1, 0x40001043, r10, 0x0) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f00000000c0)={0x8, 0x9, 0x3, {0x4, @raw_data="8002caae4d2b8da6d1a932b6d9707dbd8e531de7cddcddf5814e6450d2909ad903375776112e7ec479a339a9145d0b3ec6e7a5bbe56ae48edd40a2f4546f37c5699fedc35fd63e37424021c6110fa20c16c991e3fb7e53e0810e4117fd2a899b843101152809f4a38138835fb70bf43b040bf224208c4ff1de6ea4a53c38e2b15dac3f041423f3227a19e531648390ff8bdf8fbe6dd67ba40257ba04638a6b13d6d1782594cd0fb6fe35aba8b37bb87b8cc232667ac09a941ba88737976cb2c3aeafb71ee7969bab"}, 0x100}) read(r0, &(0x7f0000000040)=""/92, 0x5c) 2.696007974s ago: executing program 5 (id=6587): r0 = io_uring_setup(0x177f, &(0x7f00000002c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close_range(r0, 0xffffffffffffffff, 0x600) 2.002661746s ago: executing program 5 (id=6588): r0 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x600000) inotify_add_watch(r0, 0x0, 0x2) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2) chdir(&(0x7f0000000080)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x150) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40000, 0xe1) fcntl$notify(r2, 0x402, 0x8000003d) lsetxattr$security_capability(0x0, &(0x7f0000000000), 0x0, 0x0, 0x1) lsetxattr$security_capability(0x0, &(0x7f0000000180), 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050000009582"}}) 1.954910654s ago: executing program 0 (id=6589): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r2 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="140000000000402505000006000000009400003b85850998bbaa384de16e6c6e4bedd8de633d0d8b2b78ff000071a820a06534307f6748e71c44452dbfbe5165f707b5e852f150bc0afc46ad0529bf3d219654d631e9a739910edb1549785045cd50b3"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000240)={0x7fffffd, 0x912, 0xd04}) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r2, 0x2000000, 0x0, 0x8000}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000000000001"]) close_range(r2, r3, 0x0) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40046201, 0xfffffffffffffffd) setgroups(0x0, 0x0) write$UHID_CREATE2(r4, &(0x7f00000009c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1000, 0xa58, 0x2, 0xcf25, 0x800, 0x6c8, "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"}}, 0x1118) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="ef798135a11ad3d6b783191a19384a8c94834b8ba93d5f47d4ede558aa4e3c7c8cd2262c1377"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.861022723s ago: executing program 7 (id=6590): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') chdir(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x881) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, 0x0, &(0x7f0000000100)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) ioctl$FS_IOC_GETVERSION(r0, 0x800248a0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 1.682514935s ago: executing program 6 (id=6591): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_io_uring_setup(0xcd0, &(0x7f0000000dc0)={0x0, 0x2384, 0x10300, 0x2, 0x151}, &(0x7f00000005c0)=0x0, &(0x7f0000000e40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002002, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0xfffffff9, @remote, 0x1}}, 0xffd, 0x4, 0x4, 0xd552, 0x8}, &(0x7f0000000300)=0x98) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e20, 0x9, @remote, 0x10001}}}, &(0x7f0000000400)=0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r3], 0x78}}, 0x20000800) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0xb0, 0x1, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "1a8f1c23c8b1e79738e2acb9933f9c0cc926642150e3659cd5741cd2e3ff471c", "8dcbe46c2000eea0016c0c8e3f3aa2f10cf14e76d1896e4fb324cd6cae46b02263f5d0990ad041656a51de740568addb", "29e20ac9645e5db0e82bf4687ef1012367b8ce288559e8adc977be90", {"d5cdec0ba5108e11b052b81562563526", "497751acc1a19b58c2923bc612400fd5"}}}}}}}, 0x0) 1.067158988s ago: executing program 0 (id=6592): io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000140)="ae061ff3fae188434e41b10995afcf438a7a0831b844d4ae74887302faff9a12b8398a229d32f866156ee6e8f3814ccf61f494601ff44e264d1f76b6024e79611d4a3bc3a1ff8bfeacb107748a64d9557acc12bb273ccf53dce84fa86814416e1264abdf00e7a059f9db6a37d9e15e851ec13979610405dfb7c5fcba52341d91492bfe5bfab9627875babefd", 0x8c, 0x5, 0x0, 0x2}]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x12, "3023afebe3a751292bba453e7b77a1f4"}]}}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in6=@empty, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@mcast2, {0x0, 0x40, 0x0, 0x0, 0x80000005, 0x1f6}, {0x0, 0xfffffffffffffffc, 0x1}, {0x0, 0x0, 0x100}, 0x0, 0x3505, 0xa, 0x1, 0x0, 0x2c}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_connect(0x5, 0x51, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 833.934028ms ago: executing program 5 (id=6593): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x3, 0x1}}, 0x26) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x2, {}, 0xff}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getgroups(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4040010) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21a0001, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xec842, 0x0) io_setup(0x1, &(0x7f0000000740)=0x0) io_submit(r5, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}]) socket$nl_generic(0x10, 0x3, 0x10) 831.010381ms ago: executing program 6 (id=6594): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f0000000100), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xf66f, 0xfffffe0000000001, 0x800, 0xffffffff}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000000c0)) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, 0x0, &(0x7f0000000380)) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="342a339af7ece7d6460000000906010400000000000000000500ffff0c00078008000a40000000050900020073797a310000000005000100070000007762559c50771230de74cc59b8ee90dd1553a081c0e60b2cbb312eb548e9a950ecf8e0813070e23f16d8b11cd91bc89b9f1ccdab48e220191b01980498f85a919fd13c5a00ab016abb304bed4ad9f673a6502abdd6c35507e63108ed2021c966ac73b2895be3737f250aa4db2ef5c6b346"], 0x34}}, 0x4000080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x20000090) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x5) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8926, &(0x7f0000002640)={'dvmrp1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}) socket$kcm(0x10, 0x3, 0x10) 0s ago: executing program 5 (id=6595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0d4}, 0xc40) kernel console output (not intermixed with test programs): s in process `syz.0.5921'. [ 1984.757828][T25869] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1984.858904][T20967] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1985.325674][T20967] usb 7-1: Using ep0 maxpacket: 16 [ 1985.379932][T20967] usb 7-1: config 28 has too many interfaces: 242, using maximum allowed: 32 [ 1985.696641][T20967] usb 7-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1985.716134][T20967] usb 7-1: config 28 has 1 interface, different from the descriptor's value: 242 [ 1985.799092][ T44] usb 2-1: USB disconnect, device number 50 [ 1985.816737][T20967] usb 7-1: config 28 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1985.908671][T20967] usb 7-1: config 28 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1985.924975][T20967] usb 7-1: config 28 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1985.935043][T20967] usb 7-1: config 28 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1985.971214][T20967] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1985.989864][T20967] usb 7-1: New USB device strings: Mfr=4, Product=64, SerialNumber=0 [ 1986.018575][T20967] usb 7-1: Product: syz [ 1986.040052][T20967] usb 7-1: Manufacturer: syz [ 1986.959964][T27282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1987.259870][T27282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1988.403739][T27280] binder: 27271:27280 ioctl c0306201 0 returned -14 [ 1988.803779][ T940] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1989.505273][ T940] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1989.584616][ T940] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1989.592275][ T940] usb 1-1: can't read configurations, error -61 [ 1989.803029][ T940] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1989.820537][T20967] rc_core: IR keymap rc-hauppauge not found [ 1989.850267][T20967] Registered IR keymap rc-empty [ 1989.878653][T27301] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1989.879174][T20967] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 1989.967012][ T940] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1989.993161][T20967] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 1990.003640][ T940] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1990.011373][T27301] EXT4-fs (loop6): unable to read superblock [ 1990.033276][ T940] usb 1-1: can't read configurations, error -61 [ 1990.080011][T20967] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:28.0/rc/rc0 [ 1990.112330][ T940] usb usb1-port1: attempt power cycle [ 1990.698077][T20967] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:28.0/rc/rc0/input58 [ 1990.822086][T20967] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 1990.917344][T20967] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 1991.136647][ T940] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1991.144678][T27309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1991.174610][T20967] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 1991.189123][T27309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1991.221470][ T940] usb 1-1: device descriptor read/8, error -71 [ 1991.251036][T20967] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 1991.279325][T20967] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 1991.346156][T20967] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 1991.365310][T20967] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 1991.407996][T20967] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 1991.442145][T20967] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 1991.447463][T27313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1991.471381][T20967] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 1991.554214][T20967] mceusb 7-1:28.0: Registered with mce emulator interface version 1 [ 1991.764659][T20967] mceusb 7-1:28.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1991.779826][T20967] usb 7-1: USB disconnect, device number 66 [ 1991.889181][T27320] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1994.620001][T27335] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1994.633471][T27335] I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1994.643838][T27335] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1994.656435][T27335] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1994.666848][T27335] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1994.676940][T27335] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1994.684786][T27335] UDF-fs: Scanning with blocksize 512 failed [ 1994.696760][T27335] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1994.709142][T27335] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1994.719363][T27335] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1994.731119][T27335] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1994.740941][T27335] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1994.750736][T27335] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1994.758693][T27335] UDF-fs: Scanning with blocksize 1024 failed [ 1994.765848][T27335] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1994.775592][T27335] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1994.785415][T27335] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1994.795529][T27335] I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1994.805548][T27335] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1994.815517][T27335] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1994.823774][T27335] UDF-fs: Scanning with blocksize 2048 failed [ 1994.831743][T27335] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1994.841233][T27335] I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1994.851064][T27335] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1994.860753][T27335] I/O error, dev loop1, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1994.870545][T27335] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1994.880237][T27335] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1994.887893][T27335] UDF-fs: Scanning with blocksize 4096 failed [ 1994.894714][T27335] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 1999.160565][T27370] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 2000.875700][T25931] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 2001.061921][T25931] usb 1-1: Using ep0 maxpacket: 8 [ 2001.081714][T25931] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 2001.117019][T25931] usb 1-1: config 179 has no interface number 0 [ 2001.148212][T25931] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2001.198876][T25931] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2001.234858][T25931] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2001.265212][T25931] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2001.278698][T27391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2001.292441][T25931] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2001.318046][T27391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2001.327326][T25931] usb 1-1: config 179 interface 65 has no altsetting 0 [ 2001.347558][T25931] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2001.377569][T27391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2001.383485][T25931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2001.393430][T27391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2001.449630][T25931] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input59 [ 2002.392155][T27383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5969'. [ 2002.432538][T15307] usb 1-1: USB disconnect, device number 98 [ 2004.127272][T27413] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5978'. [ 2004.136831][T27413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5978'. [ 2005.535492][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2005.977539][T27434] hfsplus: Bad value for 'uid' [ 2005.987038][T27434] fuse: Unknown parameter '—:PüSÃæâ ÌbìJ]—ËÆ—-Yw;O™¯`Ü' [ 2007.950111][T27429] syz.1.5981 (27429): drop_caches: 2 [ 2008.187747][T27447] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 2008.208555][T27446] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2008.244611][T27446] I/O error, dev loop5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2008.266590][T27446] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 2008.289656][T27446] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2008.317844][T27446] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 2008.344114][T27446] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 2008.366051][T27446] UDF-fs: Scanning with blocksize 512 failed [ 2008.385335][T27446] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2008.519355][T27452] cgroup2: Unknown parameter 'lowerdir' [ 2008.528574][T27446] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2008.540640][T27446] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 2009.237797][T27446] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2009.327499][T27446] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 2009.350076][T27446] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 2009.358049][T27446] UDF-fs: Scanning with blocksize 1024 failed [ 2009.388563][T27446] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2009.420514][T27446] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2009.451971][T27446] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 2009.595326][T27446] I/O error, dev loop5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2009.781122][T27446] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 2009.902782][T27463] 9pnet_fd: Insufficient options for proto=fd [ 2010.470811][T27446] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 2010.547741][T27446] UDF-fs: Scanning with blocksize 2048 failed [ 2010.570663][T27446] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2010.791237][T27446] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 2010.837254][T27446] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 2010.895898][T27446] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 2010.939218][T27446] UDF-fs: Scanning with blocksize 4096 failed [ 2010.992643][T27446] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 2011.016890][T27475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2011.021711][T27468] vlan0: entered promiscuous mode [ 2011.050861][T27468] macvtap0: entered promiscuous mode [ 2011.055810][T27475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2011.237853][ T940] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 2011.368778][ T940] usb 7-1: device descriptor read/64, error -71 [ 2011.618811][ T940] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 2011.629465][T27487] netlink: 'syz.0.5998': attribute type 32 has an invalid length. [ 2011.768507][ T940] usb 7-1: device descriptor read/64, error -71 [ 2011.790119][T27489] udf: Unexpected value for 'nostrict' [ 2011.878107][ T940] usb usb7-port1: attempt power cycle [ 2012.216846][ T940] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 2012.255810][ T940] usb 7-1: device descriptor read/8, error -71 [ 2012.521456][ T940] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 2012.561508][ T940] usb 7-1: device descriptor read/8, error -71 [ 2012.938728][ T940] usb usb7-port1: unable to enumerate USB device [ 2015.693739][T27529] netlink: 'syz.7.6010': attribute type 46 has an invalid length. [ 2017.313040][T27561] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6016'. [ 2017.402580][T27551] blk_print_req_error: 2 callbacks suppressed [ 2017.402600][T27551] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2017.418440][T27551] MINIX-fs: unable to read superblock [ 2019.581338][T27580] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6022'. [ 2019.678150][T27580] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6022'. [ 2019.746675][T27580] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6022'. [ 2019.843234][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6024'. [ 2019.872547][ T44] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 2019.921811][T27584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6024'. [ 2020.091362][ T44] usb 7-1: config 0 has an invalid interface number: 229 but max is 0 [ 2020.626812][T27593] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 2020.637831][ T44] usb 7-1: config 0 has no interface number 0 [ 2020.644699][ T44] usb 7-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 2020.731926][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2020.790434][T27602] ptrace attach of "./syz-executor exec"[24054] was attempted by "./syz-executor exec"[27602] [ 2020.905809][ T44] usb 7-1: config 0 descriptor?? [ 2021.890201][ T940] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2021.936844][T27612] syz.0.6031 (27612): /proc/27611/oom_adj is deprecated, please use /proc/27611/oom_score_adj instead. [ 2022.037342][ T940] usb 2-1: Using ep0 maxpacket: 32 [ 2022.046169][ T940] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2022.065941][ T940] usb 2-1: config 2 has an invalid interface number: 204 but max is 0 [ 2022.084698][ T940] usb 2-1: config 2 has no interface number 0 [ 2022.145783][ T940] usb 2-1: config 2 interface 204 has no altsetting 0 [ 2022.174411][ T940] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=d1.f9 [ 2022.187490][ T940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.200758][ T940] usb 2-1: Product: ᷭ滱橎ॹ퓵刕풃殆ᔜꦎ趕ʹ쉋䨤⸋麪霭褅竅ᕆì€â•­å‹“ൎ轙柴¤螀觪賯ꅕ鴽鼜㯨䙲꾼硶洰é·ã¼¸á¨¸ë««è¼˜ê´© [ 2022.218924][T27615] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2022.433928][ T940] usb 2-1: Manufacturer: 橔穹⹜á‘头ìŽæ¢Œë”¸êŠ”⑱äⷎ唆ࢃ冰處㽗ⱻ쾱Ëæ…婩߅â•ï¸í‹£å“©é—·äŠäš­è…¨í™æ€¼æ€¿á–¢è¨¹æ¢˜å•¬æ³›î…Œá•å½‡ä…€ß§á½´ã’’剈æ˜á·âº¥ê ®ì¥´ç²¶ [ 2022.458261][ T940] usb 2-1: SerialNumber: ┪빈í‚ä©íˆŸæ—á²ã¹®æ­—䊥ﺾã™ãž£ëﾎ﫦ﶕ颦ឪↇèŸï–±è«€èš»ä›î´”盶ভ娲쑣ì俨ê½ì¸»ã¿Žë‰•å—¸è‘©á’€ëžï¢‚㘖硞ꘚåšä¹‘ì§ç“斤鮭饻Έ┯⥷쮔陜ëœï€¯é”¢äº¡é¬€éŽ¦çµ¦á¥¦ìã‚¢ã²ç‘½ä¿·êª²ë¤¶îµ¼ç°±æ˜àª°ä¶¡ì…­ê¼•èµ±ëµ‘Ӻ趿⧀刡胠ϽîŒçª Ðˆç®ŽÐˆÊ‘à¼à³‹ë§˜ã¯®ä’˜á»â†¶ì‘«ê«šëš³ã«žçª¶î…‡ëŸ£ê™ì­‡ì„¼è‘¸î¼„赈îµë¢·ç¹¬ì¶¤ä°ŽáŒŸí€°ç¨¹ï™ºè‘ꡪ [ 2022.817650][ T44] usb 7-1: USB disconnect, device number 71 [ 2022.860755][ T940] ir_toy 2-1:2.204: required endpoints not found [ 2022.892670][ T940] usb 2-1: USB disconnect, device number 51 [ 2023.870344][T27632] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2023.935759][T27632] EXT4-fs (loop1): unable to read superblock [ 2026.208135][T27646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6040'. [ 2026.217519][T27646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6040'. [ 2026.913353][T27654] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6041'. [ 2026.922466][T27654] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6041'. [ 2028.978282][T27670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2029.133912][T27670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2029.676886][T27680] futex_wake_op: syz.7.6048 tries to shift op by -1; fix this program [ 2030.816846][T27688] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6051'. [ 2032.941783][T27699] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2032.969497][T27699] I/O error, dev loop6, sector 66359 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2033.023685][T27699] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=66359, location=66359 [ 2033.054467][T27699] I/O error, dev loop6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2033.116691][T27699] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 2033.141986][T27699] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2033.169204][T27699] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 2033.179810][T27714] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6050'. [ 2033.200814][T27715] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6060'. [ 2033.217127][T27699] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 2033.260260][T27699] UDF-fs: Scanning with blocksize 512 failed [ 2033.268930][T27699] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2033.484174][T27720] binder: 27711:27720 ioctl c0306201 0 returned -14 [ 2033.538449][T27699] I/O error, dev loop6, sector 132718 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2033.599807][T27699] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=66359, location=66359 [ 2033.694122][T27699] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2033.731935][T27699] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 2033.760331][T27699] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2033.773247][T27699] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 2033.819223][T27699] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 2033.867466][T27699] UDF-fs: Scanning with blocksize 1024 failed [ 2033.878593][T27699] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2034.077867][T27699] I/O error, dev loop6, sector 265436 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2034.135506][T27699] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=66359, location=66359 [ 2034.154976][T27699] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 2034.173646][T27699] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 2034.216468][T27699] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 2034.255782][T27699] UDF-fs: Scanning with blocksize 2048 failed [ 2034.303503][T27699] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=66359, location=66359 [ 2034.346693][T27699] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 2034.601328][T27699] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 2035.120350][T27699] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 2035.294362][T27699] UDF-fs: Scanning with blocksize 4096 failed [ 2035.334654][T27733] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6064'. [ 2035.339318][T27699] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 2035.763417][T26034] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 2035.794825][T27737] ntfs3(loop5): try to read out of volume at offset 0x0 [ 2036.777601][T26034] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2036.989015][T26034] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2037.002291][T26034] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.629979][T26034] usb 7-1: Product: syz [ 2037.634617][T26034] usb 7-1: Manufacturer: syz [ 2037.639344][T26034] usb 7-1: SerialNumber: syz [ 2037.659109][T26034] hub 7-1:1.0: bad descriptor, ignoring hub [ 2037.666184][T26034] hub 7-1:1.0: probe with driver hub failed with error -5 [ 2037.668187][ T30] audit: type=1326 audit(2000001499.539:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27743 comm="syz.1.6069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb93698eba9 code=0x0 [ 2037.869062][T27738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2038.030557][T27738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2038.241682][T15307] usb 7-1: USB disconnect, device number 72 [ 2039.337735][T27775] netlink: 'syz.7.6076': attribute type 1 has an invalid length. [ 2039.500932][T27775] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2039.575664][T27781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6077'. [ 2039.666224][T27782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6077'. [ 2040.075933][T27776] bond2: (slave ip6erspan0): making interface the new active one [ 2040.271631][T27776] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 2040.446679][T27787] netlink: 360 bytes leftover after parsing attributes in process `syz.7.6081'. [ 2042.810229][ T940] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 2043.260102][ T940] usb 7-1: Using ep0 maxpacket: 16 [ 2043.301588][ T940] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2043.479255][ T940] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 2043.516729][ T940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.575072][ T940] usb 7-1: config 0 descriptor?? [ 2043.591374][T27819] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2043.629469][ T940] pxrc 7-1:0.0: Could not find endpoint [ 2043.880716][T27809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2043.890127][T27809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2043.928741][T15307] usb 7-1: USB disconnect, device number 73 [ 2044.075512][T27826] overlayfs: failed to clone upperpath [ 2044.085794][T27825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2044.184337][T27825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2044.633551][T27841] tipc: Started in network mode [ 2044.639367][T27841] tipc: Node identity 070000000000000007, cluster identity 4711 [ 2045.264981][T27846] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6094'. [ 2045.641584][ T44] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2046.131450][T27849] overlayfs: failed to get index nlink (file1/file7, err=-61) [ 2046.131702][T27850] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6098'. [ 2046.210171][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 2046.279777][ T44] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2046.341985][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2046.404011][ T44] usb 2-1: config 0 descriptor?? [ 2047.631984][ T44] ath6kl: Failed to submit usb control message: -110 [ 2047.638844][ T44] ath6kl: unable to send the bmi data to the device: -110 [ 2048.914126][ T44] ath6kl: Unable to send get target info: -110 [ 2049.116349][ T44] ath6kl: Failed to init ath6kl core: -110 [ 2049.142458][ T44] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 2049.167180][ T44] usb 2-1: USB disconnect, device number 52 [ 2052.906419][T27905] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6113'. [ 2052.990674][T27916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6117'. [ 2053.001422][T27914] GUP no longer grows the stack in syz.6.6113 (27914): 200000004000-20000000a000 (200000002000) [ 2053.014152][T27914] CPU: 1 UID: 0 PID: 27914 Comm: syz.6.6113 Not tainted syzkaller #0 PREEMPT(full) [ 2053.014179][T27914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2053.014193][T27914] Call Trace: [ 2053.014202][T27914] [ 2053.014211][T27914] dump_stack_lvl+0x189/0x250 [ 2053.014242][T27914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2053.014265][T27914] ? __pfx__printk+0x10/0x10 [ 2053.014302][T27914] ? find_vma+0xe7/0x160 [ 2053.014346][T27914] __get_user_pages+0x2470/0x2a00 [ 2053.014407][T27914] get_user_pages_remote+0x2f1/0xad0 [ 2053.014432][T27914] ? __pfx_mtree_load+0x10/0x10 [ 2053.014469][T27914] ? __pfx_get_user_pages_remote+0x10/0x10 [ 2053.014490][T27914] ? __access_remote_vm+0x367/0x7d0 [ 2053.014521][T27914] __access_remote_vm+0x211/0x7d0 [ 2053.014561][T27914] ? __pfx___access_remote_vm+0x10/0x10 [ 2053.014594][T27914] ? alloc_pages_noprof+0xbe/0x190 [ 2053.014619][T27914] proc_pid_cmdline_read+0x430/0x810 [ 2053.014651][T27914] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 2053.014670][T27914] ? rw_verify_area+0x2a6/0x4d0 [ 2053.014693][T27914] vfs_readv+0x5aa/0x850 [ 2053.014715][T27914] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 2053.014742][T27914] ? __pfx_vfs_readv+0x10/0x10 [ 2053.014781][T27914] ? __fget_files+0x2a/0x420 [ 2053.014804][T27914] ? __fget_files+0x3a0/0x420 [ 2053.014821][T27914] ? __fget_files+0x2a/0x420 [ 2053.014847][T27914] __x64_sys_preadv+0x197/0x2a0 [ 2053.014862][T27914] ? __pfx___x64_sys_preadv+0x10/0x10 [ 2053.014878][T27914] ? do_syscall_64+0xbe/0xfa0 [ 2053.014909][T27914] do_syscall_64+0xfa/0xfa0 [ 2053.014947][T27914] ? lockdep_hardirqs_on+0x9c/0x150 [ 2053.014977][T27914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2053.014996][T27914] ? clear_bhb_loop+0x60/0xb0 [ 2053.015018][T27914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2053.015037][T27914] RIP: 0033:0x7f6551b8eba9 [ 2053.015051][T27914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2053.015063][T27914] RSP: 002b:00007f6552a6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2053.015078][T27914] RAX: ffffffffffffffda RBX: 00007f6551dd6180 RCX: 00007f6551b8eba9 [ 2053.015091][T27914] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 2053.015107][T27914] RBP: 00007f6551c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2053.015119][T27914] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 2053.015131][T27914] R13: 00007f6551dd6218 R14: 00007f6551dd6180 R15: 00007ffde3e02a68 [ 2053.015165][T27914] [ 2053.285630][T27916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6117'. [ 2053.294644][T27916] netlink: 'syz.5.6117': attribute type 6 has an invalid length. [ 2053.307006][T27916] blk_print_req_error: 7 callbacks suppressed [ 2053.307022][T27916] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2053.326827][T27916] SQUASHFS error: Failed to read block 0x0: -5 [ 2053.333726][T27916] unable to read squashfs_super_block [ 2053.605772][T27920] exfat: Bad value for 'gid' [ 2053.611023][T27920] exfat: Bad value for 'gid' [ 2055.337479][T27938] comedi: valid board names for 8255 driver are: [ 2055.344450][T27938] 8255 [ 2055.347224][T27938] comedi: valid board names for vmk80xx driver are: [ 2055.354234][T27938] vmk80xx [ 2055.357396][T27938] comedi: valid board names for usbduxsigma driver are: [ 2055.374266][T27938] usbduxsigma [ 2055.410855][T27938] comedi: valid board names for usbduxfast driver are: [ 2055.428658][T27940] overlayfs: failed to resolve './file0': -2 [ 2055.437405][T27938] usbduxfast [ 2055.440871][T27938] comedi: valid board names for usbdux driver are: [ 2055.467922][T27938] usbdux [ 2055.471005][T27938] comedi: valid board names for ni6501 driver are: [ 2055.481574][T27938] ni6501 [ 2055.484669][T27938] comedi: valid board names for dt9812 driver are: [ 2055.547498][T27938] dt9812 [ 2055.562437][T27940] netlink: 'syz.5.6125': attribute type 21 has an invalid length. [ 2055.583898][T27938] comedi: valid board names for ni_labpc_cs driver are: [ 2055.614844][T27938] ni_labpc_cs [ 2055.623801][T20967] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2055.634957][T27938] comedi: valid board names for ni_daq_700 driver are: [ 2055.681382][T27938] ni_daq_700 [ 2055.709354][T27938] comedi: valid board names for labpc_pci driver are: [ 2055.733762][T27938] labpc_pci [ 2055.740910][T27938] comedi: valid board names for adl_pci9118 driver are: [ 2055.798028][T27946] 9pnet_fd: Insufficient options for proto=fd [ 2055.809837][T27938] pci9118dg [ 2055.825649][T27938] pci9118hg [ 2055.833351][T20967] usb 1-1: Using ep0 maxpacket: 16 [ 2055.850917][T27938] pci9118hr [ 2055.864186][T27938] comedi: valid board names for 8255_pci driver are: [ 2055.874126][T20967] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2056.111131][T27938] 8255_pci [ 2056.114310][T27938] comedi: valid board names for s526 driver are: [ 2056.154361][T27938] s526 [ 2056.159164][T27938] comedi: valid board names for multiq3 driver are: [ 2056.215430][T27938] multiq3 [ 2056.234048][T27938] comedi: valid board names for pcmuio driver are: [ 2056.234397][T20967] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 2056.240785][T27938] pcmuio48 [ 2056.286968][T27938] pcmuio96 [ 2056.296894][T27938] comedi: valid board names for pcmmio driver are: [ 2056.321425][T20967] usb 1-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 2056.403343][T27938] pcmmio [ 2056.901327][T20967] usb 1-1: Product: syz [ 2056.905882][T20967] usb 1-1: Manufacturer: syz [ 2056.919804][T20967] usb 1-1: SerialNumber: syz [ 2056.928743][T27938] comedi: valid board names for pcmda12 driver are: [ 2056.936375][T20967] usb 1-1: config 0 descriptor?? [ 2056.945807][T27938] pcmda12 [ 2056.949204][T27938] comedi: valid board names for pcmad driver are: [ 2056.956165][T27938] pcmad12 [ 2056.965886][T27938] pcmad16 [ 2056.976357][T27938] comedi: valid board names for ni_labpc driver are: [ 2056.994985][T27938] lab-pc-1200 [ 2057.013915][T27938] lab-pc-1200ai [ 2057.017980][T27938] lab-pc+ [ 2057.021193][T27938] comedi: valid board names for atmio16 driver are: [ 2057.033831][T27938] atmio16 [ 2057.036997][T27938] atmio16d [ 2057.040579][T27938] comedi: valid board names for ni_at_ao driver are: [ 2057.047574][T27938] at-ao-6 [ 2057.050892][T27938] at-ao-10 [ 2057.054266][T27938] comedi: valid board names for ni_at_a2150 driver are: [ 2057.214433][T27938] ni_at_a2150 [ 2057.218251][T27938] comedi: valid board names for adq12b driver are: [ 2057.233423][T27938] adq12b [ 2057.405196][T27938] comedi: valid board names for mpc624 driver are: [ 2057.951549][T27938] mpc624 [ 2057.954554][T27938] comedi: valid board names for c6xdigio driver are: [ 2058.269155][T27938] c6xdigio [ 2058.283569][T27938] comedi: valid board names for aio_iiro_16 driver are: [ 2058.437243][T27938] aio_iiro_16 [ 2059.281146][T27938] comedi: valid board names for aio_aio12_8 driver are: [ 2059.289391][T27938] aio_aio12_8 [ 2059.293162][T27938] aio_ai12_8 [ 2059.296511][T27938] aio_ao12_4 [ 2059.299955][T27938] comedi: valid board names for fl512 driver are: [ 2059.340186][T27938] fl512 [ 2059.343470][T27938] comedi: valid board names for dmm32at driver are: [ 2059.598592][T27938] dmm32at [ 2059.602543][T27938] comedi: valid board names for dt282x driver are: [ 2059.801876][T27938] dt2821 [ 2060.334742][T27938] dt2821-f [ 2060.337912][T27938] dt2821-g [ 2060.361174][T27938] dt2823 [ 2060.377038][T27938] dt2824-pgh [ 2060.402488][T27938] dt2824-pgl [ 2060.419226][T27938] dt2825 [ 2060.453131][T27938] dt2827 [ 2060.501441][T27938] dt2828 [ 2060.507452][T27938] dt2829 [ 2060.535796][T27938] dt21-ez [ 2060.547020][T27938] dt23-ez [ 2060.557799][T27938] dt24-ez [ 2060.596696][T27938] dt24-ez-pgl [ 2060.600217][T27938] comedi: valid board names for dt2817 driver are: [ 2060.672651][T27938] dt2817 [ 2060.676252][T27938] comedi: valid board names for dt2815 driver are: [ 2060.734687][T27938] dt2815 [ 2060.737687][T27938] comedi: valid board names for dt2814 driver are: [ 2060.814869][T27938] dt2814 [ 2060.828120][T25869] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2060.836011][T27938] comedi: valid board names for dt2811 driver are: [ 2060.848933][T27938] dt2811-pgh [ 2060.852269][T27938] dt2811-pgl [ 2060.856013][T27938] comedi: valid board names for dt2801 driver are: [ 2060.862556][T27938] dt2801 [ 2060.865920][T27938] comedi: valid board names for das6402 driver are: [ 2060.872590][T27938] das6402-12 [ 2060.876018][T27938] das6402-16 [ 2060.879330][T27938] comedi: valid board names for das1800 driver are: [ 2060.886646][T27938] das-1701st [ 2060.889978][T27938] das-1701st-da [ 2060.900300][T27938] das-1702st [ 2060.903738][T27938] das-1702st-da [ 2060.907376][T27938] das-1702hr [ 2061.064400][T27938] das-1702hr-da [ 2061.068102][T27938] das-1701ao [ 2061.071460][T27938] das-1702ao [ 2061.074940][T27938] das-1801st [ 2061.079338][T27938] das-1801st-da [ 2061.083025][T27938] das-1802st [ 2061.086421][T27938] das-1802st-da [ 2061.090060][T27938] das-1802hr [ 2061.093464][T27938] das-1802hr-da [ 2061.097101][T27938] das-1801hc [ 2061.100455][T27938] das-1802hc [ 2061.103859][T27938] das-1801ao [ 2061.107236][T27938] das-1802ao [ 2061.110665][T27938] comedi: valid board names for das800 driver are: [ 2061.123756][T27938] das-800 [ 2061.667365][T27938] cio-das800 [ 2061.670669][T27938] das-801 [ 2061.790943][T27938] cio-das801 [ 2061.828232][T27938] das-802 [ 2061.831313][T27938] cio-das802 [ 2061.842828][T27938] cio-das802/16 [ 2061.996584][T27938] comedi: valid board names for isa-das08 driver are: [ 2062.054033][T27938] isa-das08 [ 2062.057762][T27938] das08-pgm [ 2062.061040][T27938] das08-pgh [ 2062.064401][T27938] das08-pgl [ 2062.067773][T27938] das08-aoh [ 2062.071052][T27938] das08-aol [ 2062.074669][T27938] das08-aom [ 2062.084507][T27993] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6139'. [ 2062.093836][T27938] das08/jr-ao [ 2062.097708][T27938] das08jr-16-ao [ 2062.111287][T27938] pc104-das08 [ 2062.114786][T27938] das08jr/16 [ 2062.118939][T27938] comedi: valid board names for das16m1 driver are: [ 2062.125772][T27993] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6139'. [ 2062.142144][T27938] das16m1 [ 2062.145264][T27938] comedi: valid board names for dac02 driver are: [ 2062.369922][T27938] dac02 [ 2062.372854][T27938] comedi: valid board names for rti802 driver are: [ 2062.478127][T28001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2062.488918][T28001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2062.615686][T27938] rti802 [ 2062.879491][T27938] comedi: valid board names for rti800 driver are: [ 2062.892812][T27938] rti800 [ 2062.895813][T27938] rti815 [ 2062.898765][T27938] comedi: valid board names for pcm3724 driver are: [ 2062.934636][T27938] pcm3724 [ 2062.937900][T27938] comedi: valid board names for pcl818 driver are: [ 2062.946815][T27938] pcl818l [ 2062.955123][T27938] pcl818h [ 2062.964532][T27938] pcl818hd [ 2062.971118][T27938] pcl818hg [ 2062.983510][T27938] pcl818 [ 2062.992905][T27938] pcl718 [ 2062.999756][T27938] pcm3718 [ 2063.003892][T27938] comedi: valid board names for pcl816 driver are: [ 2063.011739][T27938] pcl816 [ 2063.014770][T27938] pcl814b [ 2063.018996][T27938] comedi: valid board names for pcl812 driver are: [ 2063.025882][T27938] pcl812 [ 2063.028949][T27938] pcl812pg [ 2063.032202][T27938] acl8112pg [ 2063.046028][T27938] acl8112dg [ 2063.055928][T27938] acl8112hg [ 2063.091997][T27938] a821pgl [ 2063.095239][T27938] a821pglnda [ 2063.098665][T27938] a821pgh [ 2063.110784][T27938] a822pgl [ 2063.119058][T27938] a822pgh [ 2063.126457][T27938] a823pgl [ 2063.137622][T27938] a823pgh [ 2063.144863][T27938] pcl813 [ 2063.148010][T27938] pcl813b [ 2063.155543][T27938] acl8113 [ 2063.164940][T27938] iso813 [ 2063.173238][T27938] acl8216 [ 2063.185562][T27938] a826pg [ 2063.194836][T27938] comedi: valid board names for pcl730 driver are: [ 2063.221298][T27938] pcl730 [ 2063.233747][T27938] iso730 [ 2063.245173][T27938] acl7130 [ 2063.358897][T27938] pcm3730 [ 2063.362059][T27938] pcl725 [ 2063.419107][T28008] overlay: Unknown parameter 'smackfsdef' [ 2063.487678][T27938] p8r8dio [ 2063.616193][T28008] fuse: Unknown parameter 'fdÀ‰Ý«Â' [ 2063.648183][T27938] acl7225b [ 2063.675974][T27938] p16r16dio [ 2063.698352][T27938] pcl733 [ 2063.773525][T27938] pcl734 [ 2063.794177][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2063.810643][T27938] opmm-1616-xt [ 2063.827307][T27938] pearl-mm-p [ 2063.841401][T27938] ir104-pbf [ 2063.859481][T27938] comedi: valid board names for pcl726 driver are: [ 2063.992519][T27938] pcl726 [ 2064.005292][T27938] pcl727 [ 2064.030180][T27938] pcl728 [ 2064.050790][T27938] acl6126 [ 2064.072230][T27938] acl6128 [ 2064.105874][T27938] comedi: valid board names for pcl724 driver are: [ 2064.139448][T27938] pcl724 [ 2064.155425][T27938] pcl722 [ 2064.185724][T27938] pcl731 [ 2064.204202][T27938] acl7122 [ 2064.212458][T27938] acl7124 [ 2064.220196][T27938] pet48dio [ 2064.226484][T27938] pcmio48 [ 2064.232609][T27938] onyx-mm-dio [ 2064.239914][T27938] comedi: valid board names for pcl711 driver are: [ 2064.276849][T27938] pcl711 [ 2064.352299][T27938] pcl711b [ 2064.474292][T27938] acl8112hg [ 2064.490742][T27938] acl8112dg [ 2064.508621][T27938] comedi: valid board names for amplc_pc263 driver are: [ 2064.647774][T27938] pc263 [ 2064.651744][T27938] comedi: valid board names for amplc_pc236 driver are: [ 2064.696526][T27938] pc36at [ 2064.703939][T27938] comedi: valid board names for amplc_dio200 driver are: [ 2064.712324][T27938] pc212e [ 2064.715420][T27938] pc214e [ 2064.718482][T27938] pc215e [ 2064.749099][T27938] pc218e [ 2064.753263][T27938] pc272e [ 2064.756348][T27938] comedi: valid board names for comedi_parport driver are: [ 2064.763799][T27938] comedi_parport [ 2064.767682][T27938] comedi: valid board names for comedi_test driver are: [ 2064.774869][T27938] comedi_test [ 2064.809866][T27938] comedi: valid board names for comedi_bond driver are: [ 2064.858847][T27938] comedi_bond [ 2065.769468][ T44] usb 1-1: USB disconnect, device number 99 [ 2068.168822][T20967] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2068.235054][T28041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6152'. [ 2068.256194][T28041] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6152'. [ 2068.805381][T28046] netlink: 'syz.7.6154': attribute type 10 has an invalid length. [ 2069.039901][T28046] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2069.139075][ T1227] usb 6-1: USB disconnect, device number 72 [ 2069.145208][T20967] usb 2-1: device descriptor read/64, error -71 [ 2069.413011][T20967] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2070.684503][T28065] FAULT_INJECTION: forcing a failure. [ 2070.684503][T28065] name failslab, interval 1, probability 0, space 0, times 0 [ 2070.712264][T28065] CPU: 1 UID: 0 PID: 28065 Comm: syz.0.6160 Not tainted syzkaller #0 PREEMPT(full) [ 2070.712320][T28065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2070.712335][T28065] Call Trace: [ 2070.712344][T28065] [ 2070.712354][T28065] dump_stack_lvl+0x189/0x250 [ 2070.712388][T28065] ? __pfx____ratelimit+0x10/0x10 [ 2070.712423][T28065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2070.712450][T28065] ? __pfx__printk+0x10/0x10 [ 2070.712487][T28065] ? __pfx___might_resched+0x10/0x10 [ 2070.712525][T28065] should_fail_ex+0x414/0x560 [ 2070.712559][T28065] should_failslab+0xa8/0x100 [ 2070.712585][T28065] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2070.712619][T28065] ? hash_ipmark_create+0x387/0x1080 [ 2070.712654][T28065] hash_ipmark_create+0x387/0x1080 [ 2070.712693][T28065] ? ip_set_create+0x4a2/0x1940 [ 2070.712719][T28065] ? __pfx_hash_ipmark_create+0x10/0x10 [ 2070.712749][T28065] ip_set_create+0xa97/0x1940 [ 2070.712777][T28065] ? ip_set_create+0x4a2/0x1940 [ 2070.712816][T28065] ? __pfx_ip_set_create+0x10/0x10 [ 2070.712885][T28065] nfnetlink_rcv_msg+0xb4d/0x1130 [ 2070.712916][T28065] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 2070.712966][T28065] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2070.712992][T28065] ? kmem_cache_free+0x19d/0x690 [ 2070.713082][T28065] netlink_rcv_skb+0x208/0x470 [ 2070.713116][T28065] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2070.713147][T28065] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2070.713193][T28065] ? bpf_lsm_capable+0x9/0x20 [ 2070.713220][T28065] ? security_capable+0x7e/0x2e0 [ 2070.713253][T28065] nfnetlink_rcv+0x26a/0x2520 [ 2070.713285][T28065] ? __dev_queue_xmit+0x1d79/0x3b50 [ 2070.713314][T28065] ? kasan_save_track+0x3e/0x80 [ 2070.713344][T28065] ? __kasan_slab_alloc+0x6c/0x80 [ 2070.713362][T28065] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 2070.713412][T28065] ? __dev_queue_xmit+0x27b/0x3b50 [ 2070.713450][T28065] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2070.713477][T28065] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2070.713518][T28065] ? ref_tracker_free+0x63a/0x7d0 [ 2070.713557][T28065] ? __asan_memcpy+0x40/0x70 [ 2070.713583][T28065] ? __pfx_ref_tracker_free+0x10/0x10 [ 2070.713626][T28065] ? skb_clone+0x246/0x3a0 [ 2070.713661][T28065] ? __netlink_deliver_tap+0x807/0x850 [ 2070.713688][T28065] ? netlink_deliver_tap+0x2e/0x1b0 [ 2070.713721][T28065] ? netlink_deliver_tap+0x2e/0x1b0 [ 2070.713756][T28065] netlink_unicast+0x82f/0x9e0 [ 2070.713790][T28065] ? __pfx_netlink_unicast+0x10/0x10 [ 2070.713816][T28065] ? netlink_sendmsg+0x642/0xb30 [ 2070.713840][T28065] ? skb_put+0x11b/0x210 [ 2070.713871][T28065] netlink_sendmsg+0x805/0xb30 [ 2070.713908][T28065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2070.713939][T28065] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2070.713964][T28065] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2070.713982][T28065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2070.714027][T28065] __sock_sendmsg+0x21c/0x270 [ 2070.714055][T28065] ____sys_sendmsg+0x505/0x830 [ 2070.714082][T28065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2070.714112][T28065] ? import_iovec+0x74/0xa0 [ 2070.714135][T28065] ___sys_sendmsg+0x21f/0x2a0 [ 2070.714158][T28065] ? __pfx____sys_sendmsg+0x10/0x10 [ 2070.714216][T28065] ? __fget_files+0x2a/0x420 [ 2070.714236][T28065] ? __fget_files+0x3a0/0x420 [ 2070.714266][T28065] __x64_sys_sendmsg+0x19b/0x260 [ 2070.714289][T28065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2070.714327][T28065] ? __pfx_ksys_write+0x10/0x10 [ 2070.714361][T28065] ? do_syscall_64+0xbe/0xfa0 [ 2070.714393][T28065] do_syscall_64+0xfa/0xfa0 [ 2070.714421][T28065] ? lockdep_hardirqs_on+0x9c/0x150 [ 2070.714449][T28065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2070.714469][T28065] ? clear_bhb_loop+0x60/0xb0 [ 2070.714493][T28065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2070.714512][T28065] RIP: 0033:0x7fb33bf8eba9 [ 2070.714530][T28065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2070.714547][T28065] RSP: 002b:00007fb33cdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2070.714567][T28065] RAX: ffffffffffffffda RBX: 00007fb33c1d5fa0 RCX: 00007fb33bf8eba9 [ 2070.714581][T28065] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 2070.714593][T28065] RBP: 00007fb33cdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2070.714605][T28065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2070.714617][T28065] R13: 00007fb33c1d6038 R14: 00007fb33c1d5fa0 R15: 00007ffd744bb6e8 [ 2070.714651][T28065] [ 2072.081230][T28078] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6162'. [ 2073.443934][T10780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2073.467627][T10780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2073.482869][T10780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2073.504021][T10780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2073.512304][T10780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2073.564035][ T30] audit: type=1326 audit(2000001537.553:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28082 comm="syz.6.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6551b8eba9 code=0x7ffc0000 [ 2073.714031][T28090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6165'. [ 2073.778587][T28091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6165'. [ 2074.580432][ T30] audit: type=1326 audit(2000001537.563:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28082 comm="syz.6.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6551b8eba9 code=0x7ffc0000 [ 2074.604385][ T30] audit: type=1326 audit(2000001537.563:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28082 comm="syz.6.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6551b8eba9 code=0x7ffc0000 [ 2074.627873][ T30] audit: type=1326 audit(2000001537.563:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28082 comm="syz.6.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6551b8eba9 code=0x7ffc0000 [ 2074.659239][ T30] audit: type=1326 audit(2000001537.605:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28082 comm="syz.6.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f6551b8eba9 code=0x7ffc0000 [ 2074.724588][ T30] audit: type=1326 audit(2000001537.605:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28082 comm="syz.6.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6551b8eba9 code=0x7ffc0000 [ 2074.808069][ T30] audit: type=1326 audit(2000001537.605:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28082 comm="syz.6.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6551b8eba9 code=0x7ffc0000 [ 2074.850532][ T30] audit: type=1326 audit(2000001537.616:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28082 comm="syz.6.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6551b8eba9 code=0x7ffc0000 [ 2074.876286][ T30] audit: type=1326 audit(2000001537.616:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28082 comm="syz.6.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6551b8eba9 code=0x7ffc0000 [ 2074.970129][ T30] audit: type=1326 audit(2000001538.603:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28082 comm="syz.6.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6551b8eba9 code=0x7ffc0000 [ 2075.097890][T28086] lo speed is unknown, defaulting to 1000 [ 2075.542195][T10780] Bluetooth: hci3: command tx timeout [ 2075.699352][T28102] hfsplus: Bad value for 'umask' [ 2076.417729][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2076.428937][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2077.170795][T28086] ip6gretap0 speed is unknown, defaulting to 1000 [ 2077.513626][T25869] Bluetooth: hci3: command tx timeout [ 2077.713025][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2077.765775][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.531736][T28121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6173'. [ 2078.946021][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2079.055171][T28129] netlink: 'syz.7.6174': attribute type 21 has an invalid length. [ 2079.119417][T28130] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6174'. [ 2079.679561][T25869] Bluetooth: hci3: command 0x040f tx timeout [ 2079.707494][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2080.652699][T28137] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6177'. [ 2080.715685][T28139] netlink: 'syz.6.6177': attribute type 8 has an invalid length. [ 2081.755303][T10780] Bluetooth: hci3: command 0x040f tx timeout [ 2082.262829][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2082.274607][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.287406][T28143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6178'. [ 2082.398960][T28147] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2082.410794][T28147] EXT4-fs (loop0): unable to read superblock [ 2083.124603][ T940] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2083.330170][ T940] usb 1-1: config 0 has no interfaces? [ 2083.364716][ T940] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 2083.422134][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2083.473366][ T940] usb 1-1: Product: syz [ 2083.498500][ T940] usb 1-1: Manufacturer: syz [ 2083.528844][ T940] usb 1-1: SerialNumber: syz [ 2083.587401][ T940] usb 1-1: config 0 descriptor?? [ 2083.666374][T28161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2083.676651][T10780] Bluetooth: hci3: command 0x040f tx timeout [ 2083.713987][T28161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2083.722139][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2083.722156][ T30] audit: type=1326 audit(2000001548.251:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28144 comm="syz.7.6179" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f728ff8eba9 code=0x0 [ 2083.773320][T28161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2083.790674][T28161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2084.011777][ T36] vlan1: left promiscuous mode [ 2084.040913][ T36] veth1_to_bridge: left promiscuous mode [ 2084.073046][ T36] bridge0: port 3(vlan1) entered disabled state [ 2084.769355][ T36] bridge_slave_1: left allmulticast mode [ 2084.777953][ T36] bridge_slave_1: left promiscuous mode [ 2084.784283][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 2084.858896][ T36] bridge_slave_0: left allmulticast mode [ 2084.868878][ T36] bridge_slave_0: left promiscuous mode [ 2084.896607][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 2084.948671][T28174] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6185'. [ 2084.958186][T28174] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6185'. [ 2085.354855][ T1227] usb 1-1: USB disconnect, device number 100 [ 2085.758186][ T36] ip6gretap0 (unregistering): left promiscuous mode [ 2086.414077][ T36] gretap0 (unregistering): left promiscuous mode [ 2086.721601][T28189] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6189'. [ 2086.732409][T28189] netlink: 3 bytes leftover after parsing attributes in process `syz.7.6189'. [ 2086.829581][T28189] netlink: 200 bytes leftover after parsing attributes in process `syz.7.6189'. [ 2086.926758][ T36] team0: Port device vxlan1 removed [ 2086.975377][ T36] bridge0 (unregistering): left promiscuous mode [ 2087.023530][T28194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6190'. [ 2087.044042][T28194] netlink: 'syz.0.6190': attribute type 8 has an invalid length. [ 2087.101318][ T36] bridge0 (unregistering): left allmulticast mode [ 2087.863440][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2087.886132][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2087.904396][ T36] bond0 (unregistering): (slave team0): Releasing backup interface [ 2087.938255][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2087.958533][ T36] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2087.976281][ T36] bond0 (unregistering): Released all slaves [ 2088.009243][T28169] veth0_to_team: entered promiscuous mode [ 2088.015660][T28169] veth0_to_team: entered allmulticast mode [ 2088.860461][T28086] chnl_net:caif_netlink_parms(): no params data found [ 2088.933679][ T36] tipc: Left network mode [ 2089.151444][ T36] IPVS: stopping backup sync thread 27447 ... [ 2089.576147][ T24] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 2089.688184][ T44] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2089.801146][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 2089.836878][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2089.850256][ T44] usb 2-1: device descriptor read/64, error -71 [ 2089.867642][T28086] bridge0: port 1(bridge_slave_0) entered blocking state [ 2089.921407][T28086] bridge0: port 1(bridge_slave_0) entered disabled state [ 2089.951449][ T24] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2090.012141][T28086] bridge_slave_0: entered allmulticast mode [ 2090.091322][T28086] bridge_slave_0: entered promiscuous mode [ 2090.101898][T28086] bridge0: port 2(bridge_slave_1) entered blocking state [ 2090.109174][T28086] bridge0: port 2(bridge_slave_1) entered disabled state [ 2090.125329][T28086] bridge_slave_1: entered allmulticast mode [ 2090.142050][T28086] bridge_slave_1: entered promiscuous mode [ 2090.250433][ T44] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2090.263894][ T24] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2090.300568][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2090.326785][ T24] usb 7-1: Product: syz [ 2090.330988][ T24] usb 7-1: Manufacturer: syz [ 2090.341627][ T24] usb 7-1: SerialNumber: syz [ 2090.357136][ T24] usb 7-1: config 0 descriptor?? [ 2090.386683][T28224] fuse: Bad value for 'fd' [ 2090.391348][ T44] usb 2-1: device descriptor read/64, error -71 [ 2090.501734][T28086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2090.507918][ T44] usb usb2-port1: attempt power cycle [ 2090.633958][T28086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2090.791450][T28233] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6200'. [ 2090.817633][T28233] netlink: 'syz.7.6200': attribute type 8 has an invalid length. [ 2091.005353][ T44] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2091.043174][ T36] hsr_slave_0: left promiscuous mode [ 2091.051729][ T44] usb 2-1: device descriptor read/8, error -71 [ 2091.066726][ T36] hsr_slave_1: left promiscuous mode [ 2091.092486][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2091.115300][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2091.137777][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2091.192200][T15307] usb 7-1: USB disconnect, device number 74 [ 2091.208860][T28240] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6201'. [ 2091.217365][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2091.341124][ T36] veth1_macvtap: left promiscuous mode [ 2091.356183][ T36] veth0_macvtap: left promiscuous mode [ 2091.383675][ T44] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2091.431439][ T44] usb 2-1: device descriptor read/8, error -71 [ 2091.658740][ T44] usb usb2-port1: unable to enumerate USB device [ 2092.658187][T28247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2095.034390][T28272] fuse: Bad value for 'fd' [ 2095.135012][T28275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6210'. [ 2095.203481][T28276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6210'. [ 2096.307693][ T36] team0 (unregistering): Port device team_slave_1 removed [ 2096.409604][ T36] team0 (unregistering): Port device team_slave_0 removed [ 2097.266142][T28288] tipc: Enabled bearer , priority 0 [ 2097.289393][T28289] syzkaller0: entered promiscuous mode [ 2097.345142][T28289] syzkaller0: entered allmulticast mode [ 2097.385709][T28086] team0: Port device team_slave_0 added [ 2097.430573][T28086] team0: Port device team_slave_1 added [ 2098.588532][T15307] tipc: Node number set to 337125570 [ 2098.675269][T28296] tipc: Resetting bearer [ 2099.026245][T28296] tipc: Disabling bearer [ 2099.633794][T28086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2099.652232][T28086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2099.915514][T28086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2100.699681][T28086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2100.704320][T28326] 9pnet_fd: Insufficient options for proto=fd [ 2100.706910][T28086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2100.835177][T28086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2101.528720][T28331] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6223'. [ 2101.538269][T28331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6223'. [ 2102.122880][T28086] hsr_slave_0: entered promiscuous mode [ 2102.153810][T28086] hsr_slave_1: entered promiscuous mode [ 2102.203031][T28086] debugfs: 'hsr0' already exists in 'hsr' [ 2102.246675][T28086] Cannot create hsr debugfs directory [ 2102.323175][T28337] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6224'. [ 2102.555200][T28337] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6224'. [ 2103.838360][ T36] IPVS: stop unused estimator thread 0... [ 2105.404426][T28356] erofs (device loop6): cannot find valid erofs superblock [ 2106.356373][ T1227] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2106.576365][ T1227] usb 2-1: Using ep0 maxpacket: 16 [ 2106.629158][ T1227] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2106.674041][ T1227] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2106.709076][ T1227] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2106.806448][ T1227] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2106.841301][ T1227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.874729][ T1227] usb 2-1: Manufacturer: ã° [ 2106.923785][ T1227] usb 2-1: SerialNumber: ä°Š [ 2107.148251][ T44] usb 1-1: new low-speed USB device number 101 using dummy_hcd [ 2107.188757][ T1227] usb 2-1: 0:2 : does not exist [ 2107.293490][ T1227] usb 2-1: USB disconnect, device number 59 [ 2107.316773][T28086] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2107.333449][ T44] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 2107.346203][T28086] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2107.361169][ T44] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 2107.379944][T28086] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2107.389534][ T44] usb 1-1: config 0 has no interface number 0 [ 2107.469791][ T44] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 2107.528509][T28086] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2107.554934][ T44] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2107.572722][ T44] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2107.585137][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2107.654063][ T44] usb 1-1: config 0 descriptor?? [ 2108.106802][T28086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2109.337422][T28086] 8021q: adding VLAN 0 to HW filter on device team0 [ 2109.467480][T14202] bridge0: port 1(bridge_slave_0) entered blocking state [ 2109.474721][T14202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2109.567871][T21059] bridge0: port 2(bridge_slave_1) entered blocking state [ 2109.575146][T21059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2109.853207][T28398] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6237'. [ 2109.879312][T28398] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6237'. [ 2110.752338][T28086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2111.105104][ T44] usb 1-1: USB disconnect, device number 101 [ 2113.465863][T28414] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2113.475415][T28414] MINIX-fs: unable to read superblock [ 2114.101940][T28407] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2114.111437][T28407] MINIX-fs: unable to read superblock [ 2115.223145][T28086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2115.539670][ T1227] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 2115.575844][ T1227] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2116.359265][T28443] squashfs: Unknown parameter 'smackfshat' [ 2117.175018][T28431] hid-generic 0000:0000:0000.0026: pid 28431 passed too short report [ 2117.298283][T28448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6245'. [ 2117.444560][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2117.845132][T28086] veth0_vlan: entered promiscuous mode [ 2117.931753][T28086] veth1_vlan: entered promiscuous mode [ 2118.215901][T28452] input: syz0 as /devices/virtual/input/input62 [ 2118.217827][T28454] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2118.682119][T28086] veth0_macvtap: entered promiscuous mode [ 2118.695669][T28086] veth1_macvtap: entered promiscuous mode [ 2119.509362][T28086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2119.527761][T28086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2119.761208][T28260] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2119.822034][T28260] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2119.867222][T28260] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2119.952246][T28260] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2120.162907][T28260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2120.203164][T28260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2120.420329][ T6454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2120.447301][ T6454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2122.356303][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2122.359570][T28492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6259'. [ 2122.413666][T28491] binder: 28486:28491 ioctl c0306201 0 returned -14 [ 2122.597514][T28492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2125.819444][T28509] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6263'. [ 2129.149346][T28534] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2129.203133][T28534] MINIX-fs: unable to read superblock [ 2131.848496][ T30] audit: type=1326 audit(2000001598.757:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28544 comm="syz.1.6274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb93698eba9 code=0x0 [ 2132.210220][T28561] autofs: Unknown parameter 'lÆ' [ 2132.281369][T28560] binder: 28554:28560 ioctl c0306201 0 returned -14 [ 2132.884451][T28570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6279'. [ 2133.807402][T28569] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6280'. [ 2134.756107][T28569] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2134.833417][T28575] bond3: (slave batadv1): Opening slave failed [ 2134.928674][T28574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6282'. [ 2134.937798][T28574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6282'. [ 2135.112404][T28582] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6284'. [ 2135.180292][T28582] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2135.181276][ T44] IPVS: starting estimator thread 0... [ 2135.285510][T28584] IPVS: using max 26 ests per chain, 62400 per kthread [ 2135.525331][T25869] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 2135.525440][T25869] Bluetooth: hci5: adv larger than maximum supported [ 2135.532639][T25869] Bluetooth: hci5: Malformed LE Event: 0x0d [ 2135.567230][T28587] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2135.599762][T28585] sctp: [Deprecated]: syz.6.6283 (pid 28585) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2135.599762][T28585] Use struct sctp_sack_info instead [ 2135.623079][T28587] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2135.632753][T28587] FAT-fs (loop1): unable to read boot sector [ 2138.677736][T28613] vlan0: entered allmulticast mode [ 2138.683015][T28613] mac80211_hwsim hwsim42 wlan1: entered allmulticast mode [ 2139.010083][T25931] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 2139.276679][T25931] usb 2-1: device descriptor read/64, error -71 [ 2139.610243][ T44] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2140.229633][T25931] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 2140.477849][T25931] usb 2-1: device descriptor read/64, error -71 [ 2140.503617][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 2140.528128][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2140.577376][ T44] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2140.582433][T25931] usb usb2-port1: attempt power cycle [ 2140.596632][ T44] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2140.813550][ T44] usb 6-1: Product: syz [ 2140.817869][ T44] usb 6-1: Manufacturer: syz [ 2140.823985][ T44] usb 6-1: SerialNumber: syz [ 2140.837880][ T44] usb 6-1: config 0 descriptor?? [ 2141.498906][T25931] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 2141.563866][T25931] usb 2-1: device descriptor read/8, error -71 [ 2141.662872][T28651] binder: 28644:28651 ioctl c0306201 0 returned -14 [ 2142.861669][ T1227] usb 6-1: USB disconnect, device number 73 [ 2143.647527][T28680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6311'. [ 2147.811345][T28708] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6317'. [ 2148.174632][ T1227] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2148.344706][ T1227] usb 2-1: Using ep0 maxpacket: 8 [ 2148.372976][ T1227] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 2148.508394][ T1227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2148.670997][ T1227] usb 2-1: Product: syz [ 2148.753478][ T1227] usb 2-1: Manufacturer: syz [ 2148.839434][ T1227] usb 2-1: SerialNumber: syz [ 2148.874151][ T1227] usb 2-1: config 0 descriptor?? [ 2149.721255][ T1227] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2149.747362][ T1227] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 2149.807697][ T1227] usb 2-1: USB disconnect, device number 64 [ 2150.214590][T28714] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 2150.227887][T28714] bcachefs (/dev/loop6): error reading default superblock: IO error: -5 [ 2150.236730][T28714] I/O error, dev loop6, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 2150.246743][T28714] bcachefs (/dev/loop6): error reading superblock: IO error: -5 [ 2150.254743][T28714] bcachefs: bch2_fs_get_tree() error: EIO [ 2150.259149][T28715] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 2150.283418][T28715] bcachefs (/dev/loop5): error reading default superblock: IO error: -5 [ 2150.292168][T28715] I/O error, dev loop5, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 2150.364447][T28715] bcachefs (/dev/loop5): error reading superblock: IO error: -5 [ 2150.388146][T28715] bcachefs: bch2_fs_get_tree() error: EIO [ 2152.287348][T28752] fuse: Unknown parameter 'groupWid' [ 2154.980044][T28758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6332'. [ 2155.284310][T28769] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 3 [ 2155.294225][T28769] EXT4-fs (loop5): unable to read superblock [ 2155.403766][ T940] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 2155.442057][T28772] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6337'. [ 2155.699811][T28774] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6337'. [ 2155.717303][T28774] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6337'. [ 2155.836209][T28776] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 2155.848925][T28776] SQUASHFS error: Failed to read block 0x0: -5 [ 2155.856475][T28776] unable to read squashfs_super_block [ 2156.124105][ T940] usb 1-1: Using ep0 maxpacket: 32 [ 2156.175480][T28774] netlink: 108 bytes leftover after parsing attributes in process `syz.6.6337'. [ 2156.365901][ T940] usb 1-1: config 0 has an invalid interface number: 53 but max is 0 [ 2156.374733][ T940] usb 1-1: config 0 has no interface number 0 [ 2156.382161][ T940] usb 1-1: config 0 interface 53 has no altsetting 0 [ 2156.395936][T28774] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6337'. [ 2156.441688][T28774] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6337'. [ 2156.469255][ T940] usb 1-1: New USB device found, idVendor=0c45, idProduct=62b3, bcdDevice=17.c6 [ 2156.478417][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2156.479705][T28774] netlink: 108 bytes leftover after parsing attributes in process `syz.6.6337'. [ 2156.486497][ T940] usb 1-1: Product: syz [ 2156.500362][ T940] usb 1-1: Manufacturer: syz [ 2156.504978][ T940] usb 1-1: SerialNumber: syz [ 2156.622579][T28774] netlink: 84 bytes leftover after parsing attributes in process `syz.6.6337'. [ 2156.681402][T28782] netlink: 'syz.1.6339': attribute type 10 has an invalid length. [ 2156.689263][T28782] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6339'. [ 2156.705825][ T940] usb 1-1: config 0 descriptor?? [ 2156.796402][T28782] team0: entered promiscuous mode [ 2156.801603][T28782] team_slave_0: entered promiscuous mode [ 2156.809874][T28782] team_slave_1: entered promiscuous mode [ 2156.822861][T28782] team0: entered allmulticast mode [ 2156.828177][T28782] team_slave_0: entered allmulticast mode [ 2156.834103][T28782] team_slave_1: entered allmulticast mode [ 2156.860263][T28782] 8021q: adding VLAN 0 to HW filter on device team0 [ 2156.893033][T28782] bridge0: port 3(team0) entered blocking state [ 2156.900548][T28782] bridge0: port 3(team0) entered disabled state [ 2157.245940][T28782] /dev/nullb0: Can't open blockdev [ 2157.550555][ T940] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62b3 [ 2157.585252][ T940] gspca_sn9c20x: Write register 1000 failed -71 [ 2158.210447][ T940] gspca_sn9c20x: Device initialization failed [ 2158.268783][T28788] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2158.279132][T28788] MINIX-fs: unable to read superblock [ 2158.290154][ T940] gspca_sn9c20x 1-1:0.53: probe with driver gspca_sn9c20x failed with error -71 [ 2158.430878][ T940] usb 1-1: USB disconnect, device number 102 [ 2159.612795][T28802] i2c i2c-0: Invalid block write size 34 [ 2160.413965][ T1227] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 2160.604071][ T1227] usb 1-1: Using ep0 maxpacket: 16 [ 2160.629601][ T1227] usb 1-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 2160.648996][ T1227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2160.670833][ T1227] usb 1-1: Product: syz [ 2160.675099][ T1227] usb 1-1: Manufacturer: syz [ 2160.684086][ T1227] usb 1-1: SerialNumber: syz [ 2160.694030][ T1227] usb 1-1: config 0 descriptor?? [ 2160.711336][ T1227] uvcvideo 1-1:0.0: Found UVC 0.00 device syz (046d:0721) [ 2160.735048][ T1227] uvcvideo 1-1:0.0: No valid video chain found. [ 2161.718507][ T1227] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 2161.818723][T28832] fuse: Unknown parameter '00000000000000000006ÿ' [ 2161.911856][ T1227] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2161.952373][ T1227] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2161.977299][ T1227] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2162.166837][ T1227] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2162.190621][ T1227] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.231945][ T1227] usb 7-1: config 0 descriptor?? [ 2162.642499][T28823] netlink: 192 bytes leftover after parsing attributes in process `syz.6.6353'. [ 2162.654241][T28823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2162.664664][T28823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2162.680218][ T1227] usbhid 7-1:0.0: can't add hid device: -71 [ 2162.686468][ T1227] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2162.699170][ T1227] usb 7-1: USB disconnect, device number 75 [ 2163.112715][T28839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6356'. [ 2164.103415][T20967] usb 1-1: USB disconnect, device number 103 [ 2165.977373][T15307] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 2166.732012][T15307] usb 7-1: Using ep0 maxpacket: 8 [ 2167.278397][T15307] usb 7-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 2167.326743][T15307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2167.591145][T15307] usb 7-1: Product: syz [ 2167.595420][T15307] usb 7-1: Manufacturer: syz [ 2167.715364][T15307] usb 7-1: SerialNumber: syz [ 2167.761541][T15307] usb 7-1: config 0 descriptor?? [ 2167.804436][T15307] usb 7-1: can't set config #0, error -71 [ 2167.841009][T15307] usb 7-1: USB disconnect, device number 76 [ 2168.349454][T28885] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2168.359120][T28885] (syz.6.6369,28885,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 2168.366787][T28885] (syz.6.6369,28885,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 2168.374296][T28885] (syz.6.6369,28885,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 2168.383045][T28885] (syz.6.6369,28885,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 2170.858061][T28895] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2170.958775][T28895] EXT4-fs (loop0): unable to read superblock [ 2171.086078][T28902] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6373'. [ 2171.136077][T28902] netlink: 200 bytes leftover after parsing attributes in process `syz.7.6373'. [ 2171.271426][T28907] netlink: 'syz.6.6376': attribute type 3 has an invalid length. [ 2172.037031][T25869] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 2172.046991][T25869] CPU: 1 UID: 0 PID: 25869 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 2172.047018][T25869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2172.047031][T25869] Workqueue: hci4 hci_rx_work [ 2172.047064][T25869] Call Trace: [ 2172.047073][T25869] [ 2172.047082][T25869] dump_stack_lvl+0x189/0x250 [ 2172.047113][T25869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2172.047139][T25869] ? __pfx__printk+0x10/0x10 [ 2172.047174][T25869] ? kernfs_path_from_node+0x250/0x290 [ 2172.047199][T25869] ? kernfs_path_from_node+0x2f/0x290 [ 2172.047230][T25869] sysfs_create_dir_ns+0x259/0x280 [ 2172.047258][T25869] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2172.047286][T25869] ? do_raw_spin_unlock+0x122/0x240 [ 2172.047315][T25869] kobject_add_internal+0x59f/0xb40 [ 2172.047346][T25869] kobject_add+0x155/0x220 [ 2172.047371][T25869] ? __pfx_kobject_add+0x10/0x10 [ 2172.047392][T25869] ? _raw_spin_unlock+0x28/0x50 [ 2172.047422][T25869] ? get_device_parent+0x366/0x3a0 [ 2172.047451][T25869] device_add+0x408/0xb50 [ 2172.047480][T25869] hci_conn_add_sysfs+0xd5/0x1e0 [ 2172.047507][T25869] le_conn_complete_evt+0xc3a/0x1220 [ 2172.047552][T25869] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2172.047584][T25869] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2172.047601][T25869] ? __asan_memcpy+0x40/0x70 [ 2172.047634][T25869] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2172.047652][T25869] ? skb_pull_data+0xfb/0x200 [ 2172.047680][T25869] hci_le_conn_complete_evt+0x187/0x450 [ 2172.047719][T25869] hci_event_packet+0x78f/0x1200 [ 2172.047749][T25869] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2172.047781][T25869] ? __pfx_hci_event_packet+0x10/0x10 [ 2172.047810][T25869] ? kcov_remote_start+0x4d3/0x7f0 [ 2172.047835][T25869] ? lockdep_hardirqs_on+0x90/0x150 [ 2172.047868][T25869] ? hci_send_to_monitor+0xe2/0x570 [ 2172.047898][T25869] hci_rx_work+0x46a/0xe80 [ 2172.047933][T25869] ? process_scheduled_works+0x9ef/0x17b0 [ 2172.047969][T25869] process_scheduled_works+0xae1/0x17b0 [ 2172.048030][T25869] ? __pfx_process_scheduled_works+0x10/0x10 [ 2172.048079][T25869] worker_thread+0x8a0/0xda0 [ 2172.048123][T25869] ? __kthread_parkme+0x7b/0x200 [ 2172.048154][T25869] kthread+0x711/0x8a0 [ 2172.048179][T25869] ? __pfx_worker_thread+0x10/0x10 [ 2172.048208][T25869] ? __pfx_kthread+0x10/0x10 [ 2172.048233][T25869] ? _raw_spin_unlock_irq+0x23/0x50 [ 2172.048260][T25869] ? lockdep_hardirqs_on+0x9c/0x150 [ 2172.048286][T25869] ? __pfx_kthread+0x10/0x10 [ 2172.048310][T25869] ret_from_fork+0x4bc/0x870 [ 2172.048341][T25869] ? __pfx_ret_from_fork+0x10/0x10 [ 2172.048378][T25869] ? __switch_to_asm+0x39/0x70 [ 2172.048402][T25869] ? __switch_to_asm+0x33/0x70 [ 2172.048426][T25869] ? __pfx_kthread+0x10/0x10 [ 2172.048449][T25869] ret_from_fork_asm+0x1a/0x30 [ 2172.048495][T25869] [ 2172.048584][T25869] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2172.359830][T25869] Bluetooth: hci4: failed to register connection device [ 2173.945253][T28941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6384'. [ 2174.403781][T28945] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6384'. [ 2174.477446][T28945] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6384'. [ 2175.460552][T28959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2175.650947][T28963] .: renamed from bond0 (while UP) [ 2175.673858][ T24] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2175.723743][T28964] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6394'. [ 2175.846000][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 2175.885822][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2175.920006][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2175.998576][ T24] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 2176.055868][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2176.064338][ T24] usb 1-1: Product: syz [ 2176.078665][ T24] usb 1-1: Manufacturer: syz [ 2176.092863][ T24] usb 1-1: SerialNumber: syz [ 2176.129470][ T24] usb 1-1: config 0 descriptor?? [ 2176.557795][ T24] usb 1-1: USB disconnect, device number 104 [ 2177.502011][T14202] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 2177.531549][T28968] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input63 [ 2177.557909][T14202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2177.593040][T14202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2177.791002][T20967] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2177.978712][T20967] usb 6-1: device descriptor read/64, error -71 [ 2178.137263][T28996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6403'. [ 2179.046059][T20967] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2179.181799][T29004] FAULT_INJECTION: forcing a failure. [ 2179.181799][T29004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2179.206217][T29004] CPU: 0 UID: 0 PID: 29004 Comm: syz.6.6408 Not tainted syzkaller #0 PREEMPT(full) [ 2179.206244][T29004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2179.206258][T29004] Call Trace: [ 2179.206266][T29004] [ 2179.206275][T29004] dump_stack_lvl+0x189/0x250 [ 2179.206305][T29004] ? __pfx____ratelimit+0x10/0x10 [ 2179.206338][T29004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2179.206362][T29004] ? __pfx__printk+0x10/0x10 [ 2179.206391][T29004] ? __might_fault+0xb0/0x130 [ 2179.206434][T29004] should_fail_ex+0x414/0x560 [ 2179.206464][T29004] _copy_from_user+0x2d/0xb0 [ 2179.206486][T29004] ___sys_sendmsg+0x158/0x2a0 [ 2179.206509][T29004] ? __pfx____sys_sendmsg+0x10/0x10 [ 2179.206567][T29004] ? __fget_files+0x2a/0x420 [ 2179.206587][T29004] ? __fget_files+0x3a0/0x420 [ 2179.206625][T29004] __x64_sys_sendmsg+0x19b/0x260 [ 2179.206649][T29004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2179.206681][T29004] ? __pfx_ksys_write+0x10/0x10 [ 2179.206715][T29004] ? do_syscall_64+0xbe/0xfa0 [ 2179.206750][T29004] do_syscall_64+0xfa/0xfa0 [ 2179.206778][T29004] ? lockdep_hardirqs_on+0x9c/0x150 [ 2179.206808][T29004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2179.206827][T29004] ? clear_bhb_loop+0x60/0xb0 [ 2179.206852][T29004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2179.206871][T29004] RIP: 0033:0x7f6551b8eba9 [ 2179.206889][T29004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2179.206905][T29004] RSP: 002b:00007f6552aad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2179.206926][T29004] RAX: ffffffffffffffda RBX: 00007f6551dd5fa0 RCX: 00007f6551b8eba9 [ 2179.206942][T29004] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 2179.206955][T29004] RBP: 00007f6552aad090 R08: 0000000000000000 R09: 0000000000000000 [ 2179.206968][T29004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2179.206980][T29004] R13: 00007f6551dd6038 R14: 00007f6551dd5fa0 R15: 00007ffde3e02a68 [ 2179.207015][T29004] [ 2179.703244][T20967] usb 6-1: device descriptor read/64, error -71 [ 2179.818831][T29018] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 2180.400041][T20967] usb usb6-port1: attempt power cycle [ 2180.745357][T29022] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2180.755372][T29022] EXT4-fs (loop1): unable to read superblock [ 2180.842414][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2183.684704][ T940] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 2183.703318][T20967] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 2183.866381][ T940] usb 7-1: device descriptor read/64, error -71 [ 2183.910565][T20967] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2183.926243][T20967] usb 1-1: config 2 has an invalid interface number: 34 but max is 2 [ 2183.940951][T20967] usb 1-1: config 2 has an invalid interface number: 6 but max is 2 [ 2183.971867][T20967] usb 1-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 2184.002101][T20967] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2184.047329][T20967] usb 1-1: config 2 has 4 interfaces, different from the descriptor's value: 3 [ 2184.129780][T20967] usb 1-1: config 2 has no interface number 0 [ 2184.151057][T20967] usb 1-1: config 2 has no interface number 3 [ 2184.189284][ T940] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 2184.189408][T20967] usb 1-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 2184.255860][T20967] usb 1-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 2184.312899][T20967] usb 1-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2184.360543][T20967] usb 1-1: config 2 interface 6 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2184.381839][ T940] usb 7-1: device descriptor read/64, error -71 [ 2184.417874][T20967] usb 1-1: config 2 interface 1 has no altsetting 0 [ 2184.453936][T20967] usb 1-1: config 2 interface 34 has no altsetting 0 [ 2184.490062][T20967] usb 1-1: config 2 interface 6 has no altsetting 0 [ 2184.513877][ T940] usb usb7-port1: attempt power cycle [ 2184.525888][T20967] usb 1-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 2184.637201][T20967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.645302][T20967] usb 1-1: Product: syz [ 2184.989389][T29055] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6422'. [ 2184.998995][T29055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6422'. [ 2185.075146][T20967] usb 1-1: Manufacturer: syz [ 2185.079938][T20967] usb 1-1: SerialNumber: syz [ 2185.124128][T29057] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2185.336860][T29057] FAT-fs (loop5): unable to read boot sector [ 2185.571083][T29052] netlink: 14212 bytes leftover after parsing attributes in process `syz.0.6420'. [ 2185.707256][T29060] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6423'. [ 2186.057703][T29068] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 2186.064371][T29068] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2186.404827][T29066] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2186.440389][T29068] vhci_hcd vhci_hcd.0: Device attached [ 2186.476430][T29066] EXT4-fs (loop6): unable to read superblock [ 2186.623680][ T940] vhci_hcd: vhci_device speed not set [ 2186.634641][T29076] netlink: 'syz.1.6427': attribute type 1 has an invalid length. [ 2186.685461][ T940] usb 43-1: new full-speed USB device number 5 using vhci_hcd [ 2186.812247][T29076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2186.859225][ T1227] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2186.904529][T20967] usb 1-1: selecting invalid altsetting 0 [ 2186.971460][T20967] hub 1-1:2.6: Invalid hub with more than one config or interface [ 2186.979533][T20967] hub 1-1:2.6: probe with driver hub failed with error -22 [ 2187.025671][ T1227] usb 6-1: device descriptor read/64, error -71 [ 2187.050499][T20967] usb 1-1: USB disconnect, device number 105 [ 2187.125090][T29084] ptrace attach of "./syz-executor exec"[25865] was attempted by "  ‹  /dev/cpu/#/msr Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ"[29084] [ 2187.684600][ T1227] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2187.884955][ T1227] usb 6-1: device descriptor read/64, error -71 [ 2188.000180][ T1227] usb usb6-port1: attempt power cycle [ 2188.170307][T29083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6428'. [ 2188.342621][ T1227] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2188.381196][ T1227] usb 6-1: device descriptor read/8, error -71 [ 2188.765247][ T1227] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2188.922202][T29069] vhci_hcd: connection reset by peer [ 2188.970445][T28260] vhci_hcd: stop threads [ 2188.978566][ T1227] usb 6-1: device descriptor read/8, error -71 [ 2189.006676][T28260] vhci_hcd: release socket [ 2189.075080][T28260] vhci_hcd: disconnect device [ 2189.191657][ T1227] usb usb6-port1: unable to enumerate USB device [ 2190.044663][T29106] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6435'. [ 2191.592460][ T940] vhci_hcd: vhci_device speed not set [ 2191.775650][T29125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6441'. [ 2191.837150][T29128] usb usb8: usbfs: process 29128 (syz.5.6442) did not claim interface 0 before use [ 2192.602368][T29139] erofs (device loop0): cannot find valid erofs superblock [ 2192.754132][T29139] EXT4-fs: Ignoring removed oldalloc option [ 2192.768588][T29139] journal_path: Non-blockdev passed as './file1' [ 2192.831143][T29139] EXT4-fs: error: could not find journal device path [ 2194.503551][T29152] overlayfs: failed to clone upperpath [ 2196.298945][T29161] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6450'. [ 2196.308486][T29161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6450'. [ 2199.963413][T25780] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2200.116211][T25780] usb 6-1: Using ep0 maxpacket: 16 [ 2200.130139][T25780] usb 6-1: config 28 has too many interfaces: 242, using maximum allowed: 32 [ 2200.141237][T25780] usb 6-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 2200.193232][T25780] usb 6-1: config 28 has 1 interface, different from the descriptor's value: 242 [ 2200.246582][T25780] usb 6-1: config 28 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2200.298224][T25780] usb 6-1: config 28 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2200.350509][T25780] usb 6-1: config 28 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2200.385051][T25780] usb 6-1: config 28 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2200.434280][T25780] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2200.469697][T25780] usb 6-1: New USB device strings: Mfr=4, Product=64, SerialNumber=0 [ 2200.478203][T25780] usb 6-1: Product: syz [ 2200.483178][T25780] usb 6-1: Manufacturer: syz [ 2200.744538][ T1227] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2200.949581][ T1227] usb 2-1: Using ep0 maxpacket: 8 [ 2200.984533][T29201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6464'. [ 2200.999299][ T1227] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2201.053146][ T1227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2201.087313][ T1227] usb 2-1: Product: syz [ 2201.121388][ T1227] usb 2-1: Manufacturer: syz [ 2201.131885][ T1227] usb 2-1: SerialNumber: syz [ 2201.153047][ T1227] usb 2-1: config 0 descriptor?? [ 2201.178562][ T1227] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2201.680319][T29193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2201.704776][T29212] binder: 29208:29212 ioctl c0306201 0 returned -14 [ 2201.891794][T29193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2201.957578][ T1227] gspca_sonixj: reg_r err -110 [ 2201.975208][ T1227] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 2203.421104][T25780] rc_core: IR keymap rc-hauppauge not found [ 2203.427176][T25780] Registered IR keymap rc-empty [ 2203.478746][T25780] mceusb 6-1:28.0: Error: mce write submit urb error = -90 [ 2203.526447][T25780] mceusb 6-1:28.0: Error: mce write submit urb error = -90 [ 2203.571990][ T940] usb 2-1: USB disconnect, device number 65 [ 2203.582093][T29233] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6471'. [ 2203.591159][T29233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6471'. [ 2203.641920][T25780] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:28.0/rc/rc0 [ 2203.791690][T25780] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:28.0/rc/rc0/input64 [ 2203.965498][T25780] mceusb 6-1:28.0: Error: mce write submit urb error = -90 [ 2204.535539][T25780] mceusb 6-1:28.0: Error: mce write submit urb error = -90 [ 2204.634036][T25780] mceusb 6-1:28.0: Error: mce write submit urb error = -90 [ 2204.707435][T25780] mceusb 6-1:28.0: Error: mce write submit urb error = -90 [ 2204.780544][T29244] iso9660: Unknown parameter '0xffffffffffffffff‘ŠÌʼç<¶<ák[Ï(:µÞ—öc6‘Ýz¶ªçºi9§î„Fª'Ž¹-éOHBÝnsNɉʨƒ†cŠÇ22NÝ*[ÀížæÓ¾èòQ”ÝG§xŠ]& ¬Ñûiø"À?’ [ 2204.780544][T29244] „¹Ìëh¢`õl¥±ô' [ 2204.802483][T25780] mceusb 6-1:28.0: Error: mce write submit urb error = -90 [ 2204.859906][T25780] mceusb 6-1:28.0: Error: mce write submit urb error = -90 [ 2204.906665][T25780] mceusb 6-1:28.0: Error: mce write submit urb error = -90 [ 2204.945624][T25780] mceusb 6-1:28.0: Error: mce write submit urb error = -90 [ 2205.126322][T25780] mceusb 6-1:28.0: Error: mce write submit urb error = -90 [ 2205.144109][T29250] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6476'. [ 2205.153236][T29250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6476'. [ 2205.221682][T25780] mceusb 6-1:28.0: Error: mce write submit urb error = -90 [ 2205.770015][T25780] mceusb 6-1:28.0: Registered with mce emulator interface version 1 [ 2205.838748][T25780] mceusb 6-1:28.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2205.917027][T29252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6474'. [ 2205.926601][T29252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6474'. [ 2206.067222][T25780] usb 6-1: USB disconnect, device number 81 [ 2206.919158][T29263] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2206.974250][T29263] EXT4-fs (loop0): unable to read superblock [ 2208.286827][T29281] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6483'. [ 2208.974879][T29278] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6484'. [ 2208.984416][T29278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6484'. [ 2210.153252][T29294] ubi: mtd0 is already attached to ubi0 [ 2210.393615][T25780] usb 7-1: new full-speed USB device number 80 using dummy_hcd [ 2210.557902][T25780] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2210.587065][T25780] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 2210.637162][T25780] usb 7-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 2210.658532][T25780] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.679238][T29290] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2210.692413][T29290] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2210.723164][T25780] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2210.977739][T26034] usb 7-1: USB disconnect, device number 80 [ 2212.084970][T29314] ntfs3: Unknown parameter '`iscard' [ 2212.126079][T29314] sp0: Synchronizing with TNC [ 2212.142792][T29314] sp0: Found TNC [ 2213.024758][T29329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6498'. [ 2213.038603][T29329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6498'. [ 2213.477262][T15307] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 2213.670651][T15307] usb 7-1: Using ep0 maxpacket: 16 [ 2214.148797][T15307] usb 7-1: config 28 has too many interfaces: 242, using maximum allowed: 32 [ 2214.286350][T15307] usb 7-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 2214.345572][T15307] usb 7-1: config 28 has 1 interface, different from the descriptor's value: 242 [ 2214.389145][T15307] usb 7-1: config 28 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2214.417398][T15307] usb 7-1: config 28 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2214.439540][T15307] usb 7-1: config 28 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2214.500288][T29343] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6503'. [ 2214.524892][T15307] usb 7-1: config 28 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2214.541623][T24353] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 2214.549334][T29343] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6503'. [ 2214.574055][T15307] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2214.584633][T15307] usb 7-1: New USB device strings: Mfr=4, Product=64, SerialNumber=0 [ 2214.599310][T15307] usb 7-1: Product: syz [ 2214.605172][T15307] usb 7-1: Manufacturer: syz [ 2214.714216][T24353] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2214.761012][T24353] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2215.120337][T24353] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2215.214106][T24353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2215.708828][T24353] usb 2-1: GET_CAPABILITIES returned 0 [ 2215.766718][T24353] usbtmc 2-1:16.0: can't read capabilities [ 2215.907188][T29341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2215.973927][T29341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2216.466265][ T940] usb 2-1: USB disconnect, device number 66 [ 2216.482407][T29365] binder: BINDER_SET_CONTEXT_MGR already set [ 2216.488872][T29365] binder: 29364:29365 ioctl 4018620d 200000004a80 returned -16 [ 2217.221387][T29372] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6509'. [ 2217.696192][T29374] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 2218.207701][T15307] rc_core: IR keymap rc-hauppauge not found [ 2218.213740][T15307] Registered IR keymap rc-empty [ 2218.469689][T15307] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 2218.518970][T15307] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 2218.569392][T29389] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2218.579347][T29389] EXT4-fs (loop1): unable to read superblock [ 2218.847875][T15307] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:28.0/rc/rc0 [ 2219.253269][T15307] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:28.0/rc/rc0/input65 [ 2220.100955][T15307] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 2220.138985][T15307] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 2220.186514][T15307] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 2220.341434][T15307] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 2220.417862][T29400] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6517'. [ 2220.433854][T15307] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 2220.470563][T15307] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 2220.515766][T15307] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 2220.919605][T15307] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 2221.377238][T15307] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 2221.421941][T15307] mceusb 7-1:28.0: Error: mce write submit urb error = -90 [ 2221.528396][T15307] mceusb 7-1:28.0: Registered with mce emulator interface version 1 [ 2221.592889][T15307] mceusb 7-1:28.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2221.947153][T29413] binder: 29406:29413 ioctl c0306201 0 returned -14 [ 2222.055332][T15307] usb 7-1: USB disconnect, device number 81 [ 2223.000290][ T30] audit: type=1326 audit(2000001694.469:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29427 comm="syz.0.6524" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb33bf8eba9 code=0x0 [ 2223.055840][T29434] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 2223.091363][T26034] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 2223.253190][T26034] usb 7-1: Using ep0 maxpacket: 16 [ 2223.271242][T26034] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2223.280540][T26034] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.310364][T26034] usb 7-1: Product: syz [ 2223.314816][T26034] usb 7-1: Manufacturer: syz [ 2223.336293][T26034] usb 7-1: SerialNumber: syz [ 2223.361942][T26034] usb 7-1: config 0 descriptor?? [ 2223.374569][T26034] visor 7-1:0.0: Sony Clie 3.5 converter detected [ 2223.402945][T29439] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2223.412572][T29439] EXT4-fs (loop1): unable to read superblock [ 2223.448740][T29441] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6530'. [ 2223.608235][T29430] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6526'. [ 2223.700797][T29442] openvswitch: netlink: Key 4 has unexpected len 4 expected 12 [ 2224.754374][T29455] dlm: no locking on control device [ 2224.819008][T29459] FAULT_INJECTION: forcing a failure. [ 2224.819008][T29459] name failslab, interval 1, probability 0, space 0, times 0 [ 2224.862871][T29459] CPU: 0 UID: 0 PID: 29459 Comm: syz.0.6536 Not tainted syzkaller #0 PREEMPT(full) [ 2224.862902][T29459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2224.862916][T29459] Call Trace: [ 2224.862925][T29459] [ 2224.862936][T29459] dump_stack_lvl+0x189/0x250 [ 2224.862976][T29459] ? __pfx____ratelimit+0x10/0x10 [ 2224.863008][T29459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2224.863034][T29459] ? __pfx__printk+0x10/0x10 [ 2224.863069][T29459] ? __lock_acquire+0xab9/0xd20 [ 2224.863114][T29459] should_fail_ex+0x414/0x560 [ 2224.863147][T29459] should_failslab+0xa8/0x100 [ 2224.863172][T29459] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2224.863203][T29459] ? skb_clone+0x212/0x3a0 [ 2224.863232][T29459] skb_clone+0x212/0x3a0 [ 2224.863259][T29459] __netlink_deliver_tap+0x404/0x850 [ 2224.863305][T29459] ? netlink_deliver_tap+0x2e/0x1b0 [ 2224.863338][T29459] netlink_deliver_tap+0x19c/0x1b0 [ 2224.863370][T29459] netlink_unicast+0x7fa/0x9e0 [ 2224.863410][T29459] ? __pfx_netlink_unicast+0x10/0x10 [ 2224.863439][T29459] ? netlink_sendmsg+0x642/0xb30 [ 2224.863467][T29459] ? skb_put+0x11b/0x210 [ 2224.863513][T29459] netlink_sendmsg+0x805/0xb30 [ 2224.863564][T29459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2224.863597][T29459] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2224.863624][T29459] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2224.863645][T29459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2224.863674][T29459] __sock_sendmsg+0x21c/0x270 [ 2224.863702][T29459] ____sys_sendmsg+0x505/0x830 [ 2224.863729][T29459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2224.863759][T29459] ? import_iovec+0x74/0xa0 [ 2224.863782][T29459] ___sys_sendmsg+0x21f/0x2a0 [ 2224.863804][T29459] ? __pfx____sys_sendmsg+0x10/0x10 [ 2224.863862][T29459] ? __fget_files+0x2a/0x420 [ 2224.863881][T29459] ? __fget_files+0x3a0/0x420 [ 2224.863911][T29459] __x64_sys_sendmsg+0x19b/0x260 [ 2224.863934][T29459] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2224.863965][T29459] ? __pfx_ksys_write+0x10/0x10 [ 2224.863997][T29459] ? do_syscall_64+0xbe/0xfa0 [ 2224.864030][T29459] do_syscall_64+0xfa/0xfa0 [ 2224.864057][T29459] ? lockdep_hardirqs_on+0x9c/0x150 [ 2224.864086][T29459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2224.864112][T29459] ? clear_bhb_loop+0x60/0xb0 [ 2224.864136][T29459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2224.864155][T29459] RIP: 0033:0x7fb33bf8eba9 [ 2224.864172][T29459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2224.864189][T29459] RSP: 002b:00007fb33cdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2224.864209][T29459] RAX: ffffffffffffffda RBX: 00007fb33c1d5fa0 RCX: 00007fb33bf8eba9 [ 2224.864224][T29459] RDX: 0000000024004040 RSI: 00002000000006c0 RDI: 0000000000000003 [ 2224.864237][T29459] RBP: 00007fb33cdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2224.864249][T29459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2224.864261][T29459] R13: 00007fb33c1d6038 R14: 00007fb33c1d5fa0 R15: 00007ffd744bb6e8 [ 2224.864293][T29459] [ 2225.167809][T29459] netlink: 'syz.0.6536': attribute type 7 has an invalid length. [ 2225.193449][T29448] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2225.203249][T29448] MINIX-fs: unable to read superblock [ 2225.261048][T26034] usb 7-1: clie_3_5_startup: get config number failed: -71 [ 2225.268710][T26034] visor 7-1:0.0: probe with driver visor failed with error -71 [ 2225.280428][T26034] usb 7-1: USB disconnect, device number 82 [ 2225.657012][T29472] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2225.670174][T29472] FAT-fs (loop6): unable to read boot sector [ 2226.433431][T29478] fuse: Unknown parameter 'r' [ 2226.651638][T29485] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2226.742263][T29485] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 2228.727067][T25780] libceph: connect (1)[c::]:6789 error -101 [ 2228.745500][T29504] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2228.760400][T29504] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6543'. [ 2228.769963][T29504] bridge_slave_1: left allmulticast mode [ 2228.775748][T29504] bridge_slave_1: left promiscuous mode [ 2228.781798][T29504] bridge0: port 2(bridge_slave_1) entered disabled state [ 2228.833215][T29504] bridge_slave_0: left allmulticast mode [ 2228.848033][T29504] bridge_slave_0: left promiscuous mode [ 2228.854319][T29504] bridge0: port 1(bridge_slave_0) entered disabled state [ 2228.872886][T25780] libceph: mon0 (1)[c::]:6789 connect error [ 2228.898891][T29485] ceph: No mds server is up or the cluster is laggy [ 2228.939104][T29511] fuse: Invalid rootmode [ 2228.967701][T29509] netlink: 'syz.7.6547': attribute type 15 has an invalid length. [ 2229.089423][T29513] snd_dummy snd_dummy.0: control 1:9:195:ÿÿ:53367 is already present [ 2230.002917][T29528] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6554'. [ 2230.637412][T29539] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2230.664083][T29539] EXT4-fs (loop0): unable to read superblock [ 2231.089915][T15307] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 2232.026844][T15307] usb 7-1: Using ep0 maxpacket: 32 [ 2232.038018][T15307] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2232.066562][T15307] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 2232.197577][T15307] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 2232.209624][T15307] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2232.261116][T15307] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2232.305706][T15307] usb 7-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 2232.350219][T15307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2232.358271][T15307] usb 7-1: Product: syz [ 2232.395594][T15307] usb 7-1: Manufacturer: syz [ 2232.408317][T15307] usb 7-1: SerialNumber: syz [ 2232.430618][T15307] usb 7-1: config 0 descriptor?? [ 2232.465300][T29534] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2232.551520][T29560] FAULT_INJECTION: forcing a failure. [ 2232.551520][T29560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2232.576228][T29560] CPU: 0 UID: 0 PID: 29560 Comm: syz.5.6565 Not tainted syzkaller #0 PREEMPT(full) [ 2232.576257][T29560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2232.576271][T29560] Call Trace: [ 2232.576280][T29560] [ 2232.576289][T29560] dump_stack_lvl+0x189/0x250 [ 2232.576325][T29560] ? __pfx____ratelimit+0x10/0x10 [ 2232.576374][T29560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2232.576401][T29560] ? __pfx__printk+0x10/0x10 [ 2232.576444][T29560] should_fail_ex+0x414/0x560 [ 2232.576478][T29560] _copy_to_user+0x31/0xb0 [ 2232.576503][T29560] simple_read_from_buffer+0xe1/0x170 [ 2232.576542][T29560] proc_fail_nth_read+0x1b3/0x220 [ 2232.576575][T29560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2232.576607][T29560] ? rw_verify_area+0x2a6/0x4d0 [ 2232.576636][T29560] ? __lock_acquire+0xab9/0xd20 [ 2232.576665][T29560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2232.576703][T29560] vfs_read+0x200/0xa30 [ 2232.576732][T29560] ? fdget_pos+0x247/0x320 [ 2232.576759][T29560] ? __pfx___mutex_lock+0x10/0x10 [ 2232.576780][T29560] ? __pfx_vfs_read+0x10/0x10 [ 2232.576813][T29560] ? __fget_files+0x2a/0x420 [ 2232.576839][T29560] ? __fget_files+0x3a0/0x420 [ 2232.576859][T29560] ? __fget_files+0x2a/0x420 [ 2232.576891][T29560] ksys_read+0x145/0x250 [ 2232.576925][T29560] ? __pfx_ksys_read+0x10/0x10 [ 2232.576960][T29560] ? do_syscall_64+0xbe/0xfa0 [ 2232.576997][T29560] do_syscall_64+0xfa/0xfa0 [ 2232.577028][T29560] ? lockdep_hardirqs_on+0x9c/0x150 [ 2232.577059][T29560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2232.577080][T29560] ? clear_bhb_loop+0x60/0xb0 [ 2232.577106][T29560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2232.577127][T29560] RIP: 0033:0x7f56ec78d5bc [ 2232.577147][T29560] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2232.577166][T29560] RSP: 002b:00007f56ed62e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2232.577188][T29560] RAX: ffffffffffffffda RBX: 00007f56ec9d5fa0 RCX: 00007f56ec78d5bc [ 2232.577204][T29560] RDX: 000000000000000f RSI: 00007f56ed62e0a0 RDI: 0000000000000004 [ 2232.577218][T29560] RBP: 00007f56ed62e090 R08: 0000000000000000 R09: 0000000000000000 [ 2232.577231][T29560] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000001 [ 2232.577244][T29560] R13: 00007f56ec9d6038 R14: 00007f56ec9d5fa0 R15: 00007ffd24b96b68 [ 2232.577281][T29560] [ 2234.947010][T15307] hdpvr 7-1:0.0: unexpected answer of status request, len -71 [ 2234.990128][T15307] hdpvr 7-1:0.0: device init failed [ 2234.995483][T15307] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 2235.201996][T15307] usb 7-1: USB disconnect, device number 83 [ 2235.292441][T29588] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2235.321099][T29588] EXT4-fs (loop6): unable to read superblock [ 2237.270664][T29604] fuse: Unknown parameter 'groupWid' [ 2239.366593][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2239.566247][T29628] FAULT_INJECTION: forcing a failure. [ 2239.566247][T29628] name failslab, interval 1, probability 0, space 0, times 0 [ 2239.578955][T29628] CPU: 1 UID: 0 PID: 29628 Comm: syz.6.6581 Not tainted syzkaller #0 PREEMPT(full) [ 2239.578981][T29628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2239.578993][T29628] Call Trace: [ 2239.579002][T29628] [ 2239.579010][T29628] dump_stack_lvl+0x189/0x250 [ 2239.579038][T29628] ? __pfx____ratelimit+0x10/0x10 [ 2239.579065][T29628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2239.579091][T29628] ? __pfx__printk+0x10/0x10 [ 2239.579112][T29628] ? __pfx___might_resched+0x10/0x10 [ 2239.579134][T29628] ? fs_reclaim_acquire+0x7d/0x100 [ 2239.579161][T29628] should_fail_ex+0x414/0x560 [ 2239.579191][T29628] should_failslab+0xa8/0x100 [ 2239.579231][T29628] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2239.579262][T29628] ? nfnetlink_rcv+0xeff/0x2520 [ 2239.579293][T29628] nfnetlink_rcv+0xeff/0x2520 [ 2239.579342][T29628] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2239.579388][T29628] ? ref_tracker_free+0x63a/0x7d0 [ 2239.579445][T29628] ? __netlink_deliver_tap+0x807/0x850 [ 2239.579475][T29628] ? netlink_deliver_tap+0x2e/0x1b0 [ 2239.579509][T29628] netlink_unicast+0x82f/0x9e0 [ 2239.579545][T29628] ? __pfx_netlink_unicast+0x10/0x10 [ 2239.579575][T29628] ? netlink_sendmsg+0x642/0xb30 [ 2239.579603][T29628] ? skb_put+0x11b/0x210 [ 2239.579637][T29628] netlink_sendmsg+0x805/0xb30 [ 2239.579682][T29628] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2239.579715][T29628] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2239.579745][T29628] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2239.579766][T29628] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2239.579798][T29628] __sock_sendmsg+0x21c/0x270 [ 2239.579826][T29628] ____sys_sendmsg+0x505/0x830 [ 2239.579853][T29628] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2239.579875][T29628] ? import_iovec+0x74/0xa0 [ 2239.579892][T29628] ___sys_sendmsg+0x21f/0x2a0 [ 2239.579913][T29628] ? __pfx____sys_sendmsg+0x10/0x10 [ 2239.579976][T29628] ? __fget_files+0x2a/0x420 [ 2239.579996][T29628] ? __fget_files+0x3a0/0x420 [ 2239.580027][T29628] __x64_sys_sendmsg+0x19b/0x260 [ 2239.580050][T29628] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2239.580072][T29628] ? __pfx_ksys_write+0x10/0x10 [ 2239.580103][T29628] ? do_syscall_64+0xbe/0xfa0 [ 2239.580140][T29628] do_syscall_64+0xfa/0xfa0 [ 2239.580168][T29628] ? lockdep_hardirqs_on+0x9c/0x150 [ 2239.580198][T29628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2239.580217][T29628] ? clear_bhb_loop+0x60/0xb0 [ 2239.580243][T29628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2239.580257][T29628] RIP: 0033:0x7f6551b8eba9 [ 2239.580271][T29628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2239.580283][T29628] RSP: 002b:00007f6552aad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2239.580300][T29628] RAX: ffffffffffffffda RBX: 00007f6551dd5fa0 RCX: 00007f6551b8eba9 [ 2239.580317][T29628] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 2239.580330][T29628] RBP: 00007f6552aad090 R08: 0000000000000000 R09: 0000000000000000 [ 2239.580343][T29628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2239.580355][T29628] R13: 00007f6551dd6038 R14: 00007f6551dd5fa0 R15: 00007ffde3e02a68 [ 2239.580390][T29628] [ 2240.340585][T29635] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2240.440492][T29635] EXT4-fs (loop5): unable to read superblock [ 2240.485262][T29639] serio: Serial port ptm0 [ 2242.420997][T29669] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6591'. [ 2242.809651][T24353] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 2243.551160][T29687] mkiss: ax0: crc mode is auto. [ 2243.571324][T24353] usb 1-1: device descriptor read/64, error -71 [ 2243.850183][T24353] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 2244.020023][T24353] usb 1-1: device descriptor read/64, error -71 [ 2244.166263][T24353] usb usb1-port1: attempt power cycle [ 2244.419023][T29702] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6598'. [ 2244.428349][T29702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6598'. [ 2244.516793][T24353] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 2244.602604][T24353] usb 1-1: device descriptor read/8, error -71 [ 2244.914524][T24353] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 2245.011428][T24353] usb 1-1: device descriptor read/8, error -71 [ 2245.134996][T24353] usb usb1-port1: unable to enumerate USB device [ 2246.189486][T10780] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2246.213467][T10780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2246.243393][T10780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2246.259934][T10780] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2246.270715][T10780] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2246.405658][T29727] lo speed is unknown, defaulting to 1000 [ 2246.413408][T29727] ip6gretap0 speed is unknown, defaulting to 1000 [ 2247.174315][T29735] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6604'. [ 2248.286416][T28921] Bluetooth: hci6: command tx timeout [ 2248.637531][T29727] chnl_net:caif_netlink_parms(): no params data found [ 2248.816689][T29727] bridge0: port 1(bridge_slave_0) entered blocking state [ 2248.831103][T29727] bridge0: port 1(bridge_slave_0) entered disabled state [ 2248.838407][T29727] bridge_slave_0: entered allmulticast mode [ 2248.854394][T29727] bridge_slave_0: entered promiscuous mode [ 2248.864735][T29727] bridge0: port 2(bridge_slave_1) entered blocking state [ 2248.876610][T29727] bridge0: port 2(bridge_slave_1) entered disabled state [ 2248.886035][T29727] bridge_slave_1: entered allmulticast mode [ 2248.909310][T29727] bridge_slave_1: entered promiscuous mode [ 2248.990622][T29727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2249.015862][T29727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2249.095558][T29727] team0: Port device team_slave_0 added [ 2249.120844][T29727] team0: Port device team_slave_1 added [ 2249.197445][T29727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2249.206922][T29727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2249.245716][T29727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2249.266137][T29727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2249.274393][T29727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2249.308194][T29727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2249.491688][T29727] hsr_slave_0: entered promiscuous mode [ 2249.523321][T29727] hsr_slave_1: entered promiscuous mode [ 2249.554422][T29727] debugfs: 'hsr0' already exists in 'hsr' [ 2249.560213][T29727] Cannot create hsr debugfs directory [ 2250.261149][T28921] Bluetooth: hci6: command tx timeout [ 2250.397851][T29727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2250.410304][T29727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2250.430190][T29727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2250.445538][T29727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2250.626687][T29727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2250.662748][T29727] 8021q: adding VLAN 0 to HW filter on device team0 [ 2250.685217][T21059] bridge0: port 1(bridge_slave_0) entered blocking state [ 2250.692439][T21059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2250.749359][T21059] bridge0: port 2(bridge_slave_1) entered blocking state [ 2250.756587][T21059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2251.132799][T29727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2251.236635][T29727] veth0_vlan: entered promiscuous mode [ 2251.265030][T29727] veth1_vlan: entered promiscuous mode [ 2251.340066][T29727] veth0_macvtap: entered promiscuous mode [ 2251.368348][T29727] veth1_macvtap: entered promiscuous mode [ 2251.418640][T29727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2251.445273][T29727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2251.474813][T14564] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2251.528284][T14564] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2251.553026][T14564] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2251.613283][T14564] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2251.670608][ T8803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2251.701935][ T8803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2251.792242][ T8803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2251.803513][ T8803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2251.916484][T29814] FAULT_INJECTION: forcing a failure. [ 2251.916484][T29814] name failslab, interval 1, probability 0, space 0, times 0 [ 2251.929460][T29814] CPU: 1 UID: 0 PID: 29814 Comm: syz.2.6596 Not tainted syzkaller #0 PREEMPT(full) [ 2251.929486][T29814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2251.929499][T29814] Call Trace: [ 2251.929508][T29814] [ 2251.929517][T29814] dump_stack_lvl+0x189/0x250 [ 2251.929547][T29814] ? __pfx____ratelimit+0x10/0x10 [ 2251.929574][T29814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2251.929594][T29814] ? __pfx__printk+0x10/0x10 [ 2251.929630][T29814] ? __pfx___might_resched+0x10/0x10 [ 2251.929666][T29814] ? fs_reclaim_acquire+0x7d/0x100 [ 2251.929693][T29814] should_fail_ex+0x414/0x560 [ 2251.929722][T29814] should_failslab+0xa8/0x100 [ 2251.929744][T29814] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2251.929767][T29814] ? __genradix_ptr_alloc+0x463/0x4a0 [ 2251.929783][T29814] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 2251.929831][T29814] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 2251.929868][T29814] sctp_association_new+0x15d3/0x25f0 [ 2251.929907][T29814] sctp_connect_new_asoc+0x2c5/0x690 [ 2251.929933][T29814] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2251.929952][T29814] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2251.929982][T29814] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2251.930002][T29814] ? security_sctp_bind_connect+0x7e/0x2e0 [ 2251.930021][T29814] sctp_sendmsg+0x155c/0x2810 [ 2251.930047][T29814] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2251.930072][T29814] ? aa_sk_perm+0x81e/0x950 [ 2251.930102][T29814] ? __pfx_aa_sk_perm+0x10/0x10 [ 2251.930131][T29814] ? sock_rps_record_flow+0x19/0x410 [ 2251.930155][T29814] ? inet_sendmsg+0x2f4/0x370 [ 2251.930179][T29814] __sock_sendmsg+0x19c/0x270 [ 2251.930203][T29814] ____sys_sendmsg+0x52d/0x830 [ 2251.930224][T29814] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2251.930254][T29814] ? import_iovec+0x74/0xa0 [ 2251.930279][T29814] ___sys_sendmsg+0x21f/0x2a0 [ 2251.930301][T29814] ? __pfx____sys_sendmsg+0x10/0x10 [ 2251.930347][T29814] ? __fget_files+0x2a/0x420 [ 2251.930362][T29814] ? __fget_files+0x3a0/0x420 [ 2251.930387][T29814] __sys_sendmmsg+0x227/0x430 [ 2251.930408][T29814] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2251.930440][T29814] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2251.930479][T29814] ? ksys_write+0x22a/0x250 [ 2251.930509][T29814] ? __pfx_ksys_write+0x10/0x10 [ 2251.930537][T29814] __x64_sys_sendmmsg+0xa0/0xc0 [ 2251.930556][T29814] do_syscall_64+0xfa/0xfa0 [ 2251.930580][T29814] ? lockdep_hardirqs_on+0x9c/0x150 [ 2251.930611][T29814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2251.930630][T29814] ? clear_bhb_loop+0x60/0xb0 [ 2251.930655][T29814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2251.930680][T29814] RIP: 0033:0x7f3506d8eba9 [ 2251.930694][T29814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2251.930708][T29814] RSP: 002b:00007f3507c94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2251.930726][T29814] RAX: ffffffffffffffda RBX: 00007f3506fd5fa0 RCX: 00007f3506d8eba9 [ 2251.930738][T29814] RDX: 0000000000000001 RSI: 0000200000004900 RDI: 0000000000000003 [ 2251.930748][T29814] RBP: 00007f3507c94090 R08: 0000000000000000 R09: 0000000000000000 [ 2251.930758][T29814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2251.930768][T29814] R13: 00007f3506fd6038 R14: 00007f3506fd5fa0 R15: 00007ffcca389288 [ 2251.930795][T29814] [ 2252.285009][T28921] Bluetooth: hci6: command tx timeout [ 2254.221094][T28921] Bluetooth: hci6: command tx timeout [ 2297.891041][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2309.624877][T28921] Bluetooth: hci3: command 0x040f tx timeout [ 2356.416536][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2363.269226][T10780] Bluetooth: hci6: command 0x0406 tx timeout [ 2395.436215][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2400.922703][ T31] INFO: task kworker/0:5:16656 blocked for more than 143 seconds. [ 2400.930752][ T31] Not tainted syzkaller #0 [ 2400.937086][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2400.946076][ T31] task:kworker/0:5 state:D stack:21112 pid:16656 tgid:16656 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2400.959027][ T31] Workqueue: usb_hub_wq hub_event [ 2400.964583][ T31] Call Trace: [ 2400.967897][ T31] [ 2400.971168][ T31] __schedule+0x1798/0x4cc0 [ 2400.975744][ T31] ? __pfx___schedule+0x10/0x10 [ 2400.980921][ T31] ? schedule+0x91/0x360 [ 2400.985211][ T31] schedule+0x165/0x360 [ 2400.989830][ T31] usb_kill_urb+0x1be/0x2d0 [ 2400.994469][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2400.999976][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2401.006083][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 2401.011274][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2401.016867][ T31] ? usb_alloc_urb+0x46/0x150 [ 2401.021934][ T31] usb_control_msg+0x232/0x3e0 [ 2401.026754][ T31] hub_port_init+0xbf9/0x2800 [ 2401.031555][ T31] hub_event+0x2532/0x4a20 [ 2401.036005][ T31] ? kasan_save_track+0x4f/0x80 [ 2401.042103][ T31] ? kasan_save_track+0x3e/0x80 [ 2401.047504][ T31] ? __pfx_hub_event+0x10/0x10 [ 2401.053028][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2401.058849][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2401.064085][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2401.075458][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2401.081231][ T31] process_scheduled_works+0xae1/0x17b0 [ 2401.087839][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2401.093899][ T31] worker_thread+0x8a0/0xda0 [ 2401.098624][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2401.106186][ T31] ? __kthread_parkme+0x7b/0x200 [ 2401.111178][ T31] kthread+0x711/0x8a0 [ 2401.115443][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2401.120595][ T31] ? __pfx_kthread+0x10/0x10 [ 2401.125316][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2401.130559][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2401.136193][ T31] ? __pfx_kthread+0x10/0x10 [ 2401.140820][ T31] ret_from_fork+0x4bc/0x870 [ 2401.146771][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2401.154168][ T31] ? __switch_to_asm+0x39/0x70 [ 2401.159087][ T31] ? __switch_to_asm+0x33/0x70 [ 2401.164645][ T31] ? __pfx_kthread+0x10/0x10 [ 2401.169282][ T31] ret_from_fork_asm+0x1a/0x30 [ 2401.174255][ T31] [ 2401.177373][ T31] [ 2401.177373][ T31] Showing all locks held in the system: [ 2401.185305][ T31] 5 locks held by kworker/u8:1/13: [ 2401.191157][ T31] 1 lock held by khungtaskd/31: [ 2401.196033][ T31] #0: ffffffff8e33d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2401.206042][ T31] 2 locks held by getty/5624: [ 2401.210807][ T31] #0: ffff88814de8f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2401.221173][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2401.231745][ T31] 5 locks held by kworker/0:5/16656: [ 2401.237158][ T31] #0: ffff888021abd148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2401.250014][ T31] #1: ffffc90002fb7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2401.262121][ T31] #2: ffff88823beb6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2401.271356][ T31] #3: ffff888029188518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2401.281504][ T31] #4: ffff8880290fa068 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2401.291443][ T31] [ 2401.293793][ T31] ============================================= [ 2401.293793][ T31] [ 2401.302694][ T31] NMI backtrace for cpu 1 [ 2401.302712][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2401.302735][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2401.302749][ T31] Call Trace: [ 2401.302757][ T31] [ 2401.302766][ T31] dump_stack_lvl+0x189/0x250 [ 2401.302797][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2401.302821][ T31] ? __pfx__printk+0x10/0x10 [ 2401.302851][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2401.302883][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2401.302912][ T31] ? __pfx__printk+0x10/0x10 [ 2401.302947][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2401.302977][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2401.303007][ T31] watchdog+0xf60/0xfa0 [ 2401.303032][ T31] ? watchdog+0x1e2/0xfa0 [ 2401.303056][ T31] kthread+0x711/0x8a0 [ 2401.303086][ T31] ? __pfx_watchdog+0x10/0x10 [ 2401.303113][ T31] ? __pfx_kthread+0x10/0x10 [ 2401.303139][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2401.303168][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2401.303195][ T31] ? __pfx_kthread+0x10/0x10 [ 2401.303216][ T31] ret_from_fork+0x4bc/0x870 [ 2401.303249][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2401.303288][ T31] ? __switch_to_asm+0x39/0x70 [ 2401.303312][ T31] ? __switch_to_asm+0x33/0x70 [ 2401.303338][ T31] ? __pfx_kthread+0x10/0x10 [ 2401.303363][ T31] ret_from_fork_asm+0x1a/0x30 [ 2401.303410][ T31] [ 2401.303418][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2401.453695][ C0] NMI backtrace for cpu 0 [ 2401.453713][ C0] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 2401.453732][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2401.453744][ C0] Workqueue: events_unbound toggle_allocation_gate [ 2401.453766][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x31/0x70 [ 2401.453790][ C0] Code: 24 65 48 8b 0c 25 08 f0 c3 92 65 8b 15 88 1a 04 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 7c 16 00 00 00 74 2c <8b> 91 58 16 00 00 83 fa 02 75 21 48 8b 91 60 16 00 00 48 8b 32 48 [ 2401.453804][ C0] RSP: 0018:ffffc90000ad7620 EFLAGS: 00000246 [ 2401.453818][ C0] RAX: ffffffff82109aa1 RBX: ffff88813ff45aa8 RCX: ffff888140ac1e40 [ 2401.453836][ C0] RDX: 0000000000000000 RSI: 000000013ff47067 RDI: 000000013ff47067 [ 2401.453847][ C0] RBP: ffff88813ff46060 R08: 0000000000000003 R09: 0000000000000004 [ 2401.453857][ C0] R10: dffffc0000000000 R11: fffff5200015aeb4 R12: 1ffff11027fe8b55 [ 2401.453870][ C0] R13: 000000013ff47067 R14: dffffc0000000000 R15: 000000013ff47067 [ 2401.453882][ C0] FS: 0000000000000000(0000) GS:ffff8881259e1000(0000) knlGS:0000000000000000 [ 2401.453896][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2401.453907][ C0] CR2: 00007fa53edcee9c CR3: 000000000e138000 CR4: 00000000003526f0 [ 2401.453922][ C0] Call Trace: [ 2401.453928][ C0] [ 2401.453934][ C0] __pte_offset_map_lock+0x1b1/0x210 [ 2401.453962][ C0] ? kmem_cache_alloc_node_noprof+0x8b/0x710 [ 2401.453987][ C0] __text_poke+0x2e6/0xa10 [ 2401.454008][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 2401.454026][ C0] ? kmem_cache_alloc_node_noprof+0x8b/0x710 [ 2401.454049][ C0] ? __pfx___text_poke+0x10/0x10 [ 2401.454064][ C0] ? rcu_is_watching+0x15/0xb0 [ 2401.454079][ C0] ? trace_contention_end+0x39/0x120 [ 2401.454103][ C0] smp_text_poke_batch_finish+0x90a/0x1130 [ 2401.454127][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 2401.454148][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 2401.454175][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 2401.454196][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 2401.454222][ C0] static_key_enable+0x1a/0x20 [ 2401.454244][ C0] toggle_allocation_gate+0xad/0x240 [ 2401.454260][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 2401.454277][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 2401.454304][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 2401.454327][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 2401.454351][ C0] process_scheduled_works+0xae1/0x17b0 [ 2401.454389][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2401.454421][ C0] worker_thread+0x8a0/0xda0 [ 2401.454458][ C0] kthread+0x711/0x8a0 [ 2401.454477][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2401.454501][ C0] ? __pfx_kthread+0x10/0x10 [ 2401.454519][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2401.454541][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2401.454564][ C0] ? __pfx_kthread+0x10/0x10 [ 2401.454582][ C0] ret_from_fork+0x4bc/0x870 [ 2401.454606][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2401.454632][ C0] ? __switch_to_asm+0x39/0x70 [ 2401.454653][ C0] ? __switch_to_asm+0x33/0x70 [ 2401.454673][ C0] ? __pfx_kthread+0x10/0x10 [ 2401.454690][ C0] ret_from_fork_asm+0x1a/0x30 [ 2401.454720][ C0] [ 2401.455934][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2401.455956][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2401.455982][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2401.455997][ T31] Call Trace: [ 2401.456009][ T31] [ 2401.456023][ T31] dump_stack_lvl+0x99/0x250 [ 2401.456057][ T31] ? __asan_memcpy+0x40/0x70 [ 2401.456103][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2401.456131][ T31] ? __pfx__printk+0x10/0x10 [ 2401.456176][ T31] vpanic+0x237/0x6d0 [ 2401.456201][ T31] ? __pfx_vpanic+0x10/0x10 [ 2401.456228][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2401.456268][ T31] panic+0xb9/0xc0 [ 2401.456293][ T31] ? __pfx_panic+0x10/0x10 [ 2401.456319][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2401.456349][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2401.456380][ T31] watchdog+0xf9f/0xfa0 [ 2401.456415][ T31] ? watchdog+0x1e2/0xfa0 [ 2401.456450][ T31] kthread+0x711/0x8a0 [ 2401.456479][ T31] ? __pfx_watchdog+0x10/0x10 [ 2401.456507][ T31] ? __pfx_kthread+0x10/0x10 [ 2401.456533][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2401.456564][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2401.456604][ T31] ? __pfx_kthread+0x10/0x10 [ 2401.456630][ T31] ret_from_fork+0x4bc/0x870 [ 2401.456665][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2401.456704][ T31] ? __switch_to_asm+0x39/0x70 [ 2401.456731][ T31] ? __switch_to_asm+0x33/0x70 [ 2401.456758][ T31] ? __pfx_kthread+0x10/0x10 [ 2401.456786][ T31] ret_from_fork_asm+0x1a/0x30 [ 2401.456832][ T31] [ 2401.920751][ T31] Kernel Offset: disabled [ 2401.925068][ T31] Rebooting in 86400 seconds..