last executing test programs: 9m12.229113474s ago: executing program 4 (id=510): r0 = socket$nl_route(0x10, 0x3, 0x0) semctl$IPC_INFO(0x0, 0x1, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000018575a9f9e5ff9a4850000000a0080418a6ba00800000040"], 0x1c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth1_macvtap\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f00000003c0)={0x0, 0x6, 0x0, {0x9, @pix_mp={0x0, 0x0, 0x41415270, 0x0, 0x8, [{0x0, 0x10}, {0x8}, {0x0, 0xffffffff}, {0x8, 0x3}, {}, {0x0, 0x5}, {0x0, 0x7}], 0x7, 0x0, 0x3}}, 0xfffffffc}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@empty}) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$char_usb(0xc, 0xb4, 0x8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={0x0, &(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000580)={0x601, 0x0, 0x0, &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'SET\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000340)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="300000001c00010029bd7000ffdbdf2507000000", @ANYRES16=r2, @ANYBLOB="90007f0a0a0002000180c20000030000060005"], 0x30}, 0x1, 0x0, 0x0, 0x811}, 0x40004) r6 = openat$mixer(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r6, 0x80044dff, &(0x7f0000000080)) 9m11.49993594s ago: executing program 4 (id=512): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x1, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000f80)={0x0, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000280)={0x40, 0x0, 0x6, "15896fbf6f4f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m7.527837157s ago: executing program 4 (id=520): ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x2000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9m6.607408627s ago: executing program 4 (id=523): userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x2, 0x2b418842, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x3, 0x0, 0xee00, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x8, 0x7, 0x6, 0x7, 0x9, 0x56, 0x5, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_io_uring_setup(0x832, &(0x7f00000001c0)={0x0, 0x8, 0x800, 0x3}, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000380), 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r2, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) 9m4.907972866s ago: executing program 4 (id=530): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, &(0x7f0000000000)=[0x8, 0x8, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth1_virt_wifi\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r7, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a00)={r8, r7, 0x25, 0x8, @val=@netkit={@void, @value=r8}}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 9m2.583289823s ago: executing program 4 (id=533): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x822b01) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) 8m46.82095074s ago: executing program 32 (id=533): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x822b01) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) 7m13.71017032s ago: executing program 0 (id=865): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) 7m13.130474464s ago: executing program 0 (id=867): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 7m12.573245295s ago: executing program 0 (id=871): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/4085, 0xff5}, {&(0x7f0000003700)=""/4074, 0xfea}], 0x2}, 0x20) 7m11.976786837s ago: executing program 0 (id=872): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001640), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000001680)={0x10, 0x400, {0x57, 0x81, 0x7, {0xf}, {0x0, 0x1}, @cond=[{0xffff, 0x10, 0x5, 0x7, 0x8, 0x6}, {0xc6de, 0x5, 0xd, 0xff00, 0x6, 0x8}]}, {0x56, 0x1e, 0x1, {0x4, 0x800}, {0x8, 0x479}, @const={0x2, {0x1, 0x6, 0x1ff, 0x1}}}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x23, 0x0, &(0x7f0000001040)) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200003, 0x40200003, 0x0, 0x6, 0x7}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0xd00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x3eeac2c78ddd72ed}) r7 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x830200) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file2\x00', 0x8, &(0x7f0000000000)=ANY=[], 0x1, 0x1d1, &(0x7f0000000100)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x88000, 0x80) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000200)=0xf0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000000)=0x2) syz_clone(0xc0080, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 7m9.271027688s ago: executing program 0 (id=880): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) 7m8.261315772s ago: executing program 0 (id=883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open(&(0x7f0000000080)='.\x00', 0x0, 0x1b5) sendmmsg$unix(r3, &(0x7f0000001c00)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000300)=[{&(0x7f00000003c0)="5c33da419250c5812a4812be7da49bedb467a13d05452a8bb51a6042e4702afb5dee147f76825b13450a4da605446d8702df2e460ee404074ed7ceadff4599f886b4dbe68a13356f4e22fad620e1c8fed28a4523c2ed48442fea1064803e27b95f494d98c4e9f0151f9d6a5c1f7996f09f514092e08618e4dfd88f63f3edec4e98c148c7bfa43e6a4eaa334f1dd4199f053383d9e1f834b5176e0e96f6e0a22e11f6d8b32a99381e63e5e9f36618253a70f60f4d5ac8fba6fbbb26e3c9978940d213cd55a5da0fa02e48901aa62c725e67407a", 0xd3}, {&(0x7f0000000500)="b2e0231eef047da1887cd2b7aa8ff8b2164607759093d52050227af8a2907cb3fc7543f36bf29fa14058b40dc5558d8bf882a42dc5e2fbdbb2b116358414ddfb666d9d85aeffb6878d92f3f798cde099ce7f16867285b5b88e8fe0693562534c15cca581fb4534fd1b9cf9ff98d86881f78b7954d41370c806add070c9ae9291df6f7117482523d024e9e1d9a34deaeb", 0x90}, {&(0x7f00000002c0)="2621c65fe92ca70b63970a01c5693c2b66499f897a544d8a4c9e2f88b0328ad48c98e87ef7cc4e90651ff63b", 0x2c}], 0x3, &(0x7f0000000700)=[@rights={{0x20, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r3, r3, r0, r2]}}], 0xc0}}, {{&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000840)="1d4e6ef326d920968eab7decdba43c6b06146b50e51e5826a66acd782ba72b3ac4bc2144c79aabe60877a7680a23d75dda5bf0136b00983993d85e743520ad039d5bf995f838107510f7a59e088acaa0a7f720bbf09f43bec325a99309a5f77d6e675ca40f685eecd9461dd16baf3fc9d9ae55536e94182371ff21a1c1d1caff51e49555", 0x84}, {&(0x7f0000000900)="2d5f7ea9eaa2209587380a79ff6a3206e86321f8a7685bbc5cb4e048e5840a735d5401a62336c7c414e5b6d926322ca06fb3aeab9dfcf117adef67ebcbaa975e9303c76715b1897232eca8a2abe8390edecd67a2a5aafa363cf06053de1f08ec5b68e54b1396eb302b8c2a0620aa17c3e93ea8a95d8bab4ea66359d8fb93f2dc61e306d5e60d7be02ca0d6930826fb833cf5b00fcf4ddf84cf2c4a64e608a92380", 0xa1}, {&(0x7f00000009c0)="8b0792ab71da601c1fe815433053cfcb70be01014850febf95517f470b834df62765e525a1575a599c27551282dc5efda79437d94ad9eee6830204510622a293bbf772b86380d6f4d46800f06f7cd6ad15f0ffc863d89d0ab03fe36da26b816d2b2be544337d6560ab03427c35be0a306729252aa7080f68fbde9209432c43a83f828b384a58df608d45a6b6c1ecd8b4f72148a17fc9d1e718a970639ac4074c152b7f7bd041ad983ec51749e2ee0eacb6387f8cb784a638301311b2443afac03adaba", 0xc3}, {&(0x7f0000001000)}], 0x4, &(0x7f0000001140)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x24, 0x1, 0x1, [r0, r4, r4, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r3, 0xffffffffffffffff, r2]}}], 0xb0, 0x4000080}}, {{&(0x7f0000001200)=@file={0x0, './file2\x00'}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001280)="b739c85ca2bec9b175b0d71c017bc9f6a24cd9e8e28f76fb59e314b78d2d63a938f2f3c5d29f28ca589b2151cc68d6d7b1e57909a6b1b4836ff6a39390080a", 0x3f}, {&(0x7f00000012c0)}, {&(0x7f0000001300)="2d1e2555acc293d599e6a80ee6f67eccb5d70219786745a96197f94ed6ce06c4c2fea5a2621afa156633a22896971780694885c953f4f6af18c4b0ec25f3b84158663b52ac8004d74acffff0b58e53eb747fb655cd3cb18c6aa80083519d3994c3b6980141e06416b5ada1eb7bc8829a8902042e5e80d850494af9", 0x7b}, {&(0x7f0000001440)="8734f8c86bf31fc48a6fda9046a886ad70c81652f4eafd38cddcb391e77a0de1690b1983ce747bfa84e0503d2999b7d09fcf29c32a4776c5db58ab347c22510e9486dd3cc103d1b1433ac8b294feb83a10ada17e5f03f5f8e3a04f71f05c88717a3f3de81322aff59694eb2a0a3d70cb3e9fc085accd5dec28736ffc91ce249ddc8a7da589eb70e7121066b5", 0x8c}], 0x4, &(0x7f0000001500)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x4008000}}, {{&(0x7f0000001540)=@file={0x0, './file2/file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f00000015c0)="b6e387ccbcd235c77382", 0xa}, {&(0x7f0000001600)="e4c2101bc9df96e52b6f315f95980dbd7c6d171fa09b165e3902dd54be3afce6ac12f3249f1075e87ca64751823acf4b86c7b996f6dd00a728dbad2e144818494b89435faed1cd54bd4e81bb05b4c288d30887db0ec786591281b5fd7df7328ba0fbc3488fdd91bebadf62f94df53719bec45e2ada3d4b9ad87ef8dc56d226", 0x7f}, {&(0x7f0000001680)="03e32a23e58df4c81ef889a6f789bc70eea59fa1bc03f199f2b46a058b67896a9a96c4ed3702560e13aa9de3ff524e2788e499648abbf3f0d01afd2c9862f7fe57e0f934a66c59627b1282b4caae803c551ce0c84daa5daddc0db9722d70661a1382c9685ecbf2163ad314389e8395a58639c6fc30c0589dbd759225e339cc6d039abeed31eb63324642a0a138952ca756e5b5af88a5cb21eefd146c9b2736e3b2c18138", 0xa4}, {&(0x7f0000001740)="0709a216bddf9f49c60c088ad2b29e7e14bec8bbcbbf989f7abe68afbb8eedcd1b94ee867b836af6cc8e1aa97ed0be0a4ba16c30", 0x34}, {&(0x7f0000001780)="5510ba1446b7c709abafbb4ac1348f33cc8060d9fe3d7f7d", 0x18}], 0x5, &(0x7f0000001840)=[@rights={{0x28, 0x1, 0x1, [r4, r3, r2, r0, r0, 0xffffffffffffffff]}}], 0x28, 0x4014}}, {{&(0x7f0000001880)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001900)="e2d4600e47c81403e190cde1ad0d018557f83aee9b34a94292a9acc9a425937228b40013cea4791ff56b51b9a932cf271c4ba186501f5cb1a76ef4739c3bbd55da939ae56be081cdfaa8c38efee4f67a48f238aecea9b37f1401740dcc0ad3f6315cd9709ccd460b553cbcc15c98f74bea302aefa1832b80b7751337b8da357d197540b763d4b62433629945d7534cf52e2885a18909aa30a2f07b786022948e1602c5fa682c06e858f94063fc2e", 0xae}, {&(0x7f00000019c0)="053d43e7856d2f5aaf5c15010b89047a84bd1b3b46bfa5ffea7425fb2381d4e437529c802d31d5948c74cc5f5e99921a75ec6789a3a7", 0x36}], 0x2, 0x0, 0x0, 0x20004000}}, {{&(0x7f0000001a40)=@file={0x1, './file2/file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000001ac0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x811}}], 0x6, 0x0) 7m5.467619924s ago: executing program 33 (id=883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open(&(0x7f0000000080)='.\x00', 0x0, 0x1b5) sendmmsg$unix(r3, &(0x7f0000001c00)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000300)=[{&(0x7f00000003c0)="5c33da419250c5812a4812be7da49bedb467a13d05452a8bb51a6042e4702afb5dee147f76825b13450a4da605446d8702df2e460ee404074ed7ceadff4599f886b4dbe68a13356f4e22fad620e1c8fed28a4523c2ed48442fea1064803e27b95f494d98c4e9f0151f9d6a5c1f7996f09f514092e08618e4dfd88f63f3edec4e98c148c7bfa43e6a4eaa334f1dd4199f053383d9e1f834b5176e0e96f6e0a22e11f6d8b32a99381e63e5e9f36618253a70f60f4d5ac8fba6fbbb26e3c9978940d213cd55a5da0fa02e48901aa62c725e67407a", 0xd3}, {&(0x7f0000000500)="b2e0231eef047da1887cd2b7aa8ff8b2164607759093d52050227af8a2907cb3fc7543f36bf29fa14058b40dc5558d8bf882a42dc5e2fbdbb2b116358414ddfb666d9d85aeffb6878d92f3f798cde099ce7f16867285b5b88e8fe0693562534c15cca581fb4534fd1b9cf9ff98d86881f78b7954d41370c806add070c9ae9291df6f7117482523d024e9e1d9a34deaeb", 0x90}, {&(0x7f00000002c0)="2621c65fe92ca70b63970a01c5693c2b66499f897a544d8a4c9e2f88b0328ad48c98e87ef7cc4e90651ff63b", 0x2c}], 0x3, &(0x7f0000000700)=[@rights={{0x20, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r3, r3, r0, r2]}}], 0xc0}}, {{&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000840)="1d4e6ef326d920968eab7decdba43c6b06146b50e51e5826a66acd782ba72b3ac4bc2144c79aabe60877a7680a23d75dda5bf0136b00983993d85e743520ad039d5bf995f838107510f7a59e088acaa0a7f720bbf09f43bec325a99309a5f77d6e675ca40f685eecd9461dd16baf3fc9d9ae55536e94182371ff21a1c1d1caff51e49555", 0x84}, {&(0x7f0000000900)="2d5f7ea9eaa2209587380a79ff6a3206e86321f8a7685bbc5cb4e048e5840a735d5401a62336c7c414e5b6d926322ca06fb3aeab9dfcf117adef67ebcbaa975e9303c76715b1897232eca8a2abe8390edecd67a2a5aafa363cf06053de1f08ec5b68e54b1396eb302b8c2a0620aa17c3e93ea8a95d8bab4ea66359d8fb93f2dc61e306d5e60d7be02ca0d6930826fb833cf5b00fcf4ddf84cf2c4a64e608a92380", 0xa1}, {&(0x7f00000009c0)="8b0792ab71da601c1fe815433053cfcb70be01014850febf95517f470b834df62765e525a1575a599c27551282dc5efda79437d94ad9eee6830204510622a293bbf772b86380d6f4d46800f06f7cd6ad15f0ffc863d89d0ab03fe36da26b816d2b2be544337d6560ab03427c35be0a306729252aa7080f68fbde9209432c43a83f828b384a58df608d45a6b6c1ecd8b4f72148a17fc9d1e718a970639ac4074c152b7f7bd041ad983ec51749e2ee0eacb6387f8cb784a638301311b2443afac03adaba", 0xc3}, {&(0x7f0000001000)}], 0x4, &(0x7f0000001140)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x24, 0x1, 0x1, [r0, r4, r4, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r3, 0xffffffffffffffff, r2]}}], 0xb0, 0x4000080}}, {{&(0x7f0000001200)=@file={0x0, './file2\x00'}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001280)="b739c85ca2bec9b175b0d71c017bc9f6a24cd9e8e28f76fb59e314b78d2d63a938f2f3c5d29f28ca589b2151cc68d6d7b1e57909a6b1b4836ff6a39390080a", 0x3f}, {&(0x7f00000012c0)}, {&(0x7f0000001300)="2d1e2555acc293d599e6a80ee6f67eccb5d70219786745a96197f94ed6ce06c4c2fea5a2621afa156633a22896971780694885c953f4f6af18c4b0ec25f3b84158663b52ac8004d74acffff0b58e53eb747fb655cd3cb18c6aa80083519d3994c3b6980141e06416b5ada1eb7bc8829a8902042e5e80d850494af9", 0x7b}, {&(0x7f0000001440)="8734f8c86bf31fc48a6fda9046a886ad70c81652f4eafd38cddcb391e77a0de1690b1983ce747bfa84e0503d2999b7d09fcf29c32a4776c5db58ab347c22510e9486dd3cc103d1b1433ac8b294feb83a10ada17e5f03f5f8e3a04f71f05c88717a3f3de81322aff59694eb2a0a3d70cb3e9fc085accd5dec28736ffc91ce249ddc8a7da589eb70e7121066b5", 0x8c}], 0x4, &(0x7f0000001500)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x4008000}}, {{&(0x7f0000001540)=@file={0x0, './file2/file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f00000015c0)="b6e387ccbcd235c77382", 0xa}, {&(0x7f0000001600)="e4c2101bc9df96e52b6f315f95980dbd7c6d171fa09b165e3902dd54be3afce6ac12f3249f1075e87ca64751823acf4b86c7b996f6dd00a728dbad2e144818494b89435faed1cd54bd4e81bb05b4c288d30887db0ec786591281b5fd7df7328ba0fbc3488fdd91bebadf62f94df53719bec45e2ada3d4b9ad87ef8dc56d226", 0x7f}, {&(0x7f0000001680)="03e32a23e58df4c81ef889a6f789bc70eea59fa1bc03f199f2b46a058b67896a9a96c4ed3702560e13aa9de3ff524e2788e499648abbf3f0d01afd2c9862f7fe57e0f934a66c59627b1282b4caae803c551ce0c84daa5daddc0db9722d70661a1382c9685ecbf2163ad314389e8395a58639c6fc30c0589dbd759225e339cc6d039abeed31eb63324642a0a138952ca756e5b5af88a5cb21eefd146c9b2736e3b2c18138", 0xa4}, {&(0x7f0000001740)="0709a216bddf9f49c60c088ad2b29e7e14bec8bbcbbf989f7abe68afbb8eedcd1b94ee867b836af6cc8e1aa97ed0be0a4ba16c30", 0x34}, {&(0x7f0000001780)="5510ba1446b7c709abafbb4ac1348f33cc8060d9fe3d7f7d", 0x18}], 0x5, &(0x7f0000001840)=[@rights={{0x28, 0x1, 0x1, [r4, r3, r2, r0, r0, 0xffffffffffffffff]}}], 0x28, 0x4014}}, {{&(0x7f0000001880)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001900)="e2d4600e47c81403e190cde1ad0d018557f83aee9b34a94292a9acc9a425937228b40013cea4791ff56b51b9a932cf271c4ba186501f5cb1a76ef4739c3bbd55da939ae56be081cdfaa8c38efee4f67a48f238aecea9b37f1401740dcc0ad3f6315cd9709ccd460b553cbcc15c98f74bea302aefa1832b80b7751337b8da357d197540b763d4b62433629945d7534cf52e2885a18909aa30a2f07b786022948e1602c5fa682c06e858f94063fc2e", 0xae}, {&(0x7f00000019c0)="053d43e7856d2f5aaf5c15010b89047a84bd1b3b46bfa5ffea7425fb2381d4e437529c802d31d5948c74cc5f5e99921a75ec6789a3a7", 0x36}], 0x2, 0x0, 0x0, 0x20004000}}, {{&(0x7f0000001a40)=@file={0x1, './file2/file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000001ac0)="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", 0xfc}], 0x1, 0x0, 0x0, 0x811}}], 0x6, 0x0) 6m37.185427487s ago: executing program 5 (id=988): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001640), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000001680)={0x10, 0x400, {0x57, 0x81, 0x7, {0xf}, {0x0, 0x1}, @cond=[{0xffff, 0x10, 0x5, 0x7, 0x8, 0x6}, {0xc6de, 0x5, 0xd, 0xff00, 0x6, 0x8}]}, {0x56, 0x1e, 0x1, {0x4, 0x800}, {0x8, 0x479}, @const={0x2, {0x1, 0x6, 0x1ff, 0x1}}}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x23, 0x0, &(0x7f0000001040)) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200003, 0x40200003, 0x0, 0x6, 0x7}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0xd00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x3eeac2c78ddd72ed}) r6 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x830200) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file2\x00', 0x8, &(0x7f0000000000)=ANY=[], 0x1, 0x1d1, &(0x7f0000000100)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x88000, 0x80) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000200)=0xf0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000000)=0x2) syz_clone(0xc0080, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 6m35.19847096s ago: executing program 5 (id=997): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x9, @mcast1, 0x3}, 0x80, 0x0}, 0x8000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x1d, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac1414", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000002300)={0x0, 0x0, 0x0}, 0x20000020) 6m31.776594413s ago: executing program 5 (id=1000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x410c2) 6m30.817523814s ago: executing program 5 (id=1005): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x80000000, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x300d}) socket$can_bcm(0x1d, 0x2, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007010000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1008002, &(0x7f00000003c0), 0xfd, 0x5f9, &(0x7f0000000d80)="$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") chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r6, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="16000000246837f7", 0x8}], 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x2) r8 = fspick(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r11 = dup3(r10, r9, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000d00)={@flat=@handle={0x73682a85, 0x1001, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/50, 0x39, 0x0, 0x33}, @flat=@handle={0x73682a85, 0x1000, 0x3}}, &(0x7f0000000200)={0x0, 0xffc2, 0x40}}}], 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f0000000480)='+\\]\xf9.\x97\x00', &(0x7f00000004c0)='./file0\x00', r11) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) 6m29.296093003s ago: executing program 5 (id=1016): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000540)=0x550, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e1f, 0x80000004, @loopback, 0x55}, 0x1c) recvmsg(r4, &(0x7f0000000740)={0x0, 0x700df6df844ba292, 0x0, 0x0, 0xffffffffffffffff, 0x5a}, 0x2041) shutdown(r3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0xd200c1c1ad4a964d, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 6m28.374115806s ago: executing program 5 (id=1019): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18410, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 6m26.942608778s ago: executing program 34 (id=1019): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18410, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 1m47.101858449s ago: executing program 2 (id=1903): socket$inet(0x2, 0x3, 0xd) fanotify_init(0x200, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r1], 0x38}}, 0x10) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xac, 0x9b, 0xcc, 0x20, 0x18d1, 0x1eaf, 0x5abb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x80, 0xb, [{{0x9, 0x4, 0xbb, 0x6, 0x0, 0x3a, 0xe5, 0x4}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x3}, 0x10000000000001) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, 0x0, 0x0) listen(r6, 0xd) syz_usb_control_io(r3, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000080)) 1m44.038352108s ago: executing program 2 (id=1911): syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x840) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xa2902) fcntl$setstatus(r6, 0x4, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_wolinfo={0x5, 0x1, 0xdf4, "d3e2ae09a105"}}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000180)={0xa32, 0x8002, 0x5, 0x8}, &(0x7f00000001c0)=0x10) 1m43.302850986s ago: executing program 2 (id=1916): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x18, &(0x7f0000000200)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0}) 1m41.82615132s ago: executing program 2 (id=1920): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x2, 0x10001, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323", 0xad) fcntl$lock(r0, 0x24, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x1}) 1m40.224015239s ago: executing program 2 (id=1923): socket$inet(0x2, 0x3, 0xd) fanotify_init(0x200, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r1], 0x38}}, 0x10) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xac, 0x9b, 0xcc, 0x20, 0x18d1, 0x1eaf, 0x5abb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x80, 0xb, [{{0x9, 0x4, 0xbb, 0x6, 0x0, 0x3a, 0xe5, 0x4}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x3}, 0x10000000000001) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, 0x0, 0x0) listen(r6, 0xd) syz_usb_control_io(r3, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000080)) 1m38.336122512s ago: executing program 2 (id=1930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1m23.047440569s ago: executing program 35 (id=1930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 23.459522129s ago: executing program 1 (id=2103): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 21.228748218s ago: executing program 6 (id=2104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x20004804) 19.818870513s ago: executing program 8 (id=2109): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="05a81af19772b1906cbb12fac1c7934c8f3bea4eef594b68ec65dfce9254af4d24aed6ab1a7725e07479f22f8bd6b7cca0d7e58198f2a1a0f4a99c741f3c3ecdfd6f0ad2f1a911885e03e52ad908fde58bfe368fda27faed87edb890dce5ddb255bd88c2", @ANYRES16=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x468d5}, 0x4044015) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f0000000380)=""/135, 0x87}], 0x2}, 0x2}], 0x1, 0x40000060, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0xfffff990, 0x8, 0x30001, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0xe}, 0x50) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) 18.613204838s ago: executing program 9 (id=2111): r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, 0x0, 0x0, 0x24064044) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) fsync(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x400c84, &(0x7f0000000000)={[{@sysvgroups}]}, 0x1, 0x796, &(0x7f0000000800)="$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") creat(&(0x7f0000000040)='./file0\x00', 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38) creat(&(0x7f00000002c0)='./file0\x00', 0x49) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000500)={{0x0, 0x80000000}, 0x100, './file0\x00'}) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x8}) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000040)={'pcl726\x00', [0x8, 0x401, 0x1, 0x74818ec, 0x4, 0x1, 0x5, 0x9, 0x80000000, 0x6, 0x2, 0xfffffffe, 0x4, 0x1ff, 0x8, 0x7ff, 0x1, 0x2, 0x9, 0xffffff7f, 0x6, 0x2, 0xd, 0x6, 0x10001, 0x6, 0x7, 0xffff8001, 0xd, 0x1, 0x6, 0xff]}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x3b) syslog(0x2, &(0x7f0000000180)=""/140, 0x8c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) 18.418041157s ago: executing program 7 (id=2112): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="ff", 0x1}], 0x1) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 16.472707168s ago: executing program 9 (id=2114): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c) rmdir(&(0x7f0000000080)='./file0\x00') ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x81) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x2) sendmsg$inet(r3, 0x0, 0x300060c1) close(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 15.634303899s ago: executing program 1 (id=2115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x9}, 0x8) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x70) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000006, 0x2], [0x4, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x328) 15.276392573s ago: executing program 8 (id=2116): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 13.368344607s ago: executing program 8 (id=2117): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="ff", 0x1}], 0x1) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 12.845867952s ago: executing program 9 (id=2118): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)=0x600080) 12.353385672s ago: executing program 6 (id=2119): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f00000004c0)={0x20, 0xa, 0x2, "df09"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001180)={0x20, 0x0, 0x2, 'eH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 11.953751691s ago: executing program 9 (id=2120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000a380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x2a10, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x27c8, 0x3, 0x0, 0x1, [{0x10f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x10f0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x73, 0x1, "a3cffd95bd2a39897ad665409dacda2545f7ec34aefde5677d58f9e4e2b673a73c89421333f9536075fd1e8d1edf0f394baccb3a9745c65d1d1c99e17ae9fd9017a7d3ef2aa0ab0c265f99b3d0ab38bb86bd28a2084d74c243a788aa021aa38a4ae24e9d6ad33d97813152a99c713c"}, @NFTA_DATA_VALUE={0xa, 0x1, "52e6b79a3602"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "37f603ced0fecf93ff38c26d1bcc243b9abceb023fa27e4dd32ea0fee84b640d7367293290b99c0685343191072767e2843a001510574eb8bf1fd62cb0290b887dfc32d2ef16e4e6b0e5bbf6e41fb5986d5f6bf1e3b55b43a29e9f965f99a60346bf1feadc5215eca73528e81c1717f0855a88ec31e45ca862c002bd892a2a9064a8c8567aadf2d84e0691f97d228826b34b1efd154e79f4674b5a15c3e8496e8f4387e604af736822925623387e26edf22a1da903c2b308aaf98bc36bc5c8d8046b108f8f8b4c7ec124e384158873667135a55c8a3687afd593a04b699af12a4be1c99ddc5a758e7ca63436704e5eb26c605b9ac57e5cfb3a2af2ed823894460e28576d61350a0ffe35596a95c5c3952cd224d4ee0a141b6777f2b2b20f515d9135251e77456b7e0597a011722fbf4091bfdb566c8525e41f4d264b2361ca9e1a0e9930e8c208093aa7d5b9b9b6ea648d45d8e77520ad32d29c2147618efab2834e7835b40f96e856cd148fd66c29972bf0d83c5bb19fe8819dccc9915e3cc6e60dd767f2f71e12e30082753397b22f6e7565d437be7bde0d5115d19cbc9ce5ce723943f291377cbc0b4bc889ab28f957415113cc76ff4d2b9d2c12d6edcac3a8b8dc1adecbe8c50a21c2d1ab52356ba70101ceb9c915c65527648031efadb85d5d69535a6f9d0507cf788301dd412db48ef5fd9730bbea8b9a3453158088aa5f379af3df8bdb7917d40b6cd77fc9aceee118810e0d42316f98e92a15cd80495354752c2262cc58c3f022f4cd559a9b3fe0d290f2b4ddedaf58413c82afb39bc61335e2a8533cc01a22b1fffea0dc76edf2cfe93fa201e3d4f15594d6306f215a9013a8e545b3ad6a95093d1485ca946f6f51b7d8335c6a16f6ccfcdb3b7a9dfe552368f5f8b8241db32ed4f0f941c101e722e7bf41b0dd31ba2c339e3e20302ca14755eb1ca52cc4c847f9f15155094439641df84ed4da1b5ba2ab6230ae6eb8762c2d66e163a68354854829edde501e31a50efe3a744a850ddf4cfcd6e2991470587b7caca163cde720e1a3b91560047c5b7fa2d463055162e53b6b4b4bd1713c74f9ad0a98dd7de2be6cd13c6e7ad57ce19db592948573a3987632a057cd18ff70a70c5a8b0355521cfeb38933f27ef9b1ff63a912a2eb643c8c8ebe80e57d087dafea67435993e48eb18ae0611ffc21adfb60044e77ea0d10333893e7ea9f445f301f4ab100192e5ceb599ac59cf47f6501b2fa611b255d47bb4d65e25cc9948ec8fd44b26201b6083f2c9a7b0b5cdaab90ed1bdcd87243fe5136bb985bd09a170baac84aea850674e6e988a2ad750488bd76984e78c8e510a988eb04d857bd6f192c8f362ba72feb78188cc8da5f90b288de05cae5434f1e17a766b4c45ef59998051c4d574a088212e4ae06510f7a45903af78aafb4e2b8bc9e3f9ee4d33ec04e10d9501f109d2b6fe69444a213c24f4170ac58c47aaaf4955a9c001733b197c0699d589fa7357543c9680cffcf19ce2a712121e12ab9d24dee60429150e84d0c6f01af1a7264e73d69d0ec3574720515dfa652cef4c837a432128ac15796158c873c7e664cf67ae8b30240d5ccb7c56d3e617b2099025971b8dae319f169ac87647f52240b47521411e701213c9c24807ddb3161bb42f38aeee036411f92bc54e32adcf7fa2343fdf21232854d9f8357adacac1fdcdb9b4a1659aafd3e88ad6e032a45b90dd223242e53807448a875474d89f94d22742cc6b49329c72f83f9a880962ae79872230f11e828b5ab80dd59d9b5fa7e11773b215004de32f357d030ace0234e78fbdca90ef348e31d375cb99ce5b46c7bb2498d9f9403fd183fefb523d352db1900f21e8239ed1f48d8c096fbdde7dead8682711aac01216f28954ad61384eec84b9b760704c1460eab67efe0d306007d579f5389b5a25d71e96bb21f7884cfb0b23409e1a08d603e3934ca1f1bc2f109e46dac880ad058d43d5fd1c8ca64d073b5010cfaeccc6212a3690f3176213e8847d4e0d392cd7e2aba4c0fe8c034c54549f47e6b50003263cc8d1d5832a2c6050b567c91dafdd1c9add0a3a15eacc54e38c6f4e4dcf69e7da38a606864456a16548e708911af4909d671738cffecfb042ab359612f9f85a1db14e6c35c6e9c2b96c45acbaa44f850c38c882124a08085855d25a9f3b154367c1546c9fb58ec3488a5659413cca0a18c518848d3105b9c662b611a686e628ecbc7cebbedb8962a37189a8437fd4c15e170c6b3483532e63099662020fe119cb4b8cf4161c239d1800839b5a6e89485cffa78c931f3179da8c686e7cd58b520c02adc5f773dff79a4478fa6e2b7c111d5f99d6877bb69277f283714950a9f71a367d0f2e9ab8e8a4603ef6c3c7d1c4a5fb0d911e09193a26f853eb1bfc741f130cf2bb53b8e288d7dee2791f61157c978591459d799eebd7ff3097ed1afc9888e1b0e041d7f46c8a7aa7fcfc8f5e807292beedfbb8851b268699f578a33ebe62d57ee4ebd60a73ef7b5a1399771be185e2ff811a05469bf6e94b66cfd2f9197d41b3934ce447d5c20d0747e53f1f0dce4ea18700fb565bf57acd3b81488144916d49e12422032cfc92ddff5432f9ee687734765e5d551084e462a83aceda9cdf23a4a7baec747aa2151e96aff52f1696ce565b065af3b34ad2a162dfe8905cce188975d7d9e6ecae636661aeaca71f40f754eafb15256006cc3cac89401ff99d26cf47b4f5668f0a9f042e316b67ac806ed3de476d873da26bc0bf42d838cc8b24f90ac17e10eeb42c20ef4531d382a5ce3eea43a0b3fdac286d0c71e565090fd4379301bc8a3d22b2b7c144e298407e75fe3d868eef2fbc9b4a56b9c2b088b71395d6501f9109987493c3225095ea5323d3fae8283a6f1337620f239cad48aa57b882ab367597516ea25906acef93f6877bd98e19392b62315b55075f16e946644537cb679ccba4dc836e5685e91ebbb8a609dff3d245c83228e0f94c9d07afa6d37a4d48200e8cca911d4c7a53d6d597a5c6f1c2e4ccd0846fbdd1c53896d7eb3ae610852e4c3da13be2af99e2b921d6ad16a6dd93ad5f54851ce894d583dbcde313c68477d8d18074702c6e016e10a981f3db1823c99890f1163e128522e80d62e9ea7b0a9f4e26071b1dcc2095bc32a18c2a02e7eb7b1c8aadc4c083df855394266e13985e422522db27ee068268a9babf1eb85ef22fa6240111fee9a276eb852cd84f77938ffb921e1e8b975673b4a4a3ef6959c801fc6fbfcf967fa8e745ef37a3dab1124e05a07170391934de4b9d55fc4a224d8682068f6403457875a767bda18275c3a61a2e47e465df997bf55230e05072c3523ed20c0195445bf42a9d81efea77c1c11255c268052e12faaf27fd8f93d426f7c83160f03593d118893af2ab39a8b6d9e7cc54fce0c306d589724bd166d113b70aeccd3b20ee84267bb7d138ba0a90303d53d94fd2833e0b004431611b950ccd4438af4ef70ad091c5514ce05f82d5eea737a10b6d391bf14e686944ee2e4571ef98d6f3ae28eeae35a8896600ef864ee17e394a7befd4d6ea3e8f4b93739f1a7ed1ac1b47e7a3a927f17fb47547598133d4657c799b6a115ac9cc9a6f8d19ff40aad4f65758128b7ccf7611f0580de432eba4f193192577263022d857d85d4aab021266d532291905deaf02867744f04e434b71fc53b3fe73e4fe4c80b2326ee060d81a94ee86ad01dba240716a0b47e601f45ca77fa78fc82585ba2a498af92321796f155dd86ab321d333f52b35859a11380defd98a589452b90be4550ae8253cd3a413ca096b2ab14da37e2285e03a693343244faa3ccc8597d51b0fc2c2691e4d15ecea22e4ee8a8179812a11d76e517519a2cdd068478c430fd51c635a5e55096643f411072c2478fe632a6bf6add23870e6675ab55b4c5f66f9ae4eead3fe56de200fbb92b9fdf513c37c552f9efefe1a1cb5f84d3b2bcc87e84eefea824a1287f19c83778434b43794fecb3ff66bb8a116ed04452cf8e978f9ebd31a7ed0a0757562ae790b4c9e4660b61a826d762a006d57aac2c3b4ed67517896fb245f553a5baeca9f83a0cd3dc424322df0fe8f63a1fb524b51a5cb1b9a496c07a7a5c18acc4066ed7effd9606b4c979099a491b2884a2c1408092e1d5642b1b78c29754b43585f21c052044b71b7fb25067d213983ad360ebd5b919e264174b4b2367ad8977033c4da5e75724cdcd0e5183b865233ffd4c21cdc0a255db811da08cf51baad73e669933a377cb88bf64b26b351fa294ad99a797805dfdf76e166d37b1d695f6a8dc67d2c85096189ee7c4ead4e39516e0acbd6eb6f10b8c04999583e4de514ed47bdae780c2c1abe2d872223557fb10d9dc1dffd899265ea60bad8dd5f66ca059b49fdb66eea58803ac498b82b1c555a3998b79a8821ca0fc09964199171f80100c2c4337962aebb09cadf89cbced5c5c01569403b2ccaee1382d8d5f4d6bbb476cf0ac7b7bb63a83daee35c9754a3e1b78d2da1d83138c8873292bc0b66f4a16321f2a71ba484ab43000ad7ab719f0756c306beae94fda416eb85ee87b6181a5a47da6fac12f831895ab6b69312483f0ffbfa50089fcbd7c6040691aaaba01c6a97f3e0000f40833dbbfb30cd318437cc8acc5c362bd1c3642b87fa5765b432b5f44bb71b73f255672bd006be31a8f9a74a5c04f19009345c579a9bc32b138442e9466864f04ada97a7facd57e0b2f5558f49e187d1387e088bec2b899973c214c9e648ebfcccc1d11e9d014e35ce14caf6964d1d5898a77b0ec2ef865b2c00ece386bcae4b9e1f2f6f885223ae27e05e3bfe90cb51a19ea58c04e201bd6b593d545a1d87d01b962e19ee91770bc3c009a3c7f430b1a746b2ac8f83c21cc7426ac2d9cbe848e7435af4b8ccbc78ce9f7426e6d00e7d2d2ba6675f501207206996da73c3fc62b93fd217ea054229a17a55abed957b465c6439210088415f62bf2c7efbc3b073dc53686fa8a84422e5cc207291220d5642024ac9e5708c1099d3598cdcc097b7d3dce87a98a923eb12fa31735fdd5531b5670a29624adf45b1ecce7198c1774e7cda19748320edf72af8465fb5508dc2a86ca4a0674c880554a96ef8b9815e305d2eb92f3f3e15b2e45d5c8e31ec28bb63ae28a489aa7aada04beb38231b468ee28713b9ac0118e7b926ccc3def5dd571bd7b8779dd647489b6fadfcb3fabcd60fdf15c7af6a61b2cb091b0d41e3bfedba8c40f6e74e0841016f0a075a36ee9941d20b4b54baa0176700db125d61eda248b7dcbf0e5a3ea489df52386a5032bd2826e675e11b2ee7cce07f001abee0c740ccb2baeddeec0dee18496073a550eeee8a031c7d97ece5412a4c4a10d404f94c6395fb1bb40f38d458fe1329bcc69201850245a190e21b17e0a6604b7b55856beab86e59206f4bf56d321bd2fbe04d734ec1c0dff56d2774c1e8c8d1a151331632de20063dcc8e0395804a4fc56fde45d628afe1248e0c3d21242b44ffad2ff3c14a312996a3d9e5aa41a8455d601b10dad9f8bb47ec23974796374d24bb5fb34edeae556f3c3c6bfc10132c43e61821b38fa344e5b6fa4de0fef7de3bdbe544085b01f32903d584efc301563dd07caf9b9ade082583c665cc559044678f7730ccd0ce3aeb05dc2853f461defbbd8bc16817650131f86694d81b40d935a1e44bcda2fb67f2d89a40fa44d91da28f0c5d7ee6a15c64eaafcdf7bc0164a466f825913682a04fb4a437abed1605f91cec3c97584ec7c83cddc8587"}, @NFTA_DATA_VALUE={0x3f, 0x1, "da7ec6195b3980274aebb1a3447ee0eb53e02a263ab5a00b64b192fb15e424ca1ac6fc2491154cfe69130e48c92253d968e9286c84a60a25a34082"}, @NFTA_DATA_VALUE={0xc, 0x1, "0a00e106d3517ef9"}]}]}, {0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x18}]}}}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x74, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x70, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff6}]}, {0x2a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x218, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xab, 0x1, "e75baff2776332c8f7fa9849d26358f6ccdbb7e5798a16d118ec87b6a1fd71a411fcdaf85c0555eec5f37dccc8858315cadb22945556bff673fe50110214c1a52c1fd37693d2eda3e41c738e14ac57dc808e97b418677b55bad7b2d4a69f8269cc513546c053704ecfbb3903b415a5037416e57ae306d5a4fb23d35f45eefb299aec41624e59670a8a390ddbb2d05979e080d9ed504003e2bbdf4c668e8b68568dd14ab9692408"}, @NFTA_DATA_VALUE={0x45, 0x1, "b4fa7694c365128ae929ab6f8b0161f5dd1832c2513211485ea02b6d034e79106008f2486643ec21f6262a4e0f6e88c0e1ddc395ad0da0cf185fde6756e7db3df7"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x5f, 0x6, 0x1, 0x0, "15f401447f32e72763e6562705f4a4130e2f0d130b09bf7d0aa99696050892bbf4a5ed8fdd9a5833f7dba1b068c00894e67b1805afc3c6acb9ee2864cb87738ba81bbd9bc874539740536949bb7d3bc5bb3664a990a9d8e3eb5e43"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa7}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}]}, {0x1334, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x13}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x28, 0x6, 0x1, 0x0, "a6ac91dfa85c5d833da0b67ad328cfb742a0e0d8bd5f3d1fbabf2ebb9f8af06a2de6b8b4"}, @NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "c58b5d49326c45"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x90, 0x1, "5bd37f66462e8cd5fa6d8b5b514bd3af1a885498a905a0ee078c1268facfb3fad7711b191bd26edd88fb434fd40e568308deb5720eed28685d0feaf252a8e3204802d5bca70701225c3324161d2e2b4a14f909cc254a8dfb02f6b819df79931def1259f65c494717634fbd1cc77bbfbf3300fa337df82bb8635dcf935e090037dc9fcdd92ab81f7db5821ee9"}]}, @NFTA_SET_ELEM_DATA={0x10c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "92d320fc70add47772480ac29110f549ac4353ed6fc2171f90e0d454cfb80f46efc26dbc6511c6f978e2039c913224005264e7d416430ca0fb734b005e408f4a3c5d41f6ed9866eaa6c2a9f41c5b7ddbb113f9a2b023e2dd3b9c4a2ea27cd6e233ee088162dc58c33bed"}]}, @NFTA_SET_ELEM_KEY_END={0xc4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x92, 0x6, 0x1, 0x0, "3ba00ada46d19d690ccbb01ff165dbbe6ab6c3d39cf317f9f1e72fbe723f1669ff3015c8ba3bf8ccd8c38e1394dadb196deec6883f38c0babf7539452f7607d0306965d5190a1c5bd6f495928cdfc43d95b37693ca1c034dfa4c53db36d07c0215d40777580c4d356247f4bac6979cfa45990d9edc54bf6ca2bb8a7c504cab400459c2b541aa5e956862a50224e3"}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x214, 0x3, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_SET_ELEM_USERDATA={0x75, 0x6, 0x1, 0x0, "2895f822e014732ebabd1b0b8b6f7c743a7316ca08bf5155e16d68ceec9817265b933a790f9e0a4325d7b2d87c99cd4fd002e78d25f2fadd65581df0c876beb9fff92cc36be85b219b57a2f28b2a1cabffff8f94176c7bd4ed66231bf3feae6e3592c7b509ac8e8a2d27a8818a5d84c12b"}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x164, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x154, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb7, 0x1, "dd89f5fb9ed180b8ee1b48cb0839f430bbcabdee20606777f008de8c3e04cde0f0d3d4c0099bb4e4f216852bedd87ff0861a71fabd70183f839104f53a19d027cdfba75eb79bc466f77773a408e2261f514d3ee92d3df86da4f1a5f52ae2e224cb0690dcccca0d635c3cf2137ef22d75666f5c82dd102bbf9848b1366b9881ed9c09eade7f27970de9c2a2fc0b990f8ba5cee1b48fee386874bbdc5578a5134400d269610fc2b29a5f51ed2675c3699dc3e24f"}, @NFTA_DATA_VALUE={0x97, 0x1, "b8e6af790a9eff7a9e5c3c66695f1454728ff6bb7262659a4b929d8257fa8b6be2fc94e916fe402bceff3b4b3734515ab8a955772f78b475c23db5ca7c1dc11d2f964572ea3e22f67c2711ac092105ead98f43d9ff0b029b5b582d2b1896e16eb94ba8ba90b38cc6ecbafb83e4a265559b94ec0894b9405669c79534a752176bdf0ea70797af0c3367187611fdab26ee7b7538"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2af0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 11.388792971s ago: executing program 1 (id=2122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x9}, 0x8) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x70) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000006, 0x2], [0x4, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x328) 11.201508868s ago: executing program 9 (id=2123): socket$inet_udplite(0x2, 0x2, 0x88) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)) open(0x0, 0x400, 0x43) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00'], 0x4}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1d) pipe2$watch_queue(0x0, 0x80) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0x71, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 10.86760904s ago: executing program 7 (id=2124): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000f80)={0x0, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x5, "15896fbf6f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.721759708s ago: executing program 3 (id=2125): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9.511990111s ago: executing program 9 (id=2126): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r2, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r3, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x2f) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) unshare(0x40000000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x200) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) 9.438327448s ago: executing program 3 (id=2127): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 8.90257749s ago: executing program 3 (id=2128): mount$fuse(0x2710, 0x0, &(0x7f00000020c0), 0x400000, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/kernel/kexec_loaded', 0x4000, 0x40) ioctl$I2C_SLAVE_FORCE(r4, 0x706, 0x6b) syz_emit_ethernet(0xbf, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@rand_addr=0x64010102, 0x9}]}, @ssrr={0x89, 0x7, 0x77, [@multicast2]}, @generic={0x7, 0x2}]}}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}, {"1d1bf92062ae1fe6945253e52d7adf02209ac0aa177fe342b778bf4978ad40006e16e0fa149cde9e4d4c0a9b482f265d51854eada9ca92e66434d3430ee5d389427c8609ab7d7c22a84da52041c01d2d3c8abd3efa4334d300"/105}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0)={0x3, 0x6988, 0xdff3, 0x3df2, 0x861}, 0x14) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r7, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r9, &(0x7f0000000080)={0x18, 0x0, r10, {0x4}}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x8c0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0x78}}, 0x0) splice(r8, 0x0, r7, 0x0, 0x18, 0x7) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r11], 0x7c}}, 0x20000810) fcntl$getown(r7, 0x9) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e6572000000400002800800024000"], 0xa8}}, 0x0) fcntl$setstatus(r5, 0x4, 0x400) syz_usb_ep_read(r6, 0xf, 0xffffffffffffffd2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000000)=0x9, 0x4) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000100)=ANY=[@ANYRESHEX=r3], 0x0) 8.696749286s ago: executing program 6 (id=2129): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 8.622021831s ago: executing program 7 (id=2130): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x14c, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x1d, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @coaddr={0x14, 0xe, @in=@broadcast}]}, 0x14c}}, 0x844) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x28}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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") open(&(0x7f0000000080)='.\x00', 0x0, 0x1b5) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) get_robust_list(0x0, &(0x7f0000000400)=0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f0000000d80)="1ae19327aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730900000000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c536689a4a62f872f9ca3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d228186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f91ffffffffd51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6ece06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a2a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0600000000000000a1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe021c773a6664b66ae04aa62c564d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000004000000000f800"}) preadv(r2, &(0x7f0000000000), 0x0, 0x800, 0x4000000) 6.774236893s ago: executing program 6 (id=2131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 6.095409006s ago: executing program 3 (id=2132): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)=0x600080) 5.838152735s ago: executing program 3 (id=2133): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000180)={'syz1\x00', {0x3, 0x9, 0x0, 0xfff7}, 0x38, [0xffff, 0x5, 0x7, 0xe9, 0x4, 0x6, 0x5, 0x10, 0x7, 0x950c, 0x1294, 0x8, 0x2, 0x5506fd78, 0x8000, 0xffffffa2, 0x7, 0x1, 0x8, 0x401, 0x8, 0x9, 0x3, 0x222, 0x1, 0xde, 0x10000, 0x7, 0x5, 0xbf7, 0x490, 0x200, 0x6, 0x4, 0xa, 0x7, 0x100, 0x9, 0x3, 0x1, 0x8, 0x5, 0x9, 0x4, 0x4, 0x4, 0xa, 0x0, 0x635dfebb, 0x0, 0xffff0001, 0xd, 0x3, 0x0, 0x7, 0x0, 0x0, 0xae, 0x4, 0xfffffff7, 0xd62, 0x3, 0x2, 0xfffffff9], [0x7, 0x7, 0x7, 0xb, 0xdd6, 0x106, 0x400, 0x7fff, 0x7, 0x52263b86, 0x0, 0x3, 0x5ce3, 0xfffffff7, 0x9, 0x3, 0x4, 0x200, 0xfffffff8, 0xb0, 0x6, 0x8, 0x20000, 0x45, 0x2, 0x0, 0x2, 0x3, 0x3, 0x9, 0x6, 0x9, 0x8, 0x9, 0x385a, 0x3ff8, 0x9, 0x1, 0x4, 0x2, 0x8, 0x4, 0x1, 0x8, 0x3, 0xfffff305, 0x6a2e, 0x2, 0xf4f4, 0x8, 0x2, 0x36, 0xb6, 0x92, 0x0, 0x1, 0xfff, 0xcd32, 0x7, 0x1cd4, 0x5a26, 0x17, 0x80000001, 0x9], [0x4, 0x8000, 0x0, 0x23, 0x0, 0x2, 0x200, 0x0, 0x4, 0x80000000, 0x1, 0x6, 0x51d, 0x9, 0x5, 0xa4, 0x6, 0x0, 0x4, 0x1, 0x2, 0x7, 0x0, 0xe000000, 0xacd, 0x4, 0x7, 0x9, 0x40, 0xc, 0x7, 0x6, 0xa, 0x2, 0x7, 0xb7, 0x2, 0x9, 0x3, 0x0, 0x4, 0x81, 0x5, 0x7, 0xfff, 0xdb91, 0xfffffffc, 0xd, 0x58cb, 0x1, 0x519eb04a, 0xf, 0xdd7, 0x4c, 0xffff, 0x6, 0x6661, 0x4, 0x401, 0x7eedff85, 0x0, 0x1, 0x1, 0xc7fc], [0x7, 0x1, 0xc, 0x1, 0x200, 0x101, 0x101, 0x4, 0x99, 0x4, 0x8001, 0x5, 0xe02c, 0x816b, 0xe, 0x9, 0x101, 0x5, 0x4, 0x200, 0x1, 0x5365, 0x5, 0xb, 0x7, 0x4, 0x5, 0xffff8001, 0x10, 0x3, 0x1, 0xd6, 0x4, 0x8, 0xfcf, 0x8, 0x8, 0x2, 0x6, 0x10001, 0x3919, 0x1d8, 0x1000, 0x1, 0x0, 0x80000000, 0xb, 0xc33, 0x4, 0x7, 0x3, 0xc2e, 0x8, 0x2, 0x8001, 0x1, 0x4, 0x4, 0x2e, 0x8, 0xff, 0x1ff, 0x6, 0x5]}, 0x45c) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000640)) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r7, 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, 0x0, 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x20000000, 0x0, 0x0, 0x0) 5.786781268s ago: executing program 1 (id=2134): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000000)="00210600710a5eeb9d04", 0xa}], 0x1, 0xee, 0x1) ioctl$FBIOBLANK(r3, 0x4611, 0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000402, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_get$uid(0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00) 4.458091826s ago: executing program 8 (id=2135): quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x2aa41) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7ffffffc00000001, 0x40a00) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x1012, 0x3, 0x0, 0x0, 0x5f1, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000512cc70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x20c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r5 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$xdp(&(0x7f000026e000/0x4000)=nil, 0x4000, 0x1000004, 0x8010, r5, 0x100000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$rfkill(0xffffff9c, &(0x7f0000000000), 0x80780, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82187201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 4.118708453s ago: executing program 7 (id=2136): bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) writev(r5, &(0x7f0000000600)=[{&(0x7f0000001840)="d2", 0x1}], 0x1) sendmmsg(r4, 0x0, 0x0, 0x10081) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10100, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRES32], 0x1, 0x443d, &(0x7f0000001780)="$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") 2.301493543s ago: executing program 7 (id=2137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x845) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b40)=ANY=[], 0x24}}, 0x2000c004) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x1e, 0x0, 0x101}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)="56bf382dab3488e617b247360c62e514ba8239398badd8acab5eced966a218d2726ad3259f90a7da79f152ad8785190e1350f227e6d02254f6cc", 0x3a}], 0x1, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x7f}}], 0x18}, 0x800) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001180)=0x4) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f000001ad80)=[{{&(0x7f0000001000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000001080)="b18e7eb58422eed2b064646f79d59e1bdd963011d92e15da63dbfa2b26936d726fd0818dfcb5649264945419883eb6c186caa2fcbd89ee3cf7a683825e00e6d53ac170b51ec4886481ec11d2635081673835d19852a3713093f2ddf0ca37df91ff5420aec82e35daedcb1f043c69fcb9ff2338cf1db6fee03a6979981e0736f2bf263b9ab0b9867f63ff65f62cd7222aab7a64cf39779a253e3a076a4bbdd8f73bfc7d2aa65a33bae78c711a343f238a94fd8d2364e5add42dedafd0706fa8e034d0ccbafe6cd6df2712dda10846e8b58b30b04b006291fbe447b34d87ba954b69bb678b", 0xe4}, {&(0x7f000001afc0)="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", 0x296}, {&(0x7f0000001280)="7bdbf45c046a33cd5f317cd6b129a04d6380782ea244d6189180", 0x1a}, {&(0x7f00000012c0)="92e2c98a2fc7a9f482427c4622c5a724aa6dc856a1c3eb54c987c759c8ce68ceee8923b6122f1951ca1004a58c3f290e94e432865fe2cf272436102cf9edef8934650c722bab15ea74cffa2c6be65ab4add9001e73fe7fe2b24dc0143cab4eca279c102c00a6eadc51a6117c55c7ace13e752da708e11ddb0dbd9cd6e9703ced03a8a88945168de165a8b9a256dfb688a2fbf07af0ccc6fd3eb39a79373a2259f7482b", 0xa3}, {&(0x7f0000001380)="caafd2a20dd62c7e7dd266f74068fcbd770693bf1bf414d3b111327e961e11c231ea2ab446196fa00b61e46caccb3a2a3bb47e324abbe08b9ab097aec94b38694e80e83bd2f2bfb15b62df30de0d3a0130f7b423ba4dc231e2ccde00c3780efbdcfddbbc713dd0ba273bee50bbc0c52c44d39bdd76362eae36c259ea9052ea9e500eb9af349b86b67d383e5d3203ebe3fcd34f37e6e3cd9f1cca17dacde8128f931a2886c80c1041a13d10eefb57dbe613a0d99fb421b1c543dacb80d466815373d9b17a3b995512fcad3fbaf3666aa80e2b52194c67da8342a636e36c8ae0beeeb54ded", 0xe4}, {&(0x7f0000001480)="8bb81af64c4185cafb54a54963154f17d1dffe9f86a11e7a6d3cb020aeac6700c7679cbd55710bc454b8c008bd0883ff54aa7748294e9307224612b498f827cb925d841ba0e6", 0x46}, {&(0x7f0000001500)="4eab8ff2a84ad5cb1c73e4ececa810aa6d39e96405f08a20faa425638be473ea7e679e8270aaeb10b952bc72f3d9148c762b8944b6a0ed010010e195d950d85fd3ecd2c5981f6b41d35b09298b91dbcbe148e87cd036b1da087b8fea22d7689b69d6e2ca347d7e5077a7df59d90df848e866071d961860a351466b653e4d604031d7f14018482ce1e43420d9792b1e85db96e355e6d6e758eaed4793d676296da83c6078d30467bde0ea366270069583fad93c57bed9a70491d78b6969cc6cafe512ec5e194b033614ed7f02be6c31e0e6c874438f803571868dd8a0a5141df950", 0xe1}, {&(0x7f0000001600)="c3e9134f918e38ce8171b2af31096719395e4bac35e9ed75d0577524fe54d0506ee1980880602dc3292b2c09c3b4544994ff2a8c54be6fd567dd75d7a8abec83dd3d2bad79f1ed50f1efc93d995109ac599c2969e21f49fcdaf0978b930aeba538cb739e13338f78b3eb12094afda019df07bf76a3b8c7b5f4c6bc167f5f7b3338b0c24c8b9f2959355a40b71b5211b5bdf42fd9b357d8bd66130e293f9c89c16a584a436f2f472edd4c493c3d0d94627ee903531dd384db993f57635977735a8b14851d1a43d7d8e5c1157a7c61eb95145abae5f51f4869665cea9257491023", 0xe0}], 0x8, &(0x7f00000018c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20, 0x4001}}, {{&(0x7f0000001900)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f000001abc0)=[{&(0x7f0000001980)="fbd81acee4df68d460268de6b75a6b6430e999bc1032ce0962b2f76e6f4cafd9a87999a3c86871c14f4011ae84108785db150bfd8c17116e96f91309421275ebdf889d56008e5e357da919e98ecf75c094d0f88f1ab76df73683b6e7f72d7c91d8dedf7d", 0x64}, {&(0x7f0000001a00)="40e0ae3f", 0x4}, {&(0x7f000001aa40)="69cbeaab896b79bbfee35298f65989209e8f46511a1ac8125d2b718fc99512fe6a7240d7a499eb5d11d3b6ffa5347335a688b764d59cde1980ce72b3217931cf5e454d68ad590eb226a6e2067f6c19fb3d5e9c46767e163a98e3830125a825fb122cec1da8030b32643511e63359f6cea7426fcf48af46d6ad1f2f1542d01124df8e9fa15c7000", 0x87}, {&(0x7f000001ab00)="d543f100932975ccec691ff808", 0xd}, {&(0x7f000001ab40)="34ad280f139469c93e842ba2784d663b6209e730f205f5764c6293e91c99ec6ef0cd8e27b3c70388d5080aba88696aa59b7502001ea7cfef9b7cdf631846a9d1b90d0efe54da77a10220f4", 0x4b}], 0x5, &(0x7f0000001780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="1c000010040000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x110, 0x4}}], 0x2, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r4, 0x3, 0x4002) read$FUSE(r7, &(0x7f0000003440)={0x2020}, 0x2020) add_key(&(0x7f00000009c0)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000580)="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", 0x390, 0xffffffffffffffff) 1.621741359s ago: executing program 6 (id=2138): socket$inet_udplite(0x2, 0x2, 0x88) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)) open(0x0, 0x400, 0x43) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00'], 0x4}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1d) pipe2$watch_queue(0x0, 0x80) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0x71, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 910.567805ms ago: executing program 7 (id=2139): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x2, 0x4}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0xac}, 0x1, 0x0, 0x0, 0x8080}, 0x4000005) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$xfs(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000380)={[{@discard}, {@pquota}, {@lazytime}]}, 0x1, 0xb953, &(0x7f000000c300)="$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") r4 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) r5 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) write$dsp(r4, &(0x7f0000000100)='n', 0x1) ftruncate(r5, 0x2007ffb) sendfile(r4, r5, 0x0, 0x1000000201005) ioctl$sock_ifreq(r1, 0x89b0, &(0x7f0000000180)={'erspan0\x00', @ifru_mtu=0x6}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r7], 0x20}}, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x48, 0x0, @fd=r6, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) 687.161525ms ago: executing program 8 (id=2140): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 429.095585ms ago: executing program 1 (id=2141): syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000080)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c007680afe8eaed0b3c589f1daf0fe389a4c0a839d3c96e249534fa8c59f66f0cc85c3f06a689df8de150e8fafa3625335e4b43e7531b74c008bda93c795f58e5e86b52a1af8fccc1c69527b2e4334c33bd8a3ace83266d463402c750b85ae0b07ec332198c13b68e9ae20cb684c8515f951156f670f39e3896fd7b3b16b737398cde6ae247e1eeb5d0a5dc27a235f1f0540ae603751adc5ebd6e760979e44a"], 0x1, 0x9e18, &(0x7f000000a040)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000180), 0x2, 0x557, &(0x7f0000000940)="$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") open(0x0, 0x62b000, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x297, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, 0x0, 0x141042, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 186.428991ms ago: executing program 3 (id=2142): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f00000004c0)={0x20, 0xa, 0x2, "df09"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001180)={0x20, 0x0, 0x2, 'eH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 39.268458ms ago: executing program 1 (id=2143): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 8.883016ms ago: executing program 8 (id=2144): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 6 (id=2145): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, 0x0) kernel console output (not intermixed with test programs): l 0, changing to 7 [ 734.407775][ T7699] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 734.419560][ T7699] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 734.428604][ T7699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.449052][T10685] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 734.761712][ T7699] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 734.789369][ T7699] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input33 [ 734.834610][ T7699] usb 7-1: USB disconnect, device number 21 [ 734.840762][ C1] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 735.454855][ T5960] libceph: connect (1)[c::]:6789 error -101 [ 735.466218][ T5960] libceph: mon0 (1)[c::]:6789 connect error [ 735.774502][T10717] ceph: No mds server is up or the cluster is laggy [ 735.784380][ T5960] libceph: connect (1)[c::]:6789 error -101 [ 735.799386][ T5960] libceph: mon0 (1)[c::]:6789 connect error [ 735.846867][T10710] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1277'. [ 736.067081][T10727] overlayfs: missing 'lowerdir' [ 736.215427][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'. [ 736.469804][ T7983] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 736.601841][T10738] netlink: 'syz.2.1286': attribute type 2 has an invalid length. [ 736.649392][ T7983] usb 7-1: Using ep0 maxpacket: 32 [ 736.657332][T10738] : entered promiscuous mode [ 736.670612][ T7983] usb 7-1: config 1 has an invalid interface number: 236 but max is 0 [ 736.680057][ T5960] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 736.698346][ T7983] usb 7-1: config 1 has no interface number 0 [ 736.720604][ T7983] usb 7-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 736.769277][ T7983] usb 7-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 736.791139][ T7983] usb 7-1: config 1 interface 236 has no altsetting 0 [ 736.830340][ T7983] usb 7-1: config 1 has an invalid interface number: 236 but max is 0 [ 736.838515][ T7983] usb 7-1: config 1 has no interface number 0 [ 737.005784][ T7983] usb 7-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 737.007003][ T5960] usb 9-1: config 1 interface 0 has no altsetting 0 [ 737.057130][ T7983] usb 7-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 737.078580][ T5960] usb 9-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 737.087764][ T5960] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.097756][ T5960] usb 9-1: Product: syz [ 737.105630][ T5960] usb 9-1: Manufacturer: syz [ 737.128258][ T5960] usb 9-1: SerialNumber: syz [ 737.458217][ T7983] usb 7-1: config 1 interface 236 has no altsetting 0 [ 737.500539][ T7983] usb 7-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 737.549255][ T7983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.583865][ T7983] usb 7-1: Product: syz [ 737.618524][ T7983] usb 7-1: Manufacturer: syz [ 737.619355][T10736] loop8: detected capacity change from 0 to 256 [ 737.657112][ T7983] usb 7-1: SerialNumber: syz [ 737.703464][T10736] exfat: Deprecated parameter 'utf8' [ 738.158409][ T7983] ti_usb_3410_5052 7-1:1.236: TI USB 5052 2 port adapter converter detected [ 738.213784][T10736] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 738.351798][ T7983] usb 7-1: USB disconnect, device number 22 [ 738.431625][T10743] tipc: Enabling of bearer rejected, failed to enable media [ 738.535518][ T5960] usblp0: Disabling reads from problematic bidirectional printer [ 738.622903][ T5960] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x03F0 pid 0x0004 [ 738.802242][ T5960] usb 9-1: USB disconnect, device number 4 [ 739.075813][ T5960] usblp0: removed [ 742.960848][T10777] netlink: 'syz.7.1294': attribute type 2 has an invalid length. [ 743.012014][T10777] : entered promiscuous mode [ 743.252764][T10791] overlayfs: missing 'lowerdir' [ 743.688551][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1300'. [ 743.697823][T10794] bridge_slave_1: left allmulticast mode [ 743.703813][T10794] bridge_slave_1: left promiscuous mode [ 743.710434][T10794] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.151442][T10794] bridge_slave_0: left allmulticast mode [ 744.157159][T10794] bridge_slave_0: left promiscuous mode [ 744.164693][T10794] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.475862][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.495373][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.033220][T10801] tipc: Enabled bearer , priority 0 [ 747.117454][T10799] tipc: Resetting bearer [ 747.176339][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'. [ 747.403335][T10804] syzkaller0: entered promiscuous mode [ 747.408864][T10804] syzkaller0: entered allmulticast mode [ 747.515948][T10797] tipc: Resetting bearer [ 748.609852][T10797] tipc: Disabling bearer [ 748.819268][ T5975] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 749.180844][ T5975] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.228724][ T5975] usb 9-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 749.258226][ T5975] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.302312][ T5975] usb 9-1: config 0 descriptor?? [ 749.641440][ T6175] libceph: connect (1)[c::]:6789 error -101 [ 749.647758][ T6175] libceph: mon0 (1)[c::]:6789 connect error [ 749.988325][ T5975] usbhid 9-1:0.0: can't add hid device: -71 [ 750.004673][ T5975] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 750.078300][ T5975] usb 9-1: USB disconnect, device number 5 [ 750.312641][ T5975] libceph: connect (1)[c::]:6789 error -101 [ 750.324025][ T5975] libceph: mon0 (1)[c::]:6789 connect error [ 750.479290][T10853] ceph: No mds server is up or the cluster is laggy [ 750.934337][ T6066] libceph: connect (1)[c::]:6789 error -101 [ 750.941151][ T6066] libceph: mon0 (1)[c::]:6789 connect error [ 751.590171][ T6066] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 751.821404][ T6066] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.847539][ T6066] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.897411][ T6066] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 751.954812][ T6066] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 751.979877][ T6066] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.034811][ T6066] usb 9-1: config 0 descriptor?? [ 752.518134][ T6066] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 753.319573][T10882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1324'. [ 754.890703][ T6054] usb 9-1: USB disconnect, device number 6 [ 756.168173][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 756.174515][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 756.365711][ T6054] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 756.479949][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 756.494509][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 756.532152][T10921] netlink: 'syz.7.1333': attribute type 2 has an invalid length. [ 756.605426][ T6054] usb 9-1: config 150 has an invalid interface number: 204 but max is 2 [ 756.616069][ T6054] usb 9-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 756.656916][ T6054] usb 9-1: config 150 has no interface number 0 [ 756.727311][ T6054] usb 9-1: config 150 interface 204 has no altsetting 0 [ 756.980491][ T6054] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 757.923717][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 757.929928][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 757.975162][T10913] ceph: No mds server is up or the cluster is laggy [ 757.984469][ T6054] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.090200][ T6054] usb 9-1: Product: syz [ 758.095488][ T6054] usb 9-1: Manufacturer: syz [ 758.688603][ T6054] usb 9-1: SerialNumber: syz [ 758.719277][ T6054] usb 9-1: can't set config #150, error -71 [ 758.779145][ T6054] usb 9-1: USB disconnect, device number 7 [ 758.799885][ T5870] Bluetooth: hci0: command 0x0406 tx timeout [ 760.269854][T10943] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1342'. [ 760.759403][ T6165] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 760.920789][ T6165] usb 7-1: device descriptor read/64, error -71 [ 762.080048][ T6165] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 762.259240][ T6165] usb 7-1: device descriptor read/64, error -71 [ 762.390417][ T6165] usb usb7-port1: attempt power cycle [ 762.759278][ T6165] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 762.814702][ T6165] usb 7-1: device descriptor read/8, error -71 [ 762.879984][T10956] loop8: detected capacity change from 0 to 32768 [ 762.908847][T10956] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1346 (10956) [ 762.991878][T10956] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 763.051793][T10956] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm [ 763.089261][ T6165] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 763.160456][ T6165] usb 7-1: device descriptor read/8, error -71 [ 763.290925][ T6165] usb usb7-port1: unable to enumerate USB device [ 763.330471][T10956] BTRFS info (device loop8): enabling ssd optimizations [ 763.357749][T10956] BTRFS info (device loop8): turning on async discard [ 763.388108][T10956] BTRFS info (device loop8): enabling free space tree [ 763.811512][ T9737] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 766.639800][ T7983] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 766.805717][ T7983] usb 9-1: unable to get BOS descriptor or descriptor too short [ 766.824353][ T7983] usb 9-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 766.859270][ T7983] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 766.893663][ T7983] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 24929, setting to 1024 [ 766.964940][ T7983] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 767.043431][ T7983] usb 9-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 767.073894][ T7983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.091331][ T7983] usb 9-1: Product: syz [ 767.095494][ T7983] usb 9-1: Manufacturer: syz [ 767.114856][ T7983] usb 9-1: SerialNumber: syz [ 767.129513][ T7983] usb 9-1: config 0 descriptor?? [ 767.146006][T11028] netlink: 'syz.2.1361': attribute type 1 has an invalid length. [ 767.160968][T11015] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 767.188309][T11015] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 767.213096][ C0] usb 9-1: NFC: Urb failure (status -71) [ 767.219117][ C0] usb 9-1: NFC: Urb failure (status -71) [ 767.229387][ T7983] usb 9-1: NFC: Unable to get FW version [ 767.253012][ T7983] pn533_usb 9-1:0.0: probe with driver pn533_usb failed with error -71 [ 767.350843][T11028] bond2: entered promiscuous mode [ 767.356334][T11028] 8021q: adding VLAN 0 to HW filter on device bond2 [ 767.365588][T11020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1358'. [ 767.482207][ T6231] usb 9-1: USB disconnect, device number 8 [ 768.700557][T11043] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.1366'. [ 769.519249][ T6231] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 769.883072][ T6231] usb 9-1: Using ep0 maxpacket: 16 [ 769.910710][ T6231] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.939357][ T6231] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 770.092611][ T6231] usb 9-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 770.104754][ T6231] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.174653][ T6231] usb 9-1: Product: syz [ 770.209230][ T6231] usb 9-1: Manufacturer: syz [ 770.229540][ T6231] usb 9-1: SerialNumber: syz [ 770.252901][ T6231] usb 9-1: config 0 descriptor?? [ 772.374472][T11071] fuse: Bad value for 'fd' [ 772.814441][T11069] netlink: 'syz.3.1374': attribute type 1 has an invalid length. [ 772.885273][T11069] bond2: entered promiscuous mode [ 772.890713][T11069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 773.437601][T11083] loop6: detected capacity change from 0 to 4096 [ 773.557244][ T6231] usb 9-1: USB disconnect, device number 9 [ 773.966680][T11093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1381'. [ 777.183993][T11120] trusted_key: encrypted_key: insufficient parameters specified [ 777.213742][T11120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1373'. [ 778.799312][ T7983] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 778.979267][ T7983] usb 9-1: Using ep0 maxpacket: 16 [ 778.986564][ T7983] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.035214][ T7983] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 779.087502][ T7983] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 779.137444][ T7983] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 779.250187][ T7983] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 779.269847][ T7983] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 779.278993][ T7983] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 779.288137][ T7983] usb 9-1: Manufacturer: syz [ 779.389781][ T7983] usb 9-1: config 0 descriptor?? [ 780.049548][ T6054] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 780.061871][ T7983] rc_core: IR keymap rc-hauppauge not found [ 780.087403][ T7983] Registered IR keymap rc-empty [ 780.108187][ T7983] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 780.140065][ T7983] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 780.210851][ T7983] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 780.249597][ T6054] usb 7-1: Using ep0 maxpacket: 16 [ 780.256844][ T6054] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.268938][ T7983] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input35 [ 780.294703][ T6054] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 780.312578][ T6054] usb 7-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 780.329872][ T6054] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.355226][ T7983] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 780.376081][ T6054] usb 7-1: Product: syz [ 780.393035][ T6054] usb 7-1: Manufacturer: syz [ 780.401299][ T7983] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 780.416102][ T6054] usb 7-1: SerialNumber: syz [ 780.449304][ T7983] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 780.457776][ T6054] usb 7-1: config 0 descriptor?? [ 780.498138][ T7983] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 780.529459][ T7983] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 780.720933][ T7983] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 780.739310][ T7983] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 780.772246][T11145] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1400'. [ 781.919779][ T7983] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 781.939718][ T7983] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 781.970949][ T7983] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 782.034419][ T7983] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 782.192315][ T7983] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 782.227077][ T7983] usb 9-1: USB disconnect, device number 10 [ 782.613965][T11159] netlink: 'syz.8.1402': attribute type 4 has an invalid length. [ 782.656174][T11159] netlink: 'syz.8.1402': attribute type 4 has an invalid length. [ 783.251122][T11162] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1401'. [ 783.373588][ T7983] usb 7-1: USB disconnect, device number 27 [ 785.103050][T11174] overlayfs: failed to clone upperpath [ 785.149407][T11176] SET target dimension over the limit! [ 785.156030][ T31] audit: type=1326 audit(1765048669.204:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.1.1410" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbabdb8f749 code=0x0 [ 785.611370][T11184] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1413'. [ 786.624260][ T31] audit: type=1326 audit(1765048670.674:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 788.389336][ T31] audit: type=1326 audit(1765048670.674:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 788.430785][ T31] audit: type=1326 audit(1765048670.704:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 788.454120][ T31] audit: type=1326 audit(1765048670.704:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 788.477363][ T31] audit: type=1326 audit(1765048670.704:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 788.518616][ T31] audit: type=1326 audit(1765048670.704:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 788.567613][ T31] audit: type=1326 audit(1765048670.704:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 788.594275][ T31] audit: type=1326 audit(1765048670.704:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 788.739809][ T31] audit: type=1326 audit(1765048670.704:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 788.741494][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1403'. [ 790.199039][T11219] overlayfs: failed to clone upperpath [ 790.685615][T11234] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1429'. [ 794.067744][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1435'. [ 794.231813][T11256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1436'. [ 794.629371][ T5870] Bluetooth: hci2: command 0x0406 tx timeout [ 794.724880][T11268] overlayfs: failed to clone upperpath [ 794.841022][T11270] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1443'. [ 796.418643][T11239] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 796.458295][ T31] kauditd_printk_skb: 31 callbacks suppressed [ 796.458312][ T31] audit: type=1326 audit(1765048936.511:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 796.700830][ T31] audit: type=1326 audit(1765048936.651:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 796.749221][T11239] usb 7-1: Using ep0 maxpacket: 16 [ 796.764012][T11239] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.813108][ T31] audit: type=1326 audit(1765048936.651:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 796.830059][T11239] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 796.907202][T11239] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 796.914423][ T31] audit: type=1326 audit(1765048936.661:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 796.937508][T11239] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 797.159262][T11239] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 797.173770][T11239] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 797.190531][ T31] audit: type=1326 audit(1765048936.661:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 797.218260][ T31] audit: type=1326 audit(1765048936.661:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 797.246081][ T31] audit: type=1326 audit(1765048936.661:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 797.259225][T11239] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 797.299338][ T31] audit: type=1326 audit(1765048936.661:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 797.325279][ T31] audit: type=1326 audit(1765048936.671:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 797.339245][T11239] usb 7-1: Manufacturer: syz [ 797.348419][ T31] audit: type=1326 audit(1765048936.681:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11275 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 797.428777][T11239] usb 7-1: config 0 descriptor?? [ 797.796735][T11292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1450'. [ 798.083971][T11239] rc_core: IR keymap rc-hauppauge not found [ 798.090166][T11239] Registered IR keymap rc-empty [ 798.098128][T11239] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.140539][T11239] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.162336][T11239] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 798.199140][T11300] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1453'. [ 798.211387][T11239] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input36 [ 798.247917][T11239] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.291301][T11239] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.319319][T11239] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.349373][T11239] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.385714][T11239] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.429652][T11239] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.451525][T11239] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.480239][T11239] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.521465][T11239] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.606576][T11239] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 798.641270][T11239] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 798.669295][T11239] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 798.711510][T11239] usb 7-1: USB disconnect, device number 28 [ 799.081550][T11313] overlayfs: failed to clone upperpath [ 801.209654][T11325] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 802.363750][ T6054] libceph: connect (1)[c::]:6789 error -101 [ 802.376490][ T6054] libceph: mon0 (1)[c::]:6789 connect error [ 802.679827][ T6054] libceph: connect (1)[c::]:6789 error -101 [ 802.696082][ T6054] libceph: mon0 (1)[c::]:6789 connect error [ 802.867690][T11331] ceph: No mds server is up or the cluster is laggy [ 803.339537][T11341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1466'. [ 804.837682][T11358] overlayfs: failed to clone upperpath [ 805.421549][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1475'. [ 806.097902][ T6023] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 806.427500][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1480'. [ 806.462592][ T6023] usb 9-1: config 1 interface 0 has no altsetting 0 [ 806.523495][ T6023] usb 9-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 806.569802][ T6023] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.597978][ T6023] usb 9-1: Product: syz [ 806.613420][ T6023] usb 9-1: Manufacturer: syz [ 806.622288][ T6023] usb 9-1: SerialNumber: syz [ 806.875702][T11375] loop8: detected capacity change from 0 to 256 [ 806.924508][T11375] exfat: Deprecated parameter 'utf8' [ 806.993644][T11375] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 807.084294][ T6023] usblp0: Disabling reads from problematic bidirectional printer [ 807.147085][ T6023] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 253 proto 1 vid 0x03F0 pid 0x0004 [ 807.178806][ T6023] usb 9-1: USB disconnect, device number 11 [ 807.213177][ T6023] usblp0: removed [ 807.916733][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.926713][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.959282][ T6231] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 809.174396][ T6231] usb 7-1: unable to get BOS descriptor or descriptor too short [ 809.300933][ T6231] usb 7-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 809.345439][ T6231] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 809.397695][ T6231] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 24929, setting to 1024 [ 809.439329][ T6231] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 809.501732][ T6231] usb 7-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 809.520424][ T6231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.557669][ T6231] usb 7-1: Product: syz [ 809.570961][ T6231] usb 7-1: Manufacturer: syz [ 809.601108][ T6231] usb 7-1: SerialNumber: syz [ 809.625572][ T6231] usb 7-1: config 0 descriptor?? [ 809.689976][T11395] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 811.359916][ T6231] usb 7-1: can't set config #0, error -71 [ 811.387682][ T6231] usb 7-1: USB disconnect, device number 29 [ 811.591784][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1493'. [ 811.875051][T11421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1497'. [ 814.929482][T11447] trusted_key: encrypted_key: insufficient parameters specified [ 815.039258][ T6231] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 815.221569][ T6231] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.241486][ T6231] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.341134][ T6231] usb 9-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 815.462106][ T6231] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.778128][ T6231] usb 9-1: config 0 descriptor?? [ 816.885762][T11453] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1508'. [ 817.604585][T11458] loop8: detected capacity change from 0 to 512 [ 817.676285][T11458] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.831351][ T6231] hid-retrode 0003:0403:97C1.001B: unknown main item tag 0x0 [ 817.839021][ T6231] hid-retrode 0003:0403:97C1.001B: unknown main item tag 0x0 [ 817.846832][ T6231] hid-retrode 0003:0403:97C1.001B: unknown main item tag 0x0 [ 817.859911][ T6231] hid-retrode 0003:0403:97C1.001B: unknown main item tag 0x0 [ 817.867377][ T6231] hid-retrode 0003:0403:97C1.001B: unknown main item tag 0x0 [ 817.874790][ T6054] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 817.907230][ T6231] hid-retrode 0003:0403:97C1.001B: unbalanced collection at end of report description [ 818.040477][ T6054] usb 7-1: unable to get BOS descriptor or descriptor too short [ 818.066701][ T6054] usb 7-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 818.106423][ T6054] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 818.137916][ T6054] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 24929, setting to 1024 [ 818.171278][ T6231] hid-retrode 0003:0403:97C1.001B: probe with driver hid-retrode failed with error -22 [ 818.201537][ T6054] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 818.366481][ T6054] usb 7-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 818.376667][ T6054] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.399434][ T6054] usb 7-1: Product: syz [ 818.413874][ T6054] usb 7-1: Manufacturer: syz [ 818.430870][ T6054] usb 7-1: SerialNumber: syz [ 818.471911][ T6054] usb 7-1: config 0 descriptor?? [ 818.481430][T11462] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 818.525380][T11462] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 818.571817][ C0] usb 7-1: NFC: Urb failure (status -71) [ 818.586849][ C0] usb 7-1: NFC: Urb failure (status -71) [ 818.604019][ T6054] usb 7-1: NFC: Unable to get FW version [ 818.627472][ T6054] pn533_usb 7-1:0.0: probe with driver pn533_usb failed with error -71 [ 818.830831][ T6054] usb 7-1: USB disconnect, device number 30 [ 819.437714][T11476] No control pipe specified [ 821.015772][T11239] usb 9-1: USB disconnect, device number 12 [ 821.113807][ T9737] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.328038][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 821.328063][ T31] audit: type=1326 audit(1765048961.381:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.8.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 822.359750][ T31] audit: type=1326 audit(1765048961.421:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.8.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 822.569987][ T31] audit: type=1326 audit(1765048961.421:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.8.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 822.697743][T11505] Invalid ELF header magic: != ELF [ 822.876057][ T31] audit: type=1326 audit(1765048961.421:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.8.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 822.968235][ T31] audit: type=1326 audit(1765048961.421:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.8.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 823.072256][ T31] audit: type=1326 audit(1765048961.421:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.8.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 823.153595][ T31] audit: type=1326 audit(1765048961.421:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.8.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 823.254742][ T31] audit: type=1326 audit(1765048961.431:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.8.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 823.461940][ T31] audit: type=1326 audit(1765048961.431:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.8.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 823.892682][ T31] audit: type=1326 audit(1765048961.431:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.8.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 831.128040][T11555] Invalid ELF header magic: != ELF [ 836.709661][ T6054] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 837.584097][ T6054] usb 9-1: unable to get BOS descriptor or descriptor too short [ 837.601071][ T6054] usb 9-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 837.616639][ T6054] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 837.626561][ T6054] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 24929, setting to 1024 [ 837.661672][ T6054] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 837.753554][ T6054] usb 9-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 837.773218][ T6054] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.817749][ T6054] usb 9-1: Product: syz [ 837.834263][ T6054] usb 9-1: Manufacturer: syz [ 837.859226][ T6054] usb 9-1: SerialNumber: syz [ 837.896179][ T6054] usb 9-1: config 0 descriptor?? [ 837.936669][T11595] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 837.980485][T11595] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 838.050321][ C0] usb 9-1: NFC: Urb failure (status -71) [ 838.074175][ C0] usb 9-1: NFC: Urb failure (status -71) [ 838.081423][ T6054] usb 9-1: NFC: Unable to get FW version [ 838.110549][ T6054] pn533_usb 9-1:0.0: probe with driver pn533_usb failed with error -71 [ 838.179685][ T30] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 838.257072][ T6011] usb 9-1: USB disconnect, device number 13 [ 838.409816][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 838.589819][ T30] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.608865][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 838.630371][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 839.483318][ T30] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 839.499836][ T30] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 839.518114][ T30] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 839.527827][ T30] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 839.536827][ T30] usb 7-1: Manufacturer: syz [ 839.550615][ T30] usb 7-1: config 0 descriptor?? [ 841.679711][ T30] rc_core: IR keymap rc-hauppauge not found [ 841.685653][ T30] Registered IR keymap rc-empty [ 841.691435][ T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 841.709305][ T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 841.751091][ T30] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 841.829999][ T30] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input37 [ 841.877251][ T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 841.920631][ T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 841.979265][ T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 842.022560][ T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 842.082914][ T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 842.140049][ T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 842.375410][ T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 842.409532][ T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 842.450754][ T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 842.839256][ T30] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 842.871577][ T30] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 842.913285][ T30] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 842.991890][ T30] usb 7-1: USB disconnect, device number 31 [ 847.262253][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 847.262276][ T31] audit: type=1326 audit(1765048987.321:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabdb8f749 code=0x7ffc0000 [ 848.152355][ T31] audit: type=1326 audit(1765048987.351:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbabdb8f749 code=0x7ffc0000 [ 848.176985][ T31] audit: type=1326 audit(1765048987.351:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabdb8f749 code=0x7ffc0000 [ 848.323063][ T31] audit: type=1326 audit(1765048987.351:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbabdb8f749 code=0x7ffc0000 [ 848.447414][ T31] audit: type=1326 audit(1765048987.351:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabdb8f749 code=0x7ffc0000 [ 848.552284][T11671] fuse: Bad value for 'fd' [ 848.594134][ T31] audit: type=1326 audit(1765048987.351:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fbabdb8f749 code=0x7ffc0000 [ 848.681999][ T31] audit: type=1326 audit(1765048987.351:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabdb8f749 code=0x7ffc0000 [ 848.779629][ T31] audit: type=1326 audit(1765048987.351:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fbabdb8f749 code=0x7ffc0000 [ 848.889281][ T31] audit: type=1326 audit(1765048987.351:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabdb8f749 code=0x7ffc0000 [ 848.967089][ T31] audit: type=1326 audit(1765048987.351:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11664 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabdb8f749 code=0x7ffc0000 [ 849.015546][T11674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1577'. [ 849.922055][T11681] No control pipe specified [ 850.499290][ T24] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 850.826498][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 850.834060][ T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 850.842377][ T24] usb 7-1: config 0 has no interface number 0 [ 850.851332][ T24] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 851.659279][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.668123][ T24] usb 7-1: Product: syz [ 851.682745][ T24] usb 7-1: Manufacturer: syz [ 851.687592][ T24] usb 7-1: SerialNumber: syz [ 851.695841][ T24] usb 7-1: config 0 descriptor?? [ 851.717400][ T24] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 851.727820][ T24] usb 7-1: selecting invalid altsetting 1 [ 851.739192][ T24] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 851.836387][ T24] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 852.199627][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 852.209041][ T24] usb 7-1: media controller created [ 852.230016][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 852.308872][T11718] fuse: Bad value for 'fd' [ 852.450449][ T24] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 852.502044][ T24] zl10353_read_register: readreg error (reg=127, ret==-32) [ 852.529729][ T8487] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 852.530021][ T24] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 852.677787][ T24] usb 7-1: USB disconnect, device number 32 [ 852.960192][ T8487] usb 9-1: Using ep0 maxpacket: 16 [ 853.001552][ T8487] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.040687][ T8487] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 853.076716][ T8487] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 853.129535][ T8487] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 853.181646][ T8487] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 853.235247][ T8487] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 853.263604][ T8487] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 853.289770][ T8487] usb 9-1: Manufacturer: syz [ 853.320665][ T8487] usb 9-1: config 0 descriptor?? [ 853.633464][ T8487] rc_core: IR keymap rc-hauppauge not found [ 853.647036][ T8487] Registered IR keymap rc-empty [ 853.666068][ T8487] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 853.710611][ T8487] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 853.764832][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1595'. [ 853.780579][ T8487] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 853.833523][ T8487] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input38 [ 853.925836][ T8487] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 853.991758][ T8487] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 854.039648][ T8487] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 854.049271][ T6023] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 854.082146][ T8487] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 854.109396][ T8487] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 854.139342][ T8487] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 854.199560][ T8487] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 854.219224][ T6023] usb 7-1: device descriptor read/64, error -71 [ 854.258047][ T8487] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 854.289289][ T8487] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 854.359281][ T8487] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 854.402315][ T8487] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 854.439203][ T8487] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 854.489240][ T6023] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 854.498408][ T8487] usb 9-1: USB disconnect, device number 14 [ 854.649808][ T6023] usb 7-1: device descriptor read/64, error -71 [ 854.769952][ T6023] usb usb7-port1: attempt power cycle [ 855.139424][ T6023] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 855.486283][ T6023] usb 7-1: device descriptor read/8, error -71 [ 855.997493][ T6023] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 856.039927][ T6023] usb 7-1: device descriptor read/8, error -71 [ 856.151667][ T6023] usb usb7-port1: unable to enumerate USB device [ 857.277888][ T5875] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 857.614916][T11773] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1609'. [ 857.989361][ T7644] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 858.159191][ T7644] usb 7-1: Using ep0 maxpacket: 32 [ 858.422312][ T7644] usb 7-1: unable to get BOS descriptor or descriptor too short [ 858.429985][ T7644] usb 7-1: config 7 has an invalid interface number: 187 but max is 0 [ 858.430020][ T7644] usb 7-1: config 7 has no interface number 0 [ 858.430056][ T7644] usb 7-1: config 7 interface 187 has no altsetting 0 [ 858.456231][ T7644] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 858.456270][ T7644] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.456299][ T7644] usb 7-1: Product: syz [ 858.456321][ T7644] usb 7-1: Manufacturer: syz [ 858.456343][ T7644] usb 7-1: SerialNumber: syz [ 858.700739][ T7644] usb 7-1: Limiting number of CPorts to U8_MAX [ 858.852132][ T7644] usb 7-1: Not enough endpoints found in device, aborting! [ 858.959494][ T7644] usb 7-1: USB disconnect, device number 37 [ 859.370382][T11798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1618'. [ 859.826219][ T5875] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 859.910566][T11800] tipc: Enabling of bearer rejected, failed to enable media [ 860.501144][ T31] kauditd_printk_skb: 48 callbacks suppressed [ 860.501163][ T31] audit: type=1326 audit(1765049000.561:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 860.554872][ T31] audit: type=1326 audit(1765049000.591:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 860.590488][ T31] audit: type=1326 audit(1765049000.651:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 860.704390][ T31] audit: type=1326 audit(1765049000.651:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 860.821741][ T31] audit: type=1326 audit(1765049000.651:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 861.091159][ T31] audit: type=1326 audit(1765049000.651:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 861.764669][ T31] audit: type=1326 audit(1765049000.651:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 861.834783][ T31] audit: type=1326 audit(1765049000.651:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 862.046452][ T31] audit: type=1326 audit(1765049000.651:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 862.132371][ T31] audit: type=1326 audit(1765049000.651:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 863.769998][ T6023] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 863.770035][ T30] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 863.973826][ T30] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 863.979251][ T6023] usb 9-1: Using ep0 maxpacket: 16 [ 864.006132][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.010476][ T6023] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.055906][ T6023] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 864.058838][ T30] usb 7-1: Product: syz [ 864.106257][ T6023] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 864.116335][ T30] usb 7-1: Manufacturer: syz [ 864.129216][ T30] usb 7-1: SerialNumber: syz [ 864.142824][ T6023] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 864.183008][ T6023] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 864.250329][ T6023] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 864.275860][ T6023] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 864.285978][ T6023] usb 9-1: Manufacturer: syz [ 864.299957][ T6023] usb 9-1: config 0 descriptor?? [ 864.525498][T11872] tipc: Enabling of bearer rejected, failed to enable media [ 864.575625][ T30] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 864.613577][ T30] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 864.759710][ T6023] rc_core: IR keymap rc-hauppauge not found [ 864.778079][ T6023] Registered IR keymap rc-empty [ 864.798487][ T6023] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 864.829319][ T6023] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 864.860566][ T6023] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 864.885184][ T6023] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input39 [ 864.905020][ T6023] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 864.940193][ T6023] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 864.962585][ T6023] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 864.972937][T11856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1636'. [ 864.990331][ T6023] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 865.189259][ T6023] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 865.215921][ T6023] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 865.249784][ T6023] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 865.279624][ T6023] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 865.299249][ T6023] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 865.319530][ T6023] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 865.367247][ T6023] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 865.389527][ T6023] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 865.429322][ T6023] usb 9-1: USB disconnect, device number 15 [ 865.614161][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'. [ 866.933483][ T30] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 867.099742][ T30] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 867.223976][ T30] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 867.342363][ T30] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 867.570302][ T30] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 867.956981][ T30] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 868.008489][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 868.008507][ T31] audit: type=1326 audit(1765049007.991:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11906 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 868.069469][ T31] audit: type=1326 audit(1765049008.031:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11906 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 868.095019][ T31] audit: type=1326 audit(1765049008.031:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11906 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 868.117623][ T30] usb 7-1: USB disconnect, device number 38 [ 868.127374][ T31] audit: type=1326 audit(1765049008.031:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11906 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 868.159221][ T31] audit: type=1326 audit(1765049008.031:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11906 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 868.182468][ T31] audit: type=1326 audit(1765049008.031:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11906 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 868.227308][ T31] audit: type=1326 audit(1765049008.061:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11906 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 868.281171][ T31] audit: type=1326 audit(1765049008.101:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11906 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 868.323819][ T31] audit: type=1326 audit(1765049008.121:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11906 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 868.364397][ T31] audit: type=1326 audit(1765049008.151:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11906 comm="syz.3.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 869.180908][T11929] tipc: Enabling of bearer rejected, failed to enable media [ 869.355887][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.362334][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.634538][T11933] vivid-003: ================= START STATUS ================= [ 869.704064][T11933] vivid-003: FM Deviation: 75000 [ 869.727257][T11933] vivid-003: ================== END STATUS ================== [ 869.745329][T11936] loop8: detected capacity change from 0 to 16 [ 869.760040][T11936] erofs (device loop8): mounted with root inode @ nid 36. [ 869.869980][T11936] syz.8.1655: attempt to access beyond end of device [ 869.869980][T11936] loop8: rw=524288, sector=128, nr_sectors = 1 limit=16 [ 869.943255][T11936] syz.8.1655: attempt to access beyond end of device [ 869.943255][T11936] loop8: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 870.075707][T11944] trusted_key: encrypted_key: insufficient parameters specified [ 870.112832][T11944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1657'. [ 870.275951][T11936] syz.8.1655: attempt to access beyond end of device [ 870.275951][T11936] loop8: rw=0, sector=128, nr_sectors = 1 limit=16 [ 870.410717][T11936] syz.8.1655: attempt to access beyond end of device [ 870.410717][T11936] loop8: rw=0, sector=0, nr_sectors = 1024 limit=16 [ 870.429062][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1658'. [ 870.511054][T11936] erofs (device loop8): read error -5 @ 0 of nid 89 [ 871.082400][T11954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1660'. [ 872.299551][T11963] loop8: detected capacity change from 0 to 32768 [ 872.366744][T11963] JBD2: Ignoring recovery information on journal [ 872.424123][T11963] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 873.220174][ T9737] ocfs2: Unmounting device (7,8) on (node local) [ 873.722064][T11996] tipc: Enabling of bearer rejected, failed to enable media [ 873.892549][T11999] netlink: 'syz.1.1672': attribute type 2 has an invalid length. [ 873.919263][T11999] : entered promiscuous mode [ 874.317367][T12002] loop8: detected capacity change from 0 to 16 [ 874.743593][T12002] erofs (device loop8): mounted with root inode @ nid 36. [ 874.787397][T12002] syz.8.1674: attempt to access beyond end of device [ 874.787397][T12002] loop8: rw=524288, sector=128, nr_sectors = 1 limit=16 [ 875.090453][T12002] syz.8.1674: attempt to access beyond end of device [ 875.090453][T12002] loop8: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 875.123926][T12013] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1676'. [ 875.262020][T12002] syz.8.1674: attempt to access beyond end of device [ 875.262020][T12002] loop8: rw=0, sector=128, nr_sectors = 1 limit=16 [ 875.431640][T12002] syz.8.1674: attempt to access beyond end of device [ 875.431640][T12002] loop8: rw=0, sector=0, nr_sectors = 1024 limit=16 [ 875.468782][T12002] erofs (device loop8): read error -5 @ 0 of nid 89 [ 875.795132][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 875.795156][ T31] audit: type=1800 audit(1765049015.851:482): pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1674" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 877.759335][ T6302] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 877.939250][ T6302] usb 7-1: Using ep0 maxpacket: 32 [ 877.948834][T12060] tipc: Enabling of bearer rejected, failed to enable media [ 878.296255][ T6302] usb 7-1: unable to get BOS descriptor or descriptor too short [ 878.337378][ T6302] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 878.429823][ T6302] usb 7-1: can't read configurations, error -71 [ 879.548969][T12074] overlayfs: missing 'lowerdir' [ 880.317937][T12082] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.1696'. [ 881.309293][ T6302] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 882.257908][ T6302] usb 9-1: unable to get BOS descriptor or descriptor too short [ 882.348829][ T6302] usb 9-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 882.475389][ T6302] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 882.541681][ T6302] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 24929, setting to 1024 [ 882.724033][ T6302] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 882.804588][ T6302] usb 9-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 882.850309][ T6302] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.907036][ T6302] usb 9-1: Product: syz [ 882.938802][ T6302] usb 9-1: Manufacturer: syz [ 882.945465][ T6302] usb 9-1: SerialNumber: syz [ 882.968724][ T6302] usb 9-1: config 0 descriptor?? [ 882.986793][T12090] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 883.007494][T12090] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 883.061108][ C0] usb 9-1: NFC: Urb failure (status -71) [ 883.077226][ C0] usb 9-1: NFC: Urb failure (status -71) [ 883.087437][ T6302] usb 9-1: NFC: Unable to get FW version [ 883.122089][ T6302] pn533_usb 9-1:0.0: probe with driver pn533_usb failed with error -71 [ 883.339577][ T6302] usb 9-1: USB disconnect, device number 16 [ 883.574280][T12120] overlayfs: missing 'lowerdir' [ 883.636305][T12123] netlink: 1688 bytes leftover after parsing attributes in process `syz.7.1709'. [ 884.446720][T12140] loop8: detected capacity change from 0 to 16 [ 884.513210][T12140] erofs (device loop8): mounted with root inode @ nid 36. [ 884.733713][T12142] loop6: detected capacity change from 0 to 32768 [ 884.773615][T12142] JBD2: Ignoring recovery information on journal [ 884.827407][T12142] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 884.874999][T12140] syz.8.1715: attempt to access beyond end of device [ 884.874999][T12140] loop8: rw=524288, sector=128, nr_sectors = 1 limit=16 [ 885.015437][T12140] syz.8.1715: attempt to access beyond end of device [ 885.015437][T12140] loop8: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 885.172625][T12140] syz.8.1715: attempt to access beyond end of device [ 885.172625][T12140] loop8: rw=0, sector=128, nr_sectors = 1 limit=16 [ 885.414733][T12140] syz.8.1715: attempt to access beyond end of device [ 885.414733][T12140] loop8: rw=0, sector=0, nr_sectors = 1024 limit=16 [ 885.531096][T12140] erofs (device loop8): read error -5 @ 0 of nid 89 [ 885.590364][ T31] audit: type=1800 audit(1765049025.621:483): pid=12140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1715" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 885.877737][ T8012] ocfs2: Unmounting device (7,6) on (node local) [ 886.641886][ T30] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 886.841880][ T30] usb 9-1: Using ep0 maxpacket: 16 [ 886.891802][ T30] usb 9-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 886.975942][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.996261][ T30] usb 9-1: Product: syz [ 887.009332][ T30] usb 9-1: Manufacturer: syz [ 887.067233][ T30] usb 9-1: SerialNumber: syz [ 887.068232][T12180] overlayfs: missing 'lowerdir' [ 887.149273][ T30] usb 9-1: config 0 descriptor?? [ 887.165139][ T30] uvcvideo 9-1:0.0: Found UVC 0.00 device syz (046d:0721) [ 887.177034][ T7644] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 887.194566][ T30] uvcvideo 9-1:0.0: No valid video chain found. [ 887.329215][ T7644] usb 7-1: device descriptor read/64, error -71 [ 887.376841][ T8487] usb 9-1: USB disconnect, device number 17 [ 887.619674][T12183] netlink: 1688 bytes leftover after parsing attributes in process `syz.7.1725'. [ 887.639782][ T7644] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 887.819203][ T7644] usb 7-1: device descriptor read/64, error -71 [ 888.027231][ T7644] usb usb7-port1: attempt power cycle [ 888.469535][ T7644] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 888.500064][ T7644] usb 7-1: device descriptor read/8, error -71 [ 888.799224][ T7644] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 888.840497][ T7644] usb 7-1: device descriptor read/8, error -71 [ 888.965696][ T7644] usb usb7-port1: unable to enumerate USB device [ 889.739238][ T6995] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 889.939531][ T6995] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.989064][ T6995] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.033589][ T6995] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 890.080355][ T6995] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 890.106952][ T6995] usb 9-1: Manufacturer: syz [ 890.128342][ T6995] usb 9-1: config 0 descriptor?? [ 890.516014][T12212] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 890.577930][T12213] syzkaller0: entered promiscuous mode [ 890.599220][T12213] syzkaller0: entered allmulticast mode [ 890.760147][ T6995] usbhid 9-1:0.0: can't add hid device: -71 [ 890.773319][ T6995] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 890.803171][ T6995] usb 9-1: USB disconnect, device number 18 [ 891.547508][T12224] netlink: 'syz.2.1739': attribute type 72 has an invalid length. [ 891.796332][T12226] loop8: detected capacity change from 0 to 32768 [ 891.837601][T12226] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode. [ 891.897889][ T31] audit: type=1800 audit(1765049543.955:484): pid=12226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1741" name="file1" dev="loop8" ino=17058 res=0 errno=0 [ 893.054542][ T9737] ocfs2: Unmounting device (7,8) on (node local) [ 894.310953][T11239] libceph: connect (1)[c::]:6789 error -101 [ 894.355207][T11239] libceph: mon0 (1)[c::]:6789 connect error [ 894.384144][T12257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1747'. [ 894.398359][T12236] ceph: No mds server is up or the cluster is laggy [ 894.669689][T11239] libceph: connect (1)[c::]:6789 error -101 [ 894.682487][T11239] libceph: mon0 (1)[c::]:6789 connect error [ 894.810174][ T5875] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 895.004095][ T31] audit: type=1326 audit(1765049546.835:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.6.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5978d8f749 code=0x7ffc0000 [ 895.696310][ T31] audit: type=1326 audit(1765049546.835:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.6.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5978d8f749 code=0x7ffc0000 [ 895.720688][ T31] audit: type=1326 audit(1765049546.855:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.6.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5978d8f749 code=0x7ffc0000 [ 895.744160][ T31] audit: type=1326 audit(1765049546.855:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.6.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5978d8f749 code=0x7ffc0000 [ 895.767002][ T31] audit: type=1326 audit(1765049546.865:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.6.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5978d8f749 code=0x7ffc0000 [ 895.889378][ T31] audit: type=1326 audit(1765049546.865:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.6.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5978d8f749 code=0x7ffc0000 [ 896.047477][ T31] audit: type=1326 audit(1765049546.865:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.6.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f5978d8f749 code=0x7ffc0000 [ 896.066222][T12271] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 896.144787][T12271] syzkaller0: entered promiscuous mode [ 896.162586][T12271] syzkaller0: entered allmulticast mode [ 896.259191][ T31] audit: type=1326 audit(1765049546.865:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.6.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5978d8f749 code=0x7ffc0000 [ 896.381629][ T31] audit: type=1326 audit(1765049546.865:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.6.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5978d8f749 code=0x7ffc0000 [ 896.543044][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1754'. [ 896.604396][T12279] vivid-007: ================= START STATUS ================= [ 896.612418][T12279] vivid-007: FM Deviation: 75000 [ 896.617406][T12279] vivid-007: ================== END STATUS ================== [ 897.531169][T12281] netlink: 'syz.3.1755': attribute type 72 has an invalid length. [ 900.757487][ T6023] libceph: connect (1)[c::]:6789 error -101 [ 900.790962][ T6023] libceph: mon0 (1)[c::]:6789 connect error [ 900.947563][T12305] ceph: No mds server is up or the cluster is laggy [ 900.956747][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 900.956761][ T31] audit: type=1326 audit(1765049553.015:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 901.149312][ T31] audit: type=1326 audit(1765049553.045:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 901.403218][ T31] audit: type=1326 audit(1765049553.095:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 901.425905][ T31] audit: type=1326 audit(1765049553.095:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 901.455326][ T31] audit: type=1326 audit(1765049553.095:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 901.509290][ T6995] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 901.643261][ T31] audit: type=1326 audit(1765049553.095:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 901.789500][ T31] audit: type=1326 audit(1765049553.165:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 901.929269][ T31] audit: type=1326 audit(1765049553.165:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 901.961929][ T6302] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 901.989411][ T6995] usb 9-1: Using ep0 maxpacket: 8 [ 902.006832][ T6995] usb 9-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 902.072504][ T6995] usb 9-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 902.089431][ T6995] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 902.098773][ T6995] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.149346][ T31] audit: type=1326 audit(1765049553.285:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 902.208092][ T31] audit: type=1326 audit(1765049553.285:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 902.230845][ T6302] usb 7-1: Using ep0 maxpacket: 32 [ 902.239890][ T6302] usb 7-1: unable to get BOS descriptor or descriptor too short [ 902.252689][ T6302] usb 7-1: config 7 has an invalid interface number: 187 but max is 0 [ 902.269230][ T6302] usb 7-1: config 7 has no interface number 0 [ 902.276023][ T6302] usb 7-1: config 7 interface 187 has no altsetting 0 [ 902.297858][ T6302] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 902.331296][ T6302] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.346418][ T6302] usb 7-1: Product: syz [ 902.402194][ T6302] usb 7-1: Manufacturer: syz [ 902.406807][ T6302] usb 7-1: SerialNumber: syz [ 902.487940][T12330] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1767'. [ 902.492098][T12319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.529791][T12319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.673801][ T6995] usb 9-1: USB disconnect, device number 19 [ 902.684625][ T6302] usb 7-1: Limiting number of CPorts to U8_MAX [ 902.700666][ T6302] usb 7-1: Not enough endpoints found in device, aborting! [ 902.894591][ T6302] usb 7-1: USB disconnect, device number 45 [ 906.183585][T12352] No control pipe specified [ 907.137736][ T24] libceph: connect (1)[c::]:6789 error -101 [ 907.146277][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 907.339680][T12362] ceph: No mds server is up or the cluster is laggy [ 907.420178][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 907.420193][ T31] audit: type=1326 audit(1765049815.483:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12366 comm="syz.7.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 907.429789][ T7644] libceph: connect (1)[c::]:6789 error -101 [ 907.632851][ T7644] libceph: mon0 (1)[c::]:6789 connect error [ 907.949337][ T31] audit: type=1326 audit(1765049815.533:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12366 comm="syz.7.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 907.971823][ T31] audit: type=1326 audit(1765049815.583:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12366 comm="syz.7.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 907.994838][ T31] audit: type=1326 audit(1765049815.583:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12366 comm="syz.7.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 908.029383][ T31] audit: type=1326 audit(1765049815.583:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12366 comm="syz.7.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 908.639827][ T31] audit: type=1326 audit(1765049815.583:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12366 comm="syz.7.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 908.670279][ T7644] libceph: connect (1)[c::]:6789 error -101 [ 908.843643][ T7644] libceph: mon0 (1)[c::]:6789 connect error [ 908.862547][ T31] audit: type=1326 audit(1765049815.583:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12366 comm="syz.7.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 910.261109][T12383] overlayfs: missing 'lowerdir' [ 910.383093][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1786'. [ 915.324708][T12415] No control pipe specified [ 916.759797][ T6995] libceph: connect (1)[c::]:6789 error -101 [ 916.769471][ T6995] libceph: mon0 (1)[c::]:6789 connect error [ 916.913981][T12430] ceph: No mds server is up or the cluster is laggy [ 917.148930][ T31] audit: type=1326 audit(1765049825.203:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 917.259226][ T31] audit: type=1326 audit(1765049825.243:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 917.542870][ T31] audit: type=1326 audit(1765049825.243:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 917.726043][ T31] audit: type=1326 audit(1765049825.243:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 918.419346][ T31] audit: type=1326 audit(1765049825.243:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 918.609232][ T31] audit: type=1326 audit(1765049825.313:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 918.746798][ T31] audit: type=1326 audit(1765049825.313:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 918.858234][ T31] audit: type=1326 audit(1765049825.313:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 919.009206][ T31] audit: type=1326 audit(1765049825.313:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 919.233019][ T31] audit: type=1326 audit(1765049825.323:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 921.506106][T12464] overlayfs: missing 'lowerdir' [ 921.558905][T12465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1809'. [ 922.037972][T12466] trusted_key: encrypted_key: insufficient parameters specified [ 922.115331][T12468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1806'. [ 923.519218][ T6929] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 923.709183][ T6929] usb 9-1: Using ep0 maxpacket: 32 [ 923.757502][ T6929] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 923.841072][ T6929] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.918419][ T6929] usb 9-1: config 0 descriptor?? [ 925.640039][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 925.640063][ T31] audit: type=1326 audit(1765049833.703:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12489 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 926.537519][ T31] audit: type=1326 audit(1765049833.703:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12489 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 926.799486][ T31] audit: type=1326 audit(1765049833.703:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12489 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 926.962026][ T31] audit: type=1326 audit(1765049833.703:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12489 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 927.089195][ T31] audit: type=1326 audit(1765049833.703:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12489 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 927.312840][ T31] audit: type=1326 audit(1765049833.703:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12489 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 927.560685][ T31] audit: type=1326 audit(1765049833.703:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12489 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 927.584131][ T31] audit: type=1326 audit(1765049833.703:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12489 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 927.607619][ T31] audit: type=1326 audit(1765049833.703:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12489 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 928.403189][ T6929] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 928.458771][ T31] audit: type=1326 audit(1765049833.703:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12489 comm="syz.7.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 928.522571][ T6929] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 928.589171][ T6929] dib0700: firmware download failed at 7 with -22 [ 928.651367][ T6929] usb 9-1: USB disconnect, device number 20 [ 930.202110][T12518] overlayfs: missing 'lowerdir' [ 930.359778][T12521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1825'. [ 930.799161][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.805496][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.757966][T12540] loop8: detected capacity change from 0 to 2048 [ 931.853204][T12540] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 931.879030][T12540] NILFS (loop8): mounting unchecked fs [ 931.902739][T12545] loop6: detected capacity change from 0 to 128 [ 931.934528][T12505] udevd[12505]: incorrect nilfs2 checksum on /dev/loop8 [ 932.026317][T12540] NILFS (loop8): recovery complete [ 932.083119][T12545] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 932.153213][T12545] hpfs: filesystem error: improperly stopped [ 932.179684][T12551] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 932.200082][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 932.200098][ T31] audit: type=1326 audit(1765049840.263:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 932.334097][T12545] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 932.354499][ T31] audit: type=1326 audit(1765049840.283:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 932.361844][T12545] hpfs: You really don't want any checks? You are crazy... [ 932.385559][T12545] hpfs: hpfs_map_sector(): read error [ 932.391281][T12545] hpfs: code page support is disabled [ 932.397691][T12545] hpfs: hpfs_map_4sectors(): unaligned read [ 932.407578][T12545] hpfs: hpfs_map_4sectors(): unaligned read [ 932.642789][ T31] audit: type=1326 audit(1765049840.293:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 932.669431][ T31] audit: type=1326 audit(1765049840.303:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 933.400910][T12545] hpfs: filesystem error: unable to find root dir [ 933.408617][ T31] audit: type=1326 audit(1765049840.303:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 933.609234][ T31] audit: type=1326 audit(1765049840.303:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 933.764211][ T31] audit: type=1326 audit(1765049840.303:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 933.920040][ T31] audit: type=1326 audit(1765049840.303:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 934.039347][ T31] audit: type=1326 audit(1765049840.383:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 934.141458][ T31] audit: type=1326 audit(1765049840.383:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12549 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d318f749 code=0x7ffc0000 [ 934.220712][T12545] hpfs: hpfs_map_4sectors(): unaligned read [ 934.339422][ T6175] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 934.599992][ T6175] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 934.623257][ T6175] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 934.665361][ T6175] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 934.684722][ T6175] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.717817][ T6175] usb 9-1: config 0 descriptor?? [ 934.743892][ T6175] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 936.489575][T12581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.556817][T12581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.733356][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1846'. [ 937.580506][T12601] overlayfs: missing 'workdir' [ 937.800068][T11239] usb 9-1: USB disconnect, device number 21 [ 937.976875][T12598] loop6: detected capacity change from 0 to 16 [ 938.142831][T12598] erofs (device loop6): mounted with root inode @ nid 36. [ 938.217548][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 938.217571][ T31] audit: type=1326 audit(1765049846.273:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12612 comm="syz.8.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 938.243882][T12598] syz.6.1852: attempt to access beyond end of device [ 938.243882][T12598] loop6: rw=524288, sector=128, nr_sectors = 1 limit=16 [ 938.463854][T12598] syz.6.1852: attempt to access beyond end of device [ 938.463854][T12598] loop6: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 938.499898][ T31] audit: type=1326 audit(1765049846.283:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12612 comm="syz.8.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 939.154432][ T31] audit: type=1326 audit(1765049846.283:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12612 comm="syz.8.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 939.178063][ T31] audit: type=1326 audit(1765049846.283:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12612 comm="syz.8.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 939.299677][ T31] audit: type=1326 audit(1765049846.283:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12612 comm="syz.8.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 939.397263][ T31] audit: type=1326 audit(1765049846.283:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12612 comm="syz.8.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 939.420246][T12598] syz.6.1852: attempt to access beyond end of device [ 939.420246][T12598] loop6: rw=0, sector=128, nr_sectors = 1 limit=16 [ 939.569190][ T31] audit: type=1326 audit(1765049846.323:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12612 comm="syz.8.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 939.633035][T12598] syz.6.1852: attempt to access beyond end of device [ 939.633035][T12598] loop6: rw=0, sector=0, nr_sectors = 1024 limit=16 [ 939.679221][ T31] audit: type=1326 audit(1765049846.323:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12612 comm="syz.8.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 939.808396][ T31] audit: type=1326 audit(1765049846.323:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12612 comm="syz.8.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 939.909908][ T31] audit: type=1326 audit(1765049846.323:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12612 comm="syz.8.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d88f8f749 code=0x7ffc0000 [ 939.939220][ T6054] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 940.049044][T12598] erofs (device loop6): read error -5 @ 0 of nid 89 [ 940.179329][ T6054] usb 9-1: Using ep0 maxpacket: 32 [ 940.195446][ T6054] usb 9-1: unable to get BOS descriptor or descriptor too short [ 940.262203][ T6054] usb 9-1: config 7 has an invalid interface number: 187 but max is 0 [ 940.299414][ T6054] usb 9-1: config 7 has no interface number 0 [ 940.305504][ T6054] usb 9-1: config 7 interface 187 has no altsetting 0 [ 940.350792][ T6054] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 940.385777][ T6054] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.412787][ T6054] usb 9-1: Product: syz [ 940.451412][ T6054] usb 9-1: Manufacturer: syz [ 940.459177][ T6054] usb 9-1: SerialNumber: syz [ 940.688743][ T6054] usb 9-1: Cannot retrieve CPort count: -32 [ 940.696033][ T6054] usb 9-1: Cannot retrieve CPort count: -32 [ 940.715425][ T6054] es2_ap_driver 9-1:7.187: probe with driver es2_ap_driver failed with error -32 [ 940.755448][ T6054] usb 9-1: USB disconnect, device number 22 [ 940.774329][T12644] overlayfs: failed to clone upperpath [ 941.789999][T12655] overlayfs: missing 'lowerdir' [ 942.030514][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1870'. [ 942.139439][ T6054] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 942.326429][ T6054] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 942.358588][ T6054] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 942.429224][ T6054] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 942.615781][ T6054] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.645534][ T6054] usb 7-1: config 0 descriptor?? [ 942.681090][ T6054] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 943.299680][ T31] kauditd_printk_skb: 38 callbacks suppressed [ 943.299729][ T31] audit: type=1326 audit(1765049851.263:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.7.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 944.120231][ T31] audit: type=1326 audit(1765049851.263:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.7.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 944.233740][ T7983] usb 7-1: USB disconnect, device number 46 [ 944.283264][ T31] audit: type=1326 audit(1765049851.283:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.7.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 944.351730][ T31] audit: type=1326 audit(1765049851.283:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.7.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 944.425691][ T31] audit: type=1326 audit(1765049851.283:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.7.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 944.543918][ T31] audit: type=1326 audit(1765049851.283:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.7.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 944.659228][ T31] audit: type=1326 audit(1765049851.993:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.7.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 944.782009][T12691] overlayfs: failed to clone upperpath [ 944.797815][ T31] audit: type=1326 audit(1765049851.993:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.7.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d018f749 code=0x7ffc0000 [ 945.134514][T12696] vivid-003: ================= START STATUS ================= [ 945.142321][T12696] vivid-003: FM Deviation: 75000 [ 945.147383][T12696] vivid-003: ================== END STATUS ================== [ 945.559587][T12688] loop8: detected capacity change from 0 to 4096 [ 946.592499][T12688] ntfs3(loop8): ino=9, attr_set_size [ 947.341263][ T5875] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 947.712357][ T31] audit: type=1326 audit(1765049855.773:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199e38f749 code=0x7ffc0000 [ 947.797747][ T31] audit: type=1326 audit(1765049855.803:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f199e38f749 code=0x7ffc0000 [ 948.855774][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 948.855806][ T31] audit: type=1326 audit(1765049856.733:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199e38f749 code=0x7ffc0000 [ 949.188579][ T31] audit: type=1326 audit(1765049856.733:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199e38f749 code=0x7ffc0000 [ 950.050575][T12742] overlayfs: failed to clone upperpath [ 950.059647][T12743] vivid-003: ================= START STATUS ================= [ 950.067617][T12743] vivid-003: FM Deviation: 75000 [ 950.072968][T12743] vivid-003: ================== END STATUS ================== [ 954.044142][T12787] overlayfs: failed to clone upperpath [ 954.468567][T12780] loop8: detected capacity change from 0 to 32768 [ 954.628880][T12780] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode. [ 954.809812][ T31] audit: type=1800 audit(1765049862.873:725): pid=12780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1909" name="file1" dev="loop8" ino=17058 res=0 errno=0 [ 955.437897][ T9737] ocfs2: Unmounting device (7,8) on (node local) [ 956.230239][ T7983] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 956.394426][ T7983] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 956.417382][ T7983] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.449016][ T7983] usb 9-1: config 0 descriptor?? [ 956.508033][ T7983] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 957.638623][ T7983] gspca_cpia1: usb_control_msg 03, error -32 [ 957.657566][ T7983] gspca_cpia1: usb_control_msg 03, error -32 [ 957.672665][ T7983] gspca_cpia1: usb_control_msg 03, error -71 [ 957.687154][ T7983] gspca_cpia1: usb_control_msg 01, error -71 [ 957.693765][ T7983] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 957.705987][ T7983] usb 9-1: USB disconnect, device number 23 [ 959.028276][T12833] overlayfs: failed to clone upperpath [ 959.449833][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1929'. [ 960.092114][T12851] netlink: 'syz.7.1932': attribute type 4 has an invalid length. [ 960.217588][ T31] audit: type=1326 audit(1765049868.273:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.1.1931" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbabdb8f749 code=0x0 [ 960.270618][T12851] netlink: 'syz.7.1932': attribute type 4 has an invalid length. [ 961.369322][ T7644] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 961.589408][ T7644] usb 9-1: Using ep0 maxpacket: 16 [ 961.596751][ T7644] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.626812][ T7644] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 961.654207][ T7644] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 961.686830][ T7644] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 961.717841][T12866] loop6: detected capacity change from 0 to 128 [ 961.724261][ T7644] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 961.777652][ T7644] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 961.963117][ T7644] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 961.972605][ T7644] usb 9-1: Manufacturer: syz [ 961.997650][ T7644] usb 9-1: config 0 descriptor?? [ 963.089161][ T7644] rc_core: IR keymap rc-hauppauge not found [ 963.159311][ T7644] Registered IR keymap rc-empty [ 963.180556][ T7644] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 963.254322][ T7644] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 963.328664][ T7644] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 963.411776][ T7644] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input44 [ 963.483203][ T7644] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 963.515286][T12880] loop6: detected capacity change from 0 to 2048 [ 963.551153][ T7644] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 963.617710][T12885] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 963.644497][ T7644] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 963.669836][ T7644] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 963.699260][ T7644] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 963.719353][ T7644] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 963.741298][ T7644] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 963.754457][ T31] audit: type=1800 audit(1765049871.813:727): pid=12880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1939" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 963.806015][ T7644] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 963.832435][ T7644] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 963.860315][ T7644] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 963.900542][ T7644] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 963.932124][ T7644] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 963.975697][ T7644] usb 9-1: USB disconnect, device number 24 [ 964.293348][T12891] overlayfs: failed to clone upperpath [ 965.255356][T12900] autofs: Bad value for 'fd' [ 966.332322][ T7644] libceph: connect (1)[c::]:6789 error -101 [ 966.338517][ T7644] libceph: mon0 (1)[c::]:6789 connect error [ 966.349532][ T7644] libceph: connect (1)[c::]:6789 error -101 [ 966.371061][ T7644] libceph: mon0 (1)[c::]:6789 connect error [ 966.426660][T12925] ceph: No mds server is up or the cluster is laggy [ 966.912108][T12938] fuse: Unknown parameter '0x0000000000000003' [ 967.063786][T12942] loop6: detected capacity change from 0 to 2048 [ 967.990594][T12948] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 969.107596][ T31] audit: type=1800 audit(1765049877.163:728): pid=12936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1957" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 971.659187][ T8487] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 972.124994][ T8487] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 972.237446][T12964] autofs: Bad value for 'fd' [ 972.617163][ T8487] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.669607][ T8487] usb 7-1: Product: syz [ 972.673826][ T8487] usb 7-1: Manufacturer: syz [ 972.678422][ T8487] usb 7-1: SerialNumber: syz [ 973.251539][ T8487] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 973.333971][ T8487] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 974.032297][ T8487] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 974.066064][ T8487] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 974.119570][ T8487] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 974.276320][ T8487] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 974.353998][T12976] loop8: detected capacity change from 0 to 2048 [ 974.589471][ T8487] usb 7-1: USB disconnect, device number 47 [ 974.661273][T12976] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 974.784341][T12976] NILFS (loop8): mounting unchecked fs [ 974.832845][T12505] udevd[12505]: incorrect nilfs2 checksum on /dev/loop8 [ 975.109840][T12605] udevd[12605]: incorrect nilfs2 checksum on /dev/loop8 [ 975.188990][T12981] fuse: Unknown parameter '0xffffffffffffffff' [ 975.260172][T12976] NILFS (loop8): recovery complete [ 976.097282][T12989] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 976.637947][ T5870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 977.420504][ T6023] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 977.447938][ T5870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 977.460853][ T5870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 977.469038][ T5870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 977.476805][ T5870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 977.678941][ T6023] usb 7-1: unable to get BOS descriptor or descriptor too short [ 977.762412][ T6023] usb 7-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 977.789185][ T6023] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 977.839163][ T6023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 24929, setting to 1024 [ 977.939364][ T6023] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 978.017378][ T6023] usb 7-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 978.044604][ T6023] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.075846][ T6023] usb 7-1: Product: syz [ 978.094244][ T6023] usb 7-1: Manufacturer: syz [ 978.118047][ T6023] usb 7-1: SerialNumber: syz [ 978.160190][ T6023] usb 7-1: config 0 descriptor?? [ 978.182184][T12983] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 978.191641][T12983] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 978.236182][ C0] usb 7-1: NFC: Urb failure (status -71) [ 978.245302][ C0] usb 7-1: NFC: Urb failure (status -71) [ 978.264480][ T6023] usb 7-1: NFC: Unable to get FW version [ 978.362303][ T6023] pn533_usb 7-1:0.0: probe with driver pn533_usb failed with error -71 [ 978.609303][ T6929] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 978.778708][ T8487] usb 7-1: USB disconnect, device number 48 [ 978.866296][ T6929] usb 9-1: Using ep0 maxpacket: 32 [ 978.902499][ T6929] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 978.972177][ T6929] usb 9-1: config 0 has no interface number 0 [ 978.978313][ T6929] usb 9-1: config 0 interface 12 has no altsetting 0 [ 979.125015][ T6929] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 979.229144][ T6929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.265270][ T6929] usb 9-1: Product: syz [ 979.279405][ T6929] usb 9-1: Manufacturer: syz [ 979.295733][ T6929] usb 9-1: SerialNumber: syz [ 979.312446][T12993] chnl_net:caif_netlink_parms(): no params data found [ 979.351364][ T6929] usb 9-1: config 0 descriptor?? [ 979.510841][ T5870] Bluetooth: hci5: command tx timeout [ 979.600987][T13014] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1979'. [ 980.370825][T12993] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.383866][T12993] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.394007][T12993] bridge_slave_0: entered allmulticast mode [ 980.405315][T12993] bridge_slave_0: entered promiscuous mode [ 980.413991][T12993] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.430181][T12993] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.447704][T12993] bridge_slave_1: entered allmulticast mode [ 980.637945][T12993] bridge_slave_1: entered promiscuous mode [ 980.647946][T13029] trusted_key: encrypted_key: insufficient parameters specified [ 980.805738][T13030] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1982'. [ 981.244651][T12993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.335084][T12993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.503371][T13032] loop6: detected capacity change from 0 to 128 [ 981.599618][ T5870] Bluetooth: hci5: command tx timeout [ 981.693716][T13032] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 981.792556][T13032] hpfs: filesystem error: improperly stopped [ 981.809166][T13032] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 981.841151][T13032] hpfs: You really don't want any checks? You are crazy... [ 981.863923][T12993] team0: Port device team_slave_0 added [ 981.922931][T13032] hpfs: hpfs_map_sector(): read error [ 981.923581][T12993] team0: Port device team_slave_1 added [ 981.979472][T13032] hpfs: code page support is disabled [ 981.984998][T13032] hpfs: hpfs_map_4sectors(): unaligned read [ 982.059362][T13032] hpfs: hpfs_map_4sectors(): unaligned read [ 982.130149][T13032] hpfs: filesystem error: unable to find root dir [ 982.199418][T12993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.229427][T12993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.339658][T12993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.424445][T12993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.459457][T12993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.500432][T13032] hpfs: hpfs_map_4sectors(): unaligned read [ 982.609145][T12993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.725927][ T6929] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 982.738434][ T6929] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 982.749331][ T6929] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 982.789845][ T6929] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 982.899360][ T6929] usb 9-1: USB disconnect, device number 25 [ 983.058129][T13037] fuse: Unknown parameter '0xffffffffffffffff' [ 983.135189][T12993] hsr_slave_0: entered promiscuous mode [ 983.200346][T12993] hsr_slave_1: entered promiscuous mode [ 983.232857][T12993] debugfs: 'hsr0' already exists in 'hsr' [ 983.238601][T12993] Cannot create hsr debugfs directory [ 983.529338][ T6929] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 983.669372][ T5870] Bluetooth: hci5: command tx timeout [ 983.731633][ T6929] usb 7-1: config 1 interface 0 has no altsetting 0 [ 983.754445][ T6929] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 983.769128][ T6929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.798483][ T6929] usb 7-1: Product: syz [ 983.803913][ T6929] usb 7-1: Manufacturer: syz [ 983.808522][ T6929] usb 7-1: SerialNumber: syz [ 983.967845][T12847] Set syz1 is full, maxelem 65536 reached [ 984.060374][T13039] loop6: detected capacity change from 0 to 256 [ 984.096558][T13039] exfat: Deprecated parameter 'utf8' [ 984.188328][T13039] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 984.219821][T13052] sctp: [Deprecated]: syz.8.1988 (pid 13052) Use of int in max_burst socket option. [ 984.219821][T13052] Use struct sctp_assoc_value instead [ 984.364751][ T6929] usblp0: Disabling reads from problematic bidirectional printer [ 984.404298][ T6929] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 253 proto 1 vid 0x03F0 pid 0x0004 [ 984.519755][ T6929] usb 7-1: USB disconnect, device number 49 [ 984.680418][T12993] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 984.805426][ T6929] usblp0: removed [ 984.823272][T12993] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 985.754526][ T5870] Bluetooth: hci5: command tx timeout [ 985.899864][T12993] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 986.043551][T12993] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 986.880979][T13082] autofs: Bad value for 'fd' [ 987.784147][T13091] trusted_key: encrypted_key: insufficient parameters specified [ 988.027655][ T6062] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.257140][T13098] fuse: Unknown parameter '0x0000000000000005' [ 988.762506][ T6062] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.268202][ T6062] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.504541][T12993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.995167][ T30] libceph: connect (1)[c::]:6789 error -101 [ 990.012943][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 990.029456][ T31] audit: type=1326 audit(1765049898.083:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.1.2003" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbabdb8f749 code=0x0 [ 990.053694][T13107] ceph: No mds server is up or the cluster is laggy [ 990.084940][ T6062] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.399241][ T30] libceph: connect (1)[c::]:6789 error -101 [ 990.405420][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 990.910663][T12993] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.031356][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.038513][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.339063][ T6157] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.346248][ T6157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.575173][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.595839][ T6062] bridge_slave_0: left allmulticast mode [ 991.602329][ T6062] bridge_slave_0: left promiscuous mode [ 991.608374][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.759334][ T6054] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 991.923276][ T6054] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 991.946739][ T6054] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 991.978610][ T6054] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 992.012622][ T6054] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.077246][ T6054] usb 9-1: config 0 descriptor?? [ 992.098066][ T6054] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 992.234558][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.242024][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.215172][T13127] autofs: Bad value for 'fd' [ 993.500094][T13137] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 993.618175][T13135] loop6: detected capacity change from 0 to 4096 [ 993.676530][T13140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.768093][T13140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.815969][T13141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2015'. [ 994.213156][T13135] ntfs3(loop6): ino=9, attr_set_size [ 996.679148][ T5960] usb 9-1: USB disconnect, device number 26 [ 999.256413][ T6062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.286622][ T6062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.308512][ T6062] bond0 (unregistering): Released all slaves [ 999.592026][ T6062] bond1 (unregistering): Released all slaves [ 1000.133853][ T6062] bond2 (unregistering): Released all slaves [ 1000.175275][T12993] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1001.027314][T12993] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1001.200853][ T6062] : left promiscuous mode [ 1001.250151][ T31] audit: type=1326 audit(1765049909.313:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13172 comm="syz.3.2023" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66d318f749 code=0x0 [ 1001.537111][ T6062] tipc: Left network mode [ 1003.097728][ T6062] hsr_slave_0: left promiscuous mode [ 1003.123290][ T6062] hsr_slave_1: left promiscuous mode [ 1003.132154][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1003.164007][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.195721][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1003.218907][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.523163][ T6062] veth1_macvtap: left promiscuous mode [ 1003.562011][ T6062] veth0_macvtap: left promiscuous mode [ 1003.586103][ T6062] veth1_vlan: left promiscuous mode [ 1003.609384][T13203] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1003.618451][ T6062] veth0_vlan: left promiscuous mode [ 1007.265131][T13234] loop8: detected capacity change from 0 to 4096 [ 1007.614782][T13234] ntfs3(loop8): ino=9, attr_set_size [ 1007.925655][T13244] fuse: Unknown parameter 'fd0x0000000000000003' [ 1010.315722][ T6062] team0 (unregistering): Port device team_slave_1 removed [ 1010.454481][ T6062] team0 (unregistering): Port device team_slave_0 removed [ 1012.027693][T12993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.502756][T13284] loop8: detected capacity change from 0 to 4096 [ 1013.726240][T13302] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1015.152455][T12993] veth0_vlan: entered promiscuous mode [ 1015.198534][T12993] veth1_vlan: entered promiscuous mode [ 1015.542896][T12993] veth0_macvtap: entered promiscuous mode [ 1015.582360][T12993] veth1_macvtap: entered promiscuous mode [ 1015.696245][T12993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.774195][T12993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1015.858746][ T74] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.888693][ T74] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.952366][ T74] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.046740][ T74] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.088337][T13339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2070'. [ 1016.097758][ T6175] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1016.480077][ T6175] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.490577][ T6175] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1016.542762][ T6175] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1016.756159][ T6175] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1016.991639][ T6175] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.053947][ T6077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.087777][ T6175] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1017.117424][ T6077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.134018][ T6175] usb 7-1: invalid MIDI out EP 0 [ 1017.265369][ T5927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.493959][ T5927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.808328][T13355] udevd[13355]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1018.828164][ T6175] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1020.679158][ T6929] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1020.869215][ T6929] usb 10-1: Using ep0 maxpacket: 16 [ 1020.887479][ T6929] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.969172][ T6929] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1020.975896][ T6929] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1021.075879][ T6929] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.198103][ T6929] usb 10-1: config 0 descriptor?? [ 1022.246578][ T6929] nzxt-smart2 0003:1E71:2009.001C: unknown main item tag 0x0 [ 1022.322701][ T6929] nzxt-smart2 0003:1E71:2009.001C: unknown main item tag 0x0 [ 1022.359145][ T6929] nzxt-smart2 0003:1E71:2009.001C: unknown main item tag 0x0 [ 1022.366576][ T6929] nzxt-smart2 0003:1E71:2009.001C: unknown main item tag 0x0 [ 1022.404902][ T6929] nzxt-smart2 0003:1E71:2009.001C: unknown main item tag 0x0 [ 1022.442837][ T6929] nzxt-smart2 0003:1E71:2009.001C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0 [ 1022.507883][ C1] usb 10-1: input irq status -75 received [ 1022.927195][ T6929] usb 10-1: USB disconnect, device number 2 [ 1023.237190][T13387] fido_id[13387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1023.265681][ T8487] usb 7-1: USB disconnect, device number 50 [ 1023.449849][T13384] autofs: Bad value for 'fd' [ 1023.769560][ T7644] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1025.631128][ T7644] usb 9-1: Using ep0 maxpacket: 8 [ 1025.679161][ T7644] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1025.718625][ T7644] usb 9-1: config 179 has no interface number 0 [ 1025.735675][ T7644] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1027.464763][ T7644] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1027.522048][ T7644] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1027.586627][ T7644] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1027.639171][ T7644] usb 9-1: config 179 interface 65 has no altsetting 0 [ 1027.667832][ T7644] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1027.717480][ T7644] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.757138][ T7644] usb 9-1: can't set config #179, error -71 [ 1027.814651][ T7644] usb 9-1: USB disconnect, device number 27 [ 1029.405082][T13429] loop8: detected capacity change from 0 to 32768 [ 1029.470632][T13429] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2092 (13429) [ 1029.613462][T13429] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1029.729569][T13429] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm [ 1030.361445][T13429] BTRFS info (device loop8): enabling ssd optimizations [ 1030.426514][T13429] BTRFS info (device loop8): turning on async discard [ 1030.468336][T13475] trusted_key: encrypted_key: insufficient parameters specified [ 1030.490463][T13475] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2088'. [ 1030.661362][T13429] BTRFS info (device loop8): enabling free space tree [ 1031.363313][ T9737] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1032.208994][T13485] autofs: Bad value for 'fd' [ 1038.158487][T13519] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1040.101301][T13532] loop9: detected capacity change from 0 to 2048 [ 1040.474291][T13532] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1041.458241][T12993] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.590645][T13550] autofs: Bad value for 'fd' [ 1045.919525][ T6301] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1046.139174][ T6301] usb 7-1: Using ep0 maxpacket: 16 [ 1046.146503][ T6301] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1046.184071][ T6301] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.254043][ T6301] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1046.296514][ T6301] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1046.327931][ T6301] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.369482][ T6301] usb 7-1: Product: syz [ 1046.373660][ T6301] usb 7-1: Manufacturer: syz [ 1046.400209][ T6301] usb 7-1: SerialNumber: syz [ 1046.835701][ T6301] usb 7-1: 0:2 : does not exist [ 1047.190477][T13588] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1048.627403][ T6301] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 1048.967467][ T6301] usb 7-1: USB disconnect, device number 51 [ 1049.365392][T13612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2128'. [ 1051.743437][T13607] netlink: 'syz.9.2126': attribute type 2 has an invalid length. [ 1051.963729][T13607] : entered promiscuous mode [ 1053.699565][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.705874][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.529777][T13671] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1164.619036][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1164.626030][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P74/1:b..l P6102/1:b..l [ 1164.636042][ C0] rcu: (detected by 0, t=10502 jiffies, g=70033, q=1187 ncpus=2) [ 1164.643849][ C0] task:kworker/u8:16 state:R running task stack:21080 pid:6102 tgid:6102 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1164.658956][ C0] Workqueue: iou_exit io_ring_exit_work [ 1164.664534][ C0] Call Trace: [ 1164.667807][ C0] [ 1164.670737][ C0] __schedule+0x14bc/0x5000 [ 1164.675286][ C0] ? rcu_is_watching+0x15/0xb0 [ 1164.680078][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1164.685724][ C0] ? __pfx___schedule+0x10/0x10 [ 1164.690585][ C0] ? __schedule+0x14d2/0x5000 [ 1164.695291][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1164.700620][ C0] preempt_schedule_irq+0xb5/0x150 [ 1164.705771][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1164.711503][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1164.717165][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1164.722822][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1164.728651][ C0] irqentry_exit+0x5d8/0x660 [ 1164.733271][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1164.739260][ C0] RIP: 0010:__asan_memset+0x24/0x50 [ 1164.744483][ C0] Code: 90 90 90 90 90 90 f3 0f 1e fa 55 41 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 7e e4 ff ff 84 c0 <74> 11 4c 89 f7 89 ee 48 89 da 5b 41 5e 5d e9 e9 4b 27 09 31 c0 5b [ 1164.764106][ C0] RSP: 0018:ffffc9000b4d71b8 EFLAGS: 00000202 [ 1164.770196][ C0] RAX: 1ffff9200169ae01 RBX: 0000000000000010 RCX: ffffffff81740b38 [ 1164.778173][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc9000b4d7358 [ 1164.786150][ C0] RBP: 0000000000000000 R08: ffffc9000b4d7367 R09: 1ffff9200169ae6c [ 1164.794124][ C0] R10: dffffc0000000000 R11: fffff5200169ae6d R12: ffffc9000b4d7308 [ 1164.802103][ C0] R13: ffffc9000b4d7358 R14: ffffc9000b4d7358 R15: ffffc9000b4d7350 [ 1164.810092][ C0] ? unwind_next_frame+0xc98/0x2390 [ 1164.815317][ C0] ? __asan_memset+0x22/0x50 [ 1164.819940][ C0] unwind_next_frame+0xc98/0x2390 [ 1164.824988][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1164.830112][ C0] ? __unwind_start+0xf8/0x760 [ 1164.834894][ C0] __unwind_start+0x5b9/0x760 [ 1164.839581][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1164.845757][ C0] arch_stack_walk+0xe4/0x150 [ 1164.850449][ C0] ? arch_stack_walk+0xe4/0x150 [ 1164.855308][ C0] stack_trace_save+0x9c/0xe0 [ 1164.860007][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1164.865410][ C0] kasan_save_stack+0x3e/0x60 [ 1164.870166][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 1164.875385][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1164.881544][ C0] call_rcu+0x157/0x9c0 [ 1164.885728][ C0] ? __pfx_call_rcu+0x10/0x10 [ 1164.890428][ C0] kmem_cache_free+0x488/0x620 [ 1164.895190][ C0] ? __io_req_caches_free+0x1c1/0x270 [ 1164.900580][ C0] __io_req_caches_free+0x1c1/0x270 [ 1164.905798][ C0] io_req_caches_free+0x21/0x60 [ 1164.910659][ C0] io_ring_exit_work+0x3b3/0x8d0 [ 1164.915604][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1164.920832][ C0] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1164.926316][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1164.931965][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1164.937173][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 1164.942895][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 1164.948619][ C0] process_scheduled_works+0xad1/0x1770 [ 1164.954199][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1164.960192][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1164.965839][ C0] worker_thread+0x8a0/0xda0 [ 1164.970436][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1164.976780][ C0] ? __kthread_parkme+0x7b/0x200 [ 1164.981739][ C0] kthread+0x711/0x8a0 [ 1164.985822][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1164.990934][ C0] ? __pfx_kthread+0x10/0x10 [ 1164.995533][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.001177][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1165.006385][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.012025][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1165.017237][ C0] ? __pfx_kthread+0x10/0x10 [ 1165.021841][ C0] ret_from_fork+0x599/0xb30 [ 1165.026435][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1165.031563][ C0] ? __switch_to_asm+0x39/0x70 [ 1165.036338][ C0] ? __switch_to_asm+0x33/0x70 [ 1165.041110][ C0] ? __pfx_kthread+0x10/0x10 [ 1165.045712][ C0] ret_from_fork_asm+0x1a/0x30 [ 1165.050504][ C0] [ 1165.053516][ C0] task:kworker/u8:5 state:R running task stack:21208 pid:74 tgid:74 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1165.067148][ C0] Workqueue: iou_exit io_ring_exit_work [ 1165.072719][ C0] Call Trace: [ 1165.075990][ C0] [ 1165.078917][ C0] __schedule+0x14bc/0x5000 [ 1165.083450][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1165.089356][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.095004][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.100650][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1165.107000][ C0] ? __pfx___schedule+0x10/0x10 [ 1165.111869][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.117507][ C0] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 1165.124105][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1165.129408][ C0] preempt_schedule_irq+0xb5/0x150 [ 1165.134532][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1165.140270][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.145908][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1165.151729][ C0] irqentry_exit+0x5d8/0x660 [ 1165.156331][ C0] ? rcu_is_watching+0x15/0xb0 [ 1165.161107][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1165.166568][ C0] RIP: 0010:lock_acquire+0x16c/0x340 [ 1165.171856][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 34 8d db 10 <48> 3b 44 24 58 0f 85 e5 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1165.191472][ C0] RSP: 0018:ffffc9000216f198 EFLAGS: 00000206 [ 1165.197562][ C0] RAX: 9a6dd1c2de35f400 RBX: 0000000000000000 RCX: 9a6dd1c2de35f400 [ 1165.205537][ C0] RDX: 00000000150eaf5d RSI: ffffffff8d96a604 RDI: ffffffff8bc00c60 [ 1165.213515][ C0] RBP: ffffffff8173ff45 R08: ffffffff8173ff45 R09: ffffffff8df41e20 [ 1165.221490][ C0] R10: dffffc0000000000 R11: ffffffff81ad5380 R12: 0000000000000002 [ 1165.229466][ C0] R13: ffffffff8df41e20 R14: 0000000000000000 R15: 0000000000000246 [ 1165.237445][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1165.242570][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1165.248747][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1165.253883][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.259530][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1165.264648][ C0] ? kasan_save_stack+0x3e/0x60 [ 1165.269502][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1165.274621][ C0] unwind_next_frame+0xc2/0x2390 [ 1165.279565][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1165.284689][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1165.289812][ C0] ? stack_trace_save+0x9c/0xe0 [ 1165.294686][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1165.300858][ C0] arch_stack_walk+0x11c/0x150 [ 1165.305633][ C0] ? kasan_save_stack+0x3e/0x60 [ 1165.310488][ C0] stack_trace_save+0x9c/0xe0 [ 1165.315184][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1165.320586][ C0] kasan_save_stack+0x3e/0x60 [ 1165.325272][ C0] ? kasan_save_stack+0x3e/0x60 [ 1165.330182][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 1165.335398][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1165.341562][ C0] call_rcu+0x157/0x9c0 [ 1165.345748][ C0] ? __pfx_call_rcu+0x10/0x10 [ 1165.350453][ C0] kmem_cache_free+0x488/0x620 [ 1165.355218][ C0] ? __io_req_caches_free+0x1c1/0x270 [ 1165.360611][ C0] __io_req_caches_free+0x1c1/0x270 [ 1165.365822][ C0] io_req_caches_free+0x21/0x60 [ 1165.370681][ C0] io_ring_exit_work+0x3b3/0x8d0 [ 1165.375628][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1165.381022][ C0] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1165.386508][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.392152][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1165.397356][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 1165.403077][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 1165.408799][ C0] process_scheduled_works+0xad1/0x1770 [ 1165.414386][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1165.420384][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.426032][ C0] worker_thread+0x8a0/0xda0 [ 1165.430655][ C0] kthread+0x711/0x8a0 [ 1165.434745][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1165.439860][ C0] ? __pfx_kthread+0x10/0x10 [ 1165.444458][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.450101][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1165.455307][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.460947][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1165.466155][ C0] ? __pfx_kthread+0x10/0x10 [ 1165.470755][ C0] ret_from_fork+0x599/0xb30 [ 1165.475350][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1165.480474][ C0] ? __switch_to_asm+0x39/0x70 [ 1165.485248][ C0] ? __switch_to_asm+0x33/0x70 [ 1165.490021][ C0] ? __pfx_kthread+0x10/0x10 [ 1165.494625][ C0] ret_from_fork_asm+0x1a/0x30 [ 1165.499414][ C0] [ 1165.502428][ C0] rcu: rcu_preempt kthread starved for 10588 jiffies! g70033 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1165.513618][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1165.523576][ C0] rcu: RCU grace-period kthread stack dump: [ 1165.529453][ C0] task:rcu_preempt state:R running task stack:27440 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1165.543022][ C0] Call Trace: [ 1165.546297][ C0] [ 1165.549231][ C0] __schedule+0x14bc/0x5000 [ 1165.553771][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1165.558983][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.564621][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1165.570522][ C0] ? __pfx___schedule+0x10/0x10 [ 1165.575392][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.581034][ C0] ? schedule+0x91/0x360 [ 1165.585289][ C0] schedule+0x165/0x360 [ 1165.589461][ C0] schedule_timeout+0x12b/0x270 [ 1165.594318][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1165.599698][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1165.605005][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.610640][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1165.616209][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1165.621076][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1165.626023][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1165.631236][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1165.636523][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1165.641737][ C0] ? finish_swait+0xcd/0x1f0 [ 1165.646349][ C0] rcu_gp_kthread+0x99/0x390 [ 1165.650948][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1165.656159][ C0] ? __kthread_parkme+0x7b/0x200 [ 1165.661109][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.666759][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1165.671798][ C0] kthread+0x711/0x8a0 [ 1165.675881][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1165.681101][ C0] ? __pfx_kthread+0x10/0x10 [ 1165.685703][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.691345][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1165.696547][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.702184][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1165.707390][ C0] ? __pfx_kthread+0x10/0x10 [ 1165.711991][ C0] ret_from_fork+0x599/0xb30 [ 1165.716586][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1165.721709][ C0] ? __switch_to_asm+0x39/0x70 [ 1165.726481][ C0] ? __switch_to_asm+0x33/0x70 [ 1165.731256][ C0] ? __pfx_kthread+0x10/0x10 [ 1165.735858][ C0] ret_from_fork_asm+0x1a/0x30 [ 1165.740669][ C0] [ 1165.743684][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1165.750006][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1165.758941][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1165.769000][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1165.774741][ C0] Code: ce 73 c1 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 80 19 00 f3 0f 1e fa fb f4 a3 73 c1 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1165.794357][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 1165.800440][ C0] RAX: 9e61c9bc282a6500 RBX: ffffffff81974b6a RCX: 9e61c9bc282a6500 [ 1165.808413][ C0] RDX: 0000000000000001 RSI: ffffffff8d7831da RDI: ffffffff8bc00c60 [ 1165.816384][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b88336db R09: 1ffff110171066db [ 1165.824359][ C0] R10: dffffc0000000000 R11: ffffed10171066dc R12: ffffffff8f815070 [ 1165.832336][ C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000 [ 1165.840311][ C0] FS: 0000000000000000(0000) GS:ffff888126084000(0000) knlGS:0000000000000000 [ 1165.849245][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1165.855826][ C0] CR2: 000000110c260bdc CR3: 000000007bc12000 CR4: 0000000000350ef0 [ 1165.863799][ C0] Call Trace: [ 1165.867072][ C0] [ 1165.870001][ C0] default_idle+0x13/0x20 [ 1165.874357][ C0] default_idle_call+0x73/0xb0 [ 1165.879139][ C0] do_idle+0x1ea/0x520 [ 1165.883218][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.888862][ C0] ? irqentry_exit+0x5ba/0x660 [ 1165.893645][ C0] ? __pfx_do_idle+0x10/0x10 [ 1165.898263][ C0] cpu_startup_entry+0x44/0x60 [ 1165.903039][ C0] rest_init+0x2de/0x300 [ 1165.907289][ C0] start_kernel+0x3ae/0x410 [ 1165.911806][ C0] x86_64_start_reservations+0x24/0x30 [ 1165.917270][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1165.922388][ C0] common_startup_64+0x13e/0x147 [ 1165.927354][ C0]