last executing test programs: 7m29.51942722s ago: executing program 4 (id=194): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003880)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1001, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x7f, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0xc, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0xffc, 0x800401, 0x1, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x4, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x7da, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x101, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd6c, 0x1, 0x6, 0xa, 0x7, 0x1, 0x82, 0x2, 0x1, 0x4, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0xe3b, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x5, 0x7, 0x3, 0xd7c5, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x6ee1847d, 0x100, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x0, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x5, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x4, 0xc, 0x80000001, 0x4, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x31ae, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x4, 0x9b21, 0x2, {0x4, 0x1, 0x1, 0x4, 0x4, 0x8}, {0x6, 0x1, 0xfffc, 0x0, 0x1, 0x2}, 0x2f, 0xc0b1, 0x8}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES8=r7], 0xc8}}, 0x40000) 7m28.235000961s ago: executing program 4 (id=197): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) mkdir(&(0x7f0000000400)='./file0\x00', 0x40) r1 = fsopen(&(0x7f0000000280)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x2003800, &(0x7f0000000b40)=ANY=[@ANYBLOB='fd=', @ANYBLOB="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", @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030301e30303034303030302c7565725f69643d00", @ANYRES16=r2, @ANYRES8=r2, @ANYRES16]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000a00)='./file0/file0\x00', 0x298202, 0x0) read$FUSE(r2, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x27, 0x7ffffffe, 0x0, 0xb, 0x1, 0x0, 0xca3, 0x0, 0x0, 0x40, 0x9}}, 0x50) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) close(r6) syz_fuse_handle_req(r0, &(0x7f0000008180)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x3, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0xc, 0x0, 0x9, 0x9e, 0xa6, 0xd5c1, 0x0, 0x400000, 0x0, 0xc000, 0x5f, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x90, 0x0, 0x6, {0x4, 0x1, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0xd297, 0x0, 0x0, 0x100000, 0x800000, 0x1, 0xc000, 0x0, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r7, 0x400448e7, &(0x7f0000000080)) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) socket(0x1, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 7m27.011915773s ago: executing program 4 (id=200): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x0, 0x10}, {0x7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e0f30fa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m25.483195744s ago: executing program 4 (id=206): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) fcntl$setpipe(r0, 0x407, 0x100000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x0, 0x4, 0x800001b0}, &(0x7f0000000000)=0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, 0x0, 0x1) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r5) r6 = socket$inet(0x2, 0x6, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) socket$inet(0x2, 0x3, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r9) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r10, 0x301, 0x0, 0x25dfdbfc, {0x5}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x34}, 0x10) 7m22.526818947s ago: executing program 4 (id=210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac71000", 0x3d}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000380)=""/176) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = getpid() fcntl$addseals(r4, 0x409, 0x9) tee(r4, r5, 0x9, 0x4) r9 = syz_pidfd_open(r8, 0x0) open_by_handle_at(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe0000"], 0x1) r10 = openat$cgroup_ro(r7, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) preadv(r10, &(0x7f00000000c0), 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000095000000000000001dcb0000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) r11 = eventfd(0x800a6) write$eventfd(r11, 0x0, 0x0) 7m20.285164556s ago: executing program 4 (id=214): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x121000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendto$inet(r5, &(0x7f0000000200)="e1", 0x1, 0x40011, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000010340)={0xe, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000002e4eb28fde08ebef947f424501ff66ebe5e38b1be9de0c01c251829915b20a62de7b0bf124d041a3b667ff16c87d4aff843bb0cfc05693f9ee069a7fd6c2a30dfb4c48dd7f86e287b764565b01ff4363c3141eef0100c6577593e068783e8488a7541049aefc003ac624116ebd8b616c6648f52fe3a909a63f802ceadbbf92af706d8831d2b028059367e794f00b4968ebbaf1f8e2", @ANYRES32=r6, @ANYBLOB="000000000000000085000000270000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r5}, 0x20) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r10 = accept4$inet6(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$unix(r2, &(0x7f0000000400)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)="1ade1de4a23a9828e965", 0xa}], 0x1, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x2c, 0x1, 0x1, [r4, r2, r2, r6, r8, r2, r9]}}, @rights={{0x18, 0x1, 0x1, [r0, r10]}}], 0x60, 0x4000080}, 0x4004810) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80000, 0x100) 7m19.224502522s ago: executing program 0 (id=218): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f00000001c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_SET_STATUS(r2, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xc, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ececd9bada8b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9acc6c25af21ca2af6d2e80e4caadd6d126cfb80c92dc817d44dcdec", [0x1]}) syz_usb_connect$uac1(0x5, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000086b1d010140000102030109027c0003010740080904000000010100000a24010000000201020724070103005f09040700000102000009040100e601020000072401029c01100905010900047f06060725018205feff09040200000102000009040201010102000007240105000100082402010402dc0809058209000202090507251101f9"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="7a03f4ad5199896be84b5de50088a89ae2145d27b5097450f00471ba2f4b3e0b133e3acb400908b37325f0e61217278d2423c579a7090f4f8714a4fd4e8684c0027901c7f1051a944b256b94e5bfa9eb84e66367ce3125a3b20000000000000000000004f520198413e0b239f016185c2c6a3c974897719cf9298cfc8e7f951fc33802bf5f53814201b9d173d0c160f1a244853c64fe3dba8d8f1a50ec85de"]}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x84, 0x6c, 0x34, 0x8, 0x15c2, 0xffdc, 0x5491, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x40, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcb, 0x0, 0x0, 0xc, 0x91, 0x64}}]}}]}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r4, 0x0) r5 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) 7m16.292845598s ago: executing program 0 (id=225): mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0xc000000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 7m14.097062221s ago: executing program 0 (id=226): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x9eb3, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x2) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0xa, 0x7, {0x0, r2, 0x1000000}}, 0x18) r3 = fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x60004ce) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONERANGE(r6, 0x4020940d, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfffffd9d) sendfile(r5, r7, 0x0, 0x8000002b) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1c, 0x7, 0x1, 0x7fff, 0xc201, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x0, @value, @void, @void, @value}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r7, r8}, 0xc) 7m12.708951878s ago: executing program 0 (id=231): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) 7m12.395570867s ago: executing program 0 (id=233): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x9, 0xe}, {0x10, 0xffff}, {0xffe0, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x4}]}}]}, 0x44}}, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) r7 = syz_io_uring_setup(0x516c, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x800, 0x20000200, 0x26b, 0x0, r6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r7, 0x6ed2, 0x8000dae5, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0x1b) writev(r10, &(0x7f0000000480)=[{&(0x7f00000004c0)="e4f742c91e7ff8a0b37fff7fbfd4aaa2976cf2e2d7886d057ec3b608fbcdf99a9025d0", 0x23}, {&(0x7f0000003080)="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", 0x7de}], 0x2) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r11, 0x8914, &(0x7f0000000000)) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7m11.217569811s ago: executing program 0 (id=236): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180"], 0x80}}, 0x0) (async) fstat(r0, &(0x7f00000002c0)) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4040, 0xa) (async) r3 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200080, &(0x7f0000002400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) renameat(r2, &(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 7m4.991155729s ago: executing program 32 (id=214): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x121000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendto$inet(r5, &(0x7f0000000200)="e1", 0x1, 0x40011, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000010340)={0xe, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000002e4eb28fde08ebef947f424501ff66ebe5e38b1be9de0c01c251829915b20a62de7b0bf124d041a3b667ff16c87d4aff843bb0cfc05693f9ee069a7fd6c2a30dfb4c48dd7f86e287b764565b01ff4363c3141eef0100c6577593e068783e8488a7541049aefc003ac624116ebd8b616c6648f52fe3a909a63f802ceadbbf92af706d8831d2b028059367e794f00b4968ebbaf1f8e2", @ANYRES32=r6, @ANYBLOB="000000000000000085000000270000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r5}, 0x20) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r10 = accept4$inet6(r2, 0x0, &(0x7f0000000340), 0x0) sendmsg$unix(r2, &(0x7f0000000400)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)="1ade1de4a23a9828e965", 0xa}], 0x1, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x2c, 0x1, 0x1, [r4, r2, r2, r6, r8, r2, r9]}}, @rights={{0x18, 0x1, 0x1, [r0, r10]}}], 0x60, 0x4000080}, 0x4004810) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80000, 0x100) 6m55.932577674s ago: executing program 33 (id=236): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) syz_emit_vhci(0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180"], 0x80}}, 0x0) (async) fstat(r0, &(0x7f00000002c0)) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4040, 0xa) (async) r3 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200080, &(0x7f0000002400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) renameat(r2, &(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2m39.808204995s ago: executing program 6 (id=869): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd7000000000000000000", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m38.555899184s ago: executing program 6 (id=871): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$vim2m(0x0, 0xd, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x23, 0x5, 0x0) connect$unix(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002180)=""/4139, 0x102b) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendto$inet6(r4, &(0x7f0000000440)="264f7e9708dc53a46de6ff26cef5f7c3513271c78056e3a1ce3f3bc10c11b16f7297745e430514c803c049f55c1a1c240831c6935d644e9f8dd749bac387a959257958eb1f8cd0b2e92dce05d508c5851fcdd2a8ed9e2da074e9fb24fb229234c13efbd14d4aee6977171f", 0x6b, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, '\x00', "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) 2m37.448315314s ago: executing program 6 (id=873): setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000575000/0x1000)=nil, 0x1000, 0x3000007, 0x38011, r0, 0xdf4ef000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_IIF={0x8, 0x1b}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) write$tun(r4, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x36) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x11, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000180)={{r3}, 0x7ff, 0x7, 0x5}) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) 2m36.920668305s ago: executing program 6 (id=874): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, r2, {0x7, 0x2b, 0xffffff4a, 0x20000000, 0x5, 0x7, 0x3, 0x3, 0x0, 0x0, 0x1, 0x89}}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000040)={"846bb400", 0xffff, 0x6, 0x2, 0x5, 0x0, "f1842cc3e94627219cca0000fe3100", "000416e2", "0400", '\x00 \x00 ', ["90000000060000000800", "aafed6a34c8acf2f5a867243", "000000ff0000000000000020", "000200"]}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x20000000) 2m32.59579679s ago: executing program 6 (id=883): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$vim2m(0x0, 0xd, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x23, 0x5, 0x0) connect$unix(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002180)=""/4139, 0x102b) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendto$inet6(r4, &(0x7f0000000440)="264f7e9708dc53a46de6ff26cef5f7c3513271c78056e3a1ce3f3bc10c11b16f7297745e430514c803c049f55c1a1c240831c6935d644e9f8dd749bac387a959257958eb1f8cd0b2e92dce05d508c5851fcdd2a8ed9e2da074e9fb24fb229234c13efbd14d4aee6977171f", 0x6b, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, '\x00', "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) 2m30.43617385s ago: executing program 6 (id=890): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x1008d2, &(0x7f0000000240)={0x0, 0xa6f1, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f00000006c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x20000044}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000640)=ANY=[], 0xd) mount$tmpfs(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0), 0x20410, &(0x7f0000000500)={[{@mpol={'mpol', 0x3d, {'bind', '=relative'}}}]}) r7 = socket(0x23, 0x5, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) accept4$netrom(r7, 0x0, 0x0, 0x80000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000540)={0x800, 0x1e0, 0x3c00, 0x480, 0x4, 0x5, 0x20, 0x0, {0xe9, 0x6, 0x1}, {0x3, 0x1, 0x1}, {0x9, 0x4}, {0x6, 0x1d8}, 0x3, 0x80, 0x0, 0xb89, 0x0, 0x0, 0x100, 0x21, 0x7, 0x44f, 0x4, 0x4, 0x20, 0x100, 0x1, 0x3}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) connect$vsock_stream(r8, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x230, 0x0, 0x170, 0x2c8, 0x230, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2, 0x41}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0x1}}}, {{@ip={@empty, @empty, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'wg2\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 2m14.401944753s ago: executing program 34 (id=890): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x1008d2, &(0x7f0000000240)={0x0, 0xa6f1, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f00000006c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x20000044}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000640)=ANY=[], 0xd) mount$tmpfs(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0), 0x20410, &(0x7f0000000500)={[{@mpol={'mpol', 0x3d, {'bind', '=relative'}}}]}) r7 = socket(0x23, 0x5, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) accept4$netrom(r7, 0x0, 0x0, 0x80000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000540)={0x800, 0x1e0, 0x3c00, 0x480, 0x4, 0x5, 0x20, 0x0, {0xe9, 0x6, 0x1}, {0x3, 0x1, 0x1}, {0x9, 0x4}, {0x6, 0x1d8}, 0x3, 0x80, 0x0, 0xb89, 0x0, 0x0, 0x100, 0x21, 0x7, 0x44f, 0x4, 0x4, 0x20, 0x100, 0x1, 0x3}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) connect$vsock_stream(r8, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x230, 0x0, 0x170, 0x2c8, 0x230, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2, 0x41}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0x1}}}, {{@ip={@empty, @empty, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'wg2\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 16.267466737s ago: executing program 2 (id=1203): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r1, @ANYBLOB="8b04040000000000300012800b00010065727370616e0000200002800400120006001800000040000500160002000000050017"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x40000) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 13.368653245s ago: executing program 2 (id=1210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES8], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000800)=@bridge_getneigh={0x220, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x20200}, [@IFLA_GSO_MAX_SIZE={0x8}, @IFLA_WEIGHT={0x8}, @IFLA_VF_PORTS={0x1f0, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xdc6}, @IFLA_PORT_VF={0x8, 0x1, 0x3e4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xd}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "431c2a4cc6c1355857eb99b876ebfa19"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "fa982d7cb868cd6d772fdf18b7d330c2"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "52a5d7b320e97bdb1aff90f4bfa8484f"}, @IFLA_PORT_PROFILE={0xd, 0x2, 'macvlan1\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xd, 0x2, 'macvlan1\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e52fe97f966698244c3afb38005057ed"}]}, {0x158, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x154, 0x2, 'eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|'}]}]}]}, 0x220}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x7c, 0xb1, '\x00', 0xa}, {0xf, 0x2, 0x8, '\x00', 0xaa}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0x5, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x3}, {0x5e, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0x5, 0x7, '\x00', 0x4}, {0xb3, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0x7}, {0x6, 0xc, 0x92, '\x00', 0x8}]}}) fcntl$getown(r0, 0x9) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r7, 0x5608, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x44002, &(0x7f0000000540)={[{@nfs_export_off}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}], [{@obj_type={'obj_type', 0x3d, '-[)-\'+'}}]}) ioperm(0x2, 0x0, 0xab9) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0xfffffffffffffffe, 0x0) socket$netlink(0x10, 0x3, 0x0) 12.246502972s ago: executing program 2 (id=1212): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0xf00) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x1}, 0x0, 0x1, {0x0}}) 9.679553524s ago: executing program 7 (id=1223): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003100)=ANY=[], 0x10448) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 8.764570867s ago: executing program 7 (id=1225): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r6) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x7}, &(0x7f0000000440)=0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) 8.705807626s ago: executing program 1 (id=1226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0xcf5) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002b40), 0x82, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) statx(r4, 0x0, 0x1000, 0x200, &(0x7f0000000280)) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000440)=ANY=[@ANYBLOB="00fb4b008079cff086f8eb867eb83c0f2e8c36d00a267cc02ba11cded537ca03d3fb6368a244248d4237ff30b74c24d237e4848405681d9aa55c0849d47b100502f8de172d633a2765986835761eb4b99d047f981add6e97"], 0x4b, 0x2) mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x141010, 0x0) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x3f) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140ffffffff0500050002000000050001"], 0x60}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000077c0)=[{{&(0x7f00000011c0)=@ieee802154={0x24, @short={0x2, 0x1}}, 0x80, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000000)="3cdfb4", 0x3}], 0x2}}], 0x1, 0x50) 8.08577782s ago: executing program 2 (id=1228): unshare(0x20040600) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x3c, 0x32, 0x10, 0x70bd2a, 0x25cfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) syz_usb_connect(0x0, 0x160, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x96, 0xa2, 0x87, 0xff, 0xbfd, 0x12, 0xc0f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14e, 0x1, 0xe, 0x3, 0x10, 0x1, [{{0x9, 0x4, 0xc2, 0x0, 0x6, 0x64, 0x0, 0x45, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0xc2a5, 0x7}, [@feature_unit={0xf, 0x24, 0x6, 0x6, 0x5, 0x4, [0x2, 0x6, 0x3, 0x8], 0x40}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x1, 0x2, [0x3, 0x7], 0x9}]}], [{{0x9, 0x5, 0x0, 0x8, 0x0, 0x8, 0x81, 0xff}}, {{0x9, 0x5, 0x8, 0x2, 0x3f7, 0xb4, 0x0, 0xff, [@generic={0xd5, 0x11, "a844956f8dc801694d13864cd9a8a76c3ed0658343a2ce8545c4b389b6521e4d5b55dfb189a3185e0cacbffbcaad162384317d97e656989b81b4e4bc755c3861fca99fa772c3ce76e03f529d18363bf4832088386310ee823278f77a2b66b5e733734a40ce3c9844e8998258e95f13302c8be9f14e5cfcae2985293a914fc069821705758a865e285b20b29ea3d62c4600722c715048f6ae21594caeddaf698f8e01788e6cd1d26b9c2e2e1b61ab3df67042d3cfb173aa2cd9eb7f8f1710918019a07663d45fbdf9a605279992781cbc76fd85"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x8}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x5, 0x2, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x3, 0x3, 0xea}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x6, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf9, 0xefe}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x1, 0xbb, 0xf0}}]}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x10, 0x2e, 0x6d, 0xa, 0xff, 0x6}, 0x16, &(0x7f0000000440)={0x5, 0xf, 0x16, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x4, 0x5}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x7, 0xf, 0x7}]}, 0x4, [{0x34, &(0x7f0000000480)=@string={0x34, 0x3, "8c6c3cb22a757eb7a3bfd67ff5ce710a2436034e8e1884a108f561bd49ccc048a69426efdd9ba0d295642e9a8539b8e1176f"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc0a}}, {0xb5, &(0x7f00000005c0)=ANY=[@ANYBLOB="b503abf8eb4be9831363f281e426fd61f995c71ffe4b58c8be8c3b4caa92572ad5826f33f2927ffd2a977d52b6c1dab0e9cd1c6612a71f6dfbb9b5dd314ddcb72a0d81114d903ee8a1b1dba9997e8841757ce72b4281ba2e70bb256c35c3f0e5eb0e2227de4a3c31f2f767168ae9da537a97d3d5707eeb13654600a3eae7c574c9b5d18c8dc2b15b73d6aec645fb9cc46ffbd06f56a0661884a87aedcb25405e4f830d01741323cde843df192c15d5a4a444144a06"]}]}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) read$eventfd(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r5, &(0x7f0000000500)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000080)=""/57, 0x39}, {&(0x7f00000000c0)=""/60, 0x3c}], 0x3, 0x5, 0xfff7fffd) syz_usb_control_io(r0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @local}, {0x6, @multicast}, 0x42, {0x2, 0x4e23, @empty}, 'veth1_to_bond\x00'}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x4, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x61, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x1, 0x1, 0x6, 0xd0, 0xb1, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "5f50fd41"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7d14, 0xff, 0x1451, 0x3}, [@mbim_extended={0x8, 0x24, 0x1c, 0x800, 0x4a, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}, @acm={0x4, 0x24, 0x2, 0xd}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xc3}, @mbim={0xc, 0x24, 0x1b, 0x7, 0xc1d, 0x8, 0x9, 0x9e, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x69, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7f, 0x77, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x38, 0x6, 0xa1, 0x57}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x1, 0x0, 0x7, 0x40, 0x3}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x3, [{0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="2d038b10c920bdf15734d3eaf077e7744ce4e6b32f1daa0e6ee69a4e11c229a63fabcd632306c0000000000000"]}, {0x7e, &(0x7f0000000140)=@string={0x7e, 0x3, "4dccfaa0bdec18920051fdd93b7d25a4a9c0159c18ae10bf86835ebd856ef8c7be48518b123acb1bb96fa9048b6e1fc7f031088778174c391ce7d8f53efacbfd3eb30dbcfc533a37bf2854a0702e179c33e43d6216df66639bebfe298675a9fbafca65d198e9fc955bec6bb000a4b830eca0308dfb81263152d0f00d"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43f}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.82648072s ago: executing program 3 (id=1232): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x0, 0x10}, {0x7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e0f30fa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26000015}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.753544438s ago: executing program 1 (id=1233): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 6.695706137s ago: executing program 5 (id=1234): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7fe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000280)={0x1d, 0x7, 0xe5a}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x29, 0x5, 0x5) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="b4", 0x1}], 0x1}, 0x8010) close(r5) r6 = io_uring_setup(0x2b7b, &(0x7f0000000440)={0x0, 0x200c15e, 0x10, 0x801, 0x28f}) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x6, 0x1, 0x2, "84689571d31e9651295ae557ad33861bf9649dde41e5f9e891a778c36b9e4d42", 0x584e4f53}) 5.496636114s ago: executing program 5 (id=1235): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003100)=ANY=[], 0x10448) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 5.470372719s ago: executing program 1 (id=1236): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23, 0xa502}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20090}}}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x18, 0x32, 0xb, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (fail_nth: 1) 4.760719267s ago: executing program 3 (id=1237): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) 4.549039223s ago: executing program 5 (id=1238): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0xf00) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x1}, 0x0, 0x1, {0x0}}) 4.507881847s ago: executing program 1 (id=1239): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x6210, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000e00)=ANY=[@ANYBLOB="28020000150000012dbd7000fbdbdf25fe80000000001100000000000000001ffc0000000000000000000600000000014e2000004e2400000200a0802c00000046b3443d6073c4f2a2e7e3cb89faba918d687c79cec74ecdcc68c5a1f6865982013f58db062f011eacf67c31380e82729001bbe21f5112fd857db86b904bd5795d6e6acc618226f96d28437a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x228}}, 0x4040000) syz_emit_ethernet(0x82, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r0], 0x0) r2 = creat(&(0x7f0000000740)='./file0/bus\x00', 0xc) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dvmrp1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100005800c"], 0x34}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x800}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x800, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0x9, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000040000000000000000000000af760100010000008c080800ffffffff18110000", @ANYRES32, @ANYBLOB="00000000008500000086000000950400"/32], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x5, &(0x7f00000002c0)=""/5, 0x41100, 0x1, '\x00', r4, @fallback, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x10, 0x8, 0x148}, 0x10, r5, r2, 0x4, &(0x7f00000003c0)=[r2, r2, r2], &(0x7f0000000400)=[{0x5, 0x4, 0x4, 0x8}, {0x1, 0x1, 0x10}, {0x3, 0x3, 0x9, 0x1}, {0x3, 0x3, 0xf, 0xa}], 0x10, 0x4, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0x9, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000040000000000000000000000af760100010000008c080800ffffffff18110000", @ANYRES32, @ANYBLOB="00000000008500000086000000950400"/32], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x5, &(0x7f00000002c0)=""/5, 0x41100, 0x1, '\x00', r4, @fallback, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x10, 0x8, 0x148}, 0x10, r5, r2, 0x4, &(0x7f00000003c0)=[r2, r2, r2], &(0x7f0000000400)=[{0x5, 0x4, 0x4, 0x8}, {0x1, 0x1, 0x10}, {0x3, 0x3, 0x9, 0x1}, {0x3, 0x3, 0xf, 0xa}], 0x10, 0x4, @void, @value}, 0x94) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (async) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fchdir(r7) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) open(&(0x7f0000000140)='./file1\x00', 0x100, 0x97) (async) r8 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x97) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="300000003c000701feffffff00000000017c000008004200040008000c00018006000600800a000008000280e1af822f"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="300000003c000701feffffff00000000017c000008004200040008000c00018006000600800a000008000280e1af822f"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000040)=r12, 0x4) sendmsg$unix(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040810}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x2, 0x3}}, './file0/bus\x00'}) 4.488200374s ago: executing program 3 (id=1240): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_SET_STATUS(r2, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xc, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ececd9bada8b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9acc6c25af21ca2af6d2e80e4caadd6d126cfb80c92dc817d44dcdec", [0x1]}) syz_usb_connect$uac1(0x5, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000086b1d010140000102030109027c0003010740080904000000010100000a24010000000201020724070103005f09040700000102000009040100e601020000072401029c01100905010900047f06060725018205feff09040200000102000009040201010102000007240105000100082402010402dc0809058209000202090507251101f9"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="7a03f4ad5199896be84b5de50088a89ae2145d27b5097450f00471ba2f4b3e0b133e3acb400908b37325f0e61217278d2423c579a7090f4f8714a4fd4e8684c0027901c7f1051a944b256b94e5bfa9eb84e66367ce3125a3b20000000000000000000004f520198413e0b239f016185c2c6a3c974897719cf9298cfc8e7f951fc33802bf5f53814201b9d173d0c160f1a244853c64fe3dba8d8f1a50ec85de"]}]}) ptrace$ARCH_GET_FS(0x1e, 0xffffffffffffffff, &(0x7f00000002c0), 0x1003) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x84, 0x6c, 0x34, 0x8, 0x15c2, 0xffdc, 0x5491, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x40, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcb, 0x0, 0x0, 0xc, 0x91, 0x64}}]}}]}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r4, 0x0) r5 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) 4.345529811s ago: executing program 5 (id=1241): socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xc, 0x1a}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000001140), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000009, 0x2, 0x40) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r4 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="4c000000190001090000000000000000021800000000fd010000000008000100ac141400080005000a0101021800168014000300fe8000000000000000000000000000aa0600150004"], 0x4c}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000500)=""/126, 0x7e, 0x0, &(0x7f00000005c0)=""/160, 0xa0}}, 0x10) 3.336587529s ago: executing program 1 (id=1242): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000ac0)={0x9, 0xb, 0x4, 0x2, 0x401, {}, {0x1, 0x8, 0x90, 0xa, 0x1, 0x0, "6da2e5e7"}, 0x7fff, 0x4, {}, 0x81}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="001b000000000000"], 0x30}}, 0x0) socket(0x11, 0x80a, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.784198639s ago: executing program 5 (id=1243): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x9eb3, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x2) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0xa, 0x7, {0x0, r2, 0x1000000}}, 0x18) r3 = fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x60004ce) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONERANGE(r6, 0x4020940d, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfffffd9d) sendfile(r5, r7, 0x0, 0x8000002b) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1c, 0x7, 0x1, 0x7fff, 0xc201, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x0, @value, @void, @void, @value}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r7, r8}, 0xc) 2.055633251s ago: executing program 7 (id=1244): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r3, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) r4 = syz_io_uring_setup(0x10a, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x80, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='./file0\x00'}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.753725734s ago: executing program 1 (id=1245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) r2 = gettid() syz_open_procfs(r2, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x5, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_READ=@pass_buffer={0x16, 0xa, 0x2004, @fd_index=0x9, 0xc, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x58, &(0x7f0000000500)}, 0x10) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x32, 0x701, 0xfffffffc, 0x0, {0x6}}, 0x14}}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r13 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r13, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r14 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r14, 0x4048aecb, &(0x7f00000002c0)) 1.695187006s ago: executing program 3 (id=1246): ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0xd, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002180)=""/4139, 0x102b) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553ff73042486134529f62054673877e37"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/107, 0x6b}], 0x1}, 0x20) 1.693980065s ago: executing program 5 (id=1247): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x0, 0x10}, {0x7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e0f30fa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26000015}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.676902592s ago: executing program 7 (id=1248): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0x50418, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r5, r6, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(r2, &(0x7f000000c380)='./file0\x00', 0x612001, 0x0) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r7, r3) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) dup(0xffffffffffffffff) ioperm(0x0, 0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000300), 0xffffffff, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) memfd_create(&(0x7f0000000b80)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x109) 943.312232ms ago: executing program 3 (id=1249): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) close(r2) write$cgroup_subtree(r3, &(0x7f0000003100)=ANY=[], 0x10448) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 884.481286ms ago: executing program 2 (id=1250): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) 577.445552ms ago: executing program 7 (id=1251): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0xf00) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x1}, 0x0, 0x1, {0x0}}) 157.144768ms ago: executing program 7 (id=1252): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x400000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xffffff7a}, 0x1, 0x0, 0x0, 0x4004000}, 0x40011) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r0, 0x6, &(0x7f0000000200)=0x4) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000480)={0xbe, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007c00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x1, @private1, 0x406}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000007e40)="75b9", 0x2}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x13f8, 0xb8a, 0x2, 0x6, 0x3, 0x8, 0xffffcc7b, 0x40007}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2d, 0x1, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x7}}}, 0x24}}, 0x0) r6 = socket(0x1e, 0x1, 0x8001) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c0016"], 0x30}}, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x0, 0x44004) 133.687607ms ago: executing program 2 (id=1253): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL(0x23, 0x0, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 0s ago: executing program 3 (id=1254): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 0x7f [ 177.350426][ T6565] RIP: 0033:0x7fafa4b8e969 [ 177.350444][ T6565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.350460][ T6565] RSP: 002b:00007fafa5a1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.350481][ T6565] RAX: ffffffffffffffda RBX: 00007fafa4db6160 RCX: 00007fafa4b8e969 [ 177.350497][ T6565] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 177.350509][ T6565] RBP: 00007fafa5a1a090 R08: 0000000000000000 R09: 0000000000000000 [ 177.350521][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.350532][ T6565] R13: 0000000000000000 R14: 00007fafa4db6160 R15: 00007ffc7b2a1168 [ 177.350564][ T6565] [ 177.725419][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 177.781512][ T6559] syz.0.161: attempt to access beyond end of device [ 177.781512][ T6559] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 177.794733][ T6559] syz.0.161: attempt to access beyond end of device [ 177.794733][ T6559] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 177.808057][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 177.859566][ T6557] nbd0: detected capacity change from 0 to 67108884 [ 177.941666][ T6559] block nbd0: Send control failed (result -89) [ 178.002323][ T6559] block nbd0: Request send failed, requeueing [ 178.039423][ T5821] block nbd0: Receive control failed (result -32) [ 178.068080][ T6044] block nbd0: Dead connection, failed to find a fallback [ 178.077004][ T6044] block nbd0: shutting down sockets [ 178.083788][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.118393][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0 [ 178.272553][ T6559] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.287159][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1, location=1 [ 178.291620][ T5832] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.301712][ T6559] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.556558][ T5832] Buffer I/O error on dev nbd0, logical block 0, async page read [ 178.567024][ T5832] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.631990][ T6581] loop6: detected capacity change from 0 to 63 [ 179.163635][ T5832] Buffer I/O error on dev nbd0, logical block 1, async page read [ 179.275579][ T5832] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.285718][ T5832] Buffer I/O error on dev nbd0, logical block 2, async page read [ 179.294370][ T5832] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.303707][ T5832] Buffer I/O error on dev nbd0, logical block 3, async page read [ 179.351249][ T5832] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.387574][ T5832] Buffer I/O error on dev nbd0, logical block 0, async page read [ 179.409526][ T5832] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.742338][ T5832] Buffer I/O error on dev nbd0, logical block 1, async page read [ 179.753829][ T5832] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.799434][ T5832] Buffer I/O error on dev nbd0, logical block 2, async page read [ 179.847338][ T5832] Buffer I/O error on dev nbd0, logical block 3, async page read [ 179.856314][ T5832] Buffer I/O error on dev nbd0, logical block 0, async page read [ 179.872493][ T5832] Buffer I/O error on dev nbd0, logical block 1, async page read [ 179.917191][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 179.963769][ T5832] ldm_validate_partition_table(): Disk read failed. [ 180.004872][ T5832] Dev nbd0: unable to read RDB block 0 [ 180.012273][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 180.092537][ T5832] nbd0: unable to read partition table [ 180.142142][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777220, location=16777220 [ 180.159238][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776964, location=16776964 [ 180.229802][ T5832] ldm_validate_partition_table(): Disk read failed. [ 180.241875][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777219, location=16777219 [ 180.262286][ T5832] Dev nbd0: unable to read RDB block 0 [ 180.269093][ T5832] nbd0: unable to read partition table [ 180.292103][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776963, location=16776963 [ 180.341145][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777218, location=16777218 [ 180.361563][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776962, location=16776962 [ 180.386504][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777070, location=16777070 [ 180.427820][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776814, location=16776814 [ 180.470495][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777068, location=16777068 [ 180.516270][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776812, location=16776812 [ 180.562127][ T6596] FAULT_INJECTION: forcing a failure. [ 180.562127][ T6596] name failslab, interval 1, probability 0, space 0, times 0 [ 180.571850][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 180.584964][ T6596] CPU: 0 UID: 0 PID: 6596 Comm: syz.2.171 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 180.584992][ T6596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.585004][ T6596] Call Trace: [ 180.585012][ T6596] [ 180.585020][ T6596] dump_stack_lvl+0x189/0x250 [ 180.585056][ T6596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.585084][ T6596] ? __pfx__printk+0x10/0x10 [ 180.585116][ T6596] ? __pfx___might_resched+0x10/0x10 [ 180.585146][ T6596] ? fs_reclaim_acquire+0x7d/0x100 [ 180.585172][ T6596] should_fail_ex+0x414/0x560 [ 180.585197][ T6596] should_failslab+0xa8/0x100 [ 180.585218][ T6596] __kmalloc_noprof+0xcb/0x4f0 [ 180.585247][ T6596] ? tomoyo_encode+0x28b/0x550 [ 180.585278][ T6596] tomoyo_encode+0x28b/0x550 [ 180.585311][ T6596] tomoyo_realpath_from_path+0x58d/0x5d0 [ 180.585338][ T6596] ? kmem_cache_free+0x192/0x3f0 [ 180.585369][ T6596] tomoyo_mount_permission+0x8d8/0x970 [ 180.585393][ T6596] ? tomoyo_mount_permission+0x27a/0x970 [ 180.585414][ T6596] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 180.585483][ T6596] security_sb_mount+0xec/0x350 [ 180.585513][ T6596] path_mount+0xbc/0xfe0 [ 180.585545][ T6596] ? user_path_at+0x44/0x60 [ 180.585562][ T6596] ? kmem_cache_free+0x192/0x3f0 [ 180.585594][ T6596] __se_sys_mount+0x317/0x410 [ 180.585614][ T6596] ? __pfx___se_sys_mount+0x10/0x10 [ 180.585633][ T6596] ? do_syscall_64+0xba/0x210 [ 180.585652][ T6596] ? __x64_sys_mount+0x20/0xc0 [ 180.585669][ T6596] do_syscall_64+0xf6/0x210 [ 180.585690][ T6596] ? clear_bhb_loop+0x60/0xb0 [ 180.585710][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.585725][ T6596] RIP: 0033:0x7f110bb8e969 [ 180.585739][ T6596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.585752][ T6596] RSP: 002b:00007f110ca82038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 180.585769][ T6596] RAX: ffffffffffffffda RBX: 00007f110bdb6160 RCX: 00007f110bb8e969 [ 180.585781][ T6596] RDX: 0000200000000540 RSI: 0000200000000500 RDI: 00002000000004c0 [ 180.585792][ T6596] RBP: 00007f110ca82090 R08: 0000000000000000 R09: 0000000000000000 [ 180.585802][ T6596] R10: 0000000003000008 R11: 0000000000000246 R12: 0000000000000002 [ 180.585811][ T6596] R13: 0000000000000001 R14: 00007f110bdb6160 R15: 00007fffd418fba8 [ 180.585836][ T6596] [ 180.588405][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 180.848219][ T6596] ERROR: Out of memory at tomoyo_realpath_from_path. [ 180.882283][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388609, location=8388609 [ 180.908239][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388353, location=8388353 [ 180.937811][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388608, location=8388608 [ 181.202437][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388352, location=8388352 [ 181.217821][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388607, location=8388607 [ 181.300307][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388351, location=8388351 [ 181.361648][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388459, location=8388459 [ 181.382108][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388203, location=8388203 [ 181.436969][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388457, location=8388457 [ 181.471533][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388201, location=8388201 [ 181.519193][ T6559] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 181.563271][ T6559] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 181.761630][ T6608] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 183.201405][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 183.921361][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 183.940969][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 183.990125][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 184.010659][ T9] usb 4-1: config 1 has no interface number 1 [ 184.026276][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.037489][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.051380][ T9] usb 4-1: Product: syz [ 184.059038][ T9] usb 4-1: Manufacturer: syz [ 184.068430][ T9] usb 4-1: SerialNumber: syz [ 184.126115][ T6620] kvm: kvm [6619]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x10000a359 [ 184.170926][ T6620] kvm: kvm [6619]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xb1ed [ 184.594942][ T9] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 184.628185][ T9] usb 4-1: 2:1 : sample bitwidth 220 in over sample bytes 2 [ 184.699490][ T9] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 184.844099][ T9] usb 4-1: USB disconnect, device number 3 [ 184.988457][ T6632] loop6: detected capacity change from 0 to 63 [ 185.682981][ T6630] openvswitch: netlink: IP tunnel TTL not specified. [ 186.601641][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'. [ 187.428313][ T6648] NILFS (nullb0): couldn't find nilfs on the device [ 188.176891][ T6644] erspan0: entered promiscuous mode [ 188.216370][ T6644] macvtap1: entered promiscuous mode [ 188.236625][ T6644] macvtap1: entered allmulticast mode [ 188.291390][ T6644] erspan0: entered allmulticast mode [ 188.437816][ T6649] erspan0: left allmulticast mode [ 188.461719][ T6649] erspan0: left promiscuous mode [ 189.156804][ T6664] ceph: No mds server is up or the cluster is laggy [ 189.165693][ T9] libceph: connect (1)[c::]:6789 error -101 [ 189.172408][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 189.370843][ T6679] loop6: detected capacity change from 0 to 63 [ 189.993913][ T9] libceph: connect (1)[c::]:6789 error -101 [ 190.000157][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 190.360961][ T6059] buffer_io_error: 80 callbacks suppressed [ 190.360978][ T6059] Buffer I/O error on dev loop6, logical block 0, async page read [ 190.375798][ T6059] Buffer I/O error on dev loop6, logical block 0, async page read [ 190.384349][ T6059] Buffer I/O error on dev loop6, logical block 0, async page read [ 190.399710][ T6059] Buffer I/O error on dev loop6, logical block 0, async page read [ 190.419490][ T6059] Buffer I/O error on dev loop6, logical block 0, async page read [ 190.466746][ T6059] Buffer I/O error on dev loop6, logical block 0, async page read [ 190.519973][ T6059] Buffer I/O error on dev loop6, logical block 3, async page read [ 191.621457][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 192.332379][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 192.921649][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 192.936443][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 192.946240][ T10] usb 2-1: config 1 has no interface number 1 [ 192.956069][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.999494][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.021337][ T10] usb 2-1: Product: syz [ 193.025584][ T10] usb 2-1: Manufacturer: syz [ 193.046805][ T10] usb 2-1: SerialNumber: syz [ 193.311344][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 193.328413][ T6689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.343941][ T6689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.151617][ T10] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 194.159852][ T10] usb 2-1: 2:1 : sample bitwidth 220 in over sample bytes 2 [ 194.168676][ T10] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 194.229663][ T10] usb 2-1: USB disconnect, device number 5 [ 194.283089][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 194.457506][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.464243][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.826315][ T9] usb 3-1: unable to read config index 0 descriptor/all [ 197.841270][ T9] usb 3-1: can't read configurations, error -71 [ 197.930598][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.802533][ T6759] netlink: 32 bytes leftover after parsing attributes in process `syz.2.215'. [ 199.010867][ T6759] netlink: 32 bytes leftover after parsing attributes in process `syz.2.215'. [ 200.241965][ T6779] Bluetooth: MGMT ver 1.23 [ 200.406710][ T5892] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 201.031606][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 201.043910][ T5892] usb 1-1: unable to get BOS descriptor or descriptor too short [ 201.075645][ T5892] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 201.113857][ T5892] usb 1-1: config 1 has no interface number 1 [ 201.131095][ T5892] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.150629][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.189544][ T5892] usb 1-1: Product: syz [ 201.210214][ T5892] usb 1-1: Manufacturer: syz [ 201.219044][ T5892] usb 1-1: SerialNumber: syz [ 201.455422][ T6773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.464667][ T6773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.540096][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ff0f000: rx timeout, send abort [ 201.550221][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801ff0f000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 203.190789][ T5892] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 204.382333][ T5874] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 204.422960][ T5892] usb 1-1: 2:1 : sample bitwidth 220 in over sample bytes 2 [ 204.430604][ T5892] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 204.479608][ T5892] usb 1-1: USB disconnect, device number 5 [ 204.637801][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 204.651567][ T5874] usb 4-1: device descriptor read/64, error -71 [ 204.668742][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.908700][ T5874] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 205.591664][ T5874] usb 4-1: device descriptor read/64, error -71 [ 205.751774][ T5874] usb usb4-port1: attempt power cycle [ 206.146374][ T5874] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 206.349623][ T6820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.233'. [ 206.424050][ T5874] usb 4-1: device not accepting address 6, error -71 [ 207.129104][ T6820] bpq0: entered promiscuous mode [ 207.171656][ T6820] bpq0: entered allmulticast mode [ 208.081434][ T5874] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 208.252857][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 208.270924][ T5874] usb 4-1: unable to get BOS descriptor or descriptor too short [ 208.292864][ T5874] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 208.312716][ T5874] usb 4-1: config 1 has no interface number 1 [ 208.335030][ T5874] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 208.361217][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.396390][ T5874] usb 4-1: Product: syz [ 208.407492][ T5874] usb 4-1: Manufacturer: syz [ 208.419978][ T5874] usb 4-1: SerialNumber: syz [ 208.702395][ T6828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.711699][ T6828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.191876][ T5874] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 209.245176][ T5874] usb 4-1: 2:1 : sample bitwidth 220 in over sample bytes 2 [ 209.267812][ T5874] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 209.339877][ T5874] usb 4-1: USB disconnect, device number 8 [ 209.423474][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.844094][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.242'. [ 213.531371][ T6870] nvme_fabrics: missing parameter 'transport=%s' [ 213.581228][ T6870] nvme_fabrics: missing parameter 'nqn=%s' [ 213.981540][ T6882] netlink: 36 bytes leftover after parsing attributes in process `syz.1.250'. [ 214.751968][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.761412][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.769611][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.778733][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.787645][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.107316][ T6886] chnl_net:caif_netlink_parms(): no params data found [ 216.865096][ T6889] Bluetooth: hci5: command tx timeout [ 217.019985][ T6889] Bluetooth: hci0: command 0x0406 tx timeout [ 217.026475][ T6889] Bluetooth: hci4: command 0x0406 tx timeout [ 217.043355][ T6889] Bluetooth: hci1: command 0x0406 tx timeout [ 217.049613][ T6889] Bluetooth: hci2: command 0x0406 tx timeout [ 217.059717][ T6889] Bluetooth: hci3: command 0x0406 tx timeout [ 217.618969][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.655810][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.667395][ T6886] bridge_slave_0: entered allmulticast mode [ 217.677974][ T6886] bridge_slave_0: entered promiscuous mode [ 217.711500][ T6886] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.723377][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.741017][ T6886] bridge_slave_1: entered allmulticast mode [ 217.769601][ T6886] bridge_slave_1: entered promiscuous mode [ 218.262378][ T6917] netlink: 80 bytes leftover after parsing attributes in process `syz.1.258'. [ 218.592254][ T6886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.653690][ T6886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.872288][ T6886] team0: Port device team_slave_0 added [ 218.897103][ T6886] team0: Port device team_slave_1 added [ 218.931994][ T6888] Bluetooth: hci5: command tx timeout [ 219.135971][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.154261][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.185777][ T6886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.209786][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.217156][ T5872] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 219.226328][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.267837][ T6886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.438173][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 219.470420][ T5872] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 219.490144][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.521588][ T5872] usb 4-1: Product: syz [ 219.526430][ T5872] usb 4-1: Manufacturer: syz [ 219.545841][ T5872] usb 4-1: SerialNumber: syz [ 219.555729][ T6886] hsr_slave_0: entered promiscuous mode [ 219.578519][ T5872] r8152-cfgselector 4-1: Unknown version 0x0000 [ 219.589237][ T6886] hsr_slave_1: entered promiscuous mode [ 219.600853][ T5872] r8152-cfgselector 4-1: config 0 descriptor?? [ 219.608619][ T6886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.654868][ T6886] Cannot create hsr debugfs directory [ 220.005876][ T6930] overlayfs: failed to clone lowerpath [ 220.155051][ T5892] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 220.516117][ T6886] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.556536][ T6886] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.583371][ T6886] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.624580][ T6886] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 220.932810][ T6886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.010534][ T6886] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.011467][ T6888] Bluetooth: hci5: command tx timeout [ 221.094036][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.101296][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.140040][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.147271][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.302101][ T5826] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 221.390476][ T6944] netlink: 36 bytes leftover after parsing attributes in process `syz.2.266'. [ 221.477004][ T5826] usb 4-1: Using ep0 maxpacket: 32 [ 221.492932][ T5826] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.555851][ T5826] usb 4-1: config 0 interface 0 has no altsetting 0 [ 221.585448][ T5826] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 221.626193][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.680656][ T5826] usb 4-1: config 0 descriptor?? [ 221.924445][ T6940] ip6gretap0: entered promiscuous mode [ 221.930168][ T6940] vlan2: entered promiscuous mode [ 222.120025][ T5826] usbhid 4-1:0.0: can't add hid device: -71 [ 222.151104][ T5826] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 222.210492][ T5826] usb 4-1: USB disconnect, device number 10 [ 222.275052][ T6886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.091296][ T6888] Bluetooth: hci5: command tx timeout [ 223.202780][ T6956] netlink: 20 bytes leftover after parsing attributes in process `syz.1.269'. [ 223.634027][ T6886] veth0_vlan: entered promiscuous mode [ 223.662743][ T6886] veth1_vlan: entered promiscuous mode [ 224.664468][ T6886] veth0_macvtap: entered promiscuous mode [ 224.702274][ T5825] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 224.727587][ T5825] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 224.736732][ T5825] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 224.754207][ T6886] veth1_macvtap: entered promiscuous mode [ 224.761746][ T5825] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 224.771758][ T5825] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 224.833247][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.845506][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.858946][ T6886] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.867802][ T6886] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.876944][ T6886] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.885991][ T6886] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.388069][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.410753][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.790731][ T5969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.899171][ T5969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.877404][ T7006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.281'. [ 226.889218][ T6888] Bluetooth: hci6: command tx timeout [ 227.689336][ T6975] chnl_net:caif_netlink_parms(): no params data found [ 227.892908][ T7004] wireguard0: entered promiscuous mode [ 228.733123][ T6975] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.740609][ T6975] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.759462][ T6975] bridge_slave_0: entered allmulticast mode [ 228.767887][ T6975] bridge_slave_0: entered promiscuous mode [ 228.811562][ T6975] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.818941][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.859695][ T6975] bridge_slave_1: entered allmulticast mode [ 228.907317][ T6975] bridge_slave_1: entered promiscuous mode [ 228.931341][ T5825] Bluetooth: hci6: command tx timeout [ 229.108939][ T6975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.209428][ T6975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.650043][ T7033] input: syz1 as /devices/virtual/input/input7 [ 229.857374][ T6975] team0: Port device team_slave_0 added [ 229.985353][ T6975] team0: Port device team_slave_1 added [ 230.479493][ T6975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.509738][ T6975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.536191][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.545532][ T6975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.574291][ T6975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.592557][ T6975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.619125][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.710421][ T6975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.011377][ T5825] Bluetooth: hci6: command tx timeout [ 231.077294][ T6975] hsr_slave_0: entered promiscuous mode [ 231.147482][ T6975] hsr_slave_1: entered promiscuous mode [ 231.164384][ T6975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.196720][ T6975] Cannot create hsr debugfs directory [ 233.091363][ T5825] Bluetooth: hci6: command tx timeout [ 234.805627][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 234.995770][ T7114] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:16389 [ 235.023535][ T10] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 235.208809][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 235.241602][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.256501][ T10] usb 4-1: Product: syz [ 235.276402][ T10] usb 4-1: Manufacturer: syz [ 235.291322][ T10] usb 4-1: SerialNumber: syz [ 235.318617][ T10] usb 4-1: config 0 descriptor?? [ 235.344465][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 235.544945][ T7111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.319'. [ 235.609120][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.633333][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.028282][ T10] gspca_sonixj: reg_w1 err -110 [ 236.033404][ T10] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 237.897970][ T6975] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 237.971095][ T6975] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 238.220092][ T6975] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 238.229830][ T7122] netlink: 36 bytes leftover after parsing attributes in process `syz.1.321'. [ 238.286727][ T6975] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 238.548127][ T6975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.606856][ T6975] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.642684][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.650203][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.697908][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.705662][ T5968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.864905][ T10] usb 4-1: USB disconnect, device number 11 [ 240.592483][ T6975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.083223][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 241.190308][ T7165] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:16389 [ 243.362800][ T6975] veth0_vlan: entered promiscuous mode [ 243.411251][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 243.427609][ T6975] veth1_vlan: entered promiscuous mode [ 244.341261][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 244.387804][ T6975] veth0_macvtap: entered promiscuous mode [ 244.473367][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 244.527744][ T6975] veth1_macvtap: entered promiscuous mode [ 244.541247][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 244.550332][ T10] usb 4-1: config 1 has no interface number 1 [ 244.607968][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.644314][ T6975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.661622][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.670160][ T10] usb 4-1: Product: syz [ 244.681402][ T10] usb 4-1: Manufacturer: syz [ 244.686194][ T10] usb 4-1: SerialNumber: syz [ 244.700216][ T6975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.767837][ T6975] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.811611][ T6975] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.848802][ T6975] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.890305][ T6975] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.952392][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.961460][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.053969][ T10] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 245.145880][ T10] usb 4-1: 2:1 : sample bitwidth 220 in over sample bytes 2 [ 245.188120][ T10] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 245.272563][ T10] usb 4-1: USB disconnect, device number 12 [ 245.314061][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.358761][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.406716][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.572937][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.617249][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.654510][ T5872] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 247.991494][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 248.092468][ T5872] usb 4-1: config 64 has an invalid interface number: 203 but max is 0 [ 248.128165][ T5872] usb 4-1: config 64 has no interface number 0 [ 248.161470][ T5872] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=54.91 [ 248.170682][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.384253][ T5872] imon 4-1:64.203: unable to register, err -19 [ 249.441443][ T5826] usb 4-1: USB disconnect, device number 13 [ 249.625896][ T7235] loop6: detected capacity change from 0 to 63 [ 249.687526][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.716142][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.751919][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.781632][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.820811][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.857971][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.877337][ T5832] Buffer I/O error on dev loop6, logical block 3, async page read [ 253.787892][ T7278] loop6: detected capacity change from 0 to 63 [ 254.481665][ T7282] netlink: 140 bytes leftover after parsing attributes in process `syz.5.363'. [ 254.505204][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 254.524153][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 254.550879][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.950427][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.985429][ T7297] loop6: detected capacity change from 0 to 63 [ 256.091417][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.599089][ T5829] buffer_io_error: 4 callbacks suppressed [ 256.599108][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 256.659844][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 256.695060][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 256.714705][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 256.726251][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 256.738970][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 256.755139][ T5829] Buffer I/O error on dev loop6, logical block 3, async page read [ 262.497782][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.377'. [ 262.570388][ T7333] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:16389 [ 263.635362][ T7320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.082197][ T7358] netlink: 16 bytes leftover after parsing attributes in process `syz.6.383'. [ 265.315074][ T7358] binder: 7357:7358 ioctl c0306201 200000000540 returned -22 [ 267.450978][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 267.506975][ T7386] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:16389 [ 267.661302][ T5892] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 267.831484][ T5892] usb 7-1: device descriptor read/64, error -71 [ 268.071849][ T5892] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 268.462562][ T5892] usb 7-1: device descriptor read/64, error -71 [ 268.654355][ T5892] usb usb7-port1: attempt power cycle [ 269.187637][ T5892] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 269.279875][ T5892] usb 7-1: device descriptor read/8, error -71 [ 273.641319][ T5874] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 273.842856][ T7462] 9pnet_fd: Insufficient options for proto=fd [ 273.852715][ T7462] ======================================================= [ 273.852715][ T7462] WARNING: The mand mount option has been deprecated and [ 273.852715][ T7462] and is ignored by this kernel. Remove the mand [ 273.852715][ T7462] option from the mount to silence this warning. [ 273.852715][ T7462] ======================================================= [ 273.890940][ T5874] usb 4-1: device descriptor read/64, error -71 [ 274.188526][ T5874] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 274.661559][ T5874] usb 4-1: device descriptor read/64, error -71 [ 274.782323][ T5874] usb usb4-port1: attempt power cycle [ 275.410688][ T5874] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 275.522232][ T5874] usb 4-1: device descriptor read/8, error -71 [ 275.791418][ T5874] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 275.882000][ T5874] usb 4-1: device descriptor read/8, error -71 [ 276.031862][ T5874] usb usb4-port1: unable to enumerate USB device [ 282.451372][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 282.671209][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 283.241225][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 283.263442][ T9] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 283.283909][ T7519] netlink: 36 bytes leftover after parsing attributes in process `syz.5.428'. [ 283.296361][ T9] usb 7-1: config 1 has no interface number 1 [ 283.324902][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.347742][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.366653][ T9] usb 7-1: Product: syz [ 283.377047][ T9] usb 7-1: Manufacturer: syz [ 283.386955][ T9] usb 7-1: SerialNumber: syz [ 283.461303][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 283.622418][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 283.637844][ T7512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.647032][ T7512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.695171][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 283.729054][ T9] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 283.745799][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 283.761280][ T9] usb 7-1: 2:1 : sample bitwidth 220 in over sample bytes 2 [ 283.768751][ T10] usb 4-1: config 1 has no interface number 1 [ 283.781521][ T9] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 283.803389][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.851200][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.890515][ T10] usb 4-1: Product: syz [ 283.897848][ T9] usb 7-1: USB disconnect, device number 6 [ 283.911585][ T10] usb 4-1: Manufacturer: syz [ 283.916257][ T10] usb 4-1: SerialNumber: syz [ 283.980450][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.288967][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.298091][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.356171][ T10] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 284.395046][ T10] usb 4-1: 2:1 : sample bitwidth 220 in over sample bytes 2 [ 284.424877][ T10] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 284.645905][ T10] usb 4-1: USB disconnect, device number 18 [ 284.739684][ T7529] netlink: 40 bytes leftover after parsing attributes in process `syz.1.431'. [ 285.297113][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.141261][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 287.468155][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 287.483188][ T10] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 287.519395][ T10] usb 3-1: config 0 has no interface number 0 [ 287.541983][ T10] usb 3-1: too many endpoints for config 0 interface 122 altsetting 90: 132, using maximum allowed: 30 [ 287.742828][ T5892] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 288.033915][ T5892] usb 6-1: device descriptor read/64, error -71 [ 288.412146][ T5892] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 289.748753][ T10] usb 3-1: config 0 interface 122 altsetting 90 has 0 endpoint descriptors, different from the interface descriptor's value: 132 [ 289.811427][ T5892] usb 6-1: device descriptor read/64, error -71 [ 291.012298][ T5892] usb usb6-port1: attempt power cycle [ 291.388235][ T10] usb 3-1: config 0 interface 122 has no altsetting 0 [ 291.471435][ T10] usb 3-1: string descriptor 0 read error: -71 [ 291.480199][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 291.491338][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.572453][ T10] usb 3-1: config 0 descriptor?? [ 291.578983][ T10] usb 3-1: can't set config #0, error -71 [ 291.582701][ T5892] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 291.587871][ T10] usb 3-1: USB disconnect, device number 9 [ 291.781991][ T5892] usb 6-1: device descriptor read/8, error -71 [ 299.524825][ T5874] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 299.711914][ T5874] usb 3-1: device descriptor read/64, error -71 [ 300.153288][ T5874] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 301.242184][ T5874] usb 3-1: device descriptor read/64, error -71 [ 302.312410][ T5874] usb usb3-port1: attempt power cycle [ 302.432287][ T7637] loop6: detected capacity change from 0 to 63 [ 303.154434][ T7635] tty tty4: ldisc open failed (-12), clearing slot 3 [ 307.609615][ T7683] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.472'. [ 307.627115][ T7677] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.472'. [ 307.692859][ T7680] loop6: detected capacity change from 0 to 63 [ 307.985188][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.392054][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.400829][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.462883][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.510055][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.571737][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.668204][ T5829] Buffer I/O error on dev loop6, logical block 3, async page read [ 312.021712][ T5893] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 312.451707][ T5893] usb 3-1: device descriptor read/64, error -71 [ 312.871409][ T5893] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 313.261571][ T5893] usb 3-1: device descriptor read/64, error -71 [ 313.493239][ T5893] usb usb3-port1: attempt power cycle [ 314.169131][ T5893] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 317.381765][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.388495][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.641294][ T5893] usb 3-1: device descriptor read/8, error -71 [ 318.254563][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.486'. [ 325.001425][ T5926] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 325.393384][ T5926] usb 6-1: device descriptor read/64, error -71 [ 326.271323][ T5926] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 326.425164][ T5926] usb 6-1: device descriptor read/64, error -71 [ 326.581458][ T5926] usb usb6-port1: attempt power cycle [ 326.847250][ T7809] loop6: detected capacity change from 0 to 63 [ 326.962473][ T5926] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 327.451842][ T5926] usb 6-1: device descriptor read/8, error -71 [ 331.362115][ T7867] overlayfs: failed to resolve './file1': -2 [ 331.931493][ T5872] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 332.116142][ T5872] usb 6-1: config 0 has too many interfaces: 100, using maximum allowed: 32 [ 332.152731][ T5872] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 100 [ 332.381273][ T5872] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 332.390553][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.406307][ T5872] usb 6-1: Product: syz [ 333.410577][ T5872] usb 6-1: Manufacturer: syz [ 333.971283][ T5872] usb 6-1: SerialNumber: syz [ 334.032728][ T5872] usb 6-1: config 0 descriptor?? [ 334.061405][ T5872] usb 6-1: can't set config #0, error -71 [ 334.094113][ T5872] usb 6-1: USB disconnect, device number 10 [ 337.441283][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 338.379968][ T7929] nvme_fabrics: missing parameter 'transport=%s' [ 338.387274][ T7929] nvme_fabrics: missing parameter 'nqn=%s' [ 338.551388][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 338.566247][ T9] usb 6-1: config 8 has an invalid interface number: 28 but max is 0 [ 338.589942][ T9] usb 6-1: config 8 has no interface number 0 [ 338.618950][ T9] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 338.661198][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.669370][ T9] usb 6-1: Product: syz [ 338.719719][ T9] usb 6-1: Manufacturer: syz [ 338.728585][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.6.527'. [ 338.731187][ T9] usb 6-1: SerialNumber: syz [ 339.664567][ T9] go7007 6-1:8.28: probe with driver go7007 failed with error -12 [ 339.671656][ T7937] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:16389 [ 339.897819][ T6888] Bluetooth: hci5: command 0x0406 tx timeout [ 340.409509][ T5926] usb 6-1: USB disconnect, device number 11 [ 340.506587][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'. [ 344.022691][ T7989] loop6: detected capacity change from 0 to 63 [ 345.802521][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.6.542'. [ 346.391255][ T8000] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:16389 [ 347.799364][ T8017] kvm: kvm [8016]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 347.940867][ T8028] loop6: detected capacity change from 0 to 63 [ 349.064023][ T8039] loop6: detected capacity change from 0 to 63 [ 349.082441][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.118885][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.219114][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.262422][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.464113][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.479890][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.490562][ T5829] Buffer I/O error on dev loop6, logical block 3, async page read [ 350.133123][ T5825] Bluetooth: hci6: command 0x0406 tx timeout [ 352.675664][ T8072] netlink: 76 bytes leftover after parsing attributes in process `syz.5.561'. [ 353.656942][ T8081] capability: warning: `syz.5.566' uses deprecated v2 capabilities in a way that may be insecure [ 356.127132][ T5872] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 356.612293][ T5872] usb 7-1: Using ep0 maxpacket: 32 [ 356.940335][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 356.940354][ T30] audit: type=1326 audit(1747998768.728:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8105 comm="syz.2.570" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f110bb8e969 code=0x0 [ 357.030593][ T5872] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.135724][ T5872] usb 7-1: config 0 interface 0 has no altsetting 0 [ 357.153852][ T5872] usb 7-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 357.195710][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.216292][ T5872] usb 7-1: config 0 descriptor?? [ 357.450397][ T8117] veth0_to_bridge: entered promiscuous mode [ 358.019815][ T8100] syz_tun: entered promiscuous mode [ 358.030142][ T8100] vlan2: entered promiscuous mode [ 358.188021][ T8120] veth0_to_bridge: left promiscuous mode [ 358.286098][ T5872] usbhid 7-1:0.0: can't add hid device: -71 [ 358.353867][ T5872] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 358.390141][ T5872] usb 7-1: USB disconnect, device number 7 [ 364.636525][ T8181] loop6: detected capacity change from 0 to 63 [ 368.477446][ T8208] binder: 8206:8208 ioctl c0306201 2000000003c0 returned -14 [ 368.501552][ T8208] binder_alloc: 8206: binder_alloc_buf, no vma [ 372.642414][ T5926] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 372.834025][ T5926] usb 7-1: Using ep0 maxpacket: 8 [ 372.859731][ T5926] usb 7-1: unable to get BOS descriptor or descriptor too short [ 372.929107][ T5926] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 372.946992][ T8251] netlink: 'syz.5.612': attribute type 23 has an invalid length. [ 373.061207][ T5926] usb 7-1: config 1 has no interface number 1 [ 373.112111][ T5926] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 373.153847][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.192053][ T5926] usb 7-1: Product: syz [ 373.231279][ T5926] usb 7-1: Manufacturer: syz [ 373.261519][ T5926] usb 7-1: SerialNumber: syz [ 373.566683][ T8231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.575894][ T8231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.692500][ T5926] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 373.729704][ T8253] 8021q: VLANs not supported on ip6gre0 [ 373.748930][ T5926] usb 7-1: 2:1 : sample bitwidth 220 in over sample bytes 2 [ 373.773820][ T5926] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 373.873968][ T5926] usb 7-1: USB disconnect, device number 8 [ 374.062897][ T8255] netlink: 16 bytes leftover after parsing attributes in process `syz.5.614'. [ 376.499988][ T8263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.616'. [ 378.783593][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.789989][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.173161][ T8286] netlink: 24 bytes leftover after parsing attributes in process `syz.5.623'. [ 380.737151][ T8293] netlink: 20 bytes leftover after parsing attributes in process `syz.2.621'. [ 380.761441][ T8288] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 380.941454][ T47] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 380.951252][ T8288] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 380.982925][ T8288] usb 6-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 381.012983][ T8288] usb 6-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 381.036738][ T8288] usb 6-1: config 150 has no interface number 0 [ 381.056065][ T8288] usb 6-1: config 150 interface 204 has no altsetting 0 [ 381.079301][ T8288] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 381.106165][ T8288] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.131302][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 381.139264][ T8288] usb 6-1: Product: syz [ 381.146230][ T47] usb 4-1: unable to get BOS descriptor or descriptor too short [ 381.164478][ T8288] usb 6-1: Manufacturer: syz [ 381.169148][ T8288] usb 6-1: SerialNumber: syz [ 381.183830][ T47] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 381.213426][ T47] usb 4-1: config 1 has no interface number 1 [ 381.235435][ T47] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.245484][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.270979][ T47] usb 4-1: Product: syz [ 381.276299][ T47] usb 4-1: Manufacturer: syz [ 381.280973][ T47] usb 4-1: SerialNumber: syz [ 381.472596][ T8303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.481746][ T8303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.510567][ T8294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.519749][ T8294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.570362][ T47] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 381.601836][ T47] usb 4-1: 2:1 : sample bitwidth 220 in over sample bytes 2 [ 381.610077][ T47] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 381.628926][ T8288] xr_serial 6-1:150.204: skipping garbage [ 381.711505][ T8288] usb 6-1: USB disconnect, device number 12 [ 381.734061][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 381.766721][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 381.778530][ T47] usb 4-1: USB disconnect, device number 19 [ 381.970041][ T8308] netlink: 'syz.2.628': attribute type 12 has an invalid length. [ 382.825015][ T8308] netlink: 'syz.2.628': attribute type 11 has an invalid length. [ 383.271894][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.660253][ T8330] netlink: 'syz.1.633': attribute type 8 has an invalid length. [ 384.099399][ T8335] netlink: 24 bytes leftover after parsing attributes in process `syz.5.631'. [ 384.109747][ T5874] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 385.008691][ T5874] usb 3-1: device descriptor read/all, error -71 [ 386.485139][ T8354] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.640'. [ 386.567170][ T8354] netlink: get zone limit has 8 unknown bytes [ 389.031517][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 389.191537][ T10] usb 3-1: device descriptor read/64, error -71 [ 389.586843][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 389.743099][ T8377] mmap: syz.5.646 (8377) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 389.813044][ T10] usb 3-1: device descriptor read/64, error -71 [ 389.971735][ T10] usb usb3-port1: attempt power cycle [ 390.322097][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 390.397855][ T10] usb 3-1: device descriptor read/8, error -71 [ 390.651456][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 390.685064][ T10] usb 3-1: device descriptor read/8, error -71 [ 390.716167][ T5926] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 390.811959][ T10] usb usb3-port1: unable to enumerate USB device [ 390.896453][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 390.903935][ T5926] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 390.916293][ T5926] usb 4-1: config 0 has no interface number 0 [ 390.945713][ T5926] usb 4-1: config 0 interface 46 has no altsetting 0 [ 390.964676][ T5926] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=f3.33 [ 390.988519][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.038953][ T5926] usb 4-1: Product: syz [ 391.063714][ T5926] usb 4-1: Manufacturer: syz [ 391.069557][ T5926] usb 4-1: SerialNumber: syz [ 391.100260][ T5926] usb 4-1: config 0 descriptor?? [ 391.466049][ T8386] trusted_key: encrypted_key: insufficient parameters specified [ 391.520007][ T5926] f81534a_ctrl 4-1:0.46: failed to set register 0x116: -5 [ 391.543589][ T5926] f81534a_ctrl 4-1:0.46: failed to enable ports: -5 [ 391.554977][ T5926] f81534a_ctrl 4-1:0.46: probe with driver f81534a_ctrl failed with error -5 [ 391.639768][ T5926] usb 4-1: USB disconnect, device number 20 [ 392.886542][ T8429] loop6: detected capacity change from 0 to 63 [ 393.454540][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.537634][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.581747][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.591075][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.871893][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.880483][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.899277][ T5829] Buffer I/O error on dev loop6, logical block 3, async page read [ 395.821474][ T30] audit: type=1326 audit(1747998806.508:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8435 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa4b8e969 code=0x7ffc0000 [ 397.792431][ T30] audit: type=1326 audit(1747998806.518:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8435 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa4b8e969 code=0x7ffc0000 [ 401.374580][ T8461] IPVS: length: 4096 != 17667290688 [ 404.828928][ T8501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.681'. [ 406.631247][ T5874] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 407.041260][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 407.125165][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.331917][ T5874] usb 3-1: config 0 interface 0 has no altsetting 0 [ 407.542910][ T8530] loop6: detected capacity change from 0 to 63 [ 407.676292][ T5874] usb 3-1: New USB device found, idVendor=057a, idProduct=0331, bcdDevice= 0.00 [ 407.697736][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.717629][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.720548][ T5874] usb 3-1: config 0 descriptor?? [ 407.743838][ T5874] hub 3-1:0.0: bad descriptor, ignoring hub [ 407.749837][ T5874] hub 3-1:0.0: probe with driver hub failed with error -5 [ 407.788384][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.822035][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.855774][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.883498][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.912268][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.942876][ T5829] Buffer I/O error on dev loop6, logical block 3, async page read [ 407.981976][ T8521] sctp: [Deprecated]: syz.2.685 (pid 8521) Use of struct sctp_assoc_value in delayed_ack socket option. [ 407.981976][ T8521] Use struct sctp_sack_info instead [ 408.040683][ T8521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.113001][ T8521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.336069][ T10] usb 3-1: USB disconnect, device number 23 [ 416.153495][ T8590] FAULT_INJECTION: forcing a failure. [ 416.153495][ T8590] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 416.215992][ T8590] CPU: 1 UID: 0 PID: 8590 Comm: syz.6.705 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 416.216022][ T8590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.216042][ T8590] Call Trace: [ 416.216050][ T8590] [ 416.216064][ T8590] dump_stack_lvl+0x189/0x250 [ 416.216102][ T8590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.216122][ T8590] ? __pfx__printk+0x10/0x10 [ 416.216146][ T8590] ? fs_reclaim_acquire+0x7d/0x100 [ 416.216169][ T8590] should_fail_ex+0x414/0x560 [ 416.216188][ T8590] prepare_alloc_pages+0x213/0x610 [ 416.216210][ T8590] __alloc_frozen_pages_noprof+0x123/0x370 [ 416.216230][ T8590] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 416.216255][ T8590] ? policy_nodemask+0x27c/0x720 [ 416.216283][ T8590] alloc_pages_mpol+0x232/0x4a0 [ 416.216310][ T8590] vma_alloc_folio_noprof+0xe4/0x200 [ 416.216324][ T8590] ? kernel_text_address+0xa5/0xe0 [ 416.216345][ T8590] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 416.216377][ T8590] folio_prealloc+0x30/0x180 [ 416.216393][ T8590] do_wp_page+0x123a/0x5790 [ 416.216431][ T8590] ? __pfx_do_wp_page+0x10/0x10 [ 416.216449][ T8590] ? do_raw_spin_lock+0x121/0x290 [ 416.216468][ T8590] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 416.216498][ T8590] __handle_mm_fault+0x1028/0x5380 [ 416.216535][ T8590] ? __pfx___handle_mm_fault+0x10/0x10 [ 416.216573][ T8590] ? find_vma+0xe7/0x160 [ 416.216585][ T8590] ? __pfx_find_vma+0x10/0x10 [ 416.216599][ T8590] handle_mm_fault+0x2d5/0x7f0 [ 416.216628][ T8590] do_user_addr_fault+0x764/0x1390 [ 416.216665][ T8590] exc_page_fault+0x68/0x110 [ 416.216685][ T8590] asm_exc_page_fault+0x26/0x30 [ 416.216699][ T8590] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 416.216718][ T8590] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 c7 2b 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 416.216730][ T8590] RSP: 0018:ffffc90003d2f8d8 EFLAGS: 00050246 [ 416.216750][ T8590] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000066f0 [ 416.216759][ T8590] RDX: ffff888033e60000 RSI: 0000000000000000 RDI: 00000000ffffffff [ 416.216769][ T8590] RBP: ffffc90003d2fa50 R08: ffffffff8f7e0977 R09: 1ffffffff1efc12e [ 416.216779][ T8590] R10: dffffc0000000000 R11: fffffbfff1efc12f R12: 0000000000000000 [ 416.216788][ T8590] R13: dffffc0000000000 R14: 0000000000000000 R15: 00002000000066c0 [ 416.216811][ T8590] ____sys_recvmsg+0x2ab/0x460 [ 416.216840][ T8590] ? __pfx_____sys_recvmsg+0x10/0x10 [ 416.216872][ T8590] ? import_iovec+0x74/0xa0 [ 416.216902][ T8590] ___sys_recvmsg+0x1b5/0x510 [ 416.216927][ T8590] ? __pfx____sys_recvmsg+0x10/0x10 [ 416.216967][ T8590] ? __fget_files+0x3a0/0x420 [ 416.216989][ T8590] do_recvmmsg+0x307/0x760 [ 416.217016][ T8590] ? __pfx_do_recvmmsg+0x10/0x10 [ 416.217047][ T8590] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 416.217078][ T8590] __x64_sys_recvmmsg+0x190/0x240 [ 416.217099][ T8590] ? rcu_is_watching+0x15/0xb0 [ 416.217122][ T8590] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 416.217146][ T8590] ? do_syscall_64+0xba/0x210 [ 416.217167][ T8590] do_syscall_64+0xf6/0x210 [ 416.217186][ T8590] ? clear_bhb_loop+0x60/0xb0 [ 416.217203][ T8590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.217217][ T8590] RIP: 0033:0x7fc8cd98e969 [ 416.217229][ T8590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.217241][ T8590] RSP: 002b:00007fc8ce828038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 416.217255][ T8590] RAX: ffffffffffffffda RBX: 00007fc8cdbb5fa0 RCX: 00007fc8cd98e969 [ 416.217265][ T8590] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 416.217273][ T8590] RBP: 00007fc8ce828090 R08: 0000000000000000 R09: 0000000000000000 [ 416.217282][ T8590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.217290][ T8590] R13: 0000000000000000 R14: 00007fc8cdbb5fa0 R15: 00007fff1e4e3f48 [ 416.217312][ T8590] [ 416.739311][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.704'. [ 416.888735][ T8603] loop6: detected capacity change from 0 to 63 [ 417.738457][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.747443][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.756349][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.792636][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.861986][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.901947][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.933479][ T5829] Buffer I/O error on dev loop6, logical block 3, async page read [ 420.147179][ T8614] ALSA: mixer_oss: invalid index 40000 [ 421.031823][ T8644] Can't find ip_set type hash:i [ 421.274246][ T8648] loop6: detected capacity change from 0 to 63 [ 422.037847][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 422.288195][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 422.312241][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 423.102192][ T47] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 423.939591][ T8666] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 424.141472][ T47] usb 7-1: config 0 has an invalid interface number: 238 but max is 0 [ 424.192445][ T47] usb 7-1: config 0 has no interface number 0 [ 424.198631][ T47] usb 7-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 424.220271][ T47] usb 7-1: config 0 interface 238 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 424.234029][ T47] usb 7-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 424.311212][ T47] usb 7-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 424.354275][ T47] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 424.575454][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.584192][ T47] usb 7-1: Product: syz [ 424.588674][ T47] usb 7-1: Manufacturer: syz [ 424.594509][ T47] usb 7-1: SerialNumber: syz [ 424.618431][ T47] usb 7-1: config 0 descriptor?? [ 425.283289][ T47] ni6501 7-1:0.238: driver 'ni6501' failed to auto-configure device. [ 425.395569][ T10] usb 7-1: USB disconnect, device number 9 [ 425.941945][ T8687] netlink: 204 bytes leftover after parsing attributes in process `syz.6.729'. [ 426.634877][ T8693] netlink: 212 bytes leftover after parsing attributes in process `syz.6.731'. [ 426.732859][ T8693] @: renamed from vlan0 (while UP) [ 429.830947][ T8719] xt_l2tp: v2 sid > 0xffff: 262144 [ 430.079899][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.737'. [ 430.641275][ T47] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 430.862451][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 431.840066][ T47] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.254503][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 432.271230][ T47] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 432.280641][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.330075][ T47] usb 4-1: config 0 descriptor?? [ 433.166901][ T8741] nvme_fabrics: missing parameter 'transport=%s' [ 433.584690][ T8759] loop6: detected capacity change from 0 to 63 [ 434.081245][ T8741] nvme_fabrics: missing parameter 'nqn=%s' [ 434.311323][ T47] usbhid 4-1:0.0: can't add hid device: -71 [ 434.317422][ T47] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 434.419449][ T47] usb 4-1: USB disconnect, device number 21 [ 434.781204][ T8770] loop6: detected capacity change from 0 to 63 [ 436.059047][ T8776] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 436.331604][ T8775] binder: 8768:8775 ioctl c0306201 200000000280 returned -14 [ 436.459331][ T8783] netlink: 28 bytes leftover after parsing attributes in process `syz.5.751'. [ 437.172661][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 438.072750][ T9] usb 3-1: device descriptor read/all, error -71 [ 439.579308][ T8815] nvme_fabrics: missing parameter 'transport=%s' [ 439.588179][ T8815] nvme_fabrics: missing parameter 'nqn=%s' [ 440.217590][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.230042][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.361201][ T9] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 447.899520][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 448.135558][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 448.740219][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 448.751385][ T8879] nvme_fabrics: missing parameter 'transport=%s' [ 448.751419][ T8879] nvme_fabrics: missing parameter 'nqn=%s' [ 448.765140][ T8906] netlink: 'syz.6.779': attribute type 10 has an invalid length. [ 448.830362][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 448.867637][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 448.895886][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.780'. [ 448.926272][ T8906] team0: Port device syz_tun added [ 448.949297][ T8909] Can't find ip_set type bitmap:ip [ 448.964385][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 449.001201][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.051196][ T9] usb 3-1: Product: syz [ 449.071168][ T9] usb 3-1: Manufacturer: syz [ 449.096936][ T9] usb 3-1: SerialNumber: syz [ 449.145957][ T9] usb 3-1: config 0 descriptor?? [ 449.175960][ T9] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 449.222835][ T9] imon 3-1:0.0: unable to initialize intf0, err -90 [ 449.423902][ T9] imon:imon_probe: failed to initialize context! [ 449.434985][ T9] imon 3-1:0.0: unable to register, err -19 [ 449.678115][ T9] usb 3-1: USB disconnect, device number 26 [ 451.006351][ T8930] warning: `syz.2.787' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 452.143437][ T8932] netlink: 'syz.1.789': attribute type 10 has an invalid length. [ 452.155773][ T8932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.166703][ T8932] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 452.976744][ T8949] loop6: detected capacity change from 0 to 63 [ 454.222356][ T8952] netlink: 92 bytes leftover after parsing attributes in process `syz.2.793'. [ 454.305048][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'. [ 456.007167][ T8976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.030220][ T8976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.221791][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 466.964811][ T9077] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 466.995419][ T9066] block nbd0: server does not support multiple connections per device. [ 467.042357][ T9066] block nbd0: shutting down sockets [ 467.097403][ T9077] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 467.160351][ T9082] loop6: detected capacity change from 0 to 63 [ 467.220200][ T5832] buffer_io_error: 4 callbacks suppressed [ 467.220220][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 467.295577][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 467.370197][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 467.417023][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 467.916892][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 467.953777][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 467.964483][ T5832] Buffer I/O error on dev loop6, logical block 3, async page read [ 474.725732][ T9167] netlink: 20 bytes leftover after parsing attributes in process `syz.6.858'. [ 474.794806][ T9167] FAULT_INJECTION: forcing a failure. [ 474.794806][ T9167] name failslab, interval 1, probability 0, space 0, times 0 [ 474.831752][ T9167] CPU: 1 UID: 0 PID: 9167 Comm: syz.6.858 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 474.831775][ T9167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 474.831785][ T9167] Call Trace: [ 474.831791][ T9167] [ 474.831798][ T9167] dump_stack_lvl+0x189/0x250 [ 474.831825][ T9167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.831847][ T9167] ? __pfx__printk+0x10/0x10 [ 474.831874][ T9167] ? __pfx___might_resched+0x10/0x10 [ 474.831895][ T9167] ? fs_reclaim_acquire+0x7d/0x100 [ 474.831916][ T9167] should_fail_ex+0x414/0x560 [ 474.831935][ T9167] should_failslab+0xa8/0x100 [ 474.831950][ T9167] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 474.831974][ T9167] ? kasprintf+0xd4/0x120 [ 474.832006][ T9167] kvasprintf+0xdc/0x190 [ 474.832031][ T9167] ? __kmalloc_noprof+0x27a/0x4f0 [ 474.832059][ T9167] ? nla_strdup+0x9d/0x140 [ 474.832079][ T9167] ? nf_tables_newset+0x136a/0x2530 [ 474.832106][ T9167] ? __pfx_kvasprintf+0x10/0x10 [ 474.832131][ T9167] ? ____sys_sendmsg+0x505/0x830 [ 474.832158][ T9167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.832187][ T9167] kasprintf+0xd4/0x120 [ 474.832221][ T9167] ? __pfx_kasprintf+0x10/0x10 [ 474.832264][ T9167] nf_tables_set_alloc_name+0x109/0x720 [ 474.832291][ T9167] ? rcu_is_watching+0x15/0xb0 [ 474.832322][ T9167] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 474.832352][ T9167] ? nla_strdup+0xb8/0x140 [ 474.832387][ T9167] nf_tables_newset+0x138b/0x2530 [ 474.832426][ T9167] ? __pfx_nf_tables_newset+0x10/0x10 [ 474.832475][ T9167] ? __nla_parse+0x40/0x60 [ 474.832504][ T9167] nfnetlink_rcv+0x113f/0x2530 [ 474.832567][ T9167] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 474.832657][ T9167] ? skb_clone+0x246/0x3a0 [ 474.832703][ T9167] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.832726][ T9167] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.832756][ T9167] netlink_unicast+0x758/0x8d0 [ 474.832793][ T9167] netlink_sendmsg+0x805/0xb30 [ 474.832816][ T9167] ? is_bpf_text_address+0x26/0x2b0 [ 474.832853][ T9167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.832886][ T9167] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 474.832909][ T9167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.832934][ T9167] __sock_sendmsg+0x219/0x270 [ 474.832958][ T9167] ____sys_sendmsg+0x505/0x830 [ 474.832992][ T9167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.833031][ T9167] ? import_iovec+0x74/0xa0 [ 474.833062][ T9167] ___sys_sendmsg+0x21f/0x2a0 [ 474.833093][ T9167] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.833160][ T9167] ? __fget_files+0x2a/0x420 [ 474.833178][ T9167] ? __fget_files+0x3a0/0x420 [ 474.833208][ T9167] __x64_sys_sendmsg+0x19b/0x260 [ 474.833239][ T9167] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 474.833285][ T9167] ? do_syscall_64+0xba/0x210 [ 474.833316][ T9167] do_syscall_64+0xf6/0x210 [ 474.833343][ T9167] ? clear_bhb_loop+0x60/0xb0 [ 474.833367][ T9167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.833387][ T9167] RIP: 0033:0x7fc8cd98e969 [ 474.833406][ T9167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.833423][ T9167] RSP: 002b:00007fc8ce828038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.833445][ T9167] RAX: ffffffffffffffda RBX: 00007fc8cdbb5fa0 RCX: 00007fc8cd98e969 [ 474.833459][ T9167] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000004 [ 474.833473][ T9167] RBP: 00007fc8ce828090 R08: 0000000000000000 R09: 0000000000000000 [ 474.833485][ T9167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 474.833497][ T9167] R13: 0000000000000000 R14: 00007fc8cdbb5fa0 R15: 00007fff1e4e3f48 [ 474.833529][ T9167] [ 475.471416][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 476.275917][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 476.491372][ T9] usb 4-1: config 1 has no interface number 0 [ 476.498365][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.542560][ T9] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 476.562398][ T9] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.315839][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 477.327339][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 477.342813][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 477.363906][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.373440][ T9] usb 4-1: Product: syz [ 477.378897][ T9] usb 4-1: Manufacturer: syz [ 477.488847][ T9] usb 4-1: SerialNumber: syz [ 477.531864][ T9180] netlink: 24 bytes leftover after parsing attributes in process `syz.6.862'. [ 477.569988][ T9180] FAULT_INJECTION: forcing a failure. [ 477.569988][ T9180] name failslab, interval 1, probability 0, space 0, times 0 [ 477.588432][ T9180] CPU: 0 UID: 0 PID: 9180 Comm: syz.6.862 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 477.588464][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 477.588477][ T9180] Call Trace: [ 477.588485][ T9180] [ 477.588496][ T9180] dump_stack_lvl+0x189/0x250 [ 477.588530][ T9180] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.588556][ T9180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.588584][ T9180] ? __pfx__printk+0x10/0x10 [ 477.588623][ T9180] ? __wake_up_common_lock+0x190/0x1f0 [ 477.588653][ T9180] should_fail_ex+0x414/0x560 [ 477.588681][ T9180] should_failslab+0xa8/0x100 [ 477.588703][ T9180] kmem_cache_alloc_noprof+0x73/0x3c0 [ 477.588733][ T9180] ? skb_clone+0x212/0x3a0 [ 477.588768][ T9180] skb_clone+0x212/0x3a0 [ 477.588795][ T9180] ? genlmsg_multicast_allns+0x24d/0x500 [ 477.588827][ T9180] genlmsg_multicast_allns+0x178/0x500 [ 477.588855][ T9180] ? genlmsg_multicast_allns+0x88/0x500 [ 477.588886][ T9180] l2tp_nl_cmd_tunnel_modify+0x144/0x210 [ 477.588916][ T9180] genl_family_rcv_msg_doit+0x215/0x300 [ 477.588955][ T9180] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 477.588999][ T9180] ? bpf_lsm_capable+0x9/0x20 [ 477.589028][ T9180] ? security_capable+0x7e/0x2e0 [ 477.589063][ T9180] genl_rcv_msg+0x60e/0x790 [ 477.589100][ T9180] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.589129][ T9180] ? __pfx_l2tp_nl_cmd_tunnel_modify+0x10/0x10 [ 477.589157][ T9180] ? ref_tracker_free+0x63a/0x7d0 [ 477.589177][ T9180] ? __copy_skb_header+0xa7/0x550 [ 477.589217][ T9180] netlink_rcv_skb+0x21c/0x490 [ 477.589242][ T9180] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.589273][ T9180] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 477.589325][ T9180] ? down_read+0x1ad/0x2e0 [ 477.589363][ T9180] genl_rcv+0x28/0x40 [ 477.589390][ T9180] netlink_unicast+0x758/0x8d0 [ 477.589424][ T9180] netlink_sendmsg+0x805/0xb30 [ 477.589446][ T9180] ? is_bpf_text_address+0x26/0x2b0 [ 477.589484][ T9180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.589517][ T9180] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 477.589538][ T9180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.589563][ T9180] __sock_sendmsg+0x219/0x270 [ 477.589587][ T9180] ____sys_sendmsg+0x505/0x830 [ 477.589622][ T9180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.589660][ T9180] ? import_iovec+0x74/0xa0 [ 477.589692][ T9180] ___sys_sendmsg+0x21f/0x2a0 [ 477.589721][ T9180] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.589791][ T9180] ? __fget_files+0x2a/0x420 [ 477.589809][ T9180] ? __fget_files+0x3a0/0x420 [ 477.589840][ T9180] __x64_sys_sendmsg+0x19b/0x260 [ 477.589871][ T9180] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 477.589915][ T9180] ? do_syscall_64+0xba/0x210 [ 477.589946][ T9180] do_syscall_64+0xf6/0x210 [ 477.589973][ T9180] ? clear_bhb_loop+0x60/0xb0 [ 477.589997][ T9180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.590015][ T9180] RIP: 0033:0x7fc8cd98e969 [ 477.590033][ T9180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.590049][ T9180] RSP: 002b:00007fc8ce828038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.590069][ T9180] RAX: ffffffffffffffda RBX: 00007fc8cdbb5fa0 RCX: 00007fc8cd98e969 [ 477.590084][ T9180] RDX: 0000000000000020 RSI: 0000200000000640 RDI: 0000000000000005 [ 477.590096][ T9180] RBP: 00007fc8ce828090 R08: 0000000000000000 R09: 0000000000000000 [ 477.590109][ T9180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 477.590120][ T9180] R13: 0000000000000000 R14: 00007fc8cdbb5fa0 R15: 00007fff1e4e3f48 [ 477.590153][ T9180] [ 477.962740][ T9185] netlink: 'syz.5.865': attribute type 1 has an invalid length. [ 478.012774][ T9185] netlink: 224 bytes leftover after parsing attributes in process `syz.5.865'. [ 478.046298][ T9] cdc_ncm 4-1:1.1: bind() failure [ 478.057319][ T9] usb 4-1: USB disconnect, device number 22 [ 481.323562][ T9216] netlink: 'syz.6.873': attribute type 27 has an invalid length. [ 484.563959][ T9222] team0: Port device syz_tun removed [ 491.103110][ T9305] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20000 [ 491.779173][ T9309] 9pnet: Unknown protocol version 9p¹00.u [ 491.947893][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 491.952608][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'. [ 491.957190][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.898'. [ 492.005877][ T9314] netlink: 'syz.3.898': attribute type 14 has an invalid length. [ 492.061192][ T47] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 492.273656][ T47] usb 3-1: unable to get BOS descriptor or descriptor too short [ 492.298393][ T47] usb 3-1: not running at top speed; connect to a high speed hub [ 492.336147][ T47] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 492.370762][ T47] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 492.391952][ T47] usb 3-1: config 17 has no interface number 0 [ 492.411519][ T47] usb 3-1: config 17 interface 8 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 492.430930][ T9321] netlink: 64 bytes leftover after parsing attributes in process `syz.5.901'. [ 492.457372][ T47] usb 3-1: config 17 interface 8 has no altsetting 0 [ 492.479368][ T47] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 492.681004][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.689473][ T47] usb 3-1: Product: syz [ 492.694277][ T47] usb 3-1: Manufacturer: syz [ 492.699055][ T47] usb 3-1: SerialNumber: syz [ 493.575065][ T47] usb 3-1: selecting invalid altsetting 0 [ 493.755618][ T47] usb 3-1: USB disconnect, device number 27 [ 493.915130][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.232306][ T9338] netlink: 72 bytes leftover after parsing attributes in process `syz.1.906'. [ 494.834292][ T9343] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 494.854996][ T9343] syz.3.909: attempt to access beyond end of device [ 494.854996][ T9343] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 495.421293][ T47] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 495.711200][ T47] usb 6-1: Using ep0 maxpacket: 8 [ 495.773840][ T47] usb 6-1: unable to get BOS descriptor or descriptor too short [ 495.794913][ T47] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 495.822193][ T47] usb 6-1: config 1 has no interface number 1 [ 495.881323][ T47] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 495.918537][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.950776][ T47] usb 6-1: Product: syz [ 495.979719][ T47] usb 6-1: Manufacturer: syz [ 496.002994][ T47] usb 6-1: SerialNumber: syz [ 496.266181][ T9352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.358339][ T9352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.593097][ T47] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 500.600985][ T47] usb 6-1: 2:1 : sample bitwidth 220 in over sample bytes 2 [ 500.685006][ T47] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 501.582599][ T9391] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 501.616382][ T9391] syz.5.923: attempt to access beyond end of device [ 501.616382][ T9391] loop5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 501.661363][ T47] usb 6-1: USB disconnect, device number 13 [ 501.761798][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.768234][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.909393][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.330626][ T9402] loop6: detected capacity change from 0 to 63 [ 502.808617][ T6059] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.876842][ T6059] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.886591][ T6059] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.898634][ T6059] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.914010][ T6059] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.928782][ T6059] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.938570][ T6059] Buffer I/O error on dev loop6, logical block 3, async page read [ 504.901555][ T47] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 505.184696][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.585817][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.618484][ T47] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 505.650160][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.712151][ T47] usb 3-1: config 0 descriptor?? [ 505.779878][ T5825] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 506.095933][ T5825] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 506.109704][ T5825] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 506.119634][ T5825] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 506.184188][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'. [ 506.193346][ T9440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.938'. [ 506.925333][ T5825] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 507.001545][ T47] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 507.073581][ T47] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 507.158114][ T47] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 508.474734][ T5827] usb 3-1: reset high-speed USB device number 28 using dummy_hcd [ 509.123972][ T5825] Bluetooth: hci7: command tx timeout [ 509.549434][ T9435] chnl_net:caif_netlink_parms(): no params data found [ 509.972589][ T47] usb 3-1: USB disconnect, device number 28 [ 510.712826][ T47] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 510.988981][ T9495] wireguard0: entered promiscuous mode [ 511.171249][ T5825] Bluetooth: hci7: command tx timeout [ 511.408032][ T9435] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.441758][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.483613][ T9435] bridge_slave_0: entered allmulticast mode [ 511.517622][ T9435] bridge_slave_0: entered promiscuous mode [ 511.558802][ T9435] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.607141][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.644871][ T9435] bridge_slave_1: entered allmulticast mode [ 511.683302][ T9435] bridge_slave_1: entered promiscuous mode [ 512.039731][ T9435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.093606][ T9435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.309861][ T9435] team0: Port device team_slave_0 added [ 512.350437][ T9435] team0: Port device team_slave_1 added [ 512.620315][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.470028][ T5825] Bluetooth: hci7: command tx timeout [ 513.478080][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.771176][ T9435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.936888][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.961256][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.068175][ T9435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.203174][ T9435] hsr_slave_0: entered promiscuous mode [ 515.210306][ T9435] hsr_slave_1: entered promiscuous mode [ 515.374330][ T9533] netlink: 'syz.5.962': attribute type 21 has an invalid length. [ 515.382312][ T5825] Bluetooth: hci5: ISO packet for unknown connection handle 10 [ 515.421775][ T9435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.481640][ T9435] Cannot create hsr debugfs directory [ 515.491232][ T5825] Bluetooth: hci7: command tx timeout [ 517.215501][ T9559] FAULT_INJECTION: forcing a failure. [ 517.215501][ T9559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.221188][ T9559] CPU: 0 UID: 0 PID: 9559 Comm: syz.5.969 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 518.221219][ T9559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 518.221233][ T9559] Call Trace: [ 518.221242][ T9559] [ 518.221252][ T9559] dump_stack_lvl+0x189/0x250 [ 518.221291][ T9559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.221319][ T9559] ? __pfx__printk+0x10/0x10 [ 518.221364][ T9559] should_fail_ex+0x414/0x560 [ 518.221391][ T9559] _copy_to_user+0x31/0xb0 [ 518.221424][ T9559] simple_read_from_buffer+0xe1/0x170 [ 518.221460][ T9559] proc_fail_nth_read+0x1df/0x250 [ 518.221486][ T9559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 518.221511][ T9559] ? rw_verify_area+0x258/0x650 [ 518.221539][ T9559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 518.221563][ T9559] vfs_read+0x200/0x980 [ 518.221596][ T9559] ? __pfx___mutex_lock+0x10/0x10 [ 518.221624][ T9559] ? __pfx_vfs_read+0x10/0x10 [ 518.221654][ T9559] ? __fget_files+0x2a/0x420 [ 518.221678][ T9559] ? __fget_files+0x3a0/0x420 [ 518.221695][ T9559] ? __fget_files+0x2a/0x420 [ 518.221723][ T9559] ksys_read+0x145/0x250 [ 518.221748][ T9559] ? rcu_is_watching+0x15/0xb0 [ 518.221779][ T9559] ? __pfx_ksys_read+0x10/0x10 [ 518.221810][ T9559] ? do_syscall_64+0xba/0x210 [ 518.221839][ T9559] do_syscall_64+0xf6/0x210 [ 518.221866][ T9559] ? clear_bhb_loop+0x60/0xb0 [ 518.221891][ T9559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.221911][ T9559] RIP: 0033:0x7fd27938d37c [ 518.221931][ T9559] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 518.221947][ T9559] RSP: 002b:00007fd27a11b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 518.221982][ T9559] RAX: ffffffffffffffda RBX: 00007fd2795b6080 RCX: 00007fd27938d37c [ 518.221997][ T9559] RDX: 000000000000000f RSI: 00007fd27a11b0a0 RDI: 0000000000000004 [ 518.222010][ T9559] RBP: 00007fd27a11b090 R08: 0000000000000000 R09: 0000000000000000 [ 518.222022][ T9559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.222034][ T9559] R13: 0000000000000000 R14: 00007fd2795b6080 R15: 00007fffe18b36d8 [ 518.222067][ T9559] [ 519.373247][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.973'. [ 519.563680][ T9435] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 520.277148][ T9435] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 520.430331][ T9575] netlink: 28 bytes leftover after parsing attributes in process `syz.2.974'. [ 520.515670][ T9435] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 520.572915][ T9575] netlink: 32 bytes leftover after parsing attributes in process `syz.2.974'. [ 521.772674][ T9435] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 524.485997][ T9435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.759623][ T9435] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.056994][ T7872] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.064213][ T7872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.230443][ T9620] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 525.241761][ T9620] syz.5.986: attempt to access beyond end of device [ 525.241761][ T9620] loop5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 525.666158][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.673378][ T7872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.351185][ T9637] loop6: detected capacity change from 0 to 63 [ 530.215568][ T9435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.172128][ T9668] loop6: detected capacity change from 0 to 63 [ 531.184367][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 531.193833][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 531.248547][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 531.327180][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 531.394687][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 531.438958][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 531.539724][ T5829] Buffer I/O error on dev loop6, logical block 3, async page read [ 534.279643][ T9435] veth0_vlan: entered promiscuous mode [ 534.293182][ T9435] veth1_vlan: entered promiscuous mode [ 534.332782][ T9435] veth0_macvtap: entered promiscuous mode [ 534.345023][ T9435] veth1_macvtap: entered promiscuous mode [ 534.443582][ T9435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.504069][ T9435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.572001][ T9435] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.613476][ T9435] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.644395][ T9435] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.680488][ T9435] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.696045][ T9707] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1008'. [ 536.989452][ T9386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.069995][ T9386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.191276][ T5893] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 537.218240][ T4794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.238762][ T4794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.341743][ T9720] random: crng reseeded on system resumption [ 537.802118][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 539.433559][ T5893] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 539.442238][ T5893] usb 4-1: config 0 has no interface number 0 [ 539.448500][ T5893] usb 4-1: config 0 interface 184 has no altsetting 0 [ 539.458825][ T5893] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 539.481215][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.489307][ T5893] usb 4-1: Product: syz [ 539.495054][ T5893] usb 4-1: Manufacturer: syz [ 539.499708][ T5893] usb 4-1: SerialNumber: syz [ 539.522689][ T5893] usb 4-1: config 0 descriptor?? [ 539.543856][ T5893] smsc75xx v1.0.0 [ 541.818929][ T5893] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 541.846129][ T5893] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 541.911251][ T5893] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 541.994092][ T5893] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 542.040425][ T5893] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 542.108586][ T5893] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 542.126438][ T9750] FAULT_INJECTION: forcing a failure. [ 542.126438][ T9750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.211538][ T5893] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 542.319548][ T9750] CPU: 0 UID: 0 PID: 9750 Comm: syz.7.1018 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 542.319578][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 542.319591][ T9750] Call Trace: [ 542.319598][ T9750] [ 542.319608][ T9750] dump_stack_lvl+0x189/0x250 [ 542.319640][ T9750] ? __lock_acquire+0xaac/0xd20 [ 542.319671][ T9750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.319699][ T9750] ? __pfx__printk+0x10/0x10 [ 542.319730][ T9750] ? __might_fault+0xb0/0x130 [ 542.319774][ T9750] should_fail_ex+0x414/0x560 [ 542.319800][ T9750] _copy_from_user+0x2d/0xb0 [ 542.319830][ T9750] ___sys_sendmsg+0x158/0x2a0 [ 542.319862][ T9750] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.319931][ T9750] ? __fget_files+0x2a/0x420 [ 542.319949][ T9750] ? __fget_files+0x3a0/0x420 [ 542.319979][ T9750] __sys_sendmmsg+0x227/0x430 [ 542.320015][ T9750] ? __pfx___sys_sendmmsg+0x10/0x10 [ 542.320053][ T9750] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 542.320098][ T9750] ? ksys_write+0x1f0/0x250 [ 542.320125][ T9750] ? rcu_is_watching+0x15/0xb0 [ 542.320165][ T9750] __x64_sys_sendmmsg+0xa0/0xc0 [ 542.320206][ T9750] do_syscall_64+0xf6/0x210 [ 542.320234][ T9750] ? clear_bhb_loop+0x60/0xb0 [ 542.320258][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.320277][ T9750] RIP: 0033:0x7f0e93d8e969 [ 542.320295][ T9750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.320313][ T9750] RSP: 002b:00007f0e94cb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 542.320334][ T9750] RAX: ffffffffffffffda RBX: 00007f0e93fb5fa0 RCX: 00007f0e93d8e969 [ 542.320348][ T9750] RDX: 0000000000000002 RSI: 0000200000000580 RDI: 0000000000000003 [ 542.320360][ T9750] RBP: 00007f0e94cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 542.320372][ T9750] R10: 0000000004000050 R11: 0000000000000246 R12: 0000000000000001 [ 542.320384][ T9750] R13: 0000000000000000 R14: 00007f0e93fb5fa0 R15: 00007fffceec9be8 [ 542.320414][ T9750] [ 542.567661][ T9751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1019'. [ 542.994057][ T5893] usb 4-1: USB disconnect, device number 23 [ 544.245148][ T9770] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1024'. [ 552.609227][ T9831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1042'. [ 553.059409][ T30] audit: type=1326 audit(1747998964.848:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69a78e969 code=0x7ffc0000 [ 553.202927][ T30] audit: type=1326 audit(1747998964.858:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd69a78e969 code=0x7ffc0000 [ 553.224744][ C1] vkms_vblank_simulate: vblank timer overrun [ 553.322370][ T30] audit: type=1326 audit(1747998964.858:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69a78e969 code=0x7ffc0000 [ 553.399394][ T30] audit: type=1326 audit(1747998964.858:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd69a78e969 code=0x7ffc0000 [ 553.420903][ C1] vkms_vblank_simulate: vblank timer overrun [ 553.549817][ T30] audit: type=1326 audit(1747998964.858:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69a78e969 code=0x7ffc0000 [ 553.571485][ C1] vkms_vblank_simulate: vblank timer overrun [ 553.672367][ T30] audit: type=1326 audit(1747998964.858:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd69a78e969 code=0x7ffc0000 [ 553.867054][ T30] audit: type=1326 audit(1747998964.858:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69a78e969 code=0x7ffc0000 [ 553.889194][ C1] vkms_vblank_simulate: vblank timer overrun [ 554.730819][ T30] audit: type=1326 audit(1747998964.908:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd69a78e969 code=0x7ffc0000 [ 554.752412][ T30] audit: type=1326 audit(1747998964.908:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69a78e969 code=0x7ffc0000 [ 555.183207][ T30] audit: type=1326 audit(1747998964.908:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9832 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69a78e969 code=0x7ffc0000 [ 557.277147][ T5926] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 557.769347][ T5926] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 557.898519][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.010401][ T5926] usb 3-1: Product: syz [ 558.056701][ T5926] usb 3-1: Manufacturer: syz [ 558.140898][ T5926] usb 3-1: SerialNumber: syz [ 558.234918][ T9888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1058'. [ 558.612971][ T5926] usb 3-1: config 0 descriptor?? [ 558.627794][ T5926] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 558.823846][ T9876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.844937][ T9876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.111159][ T5926] gspca_sonixj: reg_w1 err -110 [ 560.126546][ T5926] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 563.132304][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.139136][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.671765][ T9] usb 3-1: USB disconnect, device number 29 [ 564.034249][ T9925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1066'. [ 564.370323][ T9930] Unknown options in mask 5 [ 566.423276][ T9949] loop6: detected capacity change from 0 to 63 [ 568.293207][ T5926] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 568.908215][ T5926] usb 8-1: Using ep0 maxpacket: 8 [ 570.202620][ T5926] usb 8-1: device descriptor read/all, error -71 [ 570.844723][ T9981] bridge0: port 2(bridge_slave_1) entered learning state [ 571.308521][ T9997] loop6: detected capacity change from 0 to 63 [ 571.563948][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 571.615724][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 571.663557][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 571.704654][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 571.736955][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 571.779281][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 571.823898][ T5829] Buffer I/O error on dev loop6, logical block 3, async page read [ 572.725129][T10007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1091'. [ 575.598310][T10024] overlayfs: failed to resolve './file0': -2 [ 575.709681][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 575.709701][ T30] audit: type=1326 audit(1747998987.498:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10029 comm="syz.7.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e93d8e969 code=0x7fc00000 [ 575.831464][ T5903] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 576.131251][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 576.570885][T10038] nvme_fabrics: missing parameter 'transport=%s' [ 576.596540][ T5903] usb 4-1: unable to get BOS descriptor or descriptor too short [ 576.778034][ T30] audit: type=1326 audit(1747998988.378:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10029 comm="syz.7.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e93d85927 code=0x7fc00000 [ 576.828078][ T5903] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 577.150875][ T5903] usb 4-1: config 1 has no interface number 1 [ 577.151444][T10038] nvme_fabrics: missing parameter 'nqn=%s' [ 577.255060][ T5903] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 577.323215][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.354248][ T30] audit: type=1804 audit(1747998989.148:90): pid=10045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.7.1098" name="/newroot/13/bus/file1" dev="overlay" ino=93 res=1 errno=0 [ 577.361143][ T5903] usb 4-1: Product: syz [ 577.428234][ T5903] usb 4-1: Manufacturer: syz [ 577.441105][ T5903] usb 4-1: SerialNumber: syz [ 577.455788][ T5903] usb 4-1: can't set config #1, error -71 [ 577.501496][ T5903] usb 4-1: USB disconnect, device number 24 [ 577.802173][T10054] loop6: detected capacity change from 0 to 63 [ 577.838756][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 577.890983][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 577.932496][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.084452][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.097597][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.106452][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.114791][ T5903] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 578.123708][ T5829] Buffer I/O error on dev loop6, logical block 3, async page read [ 578.287023][T10058] openvswitch: netlink: Key 0 has unexpected len 20 expected 0 [ 579.107382][ T5903] usb 3-1: device descriptor read/64, error -71 [ 579.401160][ T5903] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 579.551350][ T5903] usb 3-1: device descriptor read/64, error -71 [ 579.558046][ T5874] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 579.661910][ T5903] usb usb3-port1: attempt power cycle [ 579.774010][ T5874] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 579.790186][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.808811][ T5874] usb 6-1: Product: syz [ 579.853253][ T5874] usb 6-1: Manufacturer: syz [ 579.878493][ T5874] usb 6-1: SerialNumber: syz [ 579.899334][ T5874] usb 6-1: config 0 descriptor?? [ 579.922183][ T5874] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 580.011382][ T5903] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 580.062343][ T5903] usb 3-1: device descriptor read/8, error -71 [ 580.146897][T10060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.220518][T10060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.331987][ T5903] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 580.381760][ T5903] usb 3-1: device descriptor read/8, error -71 [ 580.501526][ T5903] usb usb3-port1: unable to enumerate USB device [ 581.131534][ T5874] gspca_sonixj: reg_w1 err -110 [ 581.153440][ T5874] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 581.180366][T10078] bridge0: port 2(bridge_slave_1) entered learning state [ 582.349911][T10088] nvme_fabrics: missing parameter 'transport=%s' [ 582.437593][T10088] nvme_fabrics: missing parameter 'nqn=%s' [ 582.445154][ T5903] usb 6-1: USB disconnect, device number 14 [ 582.681547][T10095] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1114'. [ 582.807948][T10095] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 584.367964][ T8288] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 584.550369][ T8288] usb 6-1: Using ep0 maxpacket: 8 [ 584.602274][T10111] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1120'. [ 585.280784][ T8288] usb 6-1: unable to get BOS descriptor or descriptor too short [ 585.314116][ T8288] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 585.377115][ T8288] usb 6-1: config 1 has no interface number 1 [ 585.418806][ T8288] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 585.441770][ T8288] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.475634][ T8288] usb 6-1: Product: syz [ 585.485427][T10111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1120'. [ 585.495059][ T8288] usb 6-1: Manufacturer: syz [ 585.499787][ T8288] usb 6-1: SerialNumber: syz [ 586.403701][ T8288] usb 6-1: can't set config #1, error -71 [ 586.494575][ T8288] usb 6-1: USB disconnect, device number 15 [ 586.784812][T10134] loop6: detected capacity change from 0 to 63 [ 586.844286][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.875645][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.919665][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.955290][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 587.162086][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 587.270975][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 587.371874][ T5829] Buffer I/O error on dev loop6, logical block 3, async page read [ 587.920325][T10146] sp0: Synchronizing with TNC [ 588.011168][T10141] nvme_fabrics: missing parameter 'transport=%s' [ 588.073364][T10141] nvme_fabrics: missing parameter 'nqn=%s' [ 589.661700][T10165] loop6: detected capacity change from 0 to 63 [ 589.694844][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 589.758307][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 589.786285][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.991133][ T5827] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 591.281169][ T5827] usb 6-1: Using ep0 maxpacket: 8 [ 591.292396][ T5827] usb 6-1: unable to get BOS descriptor or descriptor too short [ 591.312825][ T5827] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 591.331203][ T5827] usb 6-1: config 1 has no interface number 1 [ 591.351633][ T5827] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 591.361107][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.374736][ T5827] usb 6-1: Product: syz [ 591.379013][ T5827] usb 6-1: Manufacturer: syz [ 591.404457][ T5827] usb 6-1: SerialNumber: syz [ 591.626307][T10167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.635321][T10167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.669636][ T5827] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 591.688250][ T5827] usb 6-1: 2:1 : sample bitwidth 220 in over sample bytes 2 [ 591.716526][ T5827] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 591.874016][ T5827] usb 6-1: USB disconnect, device number 16 [ 592.034414][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 593.863570][ T5903] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 594.559940][ T5903] usb 3-1: unable to get BOS descriptor or descriptor too short [ 594.654937][ T5903] usb 3-1: not running at top speed; connect to a high speed hub [ 594.743138][ T5903] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 594.750799][ T5903] usb 3-1: can't read configurations, error -61 [ 595.000375][ T5903] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 595.111509][T10196] nvme_fabrics: missing parameter 'transport=%s' [ 595.118010][T10196] nvme_fabrics: missing parameter 'nqn=%s' [ 595.324667][ T5903] usb 3-1: unable to get BOS descriptor or descriptor too short [ 595.349469][ T5903] usb 3-1: not running at top speed; connect to a high speed hub [ 595.363457][ T5903] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 595.381132][ T5903] usb 3-1: can't read configurations, error -61 [ 595.389514][ T5903] usb usb3-port1: attempt power cycle [ 596.830440][ T5903] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 597.688990][ T5903] usb 3-1: device descriptor read/8, error -71 [ 601.060299][T10250] loop6: detected capacity change from 0 to 63 [ 601.102075][ T5829] buffer_io_error: 4 callbacks suppressed [ 601.102091][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.764318][T10252] nvme_fabrics: missing parameter 'transport=%s' [ 601.773137][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.782203][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.800030][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.809190][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.820016][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.829560][ T5829] Buffer I/O error on dev loop6, logical block 3, async page read [ 601.902904][T10252] nvme_fabrics: missing parameter 'nqn=%s' [ 610.579312][T10324] fuse: Bad value for 'fd' [ 612.015998][T10336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1177'. [ 612.311150][ T5874] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 612.505393][ T5874] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 612.525421][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.571443][ T5874] usb 3-1: Product: syz [ 612.591159][ T5874] usb 3-1: Manufacturer: syz [ 612.607298][ T5874] usb 3-1: SerialNumber: syz [ 612.634280][ T5874] usb 3-1: config 0 descriptor?? [ 612.707198][ T5874] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 612.831413][ T8288] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 612.972253][T10350] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1181'. [ 613.634546][ T5874] gspca_sonixj: reg_w1 err -110 [ 613.639766][ T5874] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 613.687570][T10331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.750702][T10331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.831111][ T8288] usb 6-1: Using ep0 maxpacket: 8 [ 613.876459][ T8288] usb 6-1: unable to get BOS descriptor or descriptor too short [ 613.924755][ T8288] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 613.958443][ T8288] usb 6-1: config 1 has no interface number 1 [ 613.984687][ T8288] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 614.010428][ T8288] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.040860][ T8288] usb 6-1: Product: syz [ 614.046513][ T8288] usb 6-1: Manufacturer: syz [ 614.064624][ T8288] usb 6-1: SerialNumber: syz [ 614.618032][T10343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.627266][T10343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.669396][ T8288] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 614.718140][ T8288] usb 6-1: 2:1 : sample bitwidth 220 in over sample bytes 2 [ 614.758777][ T8288] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 614.858185][ T8288] usb 6-1: USB disconnect, device number 17 [ 614.958435][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 616.190749][ T8288] usb 3-1: USB disconnect, device number 38 [ 617.764015][ T30] audit: type=1326 audit(1747999029.558:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10378 comm="syz.7.1190" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e93d8e969 code=0x0 [ 620.621492][ T5893] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 620.811431][ T5893] usb 6-1: Using ep0 maxpacket: 8 [ 621.221195][ T5893] usb 6-1: unable to get BOS descriptor or descriptor too short [ 621.245801][ T5893] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 621.310207][ T5893] usb 6-1: config 1 has no interface number 1 [ 621.368925][ T5893] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 621.412854][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.452428][ T5893] usb 6-1: Product: syz [ 621.456736][ T5893] usb 6-1: Manufacturer: syz [ 621.478923][ T5893] usb 6-1: SerialNumber: syz [ 621.755478][T10408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.764385][T10408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.819088][ T5893] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 621.849309][ T5893] usb 6-1: 2:1 : sample bitwidth 220 in over sample bytes 2 [ 621.876444][ T5893] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 621.988182][ T5893] usb 6-1: USB disconnect, device number 18 [ 622.721263][ T5893] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 622.921197][ T10] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 622.929198][ T5893] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 622.970565][ T5893] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 623.024236][ T30] audit: type=1326 audit(1747999034.818:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10431 comm="syz.1.1205" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd69a78e969 code=0x0 [ 623.056684][ T5893] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 623.078097][ T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 623.080019][ T5893] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 623.092364][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.114217][ T10] usb 6-1: Product: syz [ 623.118547][ T10] usb 6-1: Manufacturer: syz [ 623.142915][ T5893] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 623.159140][ T10] usb 6-1: SerialNumber: syz [ 623.196351][ T5893] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 623.196735][ T10] usb 6-1: config 0 descriptor?? [ 623.230927][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 623.258779][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 623.318428][ T5893] usb 3-1: Product: syz [ 623.326795][ T5893] usb 3-1: Manufacturer: syz [ 623.374616][ T5893] cdc_wdm 3-1:1.0: skipping garbage [ 623.393814][ T5893] cdc_wdm 3-1:1.0: skipping garbage [ 623.423019][ T5893] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 623.431688][ T5893] cdc_wdm 3-1:1.0: Unknown control protocol [ 623.432367][T10428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.477371][T10428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.506088][ T10] gspca_sonixj: reg_w1 err -110 [ 624.511709][ T10] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 624.535177][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.541877][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.629572][ T5893] usb 3-1: USB disconnect, device number 39 [ 624.780949][ T5827] IPVS: starting estimator thread 0... [ 624.891346][T10443] IPVS: using max 27 ests per chain, 64800 per kthread [ 626.539506][ T10] usb 6-1: USB disconnect, device number 19 [ 627.291940][ T5874] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 627.531530][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 628.571371][ T5874] usb 4-1: unable to get BOS descriptor or descriptor too short [ 628.596152][ T5874] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 628.621169][ T5874] usb 4-1: config 1 has no interface number 1 [ 628.651656][ T5874] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 628.682209][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.824420][ T5874] usb 4-1: Product: syz [ 628.828657][ T5874] usb 4-1: Manufacturer: syz [ 628.887099][ T5874] usb 4-1: SerialNumber: syz [ 629.011558][ T30] audit: type=1326 audit(1747999040.798:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10492 comm="syz.5.1221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd27938e969 code=0x0 [ 629.579291][T10467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.588270][T10467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.630643][ T5874] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 629.690115][ T5874] usb 4-1: 2:1 : sample bitwidth 220 in over sample bytes 2 [ 629.714306][ T5874] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 629.803125][ T5874] usb 4-1: USB disconnect, device number 25 [ 630.349043][T10510] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 630.723297][T10523] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 630.912949][ T8288] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 631.839425][ T8288] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 631.859317][ T8288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.897585][ T8288] usb 3-1: Product: syz [ 631.911626][ T8288] usb 3-1: Manufacturer: syz [ 631.921336][ T8288] usb 3-1: SerialNumber: syz [ 631.936285][ T8288] usb 3-1: config 0 descriptor?? [ 631.964710][ T8288] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 632.247694][T10517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.295766][T10517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.525386][ T8288] gspca_sonixj: reg_w1 err -110 [ 633.103844][ T8288] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 635.065547][ T5874] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 635.521360][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 635.523652][ T5827] usb 3-1: USB disconnect, device number 40 [ 635.565207][ T5874] usb 4-1: unable to get BOS descriptor or descriptor too short [ 635.574427][ T5874] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 635.637630][ T5874] usb 4-1: config 1 has no interface number 1 [ 635.664968][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 635.682422][ T5874] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 635.702954][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.711426][T10575] netlink: 'syz.1.1242': attribute type 10 has an invalid length. [ 635.736132][T10575] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.741091][ T5874] usb 4-1: Product: syz [ 635.743798][T10575] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.747376][ T5874] usb 4-1: Manufacturer: syz [ 635.747405][ T5874] usb 4-1: SerialNumber: syz [ 635.951660][T10575] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.959105][T10575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.967063][T10575] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.974801][T10575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.008185][T10564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.017439][T10564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.055700][T10575] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 636.114378][ T5874] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 636.179725][ T5874] usb 4-1: 2:1 : sample bitwidth 220 in over sample bytes 2 [ 636.198941][ T5874] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 636.271784][ T5874] usb 4-1: USB disconnect, device number 26 [ 638.526537][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1245'. [ 638.616052][ T31] INFO: task syz.6.890:9282 blocked for more than 144 seconds. [ 638.629684][ T31] Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 [ 638.676088][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 638.702815][ T31] task:syz.6.890 state:D stack:26408 pid:9282 tgid:9275 ppid:6975 task_flags:0x400140 flags:0x00004004 [ 638.740356][ T31] Call Trace: [ 638.747173][ T31] [ 638.756082][ T31] __schedule+0x168f/0x4c70 [ 638.760953][ T31] ? __lock_acquire+0xaac/0xd20 [ 638.767308][ T31] ? schedule+0x165/0x360 [ 638.773275][ T31] ? __pfx___schedule+0x10/0x10 [ 638.786364][ T31] ? schedule+0x91/0x360 [ 638.803574][ T31] schedule+0x165/0x360 [ 638.816832][ T31] super_lock+0x1c8/0x3b0 [ 638.821586][ T5893] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 638.840054][ T31] ? __pfx_super_lock+0x10/0x10 [ 638.860149][ T31] ? do_raw_spin_lock+0x121/0x290 [ 638.869880][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 638.883228][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 638.894082][ T31] ? __pfx_quota_sync_one+0x10/0x10 [ 638.907399][ T31] iterate_supers+0x80/0x180 [ 638.917843][ T31] __se_sys_quotactl+0x353/0x950 [ 638.932910][ T31] ? __pfx___schedule+0x10/0x10 [ 638.945879][ T31] ? __pfx___se_sys_quotactl+0x10/0x10 [ 638.966682][ T31] ? do_syscall_64+0xba/0x210 [ 638.977401][ T31] do_syscall_64+0xf6/0x210 [ 638.985941][ T5893] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.001169][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 639.013763][ T31] ? clear_bhb_loop+0x60/0xb0 [ 639.020934][ T5893] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 639.038306][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.044740][ T5893] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 639.054682][ T31] RIP: 0033:0x7fc8cd98e969 [ 639.062283][ T31] RSP: 002b:00007fc8ce7e6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 639.071261][ T5893] usb 8-1: Manufacturer: syz [ 639.078288][ T31] RAX: ffffffffffffffda RBX: 00007fc8cdbb6160 RCX: 00007fc8cd98e969 [ 639.087787][ T5893] usb 8-1: config 0 descriptor?? [ 639.093166][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102 [ 639.102005][ T31] RBP: 00007fc8cda10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 639.125347][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.139787][ T31] R13: 0000000000000000 R14: 00007fc8cdbb6160 R15: 00007fff1e4e3f48 [ 639.148394][ T31] [ 639.152394][ T31] [ 639.152394][ T31] Showing all locks held in the system: [ 639.179040][ T31] 1 lock held by khungtaskd/31: [ 639.190015][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 639.239466][ T31] 2 locks held by kworker/u8:9/4794: [ 639.287415][ T31] #0: ffff888147ee5148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 639.316763][ T31] #1: ffffc9000e357c60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 639.339379][ T31] 2 locks held by getty/5584: [ 639.344809][ T31] #0: ffff88814dc840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 639.366932][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 639.387710][ T31] 1 lock held by syz.4.214/6760: [ 639.395511][ T31] 1 lock held by syz.5.1247/10606: [ 639.405563][ T31] #0: ffffffff8df43880 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 639.418626][ T31] 1 lock held by syz.7.1252/10614: [ 639.428023][ T31] 1 lock held by syz.2.1255/10618: [ 639.448949][ T31] #0: ffff88807ca665e0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1bd/0x4c0 [ 639.480164][ T31] 2 locks held by dhcpcd/10621: [ 639.485247][ T31] #0: ffff88807e2dc258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 639.512680][ T31] #1: ffffffff8df439b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 639.531357][ T31] [ 639.533790][ T31] ============================================= [ 639.533790][ T31] [ 639.561406][ T31] NMI backtrace for cpu 1 [ 639.561428][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 639.561453][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 639.561465][ T31] Call Trace: [ 639.561472][ T31] [ 639.561481][ T31] dump_stack_lvl+0x189/0x250 [ 639.561512][ T31] ? __wake_up_klogd+0xd9/0x110 [ 639.561538][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 639.561565][ T31] ? __pfx__printk+0x10/0x10 [ 639.561610][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 639.561634][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 639.561651][ T31] ? _printk+0xcf/0x120 [ 639.561686][ T31] ? __pfx__printk+0x10/0x10 [ 639.561718][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 639.561741][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 639.561765][ T31] watchdog+0xfee/0x1030 [ 639.561810][ T31] ? watchdog+0x1de/0x1030 [ 639.561836][ T31] kthread+0x711/0x8a0 [ 639.561862][ T31] ? __pfx_watchdog+0x10/0x10 [ 639.561885][ T31] ? __pfx_kthread+0x10/0x10 [ 639.561909][ T31] ? __pfx_kthread+0x10/0x10 [ 639.561931][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 639.561952][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 639.561977][ T31] ? __pfx_kthread+0x10/0x10 [ 639.561998][ T31] ret_from_fork+0x4b/0x80 [ 639.562017][ T31] ? __pfx_kthread+0x10/0x10 [ 639.562040][ T31] ret_from_fork_asm+0x1a/0x30 [ 639.562097][ T31] [ 639.562105][ T31] Sending NMI from CPU 1 to CPUs 0: [ 639.721880][ C0] NMI backtrace for cpu 0 [ 639.721898][ C0] CPU: 0 UID: 0 PID: 5179 Comm: klogd Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 639.721923][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 639.721934][ C0] RIP: 0010:__lock_acquire+0xad3/0xd20 [ 639.721964][ C0] Code: 38 00 00 45 31 e4 85 c0 74 3b 41 f6 47 22 10 75 2e 48 8b 1c 24 4c 89 ab e0 0a 00 00 8b 83 e8 0a 00 00 ff c0 89 83 e8 0a 00 00 <83> f8 30 0f 83 7c 01 00 00 3b 05 56 ee db 11 0f 87 c2 01 00 00 41 [ 639.721979][ C0] RSP: 0018:ffffc90003357218 EFLAGS: 00000002 [ 639.721995][ C0] RAX: 0000000000000001 RBX: ffff88807eb68000 RCX: 7491ce2f2692f800 [ 639.722007][ C0] RDX: 0000000000000001 RSI: ffff88807eb68af0 RDI: ffff88807eb68000 [ 639.722019][ C0] RBP: ffff88807eb68af0 R08: 0000000000000000 R09: 0000000000000000 [ 639.722030][ C0] R10: 0000000000000000 R11: ffffffff8171ca05 R12: 0000000000000000 [ 639.722041][ C0] R13: 0ac0d5affe09d4ff R14: 0000000000004008 R15: ffff88807eb68af0 [ 639.722054][ C0] FS: 00007f305c4b3c80(0000) GS:ffff8881260f6000(0000) knlGS:0000000000000000 [ 639.722068][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 639.722080][ C0] CR2: 00007fd279582338 CR3: 000000007eaf6000 CR4: 00000000003526f0 [ 639.722096][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 639.722105][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 639.722116][ C0] Call Trace: [ 639.722122][ C0] [ 639.722138][ C0] ? unwind_next_frame+0xa5/0x2390 [ 639.722157][ C0] lock_acquire+0x120/0x360 [ 639.722179][ C0] ? unwind_next_frame+0xa5/0x2390 [ 639.722202][ C0] ? unwind_next_frame+0xa5/0x2390 [ 639.722220][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 639.722246][ C0] ? unwind_next_frame+0xa5/0x2390 [ 639.722264][ C0] unwind_next_frame+0xc2/0x2390 [ 639.722282][ C0] ? unwind_next_frame+0xa5/0x2390 [ 639.722303][ C0] ? unwind_next_frame+0xa5/0x2390 [ 639.722321][ C0] ? kasan_save_track+0x3e/0x80 [ 639.722346][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 639.722364][ C0] arch_stack_walk+0x11c/0x150 [ 639.722388][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 639.722414][ C0] stack_trace_save+0x9c/0xe0 [ 639.722429][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 639.722446][ C0] ? stack_trace_save+0x9c/0xe0 [ 639.722465][ C0] kasan_save_track+0x3e/0x80 [ 639.722486][ C0] ? kasan_save_track+0x3e/0x80 [ 639.722507][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 639.722556][ C0] __kasan_kmalloc+0x93/0xb0 [ 639.722579][ C0] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 639.722607][ C0] ? __alloc_skb+0x142/0x2d0 [ 639.722630][ C0] ? __alloc_skb+0x142/0x2d0 [ 639.722648][ C0] kmalloc_reserve+0x136/0x290 [ 639.722671][ C0] __alloc_skb+0x142/0x2d0 [ 639.722693][ C0] alloc_skb_with_frags+0xca/0x890 [ 639.722718][ C0] ? __lock_acquire+0xaac/0xd20 [ 639.722743][ C0] sock_alloc_send_pskb+0x857/0x990 [ 639.722777][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 639.722805][ C0] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 639.722832][ C0] unix_dgram_sendmsg+0x5c2/0x17c0 [ 639.722855][ C0] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 639.722885][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 639.722912][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 639.722929][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 639.722951][ C0] __sock_sendmsg+0x219/0x270 [ 639.722969][ C0] __sys_sendto+0x3bd/0x520 [ 639.722990][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 639.723017][ C0] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 639.723042][ C0] ? rcu_is_watching+0x15/0xb0 [ 639.723070][ C0] __x64_sys_sendto+0xde/0x100 [ 639.723092][ C0] do_syscall_64+0xf6/0x210 [ 639.723114][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 639.723137][ C0] ? clear_bhb_loop+0x60/0xb0 [ 639.723157][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.723172][ C0] RIP: 0033:0x7f305c603407 [ 639.723186][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 639.723200][ C0] RSP: 002b:00007ffcc1cab480 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 639.723217][ C0] RAX: ffffffffffffffda RBX: 00007f305c4b3c80 RCX: 00007f305c603407 [ 639.723230][ C0] RDX: 0000000000000053 RSI: 00007ffcc1cab5c0 RDI: 0000000000000003 [ 639.723241][ C0] RBP: 00007ffcc1cab9f0 R08: 0000000000000000 R09: 0000000000000000 [ 639.723251][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffcc1caba08 [ 639.723262][ C0] R13: 00007ffcc1cab5c0 R14: 0000000000000038 R15: 00007ffcc1cab5c0 [ 639.723281][ C0] [ 640.201063][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 640.207981][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 640.219928][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 640.230616][ T31] Call Trace: [ 640.233917][ T31] [ 640.236872][ T31] dump_stack_lvl+0x99/0x250 [ 640.241586][ T31] ? __asan_memcpy+0x40/0x70 [ 640.246464][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.251894][ T31] ? __pfx__printk+0x10/0x10 [ 640.256558][ T31] panic+0x2db/0x790 [ 640.260547][ T31] ? __pfx_panic+0x10/0x10 [ 640.265528][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 640.271039][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 640.276442][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 640.282635][ T31] watchdog+0x102d/0x1030 [ 640.287086][ T31] ? watchdog+0x1de/0x1030 [ 640.291630][ T31] kthread+0x711/0x8a0 [ 640.295735][ T31] ? __pfx_watchdog+0x10/0x10 [ 640.300435][ T31] ? __pfx_kthread+0x10/0x10 [ 640.305235][ T31] ? __pfx_kthread+0x10/0x10 [ 640.309856][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 640.315092][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 640.320404][ T31] ? __pfx_kthread+0x10/0x10 [ 640.325041][ T31] ret_from_fork+0x4b/0x80 [ 640.329481][ T31] ? __pfx_kthread+0x10/0x10 [ 640.334095][ T31] ret_from_fork_asm+0x1a/0x30 [ 640.338912][ T31] [ 640.342267][ T31] Kernel Offset: disabled [ 640.346691][ T31] Rebooting in 86400 seconds..