last executing test programs: 7m13.857646331s ago: executing program 3 (id=596): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYRES16=r2], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 7m13.726259532s ago: executing program 3 (id=597): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffe}, {0x7d}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x4d6, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, {{@in=@remote, 0x0, 0x33}, 0x18f5a5f1890d413f, @in6=@private1={0xfc, 0x1, '\x00', 0x10}, 0x0, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00Wz', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x4}}}}}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[]) 7m11.311532717s ago: executing program 3 (id=607): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_open_dev$radio(&(0x7f0000000580), 0x3, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) r3 = syz_io_uring_setup(0xa27, &(0x7f0000000280)={0x0, 0x755e, 0x13080, 0x0, 0x114, 0x0, r2}, &(0x7f00000000c0), &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x4000000, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x83134ef56d91df17, 0x8000, '\x00', @value64=0xe21d}}) r4 = syz_io_uring_setup(0x2afc, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x10005, 0x800002}, &(0x7f0000000400), &(0x7f00000005c0)) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) io_uring_enter(r4, 0x4da3, 0xd93, 0x0, 0x0, 0x0) 7m11.119491193s ago: executing program 3 (id=611): r0 = socket$kcm(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x1) fcntl$setstatus(r3, 0x4, 0x0) setpgid(0x0, r2) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x800) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x800) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./bus\x00', 0x208c, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) mount$cgroup(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x1cb020, 0x0) (async) mount$cgroup(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x1cb020, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r5, 0x0, 0x3, 0x1}}, 0x20) r6 = open(&(0x7f0000000000)='.\x00', 0x800, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r1, r7, 0x0, 0x8) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 7m10.81480525s ago: executing program 3 (id=613): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e25, @multicast1}}, {{0x2, 0x5e23, @local}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x8, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @empty}}}, 0x108) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') (rerun: 32) read$FUSE(r1, &(0x7f0000003600)={0x2020}, 0x2020) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000280)={0x8, {{0x2, 0x4e1f, @multicast1}}, {{0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x108) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000180)={0x10, 0xe, {0x53, 0x906c, 0xfa53, {0x2, 0x5a1}, {0x7ff, 0x400}, @ramp={0xff, 0xffff, {0xb3, 0x7, 0x2, 0x6}}}, {0x52, 0x5b1, 0x4, {0x95be, 0x2}, {0xfffa, 0x4}, @ramp={0x7, 0x8000, {0x3, 0x0, 0x8}}}}) 7m10.438853656s ago: executing program 3 (id=616): unshare(0x28000600) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x2) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r3, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000340)="d091f1ff0fb3220f01c966660f38dc40ae440f20c0663503000000440f22c066b9350b000066b809bf91bc66ba000000000f300f20c06635200000000f22c081ce0700baf80c66b8e42fac8c66efbafc0cb80000ef660f3a422500", 0x5b}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0xa, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0xdddd0000, 0x0, 0x8, 0x0, 0x40, 0x5, 0x7d, 0x7f, 0x5, 0x3, 0x3, 0xfc}, {0xdddd1000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x6000, 0xeeee0000, 0xc, 0x5, 0x4, 0x42, 0x5, 0xff, 0x8, 0x7, 0xe, 0x8}, {0xeeee0000, 0xdddd1000, 0xb, 0x3, 0x6, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0xa, 0xa0, 0xb1, 0x80, 0x8, 0xa3, 0x80, 0xf, 0x1, 0xfd}, {0x5000, 0x2, 0x10, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xc, 0x7, 0x1, 0x34, 0x2, 0xc, 0x7, 0x9}, {0xeeef0000, 0x30}, {0x3000, 0xb}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x5, 0x10800, 0x8000c00, [0x6800000000000000, 0x4, 0x5e, 0x3]}) ppoll(&(0x7f0000000140)=[{r1, 0x100b}], 0x1, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x100) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b047400000000000000000000800000008782ab", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x1b, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000085000000a20000008dabf4fff0ffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000852000000500000085000000360000008510000004000000182a0000", @ANYRES32=r3, @ANYBLOB="0000000009000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r11 = socket(0x28, 0x3, 0xc65f) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond0\x00'}) 7m9.981334763s ago: executing program 32 (id=616): unshare(0x28000600) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x2) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r3, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000340)="d091f1ff0fb3220f01c966660f38dc40ae440f20c0663503000000440f22c066b9350b000066b809bf91bc66ba000000000f300f20c06635200000000f22c081ce0700baf80c66b8e42fac8c66efbafc0cb80000ef660f3a422500", 0x5b}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0xa, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0xdddd0000, 0x0, 0x8, 0x0, 0x40, 0x5, 0x7d, 0x7f, 0x5, 0x3, 0x3, 0xfc}, {0xdddd1000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x6000, 0xeeee0000, 0xc, 0x5, 0x4, 0x42, 0x5, 0xff, 0x8, 0x7, 0xe, 0x8}, {0xeeee0000, 0xdddd1000, 0xb, 0x3, 0x6, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0xa, 0xa0, 0xb1, 0x80, 0x8, 0xa3, 0x80, 0xf, 0x1, 0xfd}, {0x5000, 0x2, 0x10, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xc, 0x7, 0x1, 0x34, 0x2, 0xc, 0x7, 0x9}, {0xeeef0000, 0x30}, {0x3000, 0xb}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x5, 0x10800, 0x8000c00, [0x6800000000000000, 0x4, 0x5e, 0x3]}) ppoll(&(0x7f0000000140)=[{r1, 0x100b}], 0x1, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x100) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b047400000000000000000000800000008782ab", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x1b, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000085000000a20000008dabf4fff0ffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000852000000500000085000000360000008510000004000000182a0000", @ANYRES32=r3, @ANYBLOB="0000000009000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r11 = socket(0x28, 0x3, 0xc65f) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond0\x00'}) 5m21.966828048s ago: executing program 1 (id=1089): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) syz_open_dev$vim2m(0x0, 0xfffffffffffffffd, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="181d00000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="7772b9e563d7eb7360c90da7245afe945a9b5746fb4e81e9c8c62646310ddfebde4c2301e7d20f5494799149f889c0f01c7525df84b71f34dd5663e9c7e17ae356c673dcd6160f9176b4ec11b51204d609941222f09988e272d6cc45c6c894a2a2d6d9f6be72cae864804d8d2bef66511599891be26c05a1bbc0449ea5d7ab7b6ee4d217ed7305a3450f3d59e834e6f92adf06ac18373e63f8", 0x99) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r3 = socket$caif_seqpacket(0x25, 0x5, 0xffffffff) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, 0x0, 0x13) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) 5m21.026152097s ago: executing program 1 (id=1095): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100020a86f3401011249024db01020305090212000100e950090904"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, &(0x7f0000000140)={0x0, 0xc, 0x5f, {0x5f, 0x7, "3518036f13ee1824254d9d60af1ea564cf64299db2588fbbaa50abcb1ccda24573a8bee20d594af89adac3eafb978d77abac2e4f9f9313271715bec7ab47c8d0b12ef70ee278b7b9199cb69009652e2fca6e38cb4890988acec9596471"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x62, 0x3, 0x455}}, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x8, 0x1, 0x60, "86ec9fc8", "b114f07e"}}, &(0x7f0000000840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x0, 0x8, 0xfc, 0x1, 0x2}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000f40)=ANY=[@ANYBLOB="201002000000a76776521ffe9fa32372fdf1e2237a59a76cdc6b96f7598470e0f412cd22de9784625831893c3fc55e70da6b93c1d8840585b97295e0e71ad204983f8f63f5607031a74a9a8d13170348c89b31f32794289e14684ca55d5704ea4955bab43151dd8390682a1de98b800b72b72795ffd652e3b22680c6600e2e2271b769"], &(0x7f0000000000)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000009c0)={0x20, 0x0, 0x8, {0x8, 0x40, [0x0]}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0xc}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "67c6"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000b80)={0x40, 0x19, 0x1, "0bec"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x5b4}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0xea}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x86}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x80}}) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000240)={0x4dc, "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"}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80800, 0x80) r1 = eventfd(0x0) io_setup(0x6, &(0x7f0000000080)=0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c, 0x46}, 0x50) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000580)={0x0, 0x0, 0x8, 0x7, 0x4, r1, &(0x7f0000000240)="cbc8841231010000000000000000", 0xe}]) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3ae6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) ioprio_set$pid(0x3, 0x0, 0x4004) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0xc}}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESOCT=r6, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22eca61c05}, 0x4008040) 5m17.432144792s ago: executing program 1 (id=1119): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x19, 0x1ff, 0x8, 0x3ff}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x4, 0x6, 0x3}, 0x10) cachestat(r0, &(0x7f00000000c0)={0x6, 0x4}, &(0x7f0000000100), 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind$tipc(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x2325, &(0x7f00000001c0)={0x0, 0x7992, 0x800, 0x3, 0x224}, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x1956, &(0x7f00000002c0)={0x0, 0x43b, 0x21004, 0x0, 0xc6, 0x0, r4}, &(0x7f0000000340), &(0x7f0000000380)) r5 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x80800) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'veth0_to_bond\x00', {0x2}, 0x8001}) write$sysctl(0xffffffffffffffff, &(0x7f0000000440)='7\x00', 0x2) fremovexattr(r0, &(0x7f0000000480)=@random={'user.', '7\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000090}, 0x604c885) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r6) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r8, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd, 0x6e}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f957b8d0ec"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008014) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000800)={0x8, r2, 'id1\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r9, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000880)=r10}, 0x20) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r11, 0x8008f513, 0xfffffffffffffffc) ioctl$KDSIGACCEPT(r10, 0x4b4e, 0x33) r12 = add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) ioctl$NS_GET_OWNER_UID(r10, 0xb704, &(0x7f0000000980)=0x0) ioctl$SIOCAX25ADDUID(r10, 0x89e1, &(0x7f00000009c0)={0x3, @bcast, r13}) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000a00)) keyctl$restrict_keyring(0x1d, r12, &(0x7f0000000a40)='logon\x00', &(0x7f0000000a80)='$.\x00') setsockopt$CAN_RAW_RECV_OWN_MSGS(r10, 0x65, 0x4, &(0x7f0000000ac0)=0x1, 0x4) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000b00), 0x28a801, 0x0) 5m17.322996788s ago: executing program 1 (id=1120): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x6, 0x519081) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000003c0)={0x0, 0x3be, 0x7, 0x0, 0x7}) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r2 = syz_io_uring_setup(0x239, &(0x7f0000000400)={0x0, 0x397f, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0xb) r5 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r5, &(0x7f0000000780)={&(0x7f0000000400)=@x25={0x9, @remote}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)=""/133, 0x85}, {&(0x7f0000000540)=""/102, 0x66}, {&(0x7f00000005c0)=""/14, 0xe}, {&(0x7f0000000600)=""/186, 0xba}, {&(0x7f00000006c0)=""/35, 0x23}], 0x5}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000be19000106df000000000000001c140000fe030001000080000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) 5m16.437287521s ago: executing program 1 (id=1125): sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x60, 0x1, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000044}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a400000000108000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m16.166931134s ago: executing program 1 (id=1127): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=']) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d3030303030303030303030303030000000000000dc599bad22eebebb0002372c6e6f6465000000000000000000"], 0x1, 0x6a4, &(0x7f0000001380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xc4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@fwd={0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x2d}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x5b81, 0xc0, 0x2, 0x9, 0x9, 0x0, 0x0, 0xde}) execveat(r5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)={[&(0x7f0000000180)='netdevsim\x00']}, 0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb72, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff9, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) readv(r6, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) ioctl$UI_DEV_DESTROY(r6, 0x5502) r7 = open(0x0, 0x60840, 0x0) fcntl$setsig(r7, 0xa, 0x13) fcntl$setlease(r7, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x44, r4, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) 5m15.334700923s ago: executing program 33 (id=1127): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=']) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d3030303030303030303030303030000000000000dc599bad22eebebb0002372c6e6f6465000000000000000000"], 0x1, 0x6a4, &(0x7f0000001380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xc4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@fwd={0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x2d}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x5b81, 0xc0, 0x2, 0x9, 0x9, 0x0, 0x0, 0xde}) execveat(r5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)={[&(0x7f0000000180)='netdevsim\x00']}, 0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb72, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff9, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) readv(r6, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) ioctl$UI_DEV_DESTROY(r6, 0x5502) r7 = open(0x0, 0x60840, 0x0) fcntl$setsig(r7, 0xa, 0x13) fcntl$setlease(r7, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x44, r4, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) 10.735206323s ago: executing program 6 (id=2574): syz_emit_ethernet(0xe, &(0x7f0000000040)={@multicast, @broadcast, @void, {@generic={0x17}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd700001dcdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'veth1_to_bond\x00', 0x500}) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000180)=0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x66, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm={0x15, 0x24, 0x12, 0xf001}, @mdlm_detail={0x4, 0x24, 0x13, 0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r6, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 8.806900896s ago: executing program 5 (id=2586): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) inotify_init1(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20044800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x4e, 0x0, 0x1}, 0x28) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000400)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) iopl(0x3) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESTART(r8, 0x1265, 0x0) 8.417544064s ago: executing program 2 (id=2588): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) (async) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) getpid() (async) getpid() socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) prlimit64(r1, 0x1, &(0x7f0000000400)={0x1, 0x380}, &(0x7f0000000440)) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", '\x00', "ec3fff9afd96e6c0"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", '\x00', "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) shutdown(r4, 0x1) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) getpid() 7.776614982s ago: executing program 2 (id=2590): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) clock_gettime(0x8, &(0x7f0000001ac0)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x101001a, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmod\a=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,'], 0xfb, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x80000001, 0x9, 0xc95a}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={r1, 0x6, 0x7, 0x2}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') lseek(r3, 0x2004, 0x0) write$vga_arbiter(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="74617267657420686015067a512f5043493a5b89d9f46ac070"], 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f00000001c0)=0x7fc, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 7.667396035s ago: executing program 6 (id=2591): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) close(0x3) (async) close(0x3) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) close(0x3) (async) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x17, &(0x7f0000000140)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @ldst={0x1, 0x0, 0x3, 0x1, 0xc, 0xfffffffffffffff0, 0x10}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x200}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ldst={0x2, 0x2, 0x3, 0xb, 0x14, 0x6, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @generic={0x7, 0x4, 0x1, 0x2, 0xe4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 7.56288304s ago: executing program 6 (id=2592): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r4) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fedbdf251a00000008000300", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) (async) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) (async) syz_usb_control_io$hid(r8, 0x0, 0x0) (async) r9 = syz_open_pts(0xffffffffffffffff, 0x101) dup3(r9, 0xffffffffffffffff, 0x0) (async) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000013c0)={'wpan1\x00', 0x0}) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f0000001700)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001740)=ANY=[@ANYBLOB="c0c2054b75f4bd6828807d19e99f712ca940c3025be9d5f8be84026fc0c397d18784484a91", @ANYRES16=r1, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000014c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x4c, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8850}, 0x20000810) (async) r11 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r11, &(0x7f0000001340)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000100)=""/132, 0x84}, {&(0x7f00000001c0)=""/199, 0xc7}], 0x4, 0x7, 0x8000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="c40698010100000004fffffffff6fd8571"], 0x14}, 0x1, 0x0, 0x0, 0x5c8c5}, 0x0) 6.613931549s ago: executing program 2 (id=2597): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0xba, 0x10001, 0xa, 0x0, 0x0, [{{r0}, 0xbd88}, {{r0}, 0x1}, {{r0}, 0x4}, {{r0}, 0x153}, {{r1}, 0x4}, {{r0}, 0x8001}, {{r0}}, {{r0}, 0x8}, {{r0}, 0x120000000000}, {{r0}, 0x100000001}]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0x80026101, &(0x7f0000000480)={"dc585864", 0x0, 0x0, 0x0, 0x0, 0x0, "b6fe4e2f20376aa9fe088a6aac3fd5", "6d901aec", "3ea6a3a8", "993929c7", ["9fcc2d961863235ba8cd7d4d", "887f92a9010a6d2359e6944e", "2a3eacc83533170646505ab0", "90ef8e61168ab8397e881818"]}) 6.31046289s ago: executing program 2 (id=2600): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0x8, &(0x7f0000000480)={0x6, 0x100}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000240)=0x7) r1 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000010000000c000000090000000000000095762694c8e61b96b9a3b0a605fa1bfd704817e7c9e8a300381925967ac9ad1812f4734df0ee4ee2a4b47825013ded5ebd1ba5ea7ec54706fab75e26fd11fe58f34b2e9ca5b1643bbd1f3a152c877e7a0c21ae4720f0e2b6029fa43886e07cd920bfc947dc582084fd46d9269cdf8fd879c2f6e6e1a7d9d4533502a923e261863bb0b2d3ec65de91d8d34da731f0ec19ccffb5e1b9ca1458ef68d8c095c724bec15a37b4ca3a1fe8bc7beb2911e009959cdf6676915fb9c00d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x3561, 0x80, 0x0, 0x271}, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="66baf80cb83cecb78cef66bafc0ced66ba400066b8ffff66ef0f78d164646565470fc77d9fb9240b0000b809000000ba000000000f3048b805000000000000000f23c00f21f835010004000f23f80f005300364b0fc729360fc77c8ffd0f20c035000000400f22c0", 0x68}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0xeeee8000}}, "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", "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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000190001090000000000000000261600000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 6.243167089s ago: executing program 6 (id=2601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300840011000000000002de0e116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0xffff000000000000) 6.186412629s ago: executing program 6 (id=2603): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f000000540b4550182195f57584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) request_key(&(0x7f0000000480)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)='\\\\@}\x01\x00\x00@\xf5\xe2\xdbE\xc0P\x02\xe0\xf2\xaa\xe6\x00\x00\x00\x00\x00\x00\x00\xd0\xa1B\x80\xd3\xcc\x06D\a\x00\x00\x00\x00\x00\x00\x04)\'\x03t\xcd\xe8\xd0u\x01\xff\x01\xd1', 0xfffffffffffffffe) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x50) read$FUSE(r2, &(0x7f0000000940)={0x2020}, 0x2020) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 6.010099459s ago: executing program 4 (id=2604): r0 = syz_io_uring_setup(0x6a2d, &(0x7f0000000140)={0x0, 0x4000fec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x200}}) (async, rerun: 32) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000004c0), &(0x7f0000000500), 0x2, 0x7) (async) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101042, 0x1db) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x1, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}}, 0x44004) r4 = io_uring_setup(0xeba, &(0x7f0000000440)={0x0, 0x4eb0, 0x1000, 0x23, 0x117, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02000000711069000322000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={&(0x7f0000000300)=[0x0, 0x0], 0x2, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) (async) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) (async, rerun: 32) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='omfs\x00', 0x208000, 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x14, &(0x7f0000000f80)=[{0x8, 0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000580)=""/1, 0x1}, {&(0x7f00000006c0)=""/72, 0x48}, {&(0x7f00000007c0)=""/82, 0x52}, {&(0x7f0000000840)=""/94, 0x5e}, {&(0x7f00000008c0)=""/93, 0x5d}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000a40)=""/244, 0xf4}], &(0x7f00000005c0)=[0x3ff, 0x7d, 0x2, 0x1, 0x5, 0x53, 0xffffffff7fffffff, 0xff]}, {0x5, 0x1, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000bc0)=""/212, 0xd4}, {&(0x7f0000000740)=""/59, 0x3b}, {&(0x7f0000000cc0)=""/139, 0x8b}, {&(0x7f0000000d80)=""/199, 0xc7}, {&(0x7f0000000e80)=""/39, 0x27}], &(0x7f0000000f40)=[0x7, 0x98f, 0x1, 0x162a47a6, 0x6, 0x0, 0xffffffff, 0x5b6]}], 0x2) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000440)={0x0, 0x0, r5, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) (async) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x5, 0x897, 0x200, 0x0, 0xf}) (async) fcntl$setstatus(r6, 0x4, 0x42000) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) read$FUSE(r6, &(0x7f0000001440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r6, &(0x7f0000000200)={0x60, 0x0, r9, {{0x9, 0x5, 0x5, 0x2, 0x400069a, 0xae, 0x2400000, 0x800}}}, 0xfffffec2) 5.14692338s ago: executing program 4 (id=2605): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000140)={0x14, {{0x29, 0x4e20, 0x8000000, @private2, 0x42}}}, 0x88) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x30100, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000340)={r5, r6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x81) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca, r9}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000380)={0x0, r6, r9, 0xfbfbfbfb}) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000500)=@get={0x1, &(0x7f0000000400)=""/205, 0x100}) 5.081560771s ago: executing program 4 (id=2606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000040900010073797a30000000000900020073797a3200000000400004803c0001800c0001007061796c6f6164002c000280080103400000001f080005400000000e08000440000000c508000140000000120800024000000002140000001100010000000000000000000200000a"], 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xaaa6, 0x40000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000000c0)={0x400, 0x8, 0xfffffff9, 0x5f2, '\x00', '\x00', '\x00', 0x0, 0x5, 0x2, 0x200, "31c547f0d6818e729ae9ade9ccca305b"}) 5.047774576s ago: executing program 5 (id=2607): r0 = socket$phonet(0x23, 0x2, 0x1) (async, rerun: 32) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) (rerun: 32) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x4, 0x0) (async) r3 = socket$isdn(0x22, 0x3, 0x1) recvmsg(r3, &(0x7f0000000540)={&(0x7f00000000c0), 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)=""/151, 0x97}, {&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/213, 0xd5}, {&(0x7f0000000380)=""/188, 0xbc}], 0x4, &(0x7f0000000480)=""/164, 0xa4}, 0x0) (async) ioctl$FIONCLEX(r0, 0x5450) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x0) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xdc, r5, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_SE_APDU={0x1b, 0x19, "cf719669f1ed6eb4b1e15552f283655b4222ef5e9d3701"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc2}, @NFC_ATTR_SE_APDU={0x53, 0x19, "e467a3a1baf6720bade10425c3e322b5200e179a64bf75eccd16220df482e564fb9f61dc17f57e1049cddc4182c7a8f335d4bd8492add9dee4f8e45e1ee0929b2ce4a34d86817e9e2bffc12e742dfa"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x1e, 0x19, "e652214a8e95ba6d400f1b67e266a73c33bdaf8be3399f0aa45c"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) write$proc_mixer(0xffffffffffffffff, &(0x7f00000007c0)=[{'MONITOR', @val={' \'', 'Master Capture'}}, {'PHONEOUT', @val={' \'', 'Line Capture Switch'}}], 0x62) (async) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @remote}, &(0x7f0000000880)=0x10, 0x80000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r7, 0x5000940e, &(0x7f00000008c0)={{}, "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"}) (async) r8 = socket$qrtr(0x2a, 0x2, 0x0) fsetxattr$security_ima(r8, &(0x7f00000018c0), &(0x7f0000001900)=@md5={0x1, "0ed6812fa0c315688ae9c44ccb45ce32"}, 0x11, 0x2) (async, rerun: 64) r9 = syz_open_dev$hidraw(&(0x7f0000001940), 0xefc, 0x222040) (rerun: 64) ioctl$HIDIOCSFEATURE(r9, 0xc0404806, &(0x7f0000001980)="495b992ba650905635e9807303d3177932758e24355ee788e3280238f6a0d16f0669c5612fe0225660a387b495e6854512956483e3668732eaf1ed67ba612b5c5398513ed5b43447da08aad368ecc987eaf176bfcf3140e835753fb4a8a51ed02c3ebfb01cac0ca613ed039ac051913885b1f13085e16ad90e6c35b74b3442ecea19a5bcea5111") (async) ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, &(0x7f0000001a40)={0x0, "139386c0dd598c2fc5555bb882300140"}) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000002a40)={{r7}, {@val={r10}, @max}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002ac0), r2) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002b00)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_START_P2P_DEVICE(r11, &(0x7f0000002bc0)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x28, r12, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x5, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0xc045) (async) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002c00), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r14, &(0x7f0000002c80)={0x11, 0x10, 0xfa00, {&(0x7f0000002c40)}}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(r11, &(0x7f0000002e00)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d00)={0xb0, r12, 0x108, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x1, 0x6c}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x7ff}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x3}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x3}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xa2}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0xc, 0x1}, {0x4}, {0x12}, {0x4, 0x1}, {0x5}, {0x30, 0x1}, {0x9}, {0x36, 0x1}, {0x6}, {0x16, 0x1}, {0x6c}, {0x2}, {0x549ebe108bcad990}, {}, {0x1e}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x30, 0x1}, {0x1}]}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x8}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xd2}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xbb}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x24}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x6}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x79ee}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000002e40)="79efc9964137308f055f2ae2899fb150fbd14d93eaade42735b04c973f2316af03028b7d6a0ece1e7804eee9033b092b29eb37ebf2d998e8b04fbd542332ffa35004645974c63e04747f3e2789e91c980971eb8cb360fa1fc27a8e1e60b53ab78ce54950740471f44a825e39a41bd5bba999169c356df43cba6100ef35d887b0df19458c85a7f6450a58ea94e208f9a892ca8512c6d281c94c8211f5d9ff31863f7deea19d4a4accac5b7654e9afd25fb178221c349f474fb7", 0xb9) r15 = socket$tipc(0x1e, 0x7, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r15, 0x10f, 0x86) 4.88707284s ago: executing program 4 (id=2608): socket$netlink(0x10, 0x3, 0x8000000004) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = io_uring_setup(0xf84, &(0x7f0000000400)={0x0, 0xfcb5, 0x2000, 0x0, 0x151}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000240)={r1}, 0x1) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001000)=""/248, 0x65) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000100)={0xb, 0x0, 0x9, 0xffffffff, 0x0, 0x4, '\x00', 0x4, 0x2, 0x5, 0xff, 0x0, 0x1, 0xff}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x6c, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x3ef}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}]}, 0x6c}, 0x1, 0x0, 0x0, 0x84}, 0x4000) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0xfffffffffffffffd, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x1, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0xffbffffffffffffc, 0x6, 0x1, 0x800, 0x2], 0x0, 0x244}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000380)={0x0, 0x7dc, 0x5}) 4.861065236s ago: executing program 5 (id=2609): fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x115440) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x2c, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0xc000) connect$unix(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x4) syz_emit_ethernet(0x0, 0x0, 0x0) shmget(0x3, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) listen(0xffffffffffffffff, 0x3) memfd_create(0x0, 0x6) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x1, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x42, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000002900000004000000d40000000000000018000000000000002900000002"], 0x30}}], 0x2, 0x0) set_mempolicy(0x2, &(0x7f0000000100)=0x4, 0x3) r6 = memfd_create(&(0x7f0000000380)='\xa3\xac\xce\xe1\x88\x9d[\x10\x00\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9\x95\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd184]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xf3\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$inet_udplite(0x2, 0x2, 0x88) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x4000005, 0x6cc800) 3.976960341s ago: executing program 0 (id=2610): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0), &(0x7f0000000300)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x100}, @flat=@binder={0x73622a85, 0x100, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003780)=[{&(0x7f0000000bc0)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="9f", 0x1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0xc044) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000140), 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "6ed6c4", 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4}}}}}}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000000) read$FUSE(r8, &(0x7f00000034c0)={0x2020}, 0xcac) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000040)=[r2], 0x1) 3.910720979s ago: executing program 4 (id=2611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) accept4(r4, &(0x7f0000001540)=@generic, &(0x7f00000015c0)=0x80, 0x80000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0xffffffffffffff0f}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r7) bind$unix(r7, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000003c0)) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090e000000000000000000000005000600000000000a00000000000000fc00000000000000000000000000000000000000000000000200010000000000000000030000000004000500000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x70}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r3, 0x0) copy_file_range(r3, &(0x7f00000008c0)=0x4, r2, 0x0, 0x8, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4044}, 0xc, &(0x7f0000000580)={&(0x7f00000009c0)={0x238, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x300}]}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x67, 0x3, "4c07643a2fba3f9511f3bee2cf53033251761b585c55a44794fa5525745bf8572fdfdec81f2f9cd1baa020bf59f0c3f4bd5408aaf6648cde3894f438cf276b1b2437858459cfba90d656d8b79f6197db11372171bc436ea161176321ea0312c124e7a7"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "16499050067caf1788a7b2411a5012e5a9e8f11368b237d818748dbe2e09"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff7}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x18000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbd2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb50}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f9}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x8000, 0x2, {"74dddb3195d580ad44849ba227f7836d"}, 0x1, 0x401, 0xffffffffffff8000}}}, 0x90) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) 3.773341941s ago: executing program 2 (id=2612): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000002240)={0x80, 0x0, 0x8a3e}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) r6 = syz_open_procfs(r4, &(0x7f0000000100)='task\x00') fchdir(r6) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = syz_open_procfs(r4, &(0x7f0000000040)='environ\x00') syz_usb_disconnect(0xffffffffffffffff) syz_fuse_handle_req(r7, &(0x7f0000000180)="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", 0x2000, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) syz_usb_connect(0x2, 0xe4, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2f6010000400009046a00067af4190009050f080000050801060c8b631b7507250102020700090501", @ANYRES16], 0x0) r9 = socket(0x840000000002, 0x3, 0xff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000002180)) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000140)=0x8, 0x4) ioctl$SIOCGSTAMPNS(r9, 0x8907, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000480)={r8, @in6={{0xa, 0x4e22, 0x6, @remote, 0xfff}}}, &(0x7f0000000240)=0x84) 3.690277597s ago: executing program 0 (id=2613): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000003c0), 0x8, 0x6209c2) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) r10 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 3.562973707s ago: executing program 0 (id=2614): mkdir(&(0x7f0000000000)='./file0\x00', 0xb4) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x600000) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x4, r3, 0x2c, 0x1, @in={0x2, 0x4e24, @empty}}}, 0xa0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@acquire={0x128, 0x15, 0x1, 0x0, 0x1, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}}, @in=@multicast2, {@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x80}, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x70bd25}}, 0x128}}, 0x0) r5 = socket(0xa, 0x3, 0x87) setsockopt$inet_buf(r5, 0x0, 0x24, 0x0, 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)=@known='trusted.syz\x00') 3.548193811s ago: executing program 0 (id=2615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000"], 0x48) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000480)={r5, r3, 0x4, r4}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r7, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) (async) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000140)={0xc, r7}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000005c0)={0x28, 0x4, r7, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0xff}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, &(0x7f0000001700), 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IOMMU_VFIO_SET_IOMMU(r6, 0x3b66, 0x1) (async) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) (async) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) (async) open$dir(&(0x7f0000000180)='./file0\x00', 0x20000, 0x131) (async) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r8, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 3.300177867s ago: executing program 0 (id=2616): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket(0x10, 0x803, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000980)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r4}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r6}) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xffff1000, 0xa, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x2, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0xeeee8000, 0xdddd0000, 0x4, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x8, 0x6e, 0x2, 0x81}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xb, 0x7b, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xdf, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x240225, 0x5, 0x6c00, 0x8000900, 0x1, [0x6, 0x2, 0x3, 0x3]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) socket(0x10, 0x803, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000980)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r4}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r6}) (async) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xffff1000, 0xa, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x2, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0xeeee8000, 0xdddd0000, 0x4, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x8, 0x6e, 0x2, 0x81}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xb, 0x7b, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xdf, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x240225, 0x5, 0x6c00, 0x8000900, 0x1, [0x6, 0x2, 0x3, 0x3]}) (async) 3.134912943s ago: executing program 5 (id=2617): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) read(r0, &(0x7f0000002340)=""/232, 0xe8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{0x0, 0x3f}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 3.090025575s ago: executing program 4 (id=2618): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000180)={0x1f00, 0x0, 0xf7fffff8}) r1 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) inotify_init() r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000740)={0x2, 0x3, 0xffffffff, 0x2, 0x10800f61}) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/245], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0x18}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x51, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac, 0x0, 0x5}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000fc4c2608fd0b24019f3a010203010902240001000000000904000002c55bef000905ad1e0000000000090502"], 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 3.084504203s ago: executing program 0 (id=2619): syz_open_dev$usbfs(&(0x7f0000000000), 0x6, 0x101000) syz_usb_connect(0x1, 0x4b3, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x58, 0x2f, 0x11, 0x8, 0x18cd, 0xcafe, 0xd07a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a1, 0x2, 0x0, 0x7f, 0x0, 0x8, [{{0x9, 0x4, 0x8f, 0x5, 0x10, 0xe, 0x1, 0x0, 0x1, [@hid_hid={0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0xbb4}}], [{{0x9, 0x5, 0x7, 0x0, 0x200, 0x96, 0x5, 0x1}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x6, 0x3, 0x45}}, {{0x9, 0x5, 0xb, 0xe, 0x400, 0x5, 0x5, 0x7e}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0xff, 0xb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xb52}, @generic={0xd0, 0xf, "efa5bc88949dff90af3030a98240e93ba5eb2e68c2b9808665665f2c810f8ec9066172774b5473561b2f3a21ae7028bffca17d3e5580d14d6b12036bcb6c1012844cd0faa234a2c6e6d64359279711de8f74abf44cc22e27639e0f45c731ae0abe3f3aff3b8de80297788a4f1a5068fc062162fcbcad00d633622c49271e9726dc683c264f4d6b1dc07f550def0baf0747c41b585a9d54569a2fd9e736b965ae3a5d98a2274d1c3a4fda87ad03a8e028f26449e9545067efc5cc62a9d80f8448f212e512f771a98e571972330c97"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0x2, 0x0, 0x4}}, {{0x9, 0x5, 0xa, 0x4, 0x10, 0x18, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x39, 0x7}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x4, 0x9, 0x3e, [@generic={0xf9, 0x7, "ed283e56f21b194668c28bc181a141b4cff9ee083c430335fc2ad03d05a67bf3521d74f51df8f05e1ab82a117836f9cf75b876f82be312e242f06b1cbd2c57ed461134a6b73a478766d8613c87a70b19f1e288c5a3721b0a47fa75d73bc7edc49cfb8288f476807b6f6bb276bae37cfcbb41e40555b79b26c8e9c1dc5df7be0415aeef4bcf39cb2a4aad7494b80c998044343589db5b12da60b62d8a32674555c2cb5d10ed13d1857a74e3eaa283db7ad648017e6d52fe65bfe2afdfcf74888bed940635022e0a03dc6cb52d74064132681240297797bcd23eb252dc52f873b335dad9d3b18396caaeb8477b6c4e788c4e138e07ee1f58"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x0, 0x9, 0x2}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0x9, 0x4b, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x7f}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x2, 0xd, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x81, 0x4}]}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x6, 0x1, 0x9}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x81, 0x1, 0x3, [@generic={0xba, 0xe, "feea2eaafc368f96752f276777f3572dd3a5f24068eb0b7797881c897dcecab05be0346c6ba6c0cc1ec226d31e7af96ea89ffabd185db90e3be0fe9253cdc88c19a043e336aab3797b60ab7ba27f31e934c910007f2ea8cac54008158789790abbcd79fbc7b51f96b457ba5e5ff88f45e166a562111d84447370a87e8aa3c1bc3fac079f6e0b922b3a7e06f91d5814502120bc795a53a1da0c2b0fbb9e204968a82b4fe94e796fd4662fdd4d25403f7cb9a2e139055c635f"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x5, 0x1, 0xb6, [@generic={0x101, 0x23, "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"}, @generic={0x18, 0xf, "445f7e5947af27de2056e849f7decf9d4a1a87b9ca72"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x5, 0x1d, 0x8}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x5, 0x2, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x80}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0xc2, 0x6, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7}]}}]}}, {{0x9, 0x4, 0x1b, 0x20, 0x2, 0x28, 0xf5, 0x2c, 0x2, [], [{{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x0, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x49, 0x4}]}}, {{0x9, 0x5, 0x9, 0x6, 0x9f2e9a4f219eb04, 0x81, 0xb5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xcd5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x5}]}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x310, 0x7f, 0x9, 0x81, 0xff, 0x9}, 0x36, &(0x7f0000000540)={0x5, 0xf, 0x36, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x81, 0x3, 0x7f}, @wireless={0xb, 0x10, 0x1, 0xc, 0xd0, 0x9, 0x1, 0x4, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc, 0x2, 0x8, 0x1, 0xc5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xa, 0xae, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x6, 0x5, 0x733d}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x447}}, {0xf, &(0x7f00000005c0)=@string={0xf, 0x3, "7901694cf9839a752c3f55bb4a"}}, {0x67, &(0x7f0000000600)=@string={0x67, 0x3, "d17bb903d6864ce38bcb3121367d64ff46d0b98190b75b69b326685a6d55ab746a35f36fee03eda4b8cd53a7a8f69ced62a9ba7d7c00b86b065475703e18ea75f5bd345c5be271e838a71644a17a9e93046df22d8bbbdd85e8663da883119be4e6d02c5484"}}, {0x52, &(0x7f0000000680)=@string={0x52, 0x3, "f1280412f44a1bc501d3a8b7bdc0eb3865f7614358f30edb7995abcc427117b4c1182a2a3b75cf418b44e573152dc3ef3c0bb9439493f45ca3717d91fdf413cb9a08b636d7ae129db6bf3adc4f1dea51"}}]}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000780), 0x200000, 0x0) openat$cgroup_type(r0, &(0x7f00000007c0), 0x2, 0x0) ioctl$KVM_CAP_PTP_KVM(r0, 0x4068aea3, &(0x7f0000000800)) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000880)=""/170, &(0x7f0000000940)=0xaa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000980)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000009c0)=0x1c) r2 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x0, &(0x7f0000000a00)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'ip6gre0\x00', 0x0, 0x2f, 0xf, 0x8, 0x0, 0x44, @dev={0xfe, 0x80, '\x00', 0x17}, @loopback, 0x8, 0x80, 0x3, 0xe391}}) sendmsg$xdp(r0, &(0x7f00000011c0)={&(0x7f0000000b00)={0x2c, 0x5, r3, 0x21}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000b40)="a950cea3def2170e481f380777802ea0c0308b45261a3ac6346c3f516144ed14b536f869dde0f253860142dee5952f223437d437904903080bd3865043540f3c05b289109ea94405af5b334ceb5f20235415744e0de292cc6ff5117aaa6f292289c73d349f23fce71991c0f105e007b078150e1823f0e9df44a3f09378bd7d4fb5bd9094412293f36275e189d81a4949cb3b75af15fa085bafbafb99b57be19f8ca5ee09d906c582d0a39d906b300538634fd6cf8d03b5fc91cd892835acdb526eab1cb37a085ae4", 0xc8}, {&(0x7f0000000c40)="5ad61a9720df8d5a5dde2dbb186e9181d946fc8980139e56a3e68cdd48826941706cffc3d9270dd660032706e8afea223bb135343ff0056584c94448a84cd128c2903425505baebdc0d169aef493", 0x4e}, {&(0x7f0000000cc0)="b0fb92c984a701b89aaa0abd5fef6531796556e15ed1fbf93c8697b0137139a8d546d8871543124ecd3c164579228747696d7f4bb2d5f41555841d5a32734b7058a4a3b4b7487117c08a7490c082c1ac8361a600d09c64f4f4da004c0503e219c2228898c91f1cc48a72fbe6c0fb5503e6945f34c29f", 0x76}, {&(0x7f0000000d40)="c770997eb3a9fcd01c63d9ffaf749cf0abe33cbb5aec724b01651bec569ee82c3be02065222045d1b1bea4c903ede039e60761e4a0a54f5b7d6b8d1d9734db2ba3018482b28b72eaa9ddb9ab1f5509dde2326861e791cb184b5019b70d60f75d55e5a0c69c68d6e32b61a963fd163fa0d37a7eb68dadf3269b570fe0ea7c9758601b122b76860cdd4c146cdaff0b5bc38e6f8c4e051c14aa859ac6eb341e9e92f488bb307cb4bcfeb79f010d0357a7006dc97b7ed9b231c42ac2e83066b0fbb404a1b0c6256e1af21a36299b8079d2076c9266796b7bc2f0864463e5438e9732fa51", 0xe2}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)="70755b37c90542d4e62d864d48e2c8aef144bdcf9d57ad0e8e7b06b9464b9857f5d164e74cafb2f527cd20f4b1ff955cf040b8ef73fd827f82775332cdd597e27524eee22a8a3e0c2823f9b126142526d96136b9d71c11d123c64c04d4331e0cd9cc214aae2b75febe9763fa643b638c33f3a8f520ce6a03e63de2235c814747f9ebdcbfa5163afe22d7b543632cd407e864c4f83acda44355cf0b4c40b5e2a002edc5bafd9ef7a0b245d66779d15c26756cf4f9345ce9887fa7de1ed0df62113405ad6541d7052b703c0b2471ec20bbc290c60ee4635bce06567965a0156366f869b2ee96eb793ffdacee81efe8ff4f17", 0xf1}, {&(0x7f0000000f80)="59404b3cb5612697ffe22bbd8250c90ae6fb28423db8b09861314e894751d32d33c342c86b9641f887f0b70f86795a00e1eb24e925d4f529408db406d740833adb610537128100933f215739ffa5f701608bbd0df31238d6f47958f98875f48b471e7e180c7428fd943fd747af712a56d59ca684cd09864859d719b36b0d8fc05efa0e3d6f571617a3600b80f00df25769bdbe16e722f83c10cfcc48ac15d7335d8e4375df433dd864a9fe85c58c2dc8e61b068b4bb6b4abf29011600c8f0a5defd8ca9ba137c788f3ebbb06032e18134f3e3accbbe808", 0xd7}, {&(0x7f0000001080)="f7ae614dbcbbc639355a101103a78d48d04c1c6cf4c32523042f48850c0613943bfebd07499d6b2e43da5b10d86407fbc54b63844591e2b404d9ab42b02cb3138db057493bfd28858e1dcaf8e82c4c1e300528485fd785dac3af92e6141aaab8b4e1d16faac0b0dca0298bd59a1b975a80cf3d00dc03b4ad6971ca78fb6c0f0212de7e628a3a8ff8bdb85e9d0f38aa176ac86ee4adbe908af36546", 0x9b}], 0x8, 0x0, 0x0, 0x40}, 0x804) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000001200)) readlink(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)=""/169, 0xa9) ptrace$ARCH_GET_GS(0x1e, r2, &(0x7f0000001340), 0x1004) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000001380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe0, 0x90, 0xfb, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0x40, 0x27}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xce, 0xb, 0xd}}]}}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f00000013c0)={0xa, 0x6, 0x250, 0xd, 0x6, 0x8, 0x40, 0x38}, 0xbc, &(0x7f0000001400)={0x5, 0xf, 0xbc, 0x4, [@generic={0x9e, 0x10, 0x4, "8a0497a9983acfd83544ffea1ed2f010fa4e3ac0942e476c7136b73afb700f35716af8a0b21a4211e081d3525ffb878a4962976b7442e76c22b3d36dd009f6fc035b48f90650080bd03d754802b70b238ce86e72bca1b8aa5df013f93053c610493f6aa139b761263f213cb4a6dfc1d689a2c4d17e4811531ba28a7cba33d9df1560f9c408f8bcee37b396a246e0491cd58ccfd769fdec048df6a0"}, @ssp_cap={0xc, 0x10, 0xa, 0xd0, 0x0, 0x1, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x90, 0x3, 0x1ff}, @ptm_cap={0x3}]}, 0x4, [{0x3a, &(0x7f00000014c0)=@string={0x3a, 0x3, "2569d06bccb82898f86c8950101b04c5860f72c175b60a89c10f5d7da9a3e9b9f55e8ab27c673f10f14f12125f496b0cddb59421c86eef04"}}, {0xf, &(0x7f0000001500)=@string={0xf, 0x3, "85cae20d1c7f61bbea49d99561"}}, {0x60, &(0x7f0000001540)=@string={0x60, 0x3, "ea18dd694595f7c4d405f3593b828f9afdc9fb7a1996bb4483e54510a2350117783de3eca81cff54fcf8a6a411945edb1836072c0cbf7ea6e7127bb277328ffa4cf01e2bf33955aecb57cd63ffba61aa330f1d6520b7c914a2fa39a132b6"}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x416}}]}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001680)={0x1, 0x81, 0x2, {0x4, @pix={0x6, 0x3, 0x552f3e7f, 0x1, 0x0, 0x2, 0x7, 0x81, 0x0, 0x7, 0x1, 0x5}}, 0x10001}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001780)=0x3) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0383e04, &(0x7f0000001840)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000017c0)=[{}]}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x810, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x104, &(0x7f0000001880)=0x80000000, 0x0, 0x4) timerfd_gettime(r0, &(0x7f00000018c0)) r6 = dup3(r4, r4, 0x80000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000001900)) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001940)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001980), 0x408981, 0x0) exit(0x6) syz_open_procfs(r2, &(0x7f00000019c0)='sessionid\x00') getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001a00)={r1, 0x8, 0x20, 0xfffffffffffffffc, 0xf}, &(0x7f0000001a40)=0x18) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000001b00)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6d, "ce2694", "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"}}, 0x110) 2.466340799s ago: executing program 2 (id=2620): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x43, 0x10000002}, 0x4}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000000800)="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", 0x2000, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) socket$alg(0x26, 0x5, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffffa, 0xfffffffffffffff9, 0x9, 0x0, 0x4000000000ae, 0x6, 0x5da1e5ea, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0x400, 0x2, 0x6, 0x0, 0x100, 0x4, 0x1, 0x5, 0x3, 0x4, 0x8}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r1, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="02"}) ioctl$SNDCTL_SEQ_PANIC(r6, 0x5111) 1.240969242s ago: executing program 6 (id=2621): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0880e968436b"}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001600)={&(0x7f0000000340)={0x1294, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x128, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1f, 0x2, 'virtio_transport_alloc_pkt\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'Q\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x20, 0x2, '(%(}4+.!!\xc1+-,,#@.-[]-!(%+(#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '](}{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1f, 0x2, 'virtio_transport_alloc_pkt\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '{#}]+@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10e4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x35, 0x4, "87d2e2d9f6af78078e3237cfa074c31a4b5973b3de7688935911f3c098c77f4a23148ff02157801c433fcb2f03dae699ba"}, @ETHTOOL_A_BITSET_MASK={0x84, 0x5, "83cbfbae3ecc8ba342a698f9045d9122f971a7270b16171286e8a256621008b0848611036a35eb3c579a7178864d592d86cbe330a530ff7075bd759943e44965835908e0cc313bbc4a7d09bfbd60de140d275ff15c697cff3eed81b522a12f0af9e5ceaf0ef47ef819bceda48969f9c11a7ca8c6deecf700c2d7c7ef0154755a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}]}]}, 0x1294}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000000) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000036a8df4085135142d42c3d80ee1b090224000100000000090400000228f9db00090507000000000000090501020000000000"], 0x0) 1.208964229s ago: executing program 5 (id=2622): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@srh={0x11, 0x6, 0x4, 0x3, 0x6, 0x8, 0x2471, [@local, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x38) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4044061}, 0x40000) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x4) fsmount(r9, 0x0, 0x88) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000340)={'bridge_slave_0\x00', 0x4088}) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file0\x00', 0x1600008, &(0x7f00000002c0)=ANY=[@ANYBLOB="63726568746f723dc2c5f4f92c756d61736b3d303030303030303030303030303030303030303030312c626172726965722c6e6f626172726965722c6e6c733d63703935302c747971653d05f2875e2c626172726965722c00"], 0x3, 0x644, &(0x7f0000000400)="$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") 0s ago: executing program 5 (id=2623): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000deff000000000000005562a89b1d0799f2c1128e000000e0c4344bcd3774a55ee95297a479b5fa1f8cc9602a5ca0916cc69f5977a21cd3bac2559466aa6d53bce5bd0c27caa5647e7da708a73df99282a32eccc7aaba708c8a8f65b80fa092e9076b6a2fdb70ae909c562753a9c710b277af31dc61bc3321215e4b14f00b000125164da032c3617d8853156c72d8c079f05c42cb1f75ff4cce402f3ce825dbab8eeeb22e00ea95f3f2ca845dae534260fe43b20cb0aeafc9000000000000", @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB='\x00'/28], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8']) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000dc0)={'#! ', './file0', [{}, {0x20, '[.^}\'(/'}], 0xa, "cccdd828c6f270a1236f8350f21c796da93ab8a0b43e391759ea7d8c2f0cc9f5b3e354fd49d8cf5574398fb8e35d00a809d905d9b1577a832f615ede461102e9fc4cd2cdecd3fad420a615ea23ce820c470e795150822ef4bd0dcd20aede8262c0a3d1b7535a9351a7f80fefe398bfb06ec6453b99bffd46835c133073c30cfb92263712eb2ba7402fc4e9dfd73b24dec40f07ea7fcd88c929ae263502b9c4dd573f3c34502f7a0e2fa36233b42d3a02ee7488a65a8231dc0b69d32cd7ddc49815f28cc013de1ed05b6b2e657033c1d238624479f080dc1deb04c75d270f2d99f49541529a37d9fdc31faf303cd4c168d208e2b3798caced637dbc4dd3f6cd29165a1511f1db42f89e613a9b4aa6793a36c03a6637f15a291870101d3e1d2cff35f91f21c671c5f5eb1fed50006d2f664b4abab3c51e48026370aced535073dac4373b973493fa9b2fd3ba6059537bcbb3269e5fae0c632b6d633f9d6369ffdb72ea5f074d816c99f741f3c6d8adc144edef7fc575a4ee6d5b312ee2913b760015b9fa286ef11d91a4b526a1ccafb3e33fbf02861b25056507d4421a7fe724d68e1b276621a1eeda83256467d4604b881b2effd2b25d995571820bae19953838a430eb8189983f6713e3ade0acb746e0970d098a6d7db368a0f46357d5e60f8755297e01744951ec46d2e530caa501321823e327c39446862248d03bda4ede56270b746e9e926ad4b631b2cd6b7701170ec2608976333f35a38f94554760af575b7172a9996e4a0704334a2fd2f7fb463b4fcc3a783fe57a38c3d2e2a5cd234211c3a68ed8f423d9f6c15c911081b40fe212329a26ea138fd6076e4dcc962d67dc869a8000000000"}, 0x27c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000040400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) kernel console output (not intermixed with test programs): oop2, sector 700004 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 421.786766][T12089] bcachefs (/dev/loop2): error reading superblock: IO error: -5 [ 421.792376][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 421.821398][T12089] bcachefs: bch2_fs_get_tree() error: EIO [ 421.983624][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 422.014377][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 422.073968][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 422.126731][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.195298][ T10] usb 7-1: config 0 descriptor?? [ 422.236337][T12125] xt_l2tp: missing protocol rule (udp|l2tpip) [ 422.425301][ T10] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 422.465365][T12134] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_batadv, syncid = 0, id = 0 [ 422.712252][T12142] netlink: 'syz.5.1604': attribute type 10 has an invalid length. [ 422.803234][T12142] bond0: (slave team0): Releasing backup interface [ 422.864595][T12142] team0: Cannot enslave team device to itself [ 423.029392][T12153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.037582][T12152] overlayfs: failed to clone upperpath [ 423.054181][T12153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.097534][ T5927] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 423.234333][ T5927] usb 5-1: device descriptor read/64, error -71 [ 423.908239][ T5927] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 424.117844][ T5927] usb 5-1: device descriptor read/64, error -71 [ 424.232518][ T5927] usb usb5-port1: attempt power cycle [ 424.395236][T12173] netlink: 'syz.0.1615': attribute type 1 has an invalid length. [ 424.486377][ T43] usb 7-1: USB disconnect, device number 18 [ 424.559127][T12174] bond2: (slave geneve2): making interface the new active one [ 424.575037][T12174] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 424.583605][ T5927] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 424.591356][ T9935] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 424.633316][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 424.658593][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 424.668637][ T5927] usb 5-1: device descriptor read/8, error -71 [ 424.688160][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 425.060334][ T5927] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 425.068191][ T43] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 425.137823][ T5927] usb 5-1: device descriptor read/8, error -71 [ 425.264002][ T43] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 425.274844][ T5927] usb usb5-port1: unable to enumerate USB device [ 425.291027][ T43] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 425.330575][ T43] usb 7-1: can't read configurations, error -61 [ 425.465375][T12189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.477318][ T43] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 425.492755][T12189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.642823][ T43] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 425.761301][ T43] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 425.770141][ T43] usb 7-1: can't read configurations, error -61 [ 425.776749][ T43] usb usb7-port1: attempt power cycle [ 425.797319][T12195] netlink: 'syz.0.1622': attribute type 4 has an invalid length. [ 425.809814][T12195] netlink: 'syz.0.1622': attribute type 4 has an invalid length. [ 425.846556][T12193] ntfs3(loop5): try to read out of volume at offset 0x0 [ 426.997559][ T43] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 427.052556][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1621'. [ 427.116321][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1621'. [ 427.321263][ T43] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 427.336677][ T43] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 427.345867][ T43] usb 7-1: can't read configurations, error -61 [ 427.891862][ T43] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 428.119131][ T43] usb 7-1: device not accepting address 22, error -71 [ 428.149804][T12225] afs: Unknown parameter 'nÿ« ' [ 428.157029][ T43] usb usb7-port1: unable to enumerate USB device [ 428.229882][T12225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.250237][T12225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.254870][T12269] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1639'. [ 430.343431][ T9935] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.540829][T12269] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.564494][T12269] I/O error, dev loop6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.718317][T12269] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 431.313531][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 431.324270][T12269] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.343307][T12269] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 431.529317][T12269] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 431.569161][T12269] UDF-fs: Scanning with blocksize 512 failed [ 431.636974][T12269] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.665686][T12269] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.680665][T12269] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 431.730797][T12269] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.805193][T12269] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 431.843952][T12269] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 431.860838][T12269] UDF-fs: Scanning with blocksize 1024 failed [ 431.931289][T12269] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.963425][T12269] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.024274][T12269] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 432.070593][T12269] I/O error, dev loop6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.080649][T12269] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 432.110894][T12269] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 432.118903][T12269] UDF-fs: Scanning with blocksize 2048 failed [ 432.126032][T12269] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.140192][T12269] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 432.154507][T12269] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 432.164446][T12269] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 432.179665][T12269] UDF-fs: Scanning with blocksize 4096 failed [ 432.187091][T12269] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 432.282108][T12269] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 432.294651][T12269] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 432.307100][T12269] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 432.320627][T12269] UDF-fs: Scanning with blocksize 512 failed [ 432.327960][T12269] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 432.338766][T12269] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 432.357179][T12269] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 432.364998][T12269] UDF-fs: Scanning with blocksize 1024 failed [ 432.372169][T12269] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 432.383821][T12269] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 432.394036][T12269] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 432.402432][T12269] UDF-fs: Scanning with blocksize 2048 failed [ 432.409866][T12269] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 432.420059][T12269] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 432.430134][T12269] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 432.478697][T12269] UDF-fs: Scanning with blocksize 4096 failed [ 432.484853][T12269] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 432.628276][T12290] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1644'. [ 432.820810][T12298] netlink: 'syz.6.1647': attribute type 7 has an invalid length. [ 432.897617][T12301] netlink: 'syz.6.1647': attribute type 10 has an invalid length. [ 432.915977][T12301] veth0_vlan: left promiscuous mode [ 432.935630][T12301] veth0_vlan: entered promiscuous mode [ 432.973809][T12301] team0: Device veth0_vlan failed to register rx_handler [ 433.118833][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1649'. [ 433.130841][T12306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1649'. [ 433.151920][T12306] bond0: entered promiscuous mode [ 433.157118][T12306] bond_slave_0: entered promiscuous mode [ 433.163078][T12306] bond_slave_1: entered promiscuous mode [ 433.169015][T12306] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 433.233041][T12306] bond0: left promiscuous mode [ 433.254913][T12306] bond_slave_0: left promiscuous mode [ 433.271744][T12306] bond_slave_1: left promiscuous mode [ 433.284698][T12306] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 434.090435][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.096754][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.234772][T12318] hfsplus: unable to find HFS+ superblock [ 435.741133][T12333] netlink: 'syz.0.1656': attribute type 1 has an invalid length. [ 435.940502][T12339] veth1_to_bond: entered allmulticast mode [ 435.962352][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1658'. [ 436.046502][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 436.348180][T12328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.552434][T12338] bond0: (slave bond_slave_1): Releasing backup interface [ 436.569118][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1660'. [ 436.591692][T12352] netlink: 'syz.4.1660': attribute type 2 has an invalid length. [ 436.599990][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1660'. [ 436.611268][T12338] veth1_to_bond (unregistering): left allmulticast mode [ 437.663912][T12358] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 437.686958][T12358] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 437.706524][T12358] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 437.725778][T12358] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 438.852731][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 438.873843][T12394] blk_print_req_error: 11 callbacks suppressed [ 438.873860][T12394] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 438.891191][T12394] FAT-fs (loop2): unable to read boot sector [ 438.920650][T12394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.951559][T12394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.615200][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 439.700585][ T52] Bluetooth: hci5: command 0xfc11 tx timeout [ 439.700914][T11612] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 440.881732][T11612] Bluetooth: hci1: command 0x0405 tx timeout [ 441.363252][T12423] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1680'. [ 441.388847][T12423] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1680'. [ 441.596953][T11612] Bluetooth: hci3: command 0x0405 tx timeout [ 442.654163][T12451] sp0: Synchronizing with TNC [ 443.223089][ T30] audit: type=1326 audit(1758489958.128:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37b18ec29 code=0x7ffc0000 [ 443.276639][T12439] [U] è [ 443.349000][ T30] audit: type=1326 audit(1758489958.264:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37b18ec29 code=0x7ffc0000 [ 443.371374][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.443931][ T30] audit: type=1326 audit(1758489958.359:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd37b18ec29 code=0x7ffc0000 [ 443.482607][ T30] audit: type=1326 audit(1758489958.359:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37b18ec29 code=0x7ffc0000 [ 443.648147][ T30] audit: type=1326 audit(1758489958.359:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37b18ec29 code=0x7ffc0000 [ 443.930374][ T30] audit: type=1326 audit(1758489958.359:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd37b18ec29 code=0x7ffc0000 [ 444.082862][ T30] audit: type=1326 audit(1758489958.359:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37b18ec29 code=0x7ffc0000 [ 444.105186][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.187664][ T5920] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 444.195829][ T30] audit: type=1326 audit(1758489958.359:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37b18ec29 code=0x7ffc0000 [ 444.218137][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.280090][ T30] audit: type=1326 audit(1758489958.359:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd37b18ec29 code=0x7ffc0000 [ 444.361423][ T30] audit: type=1326 audit(1758489958.359:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37b18ec29 code=0x7ffc0000 [ 444.413920][ T5920] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.434016][ T5920] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.459264][ T5920] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 444.473100][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 444.501746][T12473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1693'. [ 444.520865][ T5920] usb 5-1: SerialNumber: syz [ 444.532147][T12473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1693'. [ 444.668406][ T8179] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 445.054396][ T8179] usb 7-1: too many configurations: 89, using maximum allowed: 8 [ 445.085751][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1688'. [ 445.126235][ T8179] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 445.155199][ T8179] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.241918][ T8179] usb 7-1: Product: syz [ 445.259916][ T8179] usb 7-1: Manufacturer: syz [ 445.260065][ T5920] usb 5-1: 0:2 : does not exist [ 445.272938][ T8179] usb 7-1: SerialNumber: syz [ 445.293158][ T5920] usb 5-1: unit 5: unexpected type 0x0a [ 445.795038][ T5920] usb 5-1: USB disconnect, device number 70 [ 446.156639][ T8179] usb 7-1: can't set config #1, error -71 [ 446.187943][ T8179] usb 7-1: USB disconnect, device number 23 [ 446.209565][ T6174] udevd[6174]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.035712][ T8179] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 447.588131][ T8179] usb 7-1: Using ep0 maxpacket: 16 [ 447.603730][ T8179] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 447.607968][T12507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.612524][ T8179] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.631035][ T8179] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.671570][T12507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.821141][ T8179] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.830212][ T8179] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.838211][ T8179] usb 7-1: Product: syz [ 447.842370][ T8179] usb 7-1: Manufacturer: syz [ 447.847048][ T8179] usb 7-1: SerialNumber: syz [ 448.454423][ T8179] usb 7-1: 0:2 : does not exist [ 448.522889][T12515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1705'. [ 448.559383][T12515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1705'. [ 448.714792][T12510] syz.4.1703 (12510): drop_caches: 2 [ 449.102593][ T43] usb 5-1: new low-speed USB device number 71 using dummy_hcd [ 449.288217][ T43] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 449.319524][ T43] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.349745][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 449.364619][ T43] usb 5-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 449.387472][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.418456][ T43] usb 5-1: config 0 descriptor?? [ 449.448814][ T8179] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 449.516122][ T8179] usb 7-1: USB disconnect, device number 24 [ 449.571870][ T6174] udevd[6174]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.819466][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 450.825471][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 450.924901][ T43] usb 5-1: USB disconnect, device number 71 [ 451.117326][T12551] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1718'. [ 451.130549][T12551] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1718'. [ 452.776613][T12563] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1721'. [ 452.851530][T12565] overlayfs: failed to clone upperpath [ 452.859668][T12567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1721'. [ 454.103110][T12591] comedi comedi3: das16m1: I/O port conflict (0x404f27,16) [ 454.842529][T12599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.890040][T12599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.048338][T12589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1727'. [ 455.431001][T12619] raw_sendmsg: syz.5.1738 forgot to set AF_INET. Fix it! [ 455.462344][T12619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.485993][T12619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.700140][T12636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.716734][T12636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.863420][T12640] binder_alloc: binder_alloc_mmap_handler: 12638 200000485000-200000487000 already mapped failed -16 [ 457.113340][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 457.113352][ T30] audit: type=1107 audit(1758489972.710:373): pid=12644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='…æ!' [ 457.134537][T12646] binder: BINDER_SET_CONTEXT_MGR already set [ 457.143527][T12646] binder: 12644:12646 ioctl 4018620d 200000004a80 returned -16 [ 457.257559][T12651] sctp: [Deprecated]: syz.4.1748 (pid 12651) Use of int in max_burst socket option deprecated. [ 457.257559][T12651] Use struct sctp_assoc_value instead [ 459.185902][T12657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.252556][T12657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.362768][T12657] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 459.373316][T12657] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 459.532285][T12657] sctp: [Deprecated]: syz.2.1750 (pid 12657) Use of int in max_burst socket option deprecated. [ 459.532285][T12657] Use struct sctp_assoc_value instead [ 460.578941][T12673] vivid-004: disconnect [ 460.597017][T12672] vivid-004: reconnect [ 462.666482][T12708] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.690788][T12708] MINIX-fs: unable to read superblock [ 463.064596][T12720] netlink: 'syz.4.1763': attribute type 1 has an invalid length. [ 463.072730][T12720] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1763'. [ 463.264882][T12718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1767'. [ 464.130538][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1768'. [ 464.167426][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1768'. [ 465.256867][T12739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.279193][T12739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.876824][T12747] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 466.670834][T12755] syz_tun: entered allmulticast mode [ 466.822037][T12765] tipc: Enabled bearer , priority 0 [ 466.837884][T12765] syzkaller0: entered promiscuous mode [ 466.851668][T12765] syzkaller0: entered allmulticast mode [ 466.856212][T12769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.880620][T12765] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 466.906147][T12769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.097946][T12765] tipc: Resetting bearer [ 467.108788][T12763] tipc: Resetting bearer [ 467.697791][T12763] tipc: Disabling bearer [ 467.902147][T12783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.922637][T12783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.935072][ T5912] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 468.124045][ T5912] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.135394][ T5912] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 468.154211][ T5912] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 468.166014][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 468.174644][ T5912] usb 5-1: SerialNumber: syz [ 469.782793][T12811] ext4: Unknown parameter 'smackfsroot' [ 469.816879][ T5912] usb 5-1: 0:2 : does not exist [ 469.974055][ T5912] usb 5-1: USB disconnect, device number 72 [ 470.605300][ T6174] udevd[6174]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.689674][T12816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1795'. [ 470.725485][T12816] netlink: 'syz.4.1795': attribute type 7 has an invalid length. [ 470.742099][ T30] audit: type=1326 audit(1758489987.018:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12817 comm="syz.6.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33778ec29 code=0x7ffc0000 [ 470.757996][T12820] ip6gre1: entered allmulticast mode [ 470.782663][T12816] netlink: 'syz.4.1795': attribute type 8 has an invalid length. [ 470.811053][T12816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1795'. [ 470.821247][ T30] audit: type=1326 audit(1758489987.018:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12817 comm="syz.6.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33778ec29 code=0x7ffc0000 [ 471.872750][ T5912] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 472.107028][ T5912] usb 7-1: Using ep0 maxpacket: 32 [ 472.115807][ T5912] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 472.118804][T12844] sctp: [Deprecated]: syz.4.1805 (pid 12844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.118804][T12844] Use struct sctp_sack_info instead [ 472.125725][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.193781][ T5912] usb 7-1: config 0 descriptor?? [ 472.413888][ T5912] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 472.415483][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 472.416406][ T5912] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 472.416446][ T5912] usb 7-1: media controller created [ 472.461642][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 472.565138][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1808'. [ 472.609930][ T5912] az6027: usb out operation failed. (-71) [ 472.612998][ T5912] az6027: usb out operation failed. (-71) [ 472.633781][ T5912] stb0899_attach: Driver disabled by Kconfig [ 472.633796][ T5912] az6027: no front-end attached [ 472.633796][ T5912] [ 472.634944][ T5912] az6027: usb out operation failed. (-71) [ 472.670699][ T5912] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 472.697671][ T5912] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input25 [ 472.703051][ T5912] dvb-usb: schedule remote query interval to 400 msecs. [ 472.753816][ T5912] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 472.775938][ T5912] usb 7-1: USB disconnect, device number 25 [ 472.947229][ T5912] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 473.077484][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1813'. [ 473.109295][T12870] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1813'. [ 473.349513][T12880] netlink: 448 bytes leftover after parsing attributes in process `syz.5.1816'. [ 473.889696][T12889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.983702][T12889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.000908][T12892] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 474.040114][ T30] audit: type=1326 audit(1758489990.483:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.0.1819" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f575998ec29 code=0x0 [ 474.155307][T12902] FAULT_INJECTION: forcing a failure. [ 474.155307][T12902] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 474.198753][T12902] CPU: 0 UID: 0 PID: 12902 Comm: syz.4.1822 Not tainted syzkaller #0 PREEMPT(full) [ 474.198774][T12902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 474.198789][T12902] Call Trace: [ 474.198796][T12902] [ 474.198804][T12902] dump_stack_lvl+0x189/0x250 [ 474.198829][T12902] ? __pfx____ratelimit+0x10/0x10 [ 474.198848][T12902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.198867][T12902] ? __pfx__printk+0x10/0x10 [ 474.198890][T12902] ? __might_fault+0xb0/0x130 [ 474.198924][T12902] should_fail_ex+0x414/0x560 [ 474.198951][T12902] _copy_from_user+0x2d/0xb0 [ 474.198970][T12902] ___sys_sendmsg+0x158/0x2a0 [ 474.199001][T12902] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.199056][T12902] ? __fget_files+0x2a/0x420 [ 474.199073][T12902] ? __fget_files+0x3a0/0x420 [ 474.199100][T12902] __x64_sys_sendmsg+0x19b/0x260 [ 474.199122][T12902] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 474.199151][T12902] ? __pfx_ksys_write+0x10/0x10 [ 474.199178][T12902] ? do_syscall_64+0xbe/0xfa0 [ 474.199201][T12902] do_syscall_64+0xfa/0xfa0 [ 474.199218][T12902] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.199237][T12902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.199253][T12902] ? clear_bhb_loop+0x60/0xb0 [ 474.199274][T12902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.199295][T12902] RIP: 0033:0x7fd37b18ec29 [ 474.199310][T12902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.199326][T12902] RSP: 002b:00007fd37bfad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.199343][T12902] RAX: ffffffffffffffda RBX: 00007fd37b3d5fa0 RCX: 00007fd37b18ec29 [ 474.199356][T12902] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 474.199366][T12902] RBP: 00007fd37bfad090 R08: 0000000000000000 R09: 0000000000000000 [ 474.199377][T12902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.199387][T12902] R13: 00007fd37b3d6038 R14: 00007fd37b3d5fa0 R15: 00007ffc7258b6d8 [ 474.199417][T12902] [ 474.684317][ T5912] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 474.973426][ T5912] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 474.987263][ T5912] usb 7-1: can't read configurations, error -71 [ 477.403223][T12955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1839'. [ 477.417436][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1839'. [ 478.309482][T12973] xt_l2tp: missing protocol rule (udp|l2tpip) [ 480.145728][T12989] syz.4.1846 (12989) used greatest stack depth: 16504 bytes left [ 481.494920][T13006] netlink: 'syz.2.1853': attribute type 1 has an invalid length. [ 481.511840][T13007] overlayfs: missing 'lowerdir' [ 481.566160][T13012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1853'. [ 481.584193][T13006] bond1: entered promiscuous mode [ 481.604636][T13006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.643583][T13015] xt_l2tp: missing protocol rule (udp|l2tpip) [ 481.799127][T13017] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 482.112597][T13032] netlink: 'syz.5.1862': attribute type 21 has an invalid length. [ 482.149696][T13032] IPv6: NLM_F_CREATE should be specified when creating new route [ 482.186885][T13032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 482.194100][T13032] IPv6: NLM_F_CREATE should be set when creating new route [ 482.201364][T13032] IPv6: NLM_F_CREATE should be set when creating new route [ 482.208573][T13032] IPv6: NLM_F_CREATE should be set when creating new route [ 482.785493][T13029] xfs: Unknown parameter 'mtpt' [ 484.180687][T13049] overlayfs: missing 'lowerdir' [ 484.346112][T13053] FAULT_INJECTION: forcing a failure. [ 484.346112][T13053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.359857][T13053] CPU: 0 UID: 0 PID: 13053 Comm: syz.4.1869 Not tainted syzkaller #0 PREEMPT(full) [ 484.359878][T13053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 484.359888][T13053] Call Trace: [ 484.359895][T13053] [ 484.359902][T13053] dump_stack_lvl+0x189/0x250 [ 484.359925][T13053] ? __pfx____ratelimit+0x10/0x10 [ 484.359952][T13053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.359971][T13053] ? __pfx__printk+0x10/0x10 [ 484.359992][T13053] ? __might_fault+0xb0/0x130 [ 484.360025][T13053] should_fail_ex+0x414/0x560 [ 484.360051][T13053] _copy_from_iter+0x1de/0x1790 [ 484.360081][T13053] ? rcu_is_watching+0x15/0xb0 [ 484.360108][T13053] ? kmalloc_reserve+0xbd/0x290 [ 484.360127][T13053] ? __pfx__copy_from_iter+0x10/0x10 [ 484.360152][T13053] ? __build_skb_around+0x262/0x3f0 [ 484.360174][T13053] ? netlink_sendmsg+0x642/0xb30 [ 484.360190][T13053] ? skb_put+0x11b/0x210 [ 484.360210][T13053] netlink_sendmsg+0x6b2/0xb30 [ 484.360235][T13053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.360256][T13053] ? aa_sock_msg_perm+0xf1/0x1d0 [ 484.360278][T13053] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 484.360294][T13053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.360313][T13053] __sock_sendmsg+0x21c/0x270 [ 484.360340][T13053] ____sys_sendmsg+0x505/0x830 [ 484.360365][T13053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.360393][T13053] ? import_iovec+0x74/0xa0 [ 484.360415][T13053] ___sys_sendmsg+0x21f/0x2a0 [ 484.360438][T13053] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.360494][T13053] ? __fget_files+0x2a/0x420 [ 484.360509][T13053] ? __fget_files+0x3a0/0x420 [ 484.360537][T13053] __x64_sys_sendmsg+0x19b/0x260 [ 484.360561][T13053] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 484.360590][T13053] ? __pfx_ksys_write+0x10/0x10 [ 484.360618][T13053] ? do_syscall_64+0xbe/0xfa0 [ 484.360639][T13053] do_syscall_64+0xfa/0xfa0 [ 484.360657][T13053] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.360674][T13053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.360690][T13053] ? clear_bhb_loop+0x60/0xb0 [ 484.360710][T13053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.360726][T13053] RIP: 0033:0x7fd37b18ec29 [ 484.360741][T13053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.360756][T13053] RSP: 002b:00007fd37bfad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.360774][T13053] RAX: ffffffffffffffda RBX: 00007fd37b3d5fa0 RCX: 00007fd37b18ec29 [ 484.360787][T13053] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 484.360798][T13053] RBP: 00007fd37bfad090 R08: 0000000000000000 R09: 0000000000000000 [ 484.360808][T13053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.360817][T13053] R13: 00007fd37b3d6038 R14: 00007fd37b3d5fa0 R15: 00007ffc7258b6d8 [ 484.360846][T13053] [ 485.072925][T13063] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1874'. [ 485.139840][T13064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.170817][T13067] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 485.171029][T13064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.199461][T13064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.190560][T13081] overlayfs: missing 'lowerdir' [ 486.350567][T13089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.396442][T13089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.418165][T13091] FAULT_INJECTION: forcing a failure. [ 486.418165][T13091] name failslab, interval 1, probability 0, space 0, times 0 [ 486.443983][T13091] CPU: 0 UID: 0 PID: 13091 Comm: syz.4.1882 Not tainted syzkaller #0 PREEMPT(full) [ 486.444004][T13091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 486.444014][T13091] Call Trace: [ 486.444021][T13091] [ 486.444029][T13091] dump_stack_lvl+0x189/0x250 [ 486.444053][T13091] ? __pfx____ratelimit+0x10/0x10 [ 486.444072][T13091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.444092][T13091] ? __pfx__printk+0x10/0x10 [ 486.444114][T13091] ? save_netdev_trace_buffer+0x4e2/0x5e0 [ 486.444149][T13091] should_fail_ex+0x414/0x560 [ 486.444175][T13091] should_failslab+0xa8/0x100 [ 486.444195][T13091] kmem_cache_alloc_noprof+0x74/0x6e0 [ 486.444218][T13091] ? skb_clone+0x212/0x3a0 [ 486.444244][T13091] skb_clone+0x212/0x3a0 [ 486.444268][T13091] __netlink_deliver_tap+0x424/0x8b0 [ 486.444300][T13091] ? netlink_deliver_tap+0x2e/0x1b0 [ 486.444321][T13091] netlink_deliver_tap+0x19c/0x1b0 [ 486.444340][T13091] netlink_unicast+0x7fa/0x9e0 [ 486.444373][T13091] ? __pfx_netlink_unicast+0x10/0x10 [ 486.444399][T13091] ? netlink_sendmsg+0x642/0xb30 [ 486.444415][T13091] ? skb_put+0x11b/0x210 [ 486.444438][T13091] netlink_sendmsg+0x805/0xb30 [ 486.444466][T13091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.444488][T13091] ? aa_sock_msg_perm+0xf1/0x1d0 [ 486.444512][T13091] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.444529][T13091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.444549][T13091] __sock_sendmsg+0x21c/0x270 [ 486.444576][T13091] ____sys_sendmsg+0x505/0x830 [ 486.444602][T13091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.444632][T13091] ? import_iovec+0x74/0xa0 [ 486.444655][T13091] ___sys_sendmsg+0x21f/0x2a0 [ 486.444677][T13091] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.444736][T13091] ? __fget_files+0x2a/0x420 [ 486.444760][T13091] ? __fget_files+0x3a0/0x420 [ 486.444788][T13091] __x64_sys_sendmsg+0x19b/0x260 [ 486.444811][T13091] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.444841][T13091] ? __pfx_ksys_write+0x10/0x10 [ 486.444869][T13091] ? do_syscall_64+0xbe/0xfa0 [ 486.444893][T13091] do_syscall_64+0xfa/0xfa0 [ 486.444910][T13091] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.444929][T13091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.444946][T13091] ? clear_bhb_loop+0x60/0xb0 [ 486.444966][T13091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.444982][T13091] RIP: 0033:0x7fd37b18ec29 [ 486.444997][T13091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.445012][T13091] RSP: 002b:00007fd37bfad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.445030][T13091] RAX: ffffffffffffffda RBX: 00007fd37b3d5fa0 RCX: 00007fd37b18ec29 [ 486.445043][T13091] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 486.445054][T13091] RBP: 00007fd37bfad090 R08: 0000000000000000 R09: 0000000000000000 [ 486.445065][T13091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.445075][T13091] R13: 00007fd37b3d6038 R14: 00007fd37b3d5fa0 R15: 00007ffc7258b6d8 [ 486.445106][T13091] [ 487.304128][T13111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.314170][T13111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.332857][T13111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.343756][T13111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.352902][T13111] netlink: 'syz.5.1887': attribute type 29 has an invalid length. [ 487.362753][T13111] netlink: 'syz.5.1887': attribute type 29 has an invalid length. [ 487.726542][T13119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.744456][T13119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.884924][ T30] audit: type=1326 audit(1758490005.023:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b398ec29 code=0x7ffc0000 [ 487.889597][T13122] program syz.6.1891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 488.476600][ T30] audit: type=1326 audit(1758490005.023:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f69b398ec29 code=0x7ffc0000 [ 488.499016][ T30] audit: type=1326 audit(1758490005.023:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b398ec29 code=0x7ffc0000 [ 488.526700][ T30] audit: type=1326 audit(1758490005.023:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f69b3990abc code=0x7ffc0000 [ 488.556143][ T30] audit: type=1326 audit(1758490005.023:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f69b39909f4 code=0x7ffc0000 [ 488.582090][ T30] audit: type=1326 audit(1758490005.023:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f69b39909f4 code=0x7ffc0000 [ 488.607737][ T30] audit: type=1326 audit(1758490005.023:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b398ec29 code=0x7ffc0000 [ 488.805277][ T30] audit: type=1326 audit(1758490005.023:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f69b398ec29 code=0x7ffc0000 [ 488.924556][ T30] audit: type=1326 audit(1758490005.023:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b398ec29 code=0x7ffc0000 [ 488.985399][ T30] audit: type=1326 audit(1758490005.023:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f69b398ec29 code=0x7ffc0000 [ 489.020787][T13135] FAULT_INJECTION: forcing a failure. [ 489.020787][T13135] name failslab, interval 1, probability 0, space 0, times 0 [ 489.097989][T13135] CPU: 1 UID: 0 PID: 13135 Comm: syz.2.1895 Not tainted syzkaller #0 PREEMPT(full) [ 489.098009][T13135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 489.098020][T13135] Call Trace: [ 489.098027][T13135] [ 489.098034][T13135] dump_stack_lvl+0x189/0x250 [ 489.098058][T13135] ? __pfx____ratelimit+0x10/0x10 [ 489.098078][T13135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.098097][T13135] ? __pfx__printk+0x10/0x10 [ 489.098121][T13135] ? __pfx___might_resched+0x10/0x10 [ 489.098144][T13135] ? fs_reclaim_acquire+0x7d/0x100 [ 489.098166][T13135] should_fail_ex+0x414/0x560 [ 489.098192][T13135] should_failslab+0xa8/0x100 [ 489.098211][T13135] kmem_cache_alloc_noprof+0x74/0x6e0 [ 489.098235][T13135] ? skb_clone+0x212/0x3a0 [ 489.098259][T13135] skb_clone+0x212/0x3a0 [ 489.098278][T13135] ? nfnetlink_rcv+0x486/0x2520 [ 489.098304][T13135] nfnetlink_rcv+0x4b4/0x2520 [ 489.098330][T13135] ? __kernel_text_address+0xd/0x40 [ 489.098351][T13135] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 489.098384][T13135] ? stack_trace_save+0x9c/0xe0 [ 489.098401][T13135] ? __pfx_stack_trace_save+0x10/0x10 [ 489.098422][T13135] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 489.098457][T13135] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 489.098479][T13135] ? ref_tracker_free+0x63a/0x7d0 [ 489.098500][T13135] ? netlink_unicast+0x7fa/0x9e0 [ 489.098521][T13135] ? netlink_sendmsg+0x805/0xb30 [ 489.098537][T13135] ? __sock_sendmsg+0x21c/0x270 [ 489.098557][T13135] ? ____sys_sendmsg+0x505/0x830 [ 489.098573][T13135] ? ___sys_sendmsg+0x21f/0x2a0 [ 489.098590][T13135] ? __x64_sys_sendmsg+0x19b/0x260 [ 489.098607][T13135] ? do_syscall_64+0xfa/0xfa0 [ 489.098625][T13135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.098647][T13135] ? __skb_clone+0x483/0x7a0 [ 489.098674][T13135] ? skb_clone+0x246/0x3a0 [ 489.098697][T13135] ? __netlink_deliver_tap+0x866/0x8b0 [ 489.098722][T13135] ? netlink_deliver_tap+0x2e/0x1b0 [ 489.098757][T13135] netlink_unicast+0x82f/0x9e0 [ 489.098790][T13135] ? __pfx_netlink_unicast+0x10/0x10 [ 489.098816][T13135] ? netlink_sendmsg+0x642/0xb30 [ 489.098831][T13135] ? skb_put+0x11b/0x210 [ 489.098853][T13135] netlink_sendmsg+0x805/0xb30 [ 489.098880][T13135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.098902][T13135] ? aa_sock_msg_perm+0xf1/0x1d0 [ 489.098925][T13135] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 489.098943][T13135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.098961][T13135] __sock_sendmsg+0x21c/0x270 [ 489.098987][T13135] ____sys_sendmsg+0x505/0x830 [ 489.099011][T13135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.099039][T13135] ? import_iovec+0x74/0xa0 [ 489.099060][T13135] ___sys_sendmsg+0x21f/0x2a0 [ 489.099080][T13135] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.099133][T13135] ? __fget_files+0x2a/0x420 [ 489.099148][T13135] ? __fget_files+0x3a0/0x420 [ 489.099175][T13135] __x64_sys_sendmsg+0x19b/0x260 [ 489.099197][T13135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 489.099227][T13135] ? __pfx_ksys_write+0x10/0x10 [ 489.099253][T13135] ? do_syscall_64+0xbe/0xfa0 [ 489.099275][T13135] do_syscall_64+0xfa/0xfa0 [ 489.099293][T13135] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.099311][T13135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.099328][T13135] ? clear_bhb_loop+0x60/0xb0 [ 489.099347][T13135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.099363][T13135] RIP: 0033:0x7f69b398ec29 [ 489.099378][T13135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.099393][T13135] RSP: 002b:00007f69b485b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.099411][T13135] RAX: ffffffffffffffda RBX: 00007f69b3bd5fa0 RCX: 00007f69b398ec29 [ 489.099423][T13135] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 489.099434][T13135] RBP: 00007f69b485b090 R08: 0000000000000000 R09: 0000000000000000 [ 489.099445][T13135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.099455][T13135] R13: 00007f69b3bd6038 R14: 00007f69b3bd5fa0 R15: 00007ffd74a788b8 [ 489.099483][T13135] [ 489.865266][T13141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.589999][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 492.597371][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 492.625122][ T5993] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 492.785743][ T5993] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.226146][ T5993] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 493.261850][ T5993] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 493.273830][ T5993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 493.333548][ T5993] usb 7-1: SerialNumber: syz [ 493.551116][T13173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.591238][T13173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.739991][ T5993] usb 7-1: 0:2 : does not exist [ 494.171522][ T5993] usb 7-1: USB disconnect, device number 28 [ 494.333426][ T6174] udevd[6174]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.342165][T13188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1908'. [ 494.471956][T13190] FAULT_INJECTION: forcing a failure. [ 494.471956][T13190] name failslab, interval 1, probability 0, space 0, times 0 [ 494.550996][T13190] CPU: 0 UID: 0 PID: 13190 Comm: syz.4.1909 Not tainted syzkaller #0 PREEMPT(full) [ 494.551040][T13190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 494.551062][T13190] Call Trace: [ 494.551069][T13190] [ 494.551077][T13190] dump_stack_lvl+0x189/0x250 [ 494.551102][T13190] ? __pfx____ratelimit+0x10/0x10 [ 494.551122][T13190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.551142][T13190] ? __pfx__printk+0x10/0x10 [ 494.551166][T13190] ? __pfx___might_resched+0x10/0x10 [ 494.551188][T13190] ? fs_reclaim_acquire+0x7d/0x100 [ 494.551211][T13190] should_fail_ex+0x414/0x560 [ 494.551238][T13190] should_failslab+0xa8/0x100 [ 494.551258][T13190] __kmalloc_cache_noprof+0x6f/0x6f0 [ 494.551281][T13190] ? nfnetlink_rcv+0xeff/0x2520 [ 494.551303][T13190] ? __nla_parse+0x40/0x60 [ 494.551331][T13190] nfnetlink_rcv+0xeff/0x2520 [ 494.551387][T13190] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 494.551425][T13190] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 494.551447][T13190] ? ref_tracker_free+0x63a/0x7d0 [ 494.551469][T13190] ? netlink_unicast+0x7fa/0x9e0 [ 494.551490][T13190] ? netlink_sendmsg+0x805/0xb30 [ 494.551537][T13190] ? __netlink_deliver_tap+0x866/0x8b0 [ 494.551555][T13190] ? netlink_deliver_tap+0x2e/0x1b0 [ 494.551592][T13190] netlink_unicast+0x82f/0x9e0 [ 494.551626][T13190] ? __pfx_netlink_unicast+0x10/0x10 [ 494.551651][T13190] ? netlink_sendmsg+0x642/0xb30 [ 494.551667][T13190] ? skb_put+0x11b/0x210 [ 494.551690][T13190] netlink_sendmsg+0x805/0xb30 [ 494.551718][T13190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.551740][T13190] ? aa_sock_msg_perm+0xf1/0x1d0 [ 494.551763][T13190] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.551780][T13190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.551799][T13190] __sock_sendmsg+0x21c/0x270 [ 494.551826][T13190] ____sys_sendmsg+0x505/0x830 [ 494.551852][T13190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.551882][T13190] ? import_iovec+0x74/0xa0 [ 494.551911][T13190] ___sys_sendmsg+0x21f/0x2a0 [ 494.551934][T13190] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.551996][T13190] ? __fget_files+0x2a/0x420 [ 494.552013][T13190] ? __fget_files+0x3a0/0x420 [ 494.552041][T13190] __x64_sys_sendmsg+0x19b/0x260 [ 494.552064][T13190] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.552095][T13190] ? __pfx_ksys_write+0x10/0x10 [ 494.552123][T13190] ? do_syscall_64+0xbe/0xfa0 [ 494.552147][T13190] do_syscall_64+0xfa/0xfa0 [ 494.552164][T13190] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.552183][T13190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.552199][T13190] ? clear_bhb_loop+0x60/0xb0 [ 494.552220][T13190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.552236][T13190] RIP: 0033:0x7fd37b18ec29 [ 494.552251][T13190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.552266][T13190] RSP: 002b:00007fd37bfad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.552284][T13190] RAX: ffffffffffffffda RBX: 00007fd37b3d5fa0 RCX: 00007fd37b18ec29 [ 494.552296][T13190] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 494.552307][T13190] RBP: 00007fd37bfad090 R08: 0000000000000000 R09: 0000000000000000 [ 494.552317][T13190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.552327][T13190] R13: 00007fd37b3d6038 R14: 00007fd37b3d5fa0 R15: 00007ffc7258b6d8 [ 494.552359][T13190] [ 494.895682][T13196] Invalid ELF header magic: != ELF [ 494.902485][T13196] netlink: 'syz.2.1911': attribute type 1 has an invalid length. [ 494.910208][T13196] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1911'. [ 494.920847][T13197] netlink: 'syz.2.1911': attribute type 1 has an invalid length. [ 494.928566][T13197] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1911'. [ 495.473172][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1913'. [ 495.515622][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'. [ 496.328810][T13223] xt_l2tp: missing protocol rule (udp|l2tpip) [ 496.409784][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1916'. [ 497.003193][T13241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.022884][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 497.022906][ T30] audit: type=1326 audit(1758490014.607:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.6.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33778ec29 code=0x7ffc0000 [ 497.024046][T13241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.029815][ T30] audit: type=1326 audit(1758490014.628:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.6.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33778ec29 code=0x7ffc0000 [ 497.155345][T13243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.463660][ T30] audit: type=1326 audit(1758490014.733:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.6.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fc33778ec29 code=0x7ffc0000 [ 498.070746][ T30] audit: type=1326 audit(1758490014.733:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.6.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33778ec29 code=0x7ffc0000 [ 498.516853][ T30] audit: type=1326 audit(1758490014.733:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.6.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33778ec29 code=0x7ffc0000 [ 498.804843][ T30] audit: type=1326 audit(1758490014.733:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.6.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fc33778ec29 code=0x7ffc0000 [ 498.806525][T13261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.852838][T13261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.873642][ T30] audit: type=1326 audit(1758490014.733:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.6.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33778ec29 code=0x7ffc0000 [ 499.008392][ T30] audit: type=1326 audit(1758490014.733:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.6.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33778ec29 code=0x7ffc0000 [ 499.074260][ T30] audit: type=1326 audit(1758490014.744:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.6.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc33778ec29 code=0x7ffc0000 [ 499.077486][T13267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.105172][ T5927] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 499.128048][T13267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.147989][T13269] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1934'. [ 499.157462][ T30] audit: type=1326 audit(1758490014.744:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.6.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33778ec29 code=0x7ffc0000 [ 499.182231][T13267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.255673][T13267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.730249][ T5927] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 499.740215][ T5927] usb 7-1: can't read configurations, error -71 [ 500.148491][T13276] 9pnet_fd: Insufficient options for proto=fd [ 500.306924][T13280] input: syz0 as /devices/virtual/input/input26 [ 500.550731][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1938'. [ 500.625554][T13286] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 500.635415][T13286] hfsplus: unable to find HFS+ superblock [ 502.792956][T13315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.808950][T13315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.042782][T13321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1948'. [ 503.167440][T13320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.444912][T13320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.363637][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 504.363654][ T30] audit: type=1326 audit(1758490022.323:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.2.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b398ec29 code=0x7ffc0000 [ 504.441670][ T5232] udevd[5232]: worker [6174] terminated by signal 33 (Unknown signal 33) [ 504.474929][ T30] audit: type=1326 audit(1758490022.323:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.2.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b398ec29 code=0x7ffc0000 [ 504.524293][ T30] audit: type=1326 audit(1758490022.323:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.2.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69b398ec29 code=0x7ffc0000 [ 504.566197][ T30] audit: type=1326 audit(1758490022.355:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.2.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b398ec29 code=0x7ffc0000 [ 504.593515][ T30] audit: type=1326 audit(1758490022.355:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.2.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f69b3985be7 code=0x7ffc0000 [ 504.801731][ T30] audit: type=1326 audit(1758490022.355:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.2.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f69b392ae09 code=0x7ffc0000 [ 504.870701][ T30] audit: type=1326 audit(1758490022.355:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.2.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f69b3985be7 code=0x7ffc0000 [ 504.894069][ T30] audit: type=1326 audit(1758490022.355:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.2.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f69b392ae09 code=0x7ffc0000 [ 504.919295][ T30] audit: type=1326 audit(1758490022.355:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.2.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f69b398ec29 code=0x7ffc0000 [ 504.942389][ T30] audit: type=1326 audit(1758490022.355:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.2.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f69b3985be7 code=0x7ffc0000 [ 506.918502][T13399] fuse: Bad value for 'rootmode' [ 507.660651][T13422] xt_l2tp: missing protocol rule (udp|l2tpip) [ 508.325495][T13431] xt_l2tp: missing protocol rule (udp|l2tpip) [ 508.575783][T13447] program syz.4.1979 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 508.949360][T13468] cgroup2: Unknown parameter 'net_cls' [ 508.967880][T13463] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1983'. [ 509.188523][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'. [ 509.316265][T13479] vxcan2: entered promiscuous mode [ 509.330934][T13479] vxcan2: entered allmulticast mode [ 509.372010][T13479] vxcan3: entered allmulticast mode [ 509.887049][T13487] ubi31: attaching mtd0 [ 510.008924][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1992'. [ 510.023003][T13495] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1992'. [ 510.604473][T13499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1994'. [ 511.899410][T13533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.933723][T13533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.354273][ T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 512.379491][T13547] overlayfs: missing 'lowerdir' [ 512.447475][T13552] xt_l2tp: missing protocol rule (udp|l2tpip) [ 512.514439][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 512.540666][ T10] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 512.560031][ T10] usb 7-1: config 0 has no interface number 0 [ 512.580624][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 512.598650][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.620582][ T10] usb 7-1: Product: syz [ 512.628645][ T10] usb 7-1: Manufacturer: syz [ 512.633253][ T10] usb 7-1: SerialNumber: syz [ 512.657089][ T10] usb 7-1: config 0 descriptor?? [ 512.767925][ T10] smsc95xx v2.0.0 [ 513.639862][T13569] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 513.672069][T13575] binder: 13574:13575 ioctl 2203 200000000200 returned -22 [ 514.074356][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 514.100432][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 514.112115][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 514.125242][ T5920] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 514.136826][ T10] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 514.153418][ T10] usb 7-1: USB disconnect, device number 31 [ 515.000198][ T5920] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 515.173040][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.187934][ T5920] usb 5-1: config 0 descriptor?? [ 515.336576][T13596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.515590][T13606] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2025'. [ 515.618568][ T5920] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 515.639648][ T5920] hackrf 5-1:0.0: Could not detect board [ 515.645528][ T5920] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 515.655778][ T5920] usb 5-1: USB disconnect, device number 73 [ 515.762665][ T5912] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 515.849520][T13609] No control pipe specified [ 515.861453][T13609] No control pipe specified [ 515.916857][ T5912] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 515.930560][ T5912] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 515.942027][ T5912] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 515.952224][ T5912] usb 7-1: config 0 interface 0 has no altsetting 0 [ 515.965116][ T5912] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 515.977506][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 515.986348][ T5912] usb 7-1: Product: syz [ 515.991521][ T5912] usb 7-1: Manufacturer: syz [ 515.997112][ T5912] usb 7-1: SerialNumber: syz [ 516.057469][ T5912] usb 7-1: config 0 descriptor?? [ 516.075205][T13618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.090096][T13618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.110431][ T5912] hub 7-1:0.0: bad descriptor, ignoring hub [ 516.125231][ T5912] hub 7-1:0.0: probe with driver hub failed with error -5 [ 516.174608][ T5912] usb 7-1: selecting invalid altsetting 0 [ 516.449292][ T5927] usb 7-1: USB disconnect, device number 32 [ 516.601109][ T5912] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 516.736696][T13632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.745803][T13632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.747544][ T5912] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 516.757718][T13632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.762351][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.770713][T13632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.816269][ T5912] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 516.826454][ T5912] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 516.836489][ T5912] usb 5-1: Manufacturer: syz [ 516.844048][ T5912] usb 5-1: config 0 descriptor?? [ 516.953522][ T5912] rc_core: IR keymap rc-hauppauge not found [ 516.962672][ T5912] Registered IR keymap rc-empty [ 516.978097][ T5912] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 517.004575][ T5912] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input28 [ 517.029972][T13638] netlink: 'syz.6.2035': attribute type 1 has an invalid length. [ 517.038376][T13637] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2035'. [ 519.144808][T13649] exfat: Unknown parameter 'iocharseze_dir' [ 519.335986][ T8179] usb 5-1: USB disconnect, device number 74 [ 522.830689][ T10] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 522.927466][T13725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.976026][T13725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.059556][ T5927] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 523.068946][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 523.087284][ T10] usb 5-1: config 0 has no interfaces? [ 523.099532][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=ff00, bcdDevice=98.fa [ 523.120292][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.140507][ T10] usb 5-1: Product: syz [ 523.148904][ T10] usb 5-1: Manufacturer: syz [ 523.153494][ T10] usb 5-1: SerialNumber: syz [ 523.332312][ T5927] usb 7-1: Using ep0 maxpacket: 8 [ 523.464226][ T10] usb 5-1: config 0 descriptor?? [ 523.472002][ T5927] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 523.502035][ T5927] usb 7-1: config 0 has no interface number 0 [ 523.518793][ T5927] usb 7-1: config 0 interface 1 has no altsetting 0 [ 523.558284][ T5927] usb 7-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 523.572717][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.617274][ T5927] usb 7-1: Product: syz [ 523.627581][T13737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.644436][ T5927] usb 7-1: Manufacturer: syz [ 523.680087][ T5927] usb 7-1: SerialNumber: syz [ 523.701051][ T5927] usb 7-1: config 0 descriptor?? [ 523.760683][T13737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.824191][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 523.824204][ T30] audit: type=1326 audit(1758490042.752:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.5.2060" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf8bb8ec29 code=0x0 [ 523.967981][ T5927] i2c-cp2615 7-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 523.986935][ T5927] usb 7-1: USB disconnect, device number 33 [ 524.737889][ T10] usb 5-1: USB disconnect, device number 75 [ 524.891980][T13743] netlink: 'syz.6.2061': attribute type 16 has an invalid length. [ 524.909363][T13743] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2061'. [ 525.503664][T13752] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 525.514020][T13752] hfsplus: unable to find HFS+ superblock [ 527.340648][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2078'. [ 527.410052][T13790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.433000][T13790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.635030][T13802] overlayfs: failed to clone upperpath [ 528.630407][T13825] netlink: 'syz.4.2088': attribute type 28 has an invalid length. [ 529.989501][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2094'. [ 529.999180][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2094'. [ 530.142463][T13840] EXT4-fs: Ignoring removed oldalloc option [ 530.152018][T13840] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 530.163616][T13840] EXT4-fs (loop6): unable to read superblock [ 530.413094][T13845] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 530.621266][T13858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.631308][T13858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.737535][ T1619] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 533.320928][ T1619] usb 5-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 533.349634][ T1619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.380591][ T1619] usb 5-1: config 0 descriptor?? [ 533.608181][ T1619] usbhid 5-1:0.0: can't add hid device: -71 [ 533.621440][ T1619] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 533.630177][T13900] netlink: 'syz.2.2110': attribute type 10 has an invalid length. [ 533.646366][ T1619] usb 5-1: USB disconnect, device number 76 [ 533.680676][T13900] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.700872][T13902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2110'. [ 533.713535][T13900] bond0: (slave team0): Enslaving as an active interface with an up link [ 533.728388][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 535.895364][T13932] ntfs3(loop2): try to read out of volume at offset 0x0 [ 536.682662][T13956] ptrace attach of "./syz-executor exec"[5874] was attempted by ""[13956] [ 536.738013][ T1619] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 537.400565][ T1619] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 537.414530][ T1619] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.433760][ T1619] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 537.442630][ T1619] usb 5-1: config 1 has no interface number 0 [ 537.450562][ T1619] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 537.472138][ T1619] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 537.520292][ T1619] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 537.534781][ T1619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.550917][ T1619] usb 5-1: Product: syz [ 537.555088][ T1619] usb 5-1: Manufacturer: syz [ 537.570980][ T1619] usb 5-1: SerialNumber: syz [ 537.583209][T13970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.804316][ T5956] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.828497][ T5956] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 538.033731][T13973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.262967][T13970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.272085][T13973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.291209][T13970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.302926][ T5956] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.313268][T13970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.316205][T13973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.335141][ T5956] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 538.352147][T13973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.363650][T13973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.392379][T13973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.400805][T13970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.428390][ T5912] usb 5-1: USB disconnect, device number 77 [ 538.465374][ T5956] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.486961][T13970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.539164][ T5956] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 538.771523][ T5956] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.789777][T13996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.798460][T13996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.813025][ T5956] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 539.209651][T14002] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 539.219312][T14002] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 539.262954][T14002] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 539.272448][T14002] FAT-fs (loop5): unable to read boot sector [ 539.342795][T14002] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 539.349313][T14002] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 539.357682][T14002] vhci_hcd vhci_hcd.0: Device attached [ 539.608260][ T5956] bridge_slave_1: left allmulticast mode [ 539.624429][ T43] usb 44-1: SetAddress Request (2) to port 0 [ 539.630673][ T43] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 539.638417][ T5956] bridge_slave_1: left promiscuous mode [ 539.643323][ T5912] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 539.652620][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.663942][ T5956] bridge_slave_0: left allmulticast mode [ 539.669585][ T5956] bridge_slave_0: left promiscuous mode [ 539.693232][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.795989][ T5912] usb 5-1: device descriptor read/64, error -71 [ 539.905158][T13987] XFS (loop2): Invalid device [./file2], error=-15 [ 540.054897][ T5912] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 540.205477][ T5912] usb 5-1: device descriptor read/64, error -71 [ 540.269032][T13999] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 540.312190][T13999] bcachefs (/dev/loop6): error reading default superblock: IO error: -5 [ 540.326183][T13999] I/O error, dev loop6, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 540.329942][ T5912] usb usb5-port1: attempt power cycle [ 540.355418][T13999] bcachefs (/dev/loop6): error reading superblock: IO error: -5 [ 540.363348][T13999] bcachefs: bch2_fs_get_tree() error: EIO [ 540.754114][ T5912] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 540.951547][ T5912] usb 5-1: device descriptor read/8, error -71 [ 541.343798][ T5912] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 541.692134][T14003] vhci_hcd: connection reset by peer [ 541.698483][ T5912] usb 5-1: device descriptor read/8, error -71 [ 541.835087][ T5912] usb usb5-port1: unable to enumerate USB device [ 541.880196][ T9941] vhci_hcd: stop threads [ 541.905780][ T9941] vhci_hcd: release socket [ 541.913990][ T9941] vhci_hcd: disconnect device [ 541.976699][T14029] xt_l2tp: missing protocol rule (udp|l2tpip) [ 541.995505][T14027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.014409][T14027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.484541][ T5956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.500052][ T5956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.515334][ T5956] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 542.528629][ T5956] bond0 (unregistering): Released all slaves [ 542.657360][T14022] netlink: 'syz.4.2144': attribute type 4 has an invalid length. [ 542.709510][ T5956] tipc: Left network mode [ 543.329986][ T5993] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 543.482794][ T5993] usb 7-1: device descriptor read/64, error -71 [ 543.740534][ T5993] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 543.828983][ T5956] hsr_slave_0: left promiscuous mode [ 543.840946][ T5956] hsr_slave_1: left promiscuous mode [ 543.868188][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.921029][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.991865][ T5993] usb 7-1: device descriptor read/64, error -71 [ 544.055371][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.073066][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.138543][ T5993] usb usb7-port1: attempt power cycle [ 544.169341][ T5956] veth1_macvtap: left promiscuous mode [ 544.175281][ T5956] veth0_macvtap: left promiscuous mode [ 544.187658][ T5956] veth1_vlan: left promiscuous mode [ 544.204617][ T5956] veth0_vlan: left promiscuous mode [ 544.473078][ T43] usb 44-1: device descriptor read/8, error -110 [ 544.614932][T14073] input: syz0 as /devices/virtual/input/input29 [ 544.671510][T14077] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2160'. [ 544.735923][T14078] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2160'. [ 544.859023][ T43] usb usb44-port1: attempt power cycle [ 545.568007][ T43] usb usb44-port1: unable to enumerate USB device [ 546.867456][ T5956] team0 (unregistering): Port device team_slave_1 removed [ 546.961733][ T5956] team0 (unregistering): Port device team_slave_0 removed [ 547.269905][T14132] ext4: Unknown parameter 'context' [ 547.276390][T14132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2174'. [ 547.690308][T14139] sctp: [Deprecated]: syz.0.2176 (pid 14139) Use of int in maxseg socket option. [ 547.690308][T14139] Use struct sctp_assoc_value instead [ 548.156237][ T5956] IPVS: stop unused estimator thread 0... [ 548.461831][ T1619] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 549.521831][ T1619] usb 7-1: device descriptor read/64, error -71 [ 550.505462][ T1619] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 550.552329][T14169] CIFS: Unable to determine destination address [ 550.748305][ T1619] usb 7-1: device descriptor read/64, error -71 [ 550.990405][ T1619] usb usb7-port1: attempt power cycle [ 551.111417][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 551.122384][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 552.367379][T14191] hpfs: Unknown parameter 'chkdsj' [ 553.257082][T14225] netlink: 'syz.5.2202': attribute type 44 has an invalid length. [ 553.472208][T14236] erofs: Unexpected value for 'user_xattr' [ 553.536718][T14236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.619891][T14236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.888001][T14242] can: request_module (can-proto-5) failed. [ 553.903758][T14242] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:21 [ 554.455939][ T1619] IPVS: starting estimator thread 0... [ 554.684742][T14263] IPVS: using max 25 ests per chain, 60000 per kthread [ 554.911487][T14267] lo: entered allmulticast mode [ 555.351299][T14286] syzkaller1: entered promiscuous mode [ 555.360811][T14286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.005879][T14288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.015040][ T1619] IPVS: starting estimator thread 0... [ 556.021791][T14288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.025059][T14294] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 556.095524][T14301] netlink: 'syz.4.2223': attribute type 7 has an invalid length. [ 556.107537][T14302] netlink: 'syz.4.2223': attribute type 7 has an invalid length. [ 556.132386][T14297] IPVS: using max 35 ests per chain, 84000 per kthread [ 556.746375][T14306] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 556.757517][T14306] hfsplus: unable to find HFS+ superblock [ 557.645211][T14311] ntfs3: Unknown parameter '±jÇIšüH”©{”$$ñ@ÞV×î~Ôˆj-±‰âƒIšÉ:ühïm¶ˆú; r‰¨³ ª*ÊmäN¿jü{ ½2cºR ¶£„ÃÙÐ! ·S\õ' [ 557.830435][ T52] Bluetooth: hci5: command 0x1003 tx timeout [ 557.836788][T11612] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 558.759091][T14335] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 558.772568][T14335] hfsplus: unable to find HFS+ superblock [ 560.337595][T14363] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 561.324694][T14371] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 561.342938][T14371] EXT4-fs (loop6): unable to read superblock [ 562.223935][ T30] audit: type=1800 audit(1758490084.058:472): pid=14382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2243" name="/" dev="fuse" ino=5 res=0 errno=0 [ 563.736505][T14409] : entered promiscuous mode [ 564.079823][ T8179] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 564.139280][T14413] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2254'. [ 564.169738][T14413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 564.189143][T14417] overlayfs: failed to resolve './file0': -2 [ 564.241637][ T8179] usb 5-1: Using ep0 maxpacket: 16 [ 564.260687][ T8179] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 564.282789][ T8179] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.301472][ T8179] usb 5-1: Product: syz [ 564.310266][ T8179] usb 5-1: Manufacturer: syz [ 564.320563][ T8179] usb 5-1: SerialNumber: syz [ 564.353725][ T8179] usb 5-1: config 0 descriptor?? [ 564.538515][T14425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2256'. [ 564.868799][T14435] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 565.135386][ T8179] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 565.183477][T14432] IPVS: Error joining to the multicast group [ 565.225717][ T10] usb 5-1: USB disconnect, device number 82 [ 565.364444][T14444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.373331][T14444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.454465][T14453] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2265'. [ 565.463879][T14453] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2265'. [ 566.483409][T14475] 9pnet_fd: Insufficient options for proto=fd [ 566.512518][T14475] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2271'. [ 566.565387][T14474] hfsplus: unable to find HFS+ superblock [ 566.646117][T14489] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 567.092326][T14501] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.100292][T14501] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.172725][ T1619] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 567.275798][T14514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.297768][T14516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.308184][T14514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.642933][T14516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.723795][ T1619] usb 5-1: Using ep0 maxpacket: 32 [ 567.778993][ T1619] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 567.797376][ T1619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 567.827831][ T1619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 567.838045][ T1619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 567.849501][ T1619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 567.863432][ T1619] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 567.877797][ T1619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.885904][ T1619] usb 5-1: Product: syz [ 567.890184][ T1619] usb 5-1: Manufacturer: syz [ 567.895235][ T1619] usb 5-1: SerialNumber: syz [ 567.904988][ T1619] usb 5-1: config 0 descriptor?? [ 567.950022][T14501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.994884][T14501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.301678][ T1619] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 568.308945][ T1619] input input30: Device does not respond to id packet M [ 568.878548][ T1619] input input30: Device does not respond to id packet P [ 570.933559][ T1619] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 570.945415][ T1619] input input30: Device does not respond to id packet B [ 570.971078][ T5956] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.983795][ T1619] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 570.989922][ T1619] input input30: Device does not respond to id packet N [ 570.997880][ T1619] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 571.007281][T14539] bpq0: entered promiscuous mode [ 571.010331][ T1619] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 571.018716][ T1619] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 571.025621][ T1619] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 571.035924][ T5956] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.046433][ T1619] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input30 [ 571.058292][ T5956] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.073781][ T5956] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.085929][ T1619] usb 5-1: USB disconnect, device number 83 [ 571.223028][T14557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.259836][T14557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.279614][T14563] netlink: 'syz.4.2292': attribute type 5 has an invalid length. [ 571.291130][T14557] bpq0: left promiscuous mode [ 571.432102][T14577] overlayfs: missing 'lowerdir' [ 571.508642][T14583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.523744][T14583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.533621][T14583] netlink: 'syz.2.2297': attribute type 12 has an invalid length. [ 571.811796][ T5920] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 572.097648][ T5920] usb 7-1: device descriptor read/64, error -71 [ 572.333205][T14606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2304'. [ 572.343245][T14606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2304'. [ 572.357295][T14606] netlink: 'syz.2.2304': attribute type 7 has an invalid length. [ 572.368513][T14606] netlink: 'syz.2.2304': attribute type 11 has an invalid length. [ 572.383396][ T5920] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 572.395111][T14606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2304'. [ 572.404393][T14606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2304'. [ 572.413402][T14606] netlink: 'syz.2.2304': attribute type 7 has an invalid length. [ 572.422399][T14606] netlink: 'syz.2.2304': attribute type 11 has an invalid length. [ 572.516318][ T5920] usb 7-1: device descriptor read/64, error -71 [ 572.621702][ T5920] usb usb7-port1: attempt power cycle [ 572.635551][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2307'. [ 572.983410][ T5920] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 573.059401][ T5920] usb 7-1: device descriptor read/8, error -71 [ 573.319060][ T5920] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 573.403647][ T5920] usb 7-1: device descriptor read/8, error -71 [ 573.411655][ T1619] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 573.659402][ T5920] usb usb7-port1: unable to enumerate USB device [ 573.779527][ T1619] usb 5-1: Using ep0 maxpacket: 32 [ 573.821374][ T1619] usb 5-1: config 8 has an invalid interface number: 203 but max is 0 [ 573.829568][ T1619] usb 5-1: config 8 has no interface number 0 [ 573.921147][ T1619] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 573.960417][ T1619] usb 5-1: config 8 interface 203 has no altsetting 0 [ 573.995989][ T1619] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 574.012150][ T1619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.020940][ T1619] usb 5-1: Product: syz [ 574.032515][ T1619] usb 5-1: Manufacturer: syz [ 574.037122][ T1619] usb 5-1: SerialNumber: syz [ 574.062327][T14653] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 574.328762][T14684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.339494][T14684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.355667][T14684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.364933][T14684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.551045][T14686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.561800][T14686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.144918][ T5993] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 576.167138][ T1619] port100 5-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 576.192951][ T1619] usb 5-1: USB disconnect, device number 84 [ 576.306492][ T5993] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 576.315786][ T5993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.132168][ T5993] usb 7-1: config 0 descriptor?? [ 577.403400][ T5993] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 577.747149][ T5993] [drm:udl_init] *ERROR* Selecting channel failed [ 577.788239][ T5993] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 577.796584][ T5993] [drm] Initialized udl on minor 2 [ 577.809583][T14706] cramfs: Unknown parameter 'ÇÂl' [ 577.903966][T14718] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2328'. [ 577.913571][T14718] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2328'. [ 578.278308][ T5993] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 578.286737][ T5993] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 578.294549][ T43] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 578.304321][ T5993] usb 7-1: USB disconnect, device number 44 [ 578.314913][ T43] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 578.605396][T14728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.620213][T14728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.644557][T14728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.684579][T14728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.936585][ T1619] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 579.079656][ T1619] usb 7-1: Using ep0 maxpacket: 32 [ 579.088191][ T1619] usb 7-1: config 8 has an invalid interface number: 203 but max is 0 [ 579.096865][ T1619] usb 7-1: config 8 has no interface number 0 [ 579.118149][ T1619] usb 7-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 579.135495][ T1619] usb 7-1: config 8 interface 203 altsetting 1 endpoint 0x83 has invalid maxpacket 1040, setting to 1024 [ 579.168639][ T1619] usb 7-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 579.207693][ T1619] usb 7-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 579.257860][ T1619] usb 7-1: config 8 interface 203 altsetting 1 endpoint 0xD has invalid wMaxPacketSize 0 [ 579.307933][ T1619] usb 7-1: config 8 interface 203 has no altsetting 0 [ 579.317998][ T1619] usb 7-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 579.335720][ T1619] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.344230][ T1619] usb 7-1: Product: syz [ 579.348665][ T1619] usb 7-1: Manufacturer: syz [ 579.353268][ T1619] usb 7-1: SerialNumber: syz [ 579.380927][T14733] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 579.388420][T14733] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 580.462675][T14733] tipc: Enabling of bearer rejected, failed to enable media [ 580.609765][T14761] netlink: 192 bytes leftover after parsing attributes in process `syz.5.2340'. [ 580.742100][ C0] port100 7-1:8.203: NFC: Urb failure (status -71) [ 580.750847][ C0] port100 7-1:8.203: NFC: Urb failure (status -71) [ 580.758612][ T1619] port100 7-1:8.203: NFC: Could not get supported command types [ 580.771782][ T1619] usb 7-1: USB disconnect, device number 45 [ 580.792411][T14778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.801381][T14778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.976443][ T5993] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 581.728459][ T5993] usb 5-1: Using ep0 maxpacket: 8 [ 581.735632][ T5993] usb 5-1: config 0 has an invalid interface number: 183 but max is 2 [ 581.746706][ T5993] usb 5-1: config 0 has an invalid interface number: 202 but max is 2 [ 581.754890][ T5993] usb 5-1: config 0 has an invalid interface number: 110 but max is 2 [ 581.775556][ T5993] usb 5-1: config 0 has no interface number 0 [ 581.781656][ T5993] usb 5-1: config 0 has no interface number 1 [ 581.787757][ T5993] usb 5-1: config 0 has no interface number 2 [ 582.481737][ T5993] usb 5-1: config 0 interface 183 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 582.492860][ T5993] usb 5-1: config 0 interface 183 altsetting 3 bulk endpoint 0x2 has invalid maxpacket 8 [ 582.584138][ T5993] usb 5-1: config 0 interface 183 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 582.617591][ T5993] usb 5-1: config 0 interface 183 altsetting 3 endpoint 0xA has an invalid bInterval 64, changing to 7 [ 582.718258][ T5993] usb 5-1: config 0 interface 183 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 582.752715][ T5993] usb 5-1: config 0 interface 183 altsetting 3 bulk endpoint 0xD has invalid maxpacket 1024 [ 582.772858][ T5993] usb 5-1: config 0 interface 183 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 582.796333][ T5993] usb 5-1: config 0 interface 183 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 582.936681][ T5993] usb 5-1: config 0 interface 183 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 582.947954][ T5993] usb 5-1: config 0 interface 183 has no altsetting 0 [ 582.955044][ T5993] usb 5-1: config 0 interface 202 has no altsetting 0 [ 582.962390][ T5993] usb 5-1: config 0 interface 110 has no altsetting 0 [ 583.259786][ T5993] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a80, bcdDevice=5f.40 [ 583.269274][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.302903][ T5993] usb 5-1: Product: syz [ 583.312626][ T5993] usb 5-1: Manufacturer: syz [ 583.339230][ T5993] usb 5-1: SerialNumber: syz [ 583.434721][ T5993] usb 5-1: config 0 descriptor?? [ 583.537575][ T5993] usb 5-1: can't set config #0, error -71 [ 583.567180][ T5993] usb 5-1: USB disconnect, device number 85 [ 583.896542][T14817] netlink: 'syz.4.2355': attribute type 5 has an invalid length. [ 583.937916][T14817] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2355'. [ 584.729894][T14839] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 585.623366][T14860] can0: slcan on ttyprintk. [ 586.071885][T14863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.080520][ T5920] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 586.088508][T14863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.110882][T14866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.196910][T14858] can0 (unregistered): slcan off ttyprintk. [ 586.247581][T14871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.256220][ T5920] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 586.288509][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.297489][T14871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.305528][ T5920] usb 5-1: Product: syz [ 586.312529][ T5920] usb 5-1: Manufacturer: syz [ 586.317188][ T5920] usb 5-1: SerialNumber: syz [ 586.483689][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2373'. [ 586.494566][T14876] vivid-003: disconnect [ 586.587848][ T5920] rtl8150 5-1:1.0: couldn't reset the device [ 586.598038][ T5920] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 587.024148][ T5920] usb 5-1: USB disconnect, device number 86 [ 587.118105][T14889] tap0: tun_chr_ioctl cmd 1074025677 [ 587.135799][T14889] tap0: linktype set to 768 [ 587.153845][T14888] tap0: tun_chr_ioctl cmd 1074025677 [ 587.179269][T14888] tap0: linktype set to 768 [ 587.355411][T14897] input: syz1 as /devices/virtual/input/input31 [ 587.456010][T14874] vivid-003: reconnect [ 588.126520][T14911] ntfs3(loop2): try to read out of volume at offset 0x0 [ 588.759038][T14925] input: syz1 as /devices/virtual/input/input32 [ 588.811790][T14911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2383'. [ 590.591822][T14979] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2679064279 (10716257116 ns) > initial count (6644176600 ns). Using initial count to start timer. [ 590.681558][T14980] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 590.691371][T14980] SQUASHFS error: Failed to read block 0x0: -5 [ 590.697793][T14980] unable to read squashfs_super_block [ 590.835214][T14970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2399'. [ 590.972084][T14970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2399'. [ 591.276750][ T5920] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 591.491700][ T5920] usb 7-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 591.508895][ T5920] usb 7-1: too many endpoints for config 0 interface 0 altsetting 1: 143, using maximum allowed: 30 [ 591.549208][ T5920] usb 7-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 143 [ 591.592328][ T5920] usb 7-1: config 0 interface 0 has no altsetting 0 [ 591.643218][ T5920] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 591.676855][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.701265][ T5920] usb 7-1: Product: syz [ 591.705440][ T5920] usb 7-1: Manufacturer: syz [ 591.710032][ T5920] usb 7-1: SerialNumber: syz [ 591.750561][T15013] FAULT_INJECTION: forcing a failure. [ 591.750561][T15013] name failslab, interval 1, probability 0, space 0, times 0 [ 591.772742][ T5920] usb 7-1: config 0 descriptor?? [ 591.787993][T15013] CPU: 1 UID: 0 PID: 15013 Comm: syz.4.2412 Not tainted syzkaller #0 PREEMPT(full) [ 591.788015][T15013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 591.788025][T15013] Call Trace: [ 591.788031][T15013] [ 591.788039][T15013] dump_stack_lvl+0x189/0x250 [ 591.788063][T15013] ? __pfx____ratelimit+0x10/0x10 [ 591.788081][T15013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.788100][T15013] ? __pfx__printk+0x10/0x10 [ 591.788125][T15013] ? __pfx___might_resched+0x10/0x10 [ 591.788148][T15013] ? fs_reclaim_acquire+0x7d/0x100 [ 591.788169][T15013] should_fail_ex+0x414/0x560 [ 591.788196][T15013] should_failslab+0xa8/0x100 [ 591.788216][T15013] kmem_cache_alloc_noprof+0x74/0x6e0 [ 591.788237][T15013] ? security_inode_alloc+0x39/0x330 [ 591.788264][T15013] security_inode_alloc+0x39/0x330 [ 591.788288][T15013] inode_init_always_gfp+0x9ed/0xdc0 [ 591.788312][T15013] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 591.788329][T15013] alloc_inode+0x82/0x1b0 [ 591.788343][T15013] ? __pfx_ovl_inode_test+0x10/0x10 [ 591.788360][T15013] ? __pfx_ovl_inode_set+0x10/0x10 [ 591.788377][T15013] iget5_locked+0x4a/0xa0 [ 591.788398][T15013] ovl_get_inode+0x712/0x1010 [ 591.788434][T15013] ? __pfx_ovl_get_inode+0x10/0x10 [ 591.788454][T15013] ? do_raw_spin_unlock+0x122/0x240 [ 591.788484][T15013] ovl_lookup+0x1893/0x1bc0 [ 591.788538][T15013] ? __pfx_ovl_lookup+0x10/0x10 [ 591.788554][T15013] ? do_raw_spin_lock+0x121/0x290 [ 591.788584][T15013] ? do_raw_spin_unlock+0x122/0x240 [ 591.788605][T15013] ? _raw_spin_unlock+0x28/0x50 [ 591.788622][T15013] ? d_alloc+0x144/0x190 [ 591.788643][T15013] lookup_one_qstr_excl+0x131/0x360 [ 591.788669][T15013] do_unlinkat+0x1df/0x560 [ 591.788698][T15013] ? __pfx_do_unlinkat+0x10/0x10 [ 591.788722][T15013] ? strncpy_from_user+0x150/0x290 [ 591.788746][T15013] ? getname_flags+0x1e5/0x540 [ 591.788768][T15013] __x64_sys_unlink+0x47/0x50 [ 591.788790][T15013] do_syscall_64+0xfa/0xfa0 [ 591.788808][T15013] ? lockdep_hardirqs_on+0x9c/0x150 [ 591.788826][T15013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.788843][T15013] ? clear_bhb_loop+0x60/0xb0 [ 591.788863][T15013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.788879][T15013] RIP: 0033:0x7fd37b18ec29 [ 591.788894][T15013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.788908][T15013] RSP: 002b:00007fd37bfad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 591.788926][T15013] RAX: ffffffffffffffda RBX: 00007fd37b3d5fa0 RCX: 00007fd37b18ec29 [ 591.788938][T15013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 591.788948][T15013] RBP: 00007fd37bfad090 R08: 0000000000000000 R09: 0000000000000000 [ 591.788959][T15013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 591.788969][T15013] R13: 00007fd37b3d6038 R14: 00007fd37b3d5fa0 R15: 00007ffc7258b6d8 [ 591.789007][T15013] [ 591.789232][T15013] overlayfs: failed to get inode (-12) [ 592.038903][T14974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.123795][T14974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.192824][ T5920] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 592.237678][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 592.257731][ T5920] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 592.272376][ T5920] usb 7-1: media controller created [ 592.298072][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 592.595049][ T5920] DVB: Unable to find symbol tda10046_attach() [ 592.616048][ T5920] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 592.695266][ T5920] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 592.783536][ T5920] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 592.900137][ T5920] usb 7-1: USB disconnect, device number 46 [ 592.995152][T15046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.125591][T15046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.731519][T15057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.134633][T15074] overlayfs: failed to clone upperpath [ 594.141253][T15068] tun0: tun_chr_ioctl cmd 1074025681 [ 594.219152][T15079] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 594.558427][ T5920] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 594.607050][ T5920] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 595.440544][T15095] vfat: Bad value for 'shortname' [ 595.446387][T15095] ./file0: Can't lookup blockdev [ 595.469327][T15091] vfat: Bad value for 'shortname' [ 595.613411][T15105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.973715][T15107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.007079][T15107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.040039][T15111] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 597.409960][T15131] tmpfs: Bad value for 'mpol' [ 597.652904][T15127] random: crng reseeded on system resumption [ 597.696388][T15128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.723132][T15128] bond0: (slave rose0): Enslaving as an active interface with an up link [ 597.853723][T15147] netlink: 'syz.6.2447': attribute type 2 has an invalid length. [ 598.017343][ T30] audit: type=1326 audit(1758490121.609:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15145 comm="syz.2.2446" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69b398ec29 code=0x0 [ 599.290749][T15168] overlayfs: failed to resolve './bus': -2 [ 601.850886][T15228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.874606][T15228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.931335][ T1619] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 602.100961][ T1619] usb 5-1: Using ep0 maxpacket: 32 [ 602.123149][ T1619] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 602.152653][ T1619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.163462][ T1619] usb 5-1: config 0 descriptor?? [ 602.174299][ T1619] gspca_main: sunplus-2.14.0 probing 041e:400b [ 602.259436][T15233] binder: 15232:15233 ioctl c0306201 200000000080 returned -14 [ 602.322127][ T5920] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 602.493619][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 602.501931][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2469'. [ 602.523943][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.541016][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.569025][ T5920] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 602.580469][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.601266][ T5920] usb 7-1: config 0 descriptor?? [ 603.703959][ T1619] gspca_sunplus: reg_w_riv err -110 [ 603.802978][ T1619] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 605.114315][T15275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.171007][T15275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.410428][T15286] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 605.427807][T15288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.436337][T15286] EXT4-fs (loop5): unable to read superblock [ 605.454621][T15286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.464014][T15288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.476307][T15286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.547773][T15293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.586554][T15293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.750321][T15286] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 605.761197][T15286] EXT4-fs (loop5): unable to read superblock [ 606.680264][ T5920] usbhid 7-1:0.0: can't add hid device: -71 [ 606.851787][ T5920] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 606.889865][ T5920] usb 7-1: USB disconnect, device number 47 [ 607.084387][ T30] audit: type=1326 audit(1758490131.152:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15311 comm="syz.5.2488" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf8bb8ec29 code=0x0 [ 607.106117][ C1] vkms_vblank_simulate: vblank timer overrun [ 607.120568][ T1619] usb 5-1: USB disconnect, device number 87 [ 607.519329][T15322] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2491'. [ 607.677259][T15331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.713891][ T1619] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 607.714086][T15331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.721582][T15334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.752793][T15334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.785695][T15331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.804359][T15336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.805099][T15331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.829799][T15336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.884902][ T1619] usb 5-1: device descriptor read/64, error -71 [ 608.493725][T15340] sp0: Synchronizing with TNC [ 608.533039][ T1619] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 608.675966][ T1619] usb 5-1: device descriptor read/64, error -71 [ 608.791396][ T1619] usb usb5-port1: attempt power cycle [ 609.640001][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 609.662651][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 609.723641][ T1619] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 609.800695][ T1619] usb 5-1: device descriptor read/8, error -71 [ 610.372984][T15383] netlink: 'syz.2.2507': attribute type 2 has an invalid length. [ 610.380955][T15383] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2507'. [ 610.428014][T15388] xt_l2tp: missing protocol rule (udp|l2tpip) [ 610.504812][ T1619] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 610.541273][ T1619] usb 5-1: Using ep0 maxpacket: 16 [ 610.552757][ T1619] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 610.585424][ T1619] usb 5-1: config 0 has no interface number 0 [ 610.600268][ T1619] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 610.875119][T15401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.892648][T15401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.601169][ T1619] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 611.622898][ T1619] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 612.012499][ T1619] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 612.031257][ T1619] usb 5-1: Product: syz [ 612.035426][ T1619] usb 5-1: SerialNumber: syz [ 612.061367][ T1619] usb 5-1: config 0 descriptor?? [ 612.074121][ T1619] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 612.282418][ T1619] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input34 [ 612.345484][T15410] program syz.5.2516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 612.360199][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2514'. [ 612.517078][T15422] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 612.869307][T15428] xt_l2tp: missing protocol rule (udp|l2tpip) [ 613.544368][T15433] fuse: Bad value for 'fd' [ 613.790928][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 613.799910][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 613.807159][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 613.814319][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 613.821535][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 613.828676][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 613.835824][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 613.843003][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 613.850174][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 613.857304][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 613.897760][ T5919] usb 5-1: USB disconnect, device number 91 [ 613.903777][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 613.961856][ T5919] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 615.013904][T15465] 9pnet_fd: Insufficient options for proto=fd [ 615.123974][T15462] trusted_key: syz.0.2526 sent an empty control message without MSG_MORE. [ 615.384047][T15472] netlink: 'syz.0.2528': attribute type 1 has an invalid length. [ 615.725457][T15480] overlay: filesystem on ./file1 not supported [ 616.240807][T15494] xt_l2tp: missing protocol rule (udp|l2tpip) [ 616.470303][T15502] netlink: 'syz.6.2532': attribute type 1 has an invalid length. [ 616.762986][ T5993] usb 5-1: new low-speed USB device number 92 using dummy_hcd [ 616.774665][T15510] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 616.795253][T15510] SQUASHFS error: Failed to read block 0x0: -5 [ 616.801581][T15510] unable to read squashfs_super_block [ 616.934498][ T5993] usb 5-1: device descriptor read/64, error -71 [ 617.163297][ T5993] usb 5-1: new low-speed USB device number 93 using dummy_hcd [ 617.287077][ T5993] usb 5-1: device descriptor read/64, error -71 [ 617.393744][ T5993] usb usb5-port1: attempt power cycle [ 617.410739][ T43] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 617.584045][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.594093][ T43] usb 7-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 617.603230][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.613163][ T43] usb 7-1: config 0 descriptor?? [ 617.734524][ T5993] usb 5-1: new low-speed USB device number 94 using dummy_hcd [ 617.754347][ T5993] usb 5-1: device descriptor read/8, error -71 [ 618.014997][ T5993] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 618.023279][ T43] dragonrise 0003:0079:0006.0012: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.6-1/input0 [ 618.037139][ T43] dragonrise 0003:0079:0006.0012: no inputs found [ 618.043823][ T43] dragonrise 0003:0079:0006.0012: force feedback init failed [ 618.051912][ T5993] usb 5-1: device descriptor read/8, error -71 [ 618.153825][ T5993] usb usb5-port1: unable to enumerate USB device [ 618.200348][ T5919] usb 7-1: USB disconnect, device number 48 [ 619.722123][ T30] audit: type=1326 audit(1758490912.421:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15557 comm="syz.5.2550" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf8bb8ec29 code=0x0 [ 619.753601][T15566] input: syz1 as /devices/virtual/input/input36 [ 621.422645][ T5993] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 621.509360][T15588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.518653][T15588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.534723][T15591] netlink: 'syz.5.2559': attribute type 1 has an invalid length. [ 621.594142][ T5993] usb 7-1: Using ep0 maxpacket: 8 [ 621.605171][ T5993] usb 7-1: config 3 interface 0 has no altsetting 0 [ 621.623588][ T5993] usb 7-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=e5.a2 [ 621.645111][T15600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.653531][ T5993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.653553][ T5993] usb 7-1: Product: syz [ 621.653567][ T5993] usb 7-1: Manufacturer: syz [ 621.653581][ T5993] usb 7-1: SerialNumber: syz [ 621.679155][T15600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.690639][T15600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.699497][T15600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.923126][T15624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2567'. [ 622.933578][T15624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2567'. [ 622.979498][T15626] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 622.986029][T15626] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 623.002634][T15631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.021976][T15626] vhci_hcd vhci_hcd.0: Device attached [ 623.030153][T15631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.249333][ T5920] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 623.361599][ T8179] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 623.379063][ T5993] usb 7-1: USB disconnect, device number 49 [ 623.480049][T15635] ucma_write: process 1844 (syz.2.2569) changed security contexts after opening file descriptor, this is not allowed. [ 623.495488][T15646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.657865][ T8179] usb 5-1: Using ep0 maxpacket: 16 [ 623.664667][ T8179] usb 5-1: config index 0 descriptor too short (expected 225, got 18) [ 623.673491][ T8179] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.683771][ T8179] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 623.696511][ T8179] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 623.705764][ T8179] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.713782][ T8179] usb 5-1: Product: syz [ 623.718022][ T8179] usb 5-1: Manufacturer: syz [ 623.722641][ T8179] usb 5-1: SerialNumber: syz [ 623.730154][ T8179] usb 5-1: config 0 descriptor?? [ 623.925559][ T5993] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 623.931998][T15659] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 623.945811][T15659] SQUASHFS error: Failed to read block 0x0: -5 [ 623.952089][T15659] unable to read squashfs_super_block [ 624.015882][T15627] vhci_hcd: connection reset by peer [ 624.017112][ T5919] usb 5-1: USB disconnect, device number 96 [ 624.028004][ T13] vhci_hcd: stop threads [ 624.034332][ T13] vhci_hcd: release socket [ 624.045585][ T13] vhci_hcd: disconnect device [ 624.108730][ T5993] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 624.123812][T15664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2578'. [ 624.158844][ T5993] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 624.171384][ T5993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 624.181479][ T5993] usb 7-1: SerialNumber: syz [ 624.194705][ T5993] usb 7-1: bad CDC descriptors [ 624.446860][T15668] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2580'. [ 624.965005][ T5993] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 625.125742][ T5993] usb 5-1: Using ep0 maxpacket: 32 [ 625.169037][ T5993] usb 5-1: config 4 has an invalid interface number: 194 but max is 0 [ 625.215343][ T5993] usb 5-1: config 4 has no interface number 0 [ 625.254023][ T5993] usb 5-1: config 4 interface 194 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 625.268378][ T5993] usb 5-1: config 4 interface 194 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 625.278926][ T5993] usb 5-1: config 4 interface 194 has no altsetting 0 [ 625.336158][ T5993] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=a1.41 [ 625.345867][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.353919][ T5993] usb 5-1: Product: syz [ 625.358824][ T5993] usb 5-1: Manufacturer: syz [ 625.363488][ T5993] usb 5-1: SerialNumber: syz [ 625.831120][T15693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2586'. [ 625.899072][ T5993] usb 5-1: probing VID:PID(0424:012C) [ 625.907513][ T5993] usb 5-1: vub300 testing UNKNOWN EndPoint(0) 03 [ 625.913941][ T5993] usb 5-1: vub300 ignoring EndPoint(0) 03 [ 625.919998][ T5993] usb 5-1: vub300 testing UNKNOWN EndPoint(1) 04 [ 625.927175][ T5993] usb 5-1: vub300 ignoring EndPoint(1) 04 [ 625.933170][ T5993] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 625.941087][ T5993] vub300 5-1:4.194: probe with driver vub300 failed with error -22 [ 625.968007][ T5993] usb 5-1: USB disconnect, device number 97 [ 626.476909][ T5993] usb 7-1: USB disconnect, device number 50 [ 626.565641][T15706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.584057][T15706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.605239][T15706] fuse: Unknown parameter 'rootmod' [ 626.776324][T15712] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2592'. [ 626.798559][T15712] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2592'. [ 627.380017][ T5919] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 627.525805][ T5919] usb 7-1: Using ep0 maxpacket: 16 [ 627.535905][ T5919] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 627.553737][ T5919] usb 7-1: config 0 has no interface number 0 [ 627.570043][ T5919] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 627.659222][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.667329][ T5919] usb 7-1: Product: syz [ 627.674780][ T5919] usb 7-1: Manufacturer: syz [ 627.740763][ T5919] usb 7-1: SerialNumber: syz [ 627.751252][ T5919] usb 7-1: config 0 descriptor?? [ 627.768345][ T5919] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 627.781339][T15730] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2597'. [ 627.795065][T15730] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 627.830188][T15731] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2597'. [ 627.850256][T15736] overlayfs: failed to clone upperpath [ 627.859120][T15731] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 627.976253][ T5919] gspca_spca1528: reg_w err -71 [ 628.030389][T15740] xt_l2tp: missing protocol rule (udp|l2tpip) [ 628.050920][ T5919] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 628.087032][ T5919] usb 7-1: USB disconnect, device number 51 [ 628.182452][ T5920] vhci_hcd: vhci_device speed not set [ 628.200349][T15743] netlink: 'syz.4.2602': attribute type 11 has an invalid length. [ 629.141545][ T5920] kernel read not supported for file /sysvipc/msg (pid: 5920 comm: kworker/0:5) [ 629.268996][T15759] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2606'. [ 629.269022][ T5919] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 629.473648][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.534667][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.790193][ T5919] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 630.309332][ T5919] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 630.318758][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.413108][ T5919] usb 7-1: config 0 descriptor?? [ 630.686141][T15789] overlayfs: failed to clone upperpath [ 630.978895][T15782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.981695][ T5919] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 631.043241][T15782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.444829][ T5919] usb 7-1: USB disconnect, device number 52 [ 631.768204][ T5912] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 631.960132][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 632.010204][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 633.005528][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 633.016212][ T5912] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 633.034783][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 633.047130][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 633.053263][T15817] binder: 15815:15817 ioctl 4018620d 2000000000c0 returned -16 [ 633.213651][ T5912] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 633.224146][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.233090][ T5912] usb 5-1: Product: syz [ 633.237372][ T5912] usb 5-1: Manufacturer: syz [ 633.242318][ T5912] usb 5-1: SerialNumber: syz [ 633.270880][ T5912] usb 5-1: config 0 descriptor?? [ 633.850040][ T5993] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 634.344083][ T5993] usb 7-1: too many configurations: 27, using maximum allowed: 8 [ 734.335499][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 734.342464][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P132/1:b..l P8331/1:b..l [ 734.351974][ C1] rcu: (detected by 1, t=10502 jiffies, g=66649, q=28 ncpus=2) [ 734.359601][ C1] task:syz-executor state:R running task stack:21640 pid:8331 tgid:8331 ppid:8306 task_flags:0x400140 flags:0x00080000 [ 734.373847][ C1] Call Trace: [ 734.377130][ C1] [ 734.380060][ C1] __schedule+0x1798/0x4cc0 [ 734.384569][ C1] ? do_syscall_64+0xfa/0xfa0 [ 734.389266][ C1] ? __pfx___schedule+0x10/0x10 [ 734.394117][ C1] ? do_raw_spin_lock+0x121/0x290 [ 734.399151][ C1] ? preempt_schedule+0xae/0xc0 [ 734.403999][ C1] preempt_schedule_common+0x83/0xd0 [ 734.409280][ C1] preempt_schedule+0xae/0xc0 [ 734.413953][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 734.419331][ C1] ? copy_pmd_range+0x75fa/0x7f00 [ 734.424358][ C1] preempt_schedule_thunk+0x16/0x30 [ 734.429559][ C1] _raw_spin_unlock+0x3f/0x50 [ 734.434230][ C1] copy_pmd_range+0x7630/0x7f00 [ 734.439080][ C1] ? unwind_get_return_address+0x4d/0x90 [ 734.444743][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 734.449946][ C1] ? __lock_acquire+0xab9/0xd20 [ 734.454819][ C1] copy_page_range+0xc14/0x1270 [ 734.459671][ C1] ? __lock_acquire+0xab9/0xd20 [ 734.464544][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 734.469835][ C1] ? up_write+0x1c4/0x420 [ 734.474158][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 734.480924][ C1] dup_mmap+0xf4c/0x1b10 [ 734.485183][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 734.489872][ C1] ? mm_init+0xd74/0xfa0 [ 734.494124][ C1] copy_mm+0x13c/0x4b0 [ 734.498189][ C1] copy_process+0x1706/0x3c00 [ 734.502889][ C1] ? copy_process+0x97f/0x3c00 [ 734.507667][ C1] ? __pfx_copy_process+0x10/0x10 [ 734.512705][ C1] kernel_clone+0x21e/0x840 [ 734.517212][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 734.522332][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 734.527364][ C1] ? count_memcg_event_mm+0x21/0x260 [ 734.532657][ C1] __x64_sys_clone+0x18b/0x1e0 [ 734.537421][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 734.542717][ C1] ? do_user_addr_fault+0xc85/0x1380 [ 734.548007][ C1] ? do_syscall_64+0xbe/0xfa0 [ 734.552689][ C1] do_syscall_64+0xfa/0xfa0 [ 734.557189][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 734.562382][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.568441][ C1] ? clear_bhb_loop+0x60/0xb0 [ 734.573118][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.579005][ C1] RIP: 0033:0x7fdf8bb85493 [ 734.583412][ C1] RSP: 002b:00007ffdcff178a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 734.591825][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdf8bb85493 [ 734.599792][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 734.607755][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 734.615717][ C1] R10: 0000555588e077d0 R11: 0000000000000246 R12: 0000000000000000 [ 734.623681][ C1] R13: 00000000000927c0 R14: 000000000009e7e2 R15: 00007ffdcff17a40 [ 734.631672][ C1] [ 734.634683][ C1] task:kworker/u8:5 state:R running task stack:20296 pid:132 tgid:132 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 734.648255][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 734.656062][ C1] Call Trace: [ 734.659334][ C1] [ 734.662263][ C1] __schedule+0x1798/0x4cc0 [ 734.666793][ C1] ? __pfx___schedule+0x10/0x10 [ 734.671646][ C1] ? unwind_next_frame+0xa5/0x2390 [ 734.676758][ C1] ? unwind_next_frame+0xa5/0x2390 [ 734.681870][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 734.687154][ C1] preempt_schedule_irq+0xb5/0x150 [ 734.692261][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 734.697986][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 734.703798][ C1] irqentry_exit+0x6f/0x90 [ 734.708212][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 734.714186][ C1] RIP: 0010:unwind_next_frame+0x521/0x2390 [ 734.719984][ C1] Code: 63 18 00 00 0f b7 1e c1 eb 0b 80 e3 01 48 8b 44 24 28 0f b6 04 28 84 c0 4c 8b 7c 24 70 0f 85 6d 18 00 00 48 8b 44 24 10 88 18 <0f> b7 1e 83 e3 0f 83 fb 05 0f 8f 85 00 00 00 83 fb 03 0f 8f 01 01 [ 734.739581][ C1] RSP: 0018:ffffc90002e57438 EFLAGS: 00000246 [ 734.745645][ C1] RAX: ffffc90002e5759d RBX: 0000000000000000 RCX: ffffffff8fd6fae0 [ 734.753611][ C1] RDX: ffffffff9052fe22 RSI: ffffffff9052fe26 RDI: ffffffff8c03aa00 [ 734.761581][ C1] RBP: dffffc0000000000 R08: 0000000000000005 R09: ffffffff8173bd25 [ 734.769550][ C1] R10: ffffc90002e575b8 R11: fffff520005caeb9 R12: ffffffff9052fe27 [ 734.777514][ C1] R13: ffffc90002e575b8 R14: ffffc90002e57568 R15: ffffc90002e575a0 [ 734.785484][ C1] ? unwind_next_frame+0xa5/0x2390 [ 734.790598][ C1] ? unwind_next_frame+0xd4/0x2390 [ 734.795713][ C1] ? unwind_next_frame+0xa5/0x2390 [ 734.800821][ C1] ? arch_stack_walk+0xe4/0x150 [ 734.805677][ C1] __unwind_start+0x5b9/0x760 [ 734.810355][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 734.816505][ C1] arch_stack_walk+0xe4/0x150 [ 734.821181][ C1] ? arch_stack_walk+0xe4/0x150 [ 734.826031][ C1] stack_trace_save+0x9c/0xe0 [ 734.830713][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 734.836084][ C1] ? arch_stack_walk+0x11c/0x150 [ 734.841022][ C1] kasan_save_track+0x3e/0x80 [ 734.845757][ C1] __kasan_slab_alloc+0x6c/0x80 [ 734.850602][ C1] kmem_cache_alloc_noprof+0x367/0x6e0 [ 734.856071][ C1] ? skb_clone+0x212/0x3a0 [ 734.860490][ C1] skb_clone+0x212/0x3a0 [ 734.864738][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x5b5/0x7e0 [ 734.871766][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 734.877489][ C1] process_scheduled_works+0xae1/0x17b0 [ 734.883063][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 734.889063][ C1] worker_thread+0x8a0/0xda0 [ 734.893682][ C1] kthread+0x711/0x8a0 [ 734.897751][ C1] ? __pfx_worker_thread+0x10/0x10 [ 734.902866][ C1] ? __pfx_kthread+0x10/0x10 [ 734.907455][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 734.912649][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 734.917843][ C1] ? __pfx_kthread+0x10/0x10 [ 734.922434][ C1] ret_from_fork+0x4bc/0x870 [ 734.927030][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 734.932149][ C1] ? __switch_to_asm+0x39/0x70 [ 734.936909][ C1] ? __switch_to_asm+0x33/0x70 [ 734.941672][ C1] ? __pfx_kthread+0x10/0x10 [ 734.946262][ C1] ret_from_fork_asm+0x1a/0x30 [ 734.951044][ C1] [ 734.954056][ C1] rcu: rcu_preempt kthread starved for 10490 jiffies! g66649 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 734.965239][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 734.975196][ C1] rcu: RCU grace-period kthread stack dump: [ 734.981073][ C1] task:rcu_preempt state:R running task stack:27288 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 734.994554][ C1] Call Trace: [ 734.997826][ C1] [ 735.000756][ C1] __schedule+0x1798/0x4cc0 [ 735.005281][ C1] ? __lock_acquire+0xab9/0xd20 [ 735.010131][ C1] ? __pfx___schedule+0x10/0x10 [ 735.014994][ C1] ? schedule+0x91/0x360 [ 735.019238][ C1] schedule+0x165/0x360 [ 735.023396][ C1] schedule_timeout+0x12b/0x270 [ 735.028239][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 735.033605][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 735.039492][ C1] ? __pfx_process_timeout+0x10/0x10 [ 735.044778][ C1] ? prepare_to_swait_event+0x341/0x380 [ 735.050338][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 735.055215][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 735.061369][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 735.066658][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 735.072565][ C1] ? finish_swait+0xcd/0x1f0 [ 735.077157][ C1] rcu_gp_kthread+0x99/0x390 [ 735.081748][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 735.086942][ C1] ? __kthread_parkme+0x7b/0x200 [ 735.091871][ C1] ? __kthread_parkme+0x1a1/0x200 [ 735.096892][ C1] kthread+0x711/0x8a0 [ 735.100956][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 735.106149][ C1] ? __pfx_kthread+0x10/0x10 [ 735.110736][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 735.115927][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 735.121119][ C1] ? __pfx_kthread+0x10/0x10 [ 735.125705][ C1] ret_from_fork+0x4bc/0x870 [ 735.130299][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 735.135417][ C1] ? __switch_to_asm+0x39/0x70 [ 735.140182][ C1] ? __switch_to_asm+0x33/0x70 [ 735.144941][ C1] ? __pfx_kthread+0x10/0x10 [ 735.149524][ C1] ret_from_fork_asm+0x1a/0x30 [ 735.154301][ C1] [ 735.157310][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 735.163628][ C1] Sending NMI from CPU 1 to CPUs 0: [ 735.168829][ C0] NMI backtrace for cpu 0 [ 735.168851][ C0] CPU: 0 UID: 0 PID: 15823 Comm: syz.5.2622 Not tainted syzkaller #0 PREEMPT(full) [ 735.168887][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 735.168906][ C0] RIP: 0010:lock_acquire+0x11b/0x360 [ 735.168933][ C0] Code: 4c 89 7c 24 08 41 f7 c7 00 02 00 00 41 0f 94 c1 4c 89 ef 89 de 8b 54 24 04 44 89 e1 45 89 f0 6a 00 6a 00 6a 00 55 ff 74 24 30 e0 02 00 00 48 83 c4 28 48 c7 c7 0a 24 d9 8d e8 d0 82 e7 09 b8 [ 735.168947][ C0] RSP: 0018:ffffc90000007b38 EFLAGS: 00000046 [ 735.168961][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 735.168971][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff99f16960 [ 735.168982][ C0] RBP: ffffffff84d5285a R08: 0000000000000001 R09: 0000000000000001 [ 735.168992][ C0] R10: ffffc90000007cb0 R11: fffff52000000f98 R12: 0000000000000000 [ 735.169003][ C0] R13: ffffffff99f16960 R14: 0000000000000001 R15: 0000000000000046 [ 735.169014][ C0] FS: 0000000000000000(0000) GS:ffff8881259e7000(0000) knlGS:0000000000000000 [ 735.169027][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 735.169038][ C0] CR2: 0000001b33217ff8 CR3: 0000000062f84000 CR4: 00000000003526f0 [ 735.169052][ C0] Call Trace: [ 735.169059][ C0] [ 735.169066][ C0] ? debug_object_deactivate+0x9a/0x250 [ 735.169111][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 735.169150][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 735.169181][ C0] ? debug_object_deactivate+0x9a/0x250 [ 735.169219][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 735.169267][ C0] debug_object_deactivate+0x9a/0x250 [ 735.169289][ C0] debug_deactivate+0x1d/0x200 [ 735.169305][ C0] __hrtimer_run_queues+0x2b0/0xc60 [ 735.169334][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 735.169355][ C0] ? read_tsc+0x9/0x20 [ 735.169373][ C0] ? rcu_is_watching+0x15/0xb0 [ 735.169397][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 735.169429][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 735.169453][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 735.169472][ C0] [ 735.169477][ C0] [ 735.169484][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 735.169501][ C0] RIP: 0010:finish_task_switch+0x26b/0x950 [ 735.169520][ C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 e9 27 05 00 00 4c 8b 75 d0 4c 89 e7 e8 7f 45 f6 09 e8 4a 52 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 58 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 735.169533][ C0] RSP: 0018:ffffc9001a82de78 EFLAGS: 00000286 [ 735.169546][ C0] RAX: c4f6f70180caa500 RBX: 0000000000000000 RCX: c4f6f70180caa500 [ 735.169558][ C0] RDX: 0000000000000006 RSI: ffffffff8dba2d53 RDI: ffffffff8c03aa60 [ 735.169569][ C0] RBP: ffffc9001a82ded0 R08: ffffffff8fc39677 R09: 1ffffffff1f872ce [ 735.169581][ C0] R10: dffffc0000000000 R11: fffffbfff1f872cf R12: ffff888025675ac0 [ 735.169592][ C0] R13: dffffc0000000000 R14: ffff88802ae95ac0 R15: ffff8880b863ab98 [ 735.169612][ C0] ? finish_task_switch+0x266/0x950 [ 735.169633][ C0] __schedule+0x17a0/0x4cc0 [ 735.169660][ C0] ? __pfx___schedule+0x10/0x10 [ 735.169683][ C0] ? unwind_next_frame+0xa5/0x2390 [ 735.169698][ C0] ? vfs_coredump+0x1db5/0x2a60 [ 735.169716][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 735.169734][ C0] preempt_schedule_irq+0xb5/0x150 [ 735.169751][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 735.169771][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 735.169794][ C0] irqentry_exit+0x6f/0x90 [ 735.169810][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 735.169826][ C0] RIP: 0010:sized_strscpy+0x52/0x250 [ 735.169844][ C0] Code: 7f 0f 87 d9 01 00 00 49 89 fe 48 ba 00 00 00 00 00 fc ff df 49 83 fc 08 48 89 34 24 72 70 31 ed eb 12 49 83 c4 f8 4d 89 2c 2e <48> 83 c5 08 49 83 fc 07 76 5c 4c 8b 2c 2e 4c 89 e8 48 f7 d0 48 b9 [ 735.169858][ C0] RSP: 0018:ffffc9001a82e260 EFLAGS: 00000217 [ 735.169870][ C0] RAX: 1ffff11003aced31 RBX: fffffffffffffff9 RCX: fefefefefefefeff [ 735.169882][ C0] RDX: dffffc0000000000 RSI: ffff8880256763c0 RDI: ffff88801d676988 [ 735.169894][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff822dd89a [ 735.169904][ C0] R10: ffff8880256763c0 R11: ffffffff81ac5170 R12: 0000000000000003 [ 735.169915][ C0] R13: 36322e352e7a7973 R14: ffff88801d676988 R15: 0000000000000000 [ 735.169928][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 735.169945][ C0] ? __update_page_owner_handle+0x5a/0x570 [ 735.169975][ C0] __update_page_owner_handle+0x307/0x570 [ 735.169998][ C0] ? __update_page_owner_handle+0x5a/0x570 [ 735.170023][ C0] __set_page_owner+0x10b/0x4a0 [ 735.170046][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 735.170071][ C0] post_alloc_hook+0x240/0x2a0 [ 735.170095][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 735.170130][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 735.170148][ C0] ? prepare_alloc_pages+0x213/0x610 [ 735.170167][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 735.170185][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 735.170205][ C0] ? policy_nodemask+0x27c/0x720 [ 735.170222][ C0] alloc_pages_mpol+0x232/0x4a0 [ 735.170240][ C0] folio_alloc_mpol_noprof+0x39/0x70 [ 735.170256][ C0] shmem_alloc_and_add_folio+0x4ba/0x10f0 [ 735.170281][ C0] ? filemap_get_entry+0xad/0x2f0 [ 735.170295][ C0] ? filemap_get_entry+0xad/0x2f0 [ 735.170312][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 735.170335][ C0] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 735.170358][ C0] shmem_get_folio_gfp+0x59d/0x1660 [ 735.170382][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 735.170401][ C0] shmem_write_begin+0xf7/0x2b0 [ 735.170425][ C0] generic_perform_write+0x2c5/0x900 [ 735.170448][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 735.170464][ C0] ? down_write+0x162/0x1f0 [ 735.170486][ C0] ? file_update_time+0x2da/0x490 [ 735.170506][ C0] shmem_file_write_iter+0xf8/0x120 [ 735.170527][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 735.170549][ C0] __kernel_write_iter+0x428/0x910 [ 735.170572][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 735.170594][ C0] ? __pfx___kernel_write_iter+0x10/0x10 [ 735.170618][ C0] ? __asan_memset+0x22/0x50 [ 735.170637][ C0] ? iov_iter_bvec+0xb8/0x180 [ 735.170653][ C0] dump_user_range+0x8a0/0xc90 [ 735.170679][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 735.170694][ C0] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 735.170718][ C0] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 735.170743][ C0] ? dump_emit+0xa6/0xe0 [ 735.170756][ C0] ? elf_core_dump+0x2cd0/0x3960 [ 735.170774][ C0] elf_core_dump+0x3369/0x3960 [ 735.170799][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 735.170815][ C0] ? preempt_schedule_irq+0xde/0x150 [ 735.170832][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 735.170852][ C0] ? irqentry_exit+0x74/0x90 [ 735.170887][ C0] ? 0xffffffffff600000 [ 735.170901][ C0] ? up_write+0x1c4/0x420 [ 735.170918][ C0] coredump_write+0x116c/0x1900 [ 735.170942][ C0] ? __pfx_coredump_write+0x10/0x10 [ 735.170956][ C0] ? irqentry_exit+0x74/0x90 [ 735.170978][ C0] ? vfs_coredump+0x1c6b/0x2a60 [ 735.170995][ C0] vfs_coredump+0x1db5/0x2a60 [ 735.171019][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 735.171037][ C0] ? __lock_acquire+0xab9/0xd20 [ 735.171063][ C0] ? cpupri_find+0xe7/0x240 [ 735.171083][ C0] ? find_lowest_rq+0x12e/0x760 [ 735.171103][ C0] ? find_lock_lowest_rq+0xbf/0x560 [ 735.171119][ C0] ? finish_task_switch+0x18b/0x950 [ 735.171142][ C0] ? finish_task_switch+0x266/0x950 [ 735.171159][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 735.171177][ C0] ? finish_task_switch+0x266/0x950 [ 735.171195][ C0] ? rcu_is_watching+0x15/0xb0 [ 735.171217][ C0] ? trace_sched_exit_tp+0x36/0x110 [ 735.171234][ C0] ? __schedule+0x17ae/0x4cc0 [ 735.171259][ C0] ? irqentry_exit_to_user_mode+0x7e/0x110 [ 735.171277][ C0] ? __pfx___schedule+0x10/0x10 [ 735.171317][ C0] get_signal+0x1108/0x1340 [ 735.171347][ C0] arch_do_signal_or_restart+0xa0/0x790 [ 735.171368][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 735.171388][ C0] ? __bad_area_nosemaphore+0x3fb/0x780 [ 735.171415][ C0] ? local_irq_enable_exit_to_user+0x5/0x10 [ 735.171436][ C0] irqentry_exit_to_user_mode+0x7e/0x110 [ 735.171455][ C0] exc_page_fault+0xab/0x100 [ 735.171473][ C0] asm_exc_page_fault+0x26/0x30 [ 735.171487][ C0] RIP: 0033:0x7fdf8ba4f987 [ 735.171502][ C0] Code: 88 15 72 5d eb 00 88 05 6f 5d eb 00 c3 50 48 8d 35 c9 24 1c 00 48 8d 3d cf 24 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 735.171515][ C0] RSP: 002b:00007fdf8c9ad120 EFLAGS: 00010202 [ 735.171528][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fdf8bb8ec29 [ 735.171538][ C0] RDX: 00007fdf8c9ad140 RSI: 00007fdf8c9ad270 RDI: 000000000000000b [ 735.171549][ C0] RBP: 00007fdf8bc11e41 R08: 0000000000000000 R09: 0000000000000000 [ 735.171559][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 735.171569][ C0] R13: 00007fdf8bdd6218 R14: 00007fdf8bdd6180 R15: 00007ffdcff17628 [ 735.171588][ C0]