last executing test programs: 3m56.02494374s ago: executing program 3 (id=1016): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x6, 0x8, 0x18220, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0, @void, @value=r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000540)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @remote, @dev, @remote}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r5, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3m55.444565926s ago: executing program 3 (id=1018): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2) ioctl$TCFLSH(r3, 0x40087101, 0x20001100) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000d9c6b407002001b3a94501020301090212e28000000000000000"], 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) r4 = syz_open_pts(r2, 0x20800) dup3(r4, r2, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x44) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101", @ANYRESHEX=0x0], 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc202, 0x8) 3m52.625438629s ago: executing program 3 (id=1038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0x9e, &(0x7f0000010140)="$eJzs16GKQkEABdC7L+xu27WIzWzxH/wUsxYxKYJ/4CfaDQa7OMJ7AyLYBIOeEwbuXAam3vKXVtkmZTRYHMrNcrWeTefdGd5Sk+QnyW+SYa/Lx0nXfdV+f9rk/9Hj792LfwsAADyjyfg+X0q9ONcV2IZ+OxLqTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4JNcAAAD//0AHJDI=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r6 = accept4(r5, 0x0, 0x0, 0x800) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000800)="ca7ac5f90fed369c49ed0fb7f4ba", 0xe}], 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x8000) 3m51.533024858s ago: executing program 3 (id=1040): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f000000cfc0)=[{{&(0x7f0000000280)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000140)="0a776549e8d66162891cf9113b1d2cfcc168ef470b000000897092ff0b89fcfeeb1e79267748ff360a071752ef500c326b323fb285b8eaa5317ca5c89250fd2e8a112b409b81cecb85d56b8790", 0x4d}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000002c0)="b0", 0x1}], 0x1}}], 0x2, 0x24014480) (async) shutdown(r0, 0x1) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, 0x0, 0x240880c0) syz_emit_ethernet(0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20008000000aaaaaa0008005b3e001840680000d2899078ac1e0001ffffffff0d8ec19d"], 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r3}, &(0x7f0000000100)=0x8) (async) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xa) socket$nl_route(0x10, 0x3, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000080)="f0f69d0000f0816f930040260f38ca530036660f3a229300004c0f01dc0f001d960f782121f966f90903100066b8cf99000066ba000000000f20", 0x3a}], 0x1, 0x3e, 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r10 = getpid() sched_setscheduler(r10, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x0, './file1\x00'}, 0x6e) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200100000008500a50500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b0000000a00000000020000070600000000000080d258bcb402bf645ec9967a559022460f2f58928b9624df01a12a1891e983eec980", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r5], 0x50) 3m51.013305826s ago: executing program 3 (id=1044): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x78, 0x0, &(0x7f0000000880)="719211a35fc8cb9b97c2ebc6a3dcab4beb020494a2496d03d732e8293e1db60c8180670282e1e1759acec2cbbf21fe4158a2c5b24f313d0c524e372d1734b39c0ba49f6b1428e7d962d07a47c722778bddebcfa4f4768957861fb10a5a5eeba5b91cd1de58c83939d289d8a49fe2160bf5409d167295b8da"}) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000200)={0x2c, 0x2, '\x00', [@ra={0x5, 0x2, 0x10}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0xfff9}, @enc_lim={0x4, 0x1, 0x1}, @pad1]}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0xa4, 0x99, 0x40, 0x7d0, 0x4101, 0x3ffc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x51, 0xed, 0x15}}]}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x3, 0x3, {0x9, 0x21, 0x2, 0x7, 0x1, {0x22, 0x8bf}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x40, 0x7f, 0xc}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x5, 0x2f, 0x3, 0x20}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x180c}}, {0x4c, &(0x7f0000000140)=@string={0x4c, 0x3, "065f066e1c68b7b011396246631d5bcd0d882dfc8bc1c36030f73c608fa43d7d45b92cf140fa8d2dc7237358c0384045291c687d654a5903a2a6e3f58d016d5183679e20681191f113d3"}}]}) 3m47.42797746s ago: executing program 3 (id=1059): ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000100)=0x10000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r2, &(0x7f0000000100)=""/171, 0xab) ioctl$BLKRRPART(r1, 0x125f, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x2400c2, 0x0) fallocate(r0, 0x11, 0x2000, 0x800007c000) 3m31.240503228s ago: executing program 32 (id=1059): ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000100)=0x10000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r2, &(0x7f0000000100)=""/171, 0xab) ioctl$BLKRRPART(r1, 0x125f, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x2400c2, 0x0) fallocate(r0, 0x11, 0x2000, 0x800007c000) 2m44.190591843s ago: executing program 4 (id=1331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x4040004) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000580)=""/228, &(0x7f0000000240)=0xe4) (async) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000580)=""/228, &(0x7f0000000240)=0xe4) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x40) (async) sendmmsg$unix(r2, 0x0, 0x0, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000451b6800"/31], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0xfffffffffffffffa, 0x18000) socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x8000, 0x40024e}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r7 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x2004019, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r7, @ANYBLOB=',group_id=', @ANYRESDEC=r7], 0xfc, 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={&(0x7f00000002c0)={0x50, 0x0, 0x800, {0x7, 0x29, 0x0, 0x400000, 0x8000, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m43.528724967s ago: executing program 4 (id=1335): mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) chdir(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31110000000900010073797a3000000000080005400000001c08000640ffffff0008"], 0x66f4}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8101, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 2m42.617537092s ago: executing program 4 (id=1336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550c, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r6) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x3, [], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="070200000000000000000100000008000880bcff07802c000480050003ff800000000100030000000000050003000100000005000300000000000500030080ff000008000100030000000800020001"], 0x58}}, 0x880) 2m41.989505665s ago: executing program 4 (id=1340): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000035bbb35f75f4621852bcba65e6147d122e48462418754db7ca872037186648a487b547fe0954623db44d172192e5885231c072522aa4f407000400fb75ec8469c7af0a00000000000000000000000000000000eed1048c74bbe9eacc1d6220eb6e2fc6c5208d639df36306bfeb5be1a0df08f911ae159a3d10e8392f77eef4cb2954117c3dbb055bb7ff45590d4f8bd5dde8a8f32162e3351269033f53e7e2a3a24ea3e0c7625745e687c71c7be8327a46d6b80149a0b5d4", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250c00000008000300", @ANYRES32=r5, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x818}, 0x4000) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd0, &(0x7f0000000000)=0x3, 0x4) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x206288}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000429bd7000fcf0df253d00000008005d0000000000cedc2e04c91ce48c245306f5dbd93bb7630f00000000000000000008005d000100000008005d0019740e0508005d000100000008005d000100000008005df27bcde93990dfbb20828b4000"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r9, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x2}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000300)="66b9d10200000f3266b8cea000000f23c80f21f86635000090000f23f826670fc71fd9113e640fdd1a27f3dfbcd51b66b80500000066b9021273d50f01d966b9830500000f3266b9800000c00f326635000100000f30"}], 0x59, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb1000) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18fd74baa00000006dcd778c00000000009500"/28], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r12}, 0x10) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)=ANY=[@ANYRES32=r10, @ANYRES32=r0, @ANYRESHEX=r0], 0x0) syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) write$khugepaged_scan(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001000ffff27bd7000fedbdf2500000800", @ANYRES32=0x0, @ANYBLOB="300a0500231a0500"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 2m38.289360346s ago: executing program 4 (id=1350): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, &(0x7f0000000300)={0x8cb3, 0x7fffffff, 0x1, 0x40, 0xe8}) socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m37.355345346s ago: executing program 4 (id=1356): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) open_tree(r3, 0x0, 0x80900) (async) open_tree(r3, 0x0, 0x80900) sendfile(r6, r6, 0x0, 0x200000) ioctl$sock_proto_private(r2, 0x89e1, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r8, &(0x7f0000000640)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x3, 0x0) (async) preadv(r8, &(0x7f0000000640)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x800, 0x0) (async) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x800, 0x0) 2m36.848856143s ago: executing program 5 (id=1357): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="0232e60039536dc50c3eb346b008fefa8ce2d4c1c866321c084bb58c3dd1666a19af3c73704fb3e6436512727a375df73783de35a42869d1e92883480dcb1e7130", 0x41}], 0x1) futex(0xfffffffffffffffd, 0x5, 0xfffefffd, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r0}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, &(0x7f0000000040)) (async) r3 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="41c2b1af4b9e2afb08fbfa8795ae198eb98603501824b278e7af60824251a6b1334031aac5f7421d7ea02310f3f6dad9592da8773525688000a5f6a49c37b23832cc040c84e783080c453e1088ece52fc69e24c3e1ae2c1037d5ce4993609bee3f15bec55d55dc9e7628af08d52ef57f853e1e37981fbde83dcef7e62652a8134c50c7228bd9dd014e8fb12da0beba609df04014981d5b909c40d62f8520adf12fa8d1214304592069042f66a842d82d7d1066eb523222ddd454ffabbf8f42ff0ac2f20598b329547ab02665210da6927ec3b6dc80802b2349e5c1059214af03419fb04bbc4a0f147f8f170c960fd3cdae0e9ff5d5c8f431543fade614db2ed4297d74b4ccbe9a8cb22105ce48dbf2c00f8ad06f13416476", 0xfd29}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x2c, 0xae, 0x93, 0x8, 0x4da, 0x390d, 0xfadf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xc9, 0x40, 0x80, 0x1, [{{0x9, 0x4, 0xf9, 0x4, 0x1, 0xc0, 0xda, 0x26, 0xff, [], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x3, 0x0, 0xbf}}]}}]}}]}}, 0x0) (async, rerun: 32) close(r3) (rerun: 32) 2m33.605400875s ago: executing program 5 (id=1374): madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}, @TCA_FQ_PLIMIT={0x8}]}}]}, 0x48}}, 0x800) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="09268a92", 0x4, 0x11, 0x0, 0x0) 2m33.458061266s ago: executing program 5 (id=1376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000013580), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000013800)={0x0, 0x0, &(0x7f00000137c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0500279c42dbfddb6ecaa54a1f729a203d3b05757e7d0df267a811d7317d6280d21ea0ed2c4f1ec0334f6afe80f03c8436269d51df338cb1aa04353b8d737ef329c1c7118f34b91c1645207f42a22b7ee7eafabfe77daf7f66792eea41c98ec778c296c49494b3ef5fde87a1e1838a075e9886cd6cafce8c990b98358327bc1d7783f975d4df1d9a32894cf93c1712fe0c64d9c814ecf6f2156dcd7c92f1c8b7f238"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) 2m33.343483906s ago: executing program 5 (id=1377): r0 = socket$inet(0x2, 0x2, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f00001e2000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000180)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) pread64(r6, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc000, 0x0, 0x81, 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) 2m33.233506849s ago: executing program 5 (id=1378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)="301487d5", 0x4}], 0x1}}], 0x1, 0x20044888) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x18, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) 2m33.125762029s ago: executing program 5 (id=1380): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090561eb10000000010200090502"], 0x0) 2m21.719206301s ago: executing program 33 (id=1356): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) open_tree(r3, 0x0, 0x80900) (async) open_tree(r3, 0x0, 0x80900) sendfile(r6, r6, 0x0, 0x200000) ioctl$sock_proto_private(r2, 0x89e1, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r8, &(0x7f0000000640)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x3, 0x0) (async) preadv(r8, &(0x7f0000000640)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x800, 0x0) (async) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x800, 0x0) 2m18.068954035s ago: executing program 34 (id=1380): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090561eb10000000010200090502"], 0x0) 2m8.325830041s ago: executing program 6 (id=1428): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x200}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x64040011, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) gettid() ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f00000000c0)=0xf) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000100)}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @fwd, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 2m7.200594507s ago: executing program 6 (id=1475): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x4, 0xc) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb}, 0x11000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x48382) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x20) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) 2m5.858181187s ago: executing program 6 (id=1479): read(0xffffffffffffffff, &(0x7f0000000000)=""/75, 0x4b) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x401, 0x100) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000000c0)=""/193) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x48000, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x400, 0x2, 0x3, 0x60e}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x8, 0x3, 0xe, 0x1}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x480401, 0x120) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000340)={@id={0x2, 0x0, @d}}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, r0, 0xbb878000) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000380)=""/228) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x10) write$qrtrtun(r3, &(0x7f00000004c0)="5b0946eb005b93b45d40df18e6a45e8508f241c5a77a686d23994e02bff85c008da4c5720b1f91f940d5e752b9b7b45475361fa034f7636de3a28d0fb338cc43e0fd45d12c4d882db223899b3dfbff2776b93c5d1eda2ac441601d6e8bbf61bdd3c95b00589e1bb666cd1ee9987cfcd73cd0bf1d30737f65873ccf1b80051c3505b7cf488a3733ac1ccfedfb52970280e9dc051eca6afac3dd52979dacfab76d77ccc58c3f5627db2252375d9acd6d0070b821578ea60d9d0f31bf685b24ee111981cee458b57a307e4b70c38c8990ff3a13897a7c545f90ba653bc9162568c16b1c743cd64d7a", 0xe7) setxattr$security_evm(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), &(0x7f0000000640)=@ng={0x4, 0xe, '<'}, 0x3, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x80440e, &(0x7f0000000700)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0xa8}}, {@blksize={'blksize', 0x3d, 0xa00}}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@default_permissions}], [{@appraise_type}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}, 0x1, 0x0, &(0x7f0000000880)="d56f9cbdb80666c8de9be751591b07c7691dc89ebea37a3e978dfbc0c6cdbb2e5bdf83a39f3830376da1f2bfacec3dacfa2cc52c4ca1afb201fb0d37e6d2f8c2c5984fef864cd7322cca32365390e7b0e1ae7952f583101e6d244e7d784edf69129ecac8c7850e6b18ebc6b7da6a9ce2f696153f2c4c48e69f0d8b3c") r5 = openat$incfs(r4, &(0x7f0000000900)='.pending_reads\x00', 0x1a1200, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000980)={0x1, &(0x7f0000000940)=[{0x2, 0x5, 0x84, 0x80000001}]}) ioctl$HIDIOCGRAWNAME(r5, 0x80404804, &(0x7f00000009c0)) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000a00)={0x9, 0x5, 0x4, 0xc9b, "76317ca87bc77f9b1eb721052b7fa919d6f9e33cb2c9c561875a800b28190637"}) dup(r2) close(r2) r6 = accept4$phonet_pipe(r5, &(0x7f0000000a40), &(0x7f0000000a80)=0x10, 0x80000) bind(0xffffffffffffffff, &(0x7f0000000ac0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x2, 0x2, 0x2}}, 0x80) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000b40)=""/4) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000b80)={'netpci0\x00', 0x0, 0x8}) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000c80)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) fchmod(r4, 0xcd28f666e40e5dac) 2m5.629217636s ago: executing program 6 (id=1484): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x22693000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0xb0, 0x2f, 0x0, 0x70bd29, 0x25dfdbfb, "", [@generic="b5bdf01d3f2ca8fe5e2b27bbdd7eeaa970e22e07580febe5a3f5de71d4ddf1b8e95fd1f896760ed404637438c2840cec57130a481da25dacb8f7718827ecc429707f76f90ee1ee4f7692e277518b2d48f66fef3e023ab718138cbb54e4cd4518c63d0fbaa82a0cdb292c9939b9ad97e59c8671a21ea16c25399a02f33920576ebfc4464bd9b31d", @typed={0x17, 0xe0, 0x0, 0x0, @binary="6942b24d999d73f2c3ac42bc4b32c047ed0b57"}]}, 0xb0}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000280)={0x2, 0x2, 0x7ffb, 0x40, 0x8e, 0x7, 0x2}) ioctl$FS_IOC_SETFLAGS(r0, 0x125f, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="10000000000000000e010000010060dffc2ae000001000000000000000100100"], 0x20}, 0x24000080) 1m49.983870002s ago: executing program 35 (id=1484): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x22693000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0xb0, 0x2f, 0x0, 0x70bd29, 0x25dfdbfb, "", [@generic="b5bdf01d3f2ca8fe5e2b27bbdd7eeaa970e22e07580febe5a3f5de71d4ddf1b8e95fd1f896760ed404637438c2840cec57130a481da25dacb8f7718827ecc429707f76f90ee1ee4f7692e277518b2d48f66fef3e023ab718138cbb54e4cd4518c63d0fbaa82a0cdb292c9939b9ad97e59c8671a21ea16c25399a02f33920576ebfc4464bd9b31d", @typed={0x17, 0xe0, 0x0, 0x0, @binary="6942b24d999d73f2c3ac42bc4b32c047ed0b57"}]}, 0xb0}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000280)={0x2, 0x2, 0x7ffb, 0x40, 0x8e, 0x7, 0x2}) ioctl$FS_IOC_SETFLAGS(r0, 0x125f, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="10000000000000000e010000010060dffc2ae000001000000000000000100100"], 0x20}, 0x24000080) 9.443336291s ago: executing program 0 (id=1976): mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000880)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x1d, r1, 0x3}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=@canfd={{}, 0xfe, 0x0, 0x0, 0x0, "621105b0ae0282d478b6b01305946c17afcea96765fbac1cd8aabe71d5522a79da5a1d57b5fc633203000000ab6e543a04aa00"}, 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ptrace$poke(0x4, 0x0, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/resume', 0x143b82, 0x20) write$P9_RWRITE(r4, &(0x7f0000000180)={0xffffffffffffff72, 0x77, 0x4001, 0xd42}, 0xb) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000002c0)={0xc, r6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r6}) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) umount2(&(0x7f0000000240)='./file0\x00', 0xc) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6ef68000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 8.445367679s ago: executing program 0 (id=1978): syz_io_uring_setup(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1046, 0x0, 0x1}, &(0x7f00000000c0), &(0x7f0000002540)) 8.231662962s ago: executing program 0 (id=1980): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000104038a0000000000000000000000000a00020000000000020000000500010001"], 0x28}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x28, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6d}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x1}}]}, 0x28}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_usb_connect$uac1(0x0, 0xe6, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}}, &(0x7f0000000ac0)={0x44, &(0x7f00000008c0)={0x40, 0x30, 0x90, "2be11f42733746783b3557b2037906fc718f89352b2107ec5af23ea7a84607edef1eb9303763186b047d914d2df4bf95d9b21ae6f773c930d16cc9802b7e3ba858a92c390b03692df36df907567bf5a1cac72e1a9ca38ef8214551c1372e7aa8fcc372de964304f481754dd0c40ee8ff0c280178cbb4d3ebbd7668f57d776e4677dd899abe7048ac5ae98bbe20f80b2f"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="a221dc07e52d6214f6ad000096aeffd336bf68ea528130cbd3801110726b657905fad8a5f91874445f2f32e6aa3d03034d9d7d352b83f541e0de8d7ef4ab37c122a303dae0edcb730bfc53218d5cfe20a217738b33bb16254f4fbca2"], &(0x7f0000000a00)={0x20, 0x83, 0x1, '\v'}, &(0x7f0000000a40)=ANY=[@ANYBLOB="208404bda399de94320e"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x92}, 0x0, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x86}}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='net_prio.prioidx\x00', 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f030e03e8aa140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x941d42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000140), 0xa, 0x199742) r5 = gettid() r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open(&(0x7f00000001c0)='./cgroup\x00', 0x8800, 0x0) 7.861195621s ago: executing program 8 (id=1981): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x3}, 0x90) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @random="50a245d5cde0", @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "8b7bcc", 0x4c, 0x2f, 0xff, @private2, @mcast2, {[@dstopts={0x88}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x6, 0x1, 0xf5, 0x1, 0x1, 0x1, 0x4}, 0x1, {0x7fff}}}, {0x8, 0x22eb, 0x0, {{0x1, 0x2, 0x4, 0x3, 0x0, 0x1, 0x2, 0x4}, 0x2, {0x1, 0x3, 0x2, 0x1a, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}}}}, 0x0) 7.777221587s ago: executing program 2 (id=1982): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = syz_io_uring_setup(0x9ee, &(0x7f00000003c0)={0x0, 0xc95c, 0x100, 0x3, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x7ffa, 0xba1c, 0x40, 0x0, 0x39) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000300)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000300)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r7, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) sendmsg$netlink(r0, &(0x7f0000000200)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfd, 0x22000000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000340)={0xec, 0x27, 0x10, 0x70bd2b, 0x25dfdbff, "", [@nested={0x4, 0x80}, @typed={0x8, 0x11c, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0xcd, 0x50, 0x0, 0x0, @binary="91eaa8d96a34e812da2336587887300ef1cb5409756f59201bd7b5f23a2d527f40c30f050eb30d1afffbd26366ffd053a498a5a518e183120aeda2f3d10ac80c196e922a87c31842cfb58f7a07b13b8c6355dee9f40291029b1e92af73c806e41f611a976d469e43fa82ae8fb90af57ce92fe09fe58ee52dfbd474912f7ee6cc28f29788e0e9b9560b69a42a3fc88c15d8500f8eb7a192bd76ba9946168b9c7af6ba516eba0639c0e9f98cc0e743b2524bd2961313407ebe362775e5f15f5a6f9734f61b5a3c0887c3"}]}, 0xec}], 0x1, 0x0, 0x0, 0xc8c0}, 0x4008800) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000050000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffff"]}, 0x131) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f0000010000000000000000200002000a000000000000000000000000000100"/90], 0x60}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f0000010000000000000000200002000a000000000000000000000000000100"/90], 0x60}}, 0x0) 7.715415918s ago: executing program 8 (id=1983): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x890, &(0x7f00000000c0)={0x0, 0x20aee4, 0x100, 0x0, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000004200)={0x2020}, 0x2020) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket$packet(0x11, 0x3, 0x300) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getitimer(0x2, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) lseek(0xffffffffffffffff, 0x10000000005, 0x0) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) 7.624630183s ago: executing program 1 (id=1984): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a4014"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000001070000000900010073797a300000000044000000090a0904000000000000000007001c0008000a40000000000900020073797a310000000009000100000000000000000008000540000000310800084000000001140000001100010000000000000000000084000a7b42f931cb07174f3daf129b5ac98fbffe5bee98e777191f1ec6e1865badacb89b865c1a50dd7d5d467f3acc0050674b9c504e91dffba1"], 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000012c0)=0x3ff, 0x4) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'ipvlan0\x00', {}, 0x8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="480000001000"/20, @ANYBLOB="1000000000000000280012800b00010062726964676500001800027249edd9c8d953260cc8ffa0870bcf54e143f761deaa05aef2d272021c6b67907165edb1a2d5b8067dc3ef504baf10e53737dc0044f5219ffa65e2cd8c6848890e7c1372abb94cae6478444fc99db585d3e503d51b4fe8aaadbd50e8f75b019e11a659bd62e48663c9e10c77aed131f9a661b28199ee5a3bdb4ce5b72e0833ed53e222c5e4b3f93a88101b027938aad047fb8f4475528f933764b6c898c771db1c701241793b78b35f55c4f65689ddbdda101cc6a553c10c9ba1ea834f"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0x3, 0x3}, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES64=r0, @ANYRES16=r2], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x8080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f0000000380)={0x2c, 0x25}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r9 = socket$unix(0x1, 0x0, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240), 0x804000, &(0x7f0000000980)={[{@gid}, {@mode={'mode', 0x3d, 0x101}}, {@mode={'mode', 0x3d, 0xffffffffffffffc0}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'system.posix_acl_access\x00'}}, {@measure}, {@uid_gt={'uid>', r11}}]}) bind$unix(r10, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) listen(r10, 0x0) connect$unix(r9, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r10, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000100060000000000040000000000000008000100", @ANYRES32=r10, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="100002000000000020"], 0x3c, 0x3) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.456935568s ago: executing program 1 (id=1985): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000003"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x2, 0x62, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x1, 0x50, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "f9b63b210a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x100, 0x81, 0xa7}, [@network_terminal={0x7, 0x24, 0xa, 0xdf, 0x4, 0x7, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x0, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0xd, 0x6f, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0xf, 0x9}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x9, 0x7, 0x5, 0x8, 0x5}, 0x2a, &(0x7f00000000c0)={0x5, 0xf, 0x2a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x7, 0x4, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "44f9ed1d03f8619fbd64f6137f1ebf90"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x5, 0x8, 0x8, 0x7fff}]}, 0x7, [{0x29, &(0x7f0000000140)=@string={0x29, 0x3, "5b0d5dc45527e815da958a04400dc5b101b3f082675eb27b7d2e0a136c03cc432bafa7b8beb53b"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x810}}, {0x99, &(0x7f00000003c0)=@string={0x99, 0x3, "99ff09b920aef4aeb15e09c4da0aa9606ef46ac26a75a66c9f92abf47361765b15f48b75220caf12e9086e5d0a7571f2e163d04e04dee345ac2c176e014bf9d0ae6138dff6f69c03519e71963e5b536247f1192e890f75153b90bab2a8b1ac557286f6b9de253f38cad1aabe401227149dca3e768da926d5216e27b6c51674eb1ed509d7a35708683fa4c50288d1cdefa1828b743984a8"}}, {0x17, &(0x7f0000000280)=@string={0x17, 0x3, "79db0b48b8cdb2758fc21b22041266aca6a0398426"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc09}}, {0xd7, &(0x7f00000009c0)=@string={0xd7, 0x3, "ae10e8f9cefe2143a583390c5ea42c8968a8fbbccd2fa594493baa2d8d128a5cea452eaf8e2cb2a2a75b57f2bd5651715ed8ff1d66599757b7dc3d07c6a1fbb88608cdbe78404edf70b2ec15f79935877dd998c137dc7c9639fb27af6ee475749e73b48aba5eb7da5880bfca8adc1cc087be9e30d8c42fc8cb20ead5b410a1841d9b6aa59f4736f21e07ca976e769639ae10a80220480d1eb5891698f2ccdfc48e053cc4be544fdd84b1f78bf0d11bbff3b6765e56267779203dd8bbb6f9dcbe2b43df6b3f4d72f63542e5b39508d6432af0aff011"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x81d}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000780)={0x14, &(0x7f0000000640)={0x40, 0x31, 0xea, {0xea, 0x9, "324b63f212dbea3c6b55825f4f74cf303b1144350afe77fa29799971a694fa234424a1571eebb9342bfb9d6631a648ee7843e86eeb18cb4964c07b2868b67c27e56d8df072c7d4cb304279f155f96a0141c771942254e0fbcec2c927f2073ab72c20a05c62255f4d24e48c8eb8b2e47dfea24b873c7db65ecdae23c0a237386444510f8e2d66631c08efcb1539b719426fa84ed38634c9f65fe648c4e5a340f2e747824778f935ea3128699eaf3ecb89f3620b4df0a20f41022a012ecda937c7f7fb91b9cf3765aab92816b9532a1d971e9bc58e206a118b53e29b9985d050c1c32456e7339c35c0"}}, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x1c, &(0x7f00000007c0)={0x20, 0x0, 0xa7, "8e24c05e51494f6396710eff6066b0dcd479e063e728475988548ec013edfe0ca3be305dc3620e61858fac9a02e6d08448321215c467f0271bcc6a1b926bdb676d92d7d70935d241bd390f88933e457140b9086ccbf035b5ac108dc08914e769fbbb7fa17ea6d13b0d78fe7d68ed6e11cda67b5399750da9551700528be2f24f6c4a1e2d4c46273211f2be43212b2bb42f373a838d73436cfb4d65c576cfaef9d35b16f149ba91"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xb}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39}, 0x48) r2 = syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000ac0)={0x14, &(0x7f0000000500)={0x40, 0x7, 0x4a, {0x4a, 0x6, "ebf7000521b0dca93a8fac23781045a0a4cd33e7b33e4f3b44762c3a103a257f4a28eaac59d85ae036860a9a17ccfb819f44099bab2277754a3204bf21c1a8274633c2ace76ddc93"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}}, &(0x7f0000000c40)={0x2c, &(0x7f0000000b00)={0x0, 0x13, 0x18, "3e622eaf93dc92b70ec18d361952656eb02606dce731f542"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000bc0)={0xc0, 0x5, 0x5, "0fd4863b27"}, &(0x7f0000000c00)={0x40, 0x5, 0x5, "c20ee28117"}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = memfd_secret(0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast1, @remote}, &(0x7f0000000240)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x0, 0xfffffffc}, 0x14}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000002040)={{}, "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"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000280), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES8=r9, @ANYRES16=r9, @ANYRESOCT=r6], 0x28}}, 0x0) syz_usb_disconnect(r1) 7.417743312s ago: executing program 2 (id=1986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x4) mmap(&(0x7f00002c3000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x50776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setrlimit(0x5, &(0x7f0000000040)={0x5, 0x7}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000200)=0x21) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)}, 0x4000000) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) listen(r6, 0x80) 7.336767128s ago: executing program 0 (id=1987): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$usbfs(0x0, 0x76, 0x101301) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x0, &(0x7f00000001c0)={0xfc3, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x8, r2, &(0x7f00000002c0)="7c789bb169b2e4c1646997447bb4facd44b6d17c263d5c70b420765fc371521a558a9cf9307f5f4bcecad7f296a4", 0x2e, 0x0, 0x0, 0x1}]) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.005481178s ago: executing program 2 (id=1988): setrlimit(0x1, &(0x7f0000000040)) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39]}, &(0x7f0000000080)={0x0, "7fa83dab0d3366512d5be849797d7df93815e60c650932d7ec32e239af37da22bb8a3ea6000000000000a266d67a08835a00"}, 0x48, 0xfffffffffffffffd) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xfa) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r2, 0x0) keyctl$chown(0x4, r3, 0xffffffffffffffff, r1) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000001080), 0x14) add_key(&(0x7f0000000180)='ceph\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000100)="3fa8674c85851023316d6f0738424ebbe3bd9c079aa3a3a477a63675e517c10e2bf414134347ad68c0eaa538e2799e5d89d857f3fdc6db3591c99de999aee94f09e7a333b5", 0x45, r0) 6.514184414s ago: executing program 2 (id=1989): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000240)={0xab, 0xf8, 0x200}) 6.299597753s ago: executing program 2 (id=1990): rmdir(&(0x7f0000000040)='./file0\x00') (async) rmdir(&(0x7f0000000040)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x324, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x310, 0x1, [@m_simple={0x98, 0x14, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, ':\x00'}, @TCA_DEF_DATA={0x6, 0x3, '[\x00'}]}, {0x59, 0x6, "2142fd3b7739e2df1ce11a6cb358923efde1e857b5f4b6f98b557df785dd171fde9589b89159b81ee8cae94d2e9fa3057e2ef1dcb1a91c625616b378bf4efa552a73c8d7f1dcf6bda7d96971955d93d98a6c82b565"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_xt={0x80, 0x18, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1000}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x29, 0x6, "cd9c84604746a447054c7b474930f762c5fb129369a82846c67bb4482e69be4a390319bd40"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x1f4, 0x12, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x0, 0x87}, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80007, 0x8, 0xffffffffffffffff, 0x6, 0x7}, @loopback, @broadcast, 0x80, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x5, 0xa7, 0xffff0001}, @broadcast, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x4, 0x0, 0x3, 0x9711}, @multicast1, @multicast1, 0x95c5050eeb275cf0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0xfffffffb, 0x736fe187decc650e, 0x101, 0x30000}, @remote, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd, 0xb111, 0x8, 0x838, 0x2a}, @private=0xa010101, @rand_addr=0x64010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x18, 0x5af3, 0x8, 0x9, 0xcd}, @private=0xa010100, @multicast1, 0xff}}]}, {0xb1, 0x6, "00dbe2375389f4c61bb80b5c04766adf4c4041ab3363ca93e40c5281d6bb7035fa3fb2838101ae15e668e34175f78ce7df4b1c48d956acfb10ab481c7729ee14cbb37713b8e2a37054e99152bbb3f0c77e56a1f6ab9da61c7f00958a0a8d67f277272c411cba11ef13007927c9c52984e903960081484a463aa2d388d77984fa7968102f600b0936201c9964cff6e2e5e131439b5dd84f40bb377965a4af38c2020711a2fad2ba4e11f442caf2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x324, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x310, 0x1, [@m_simple={0x98, 0x14, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, ':\x00'}, @TCA_DEF_DATA={0x6, 0x3, '[\x00'}]}, {0x59, 0x6, "2142fd3b7739e2df1ce11a6cb358923efde1e857b5f4b6f98b557df785dd171fde9589b89159b81ee8cae94d2e9fa3057e2ef1dcb1a91c625616b378bf4efa552a73c8d7f1dcf6bda7d96971955d93d98a6c82b565"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_xt={0x80, 0x18, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1000}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x29, 0x6, "cd9c84604746a447054c7b474930f762c5fb129369a82846c67bb4482e69be4a390319bd40"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x1f4, 0x12, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x0, 0x87}, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80007, 0x8, 0xffffffffffffffff, 0x6, 0x7}, @loopback, @broadcast, 0x80, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x5, 0xa7, 0xffff0001}, @broadcast, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x4, 0x0, 0x3, 0x9711}, @multicast1, @multicast1, 0x95c5050eeb275cf0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0xfffffffb, 0x736fe187decc650e, 0x101, 0x30000}, @remote, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd, 0xb111, 0x8, 0x838, 0x2a}, @private=0xa010101, @rand_addr=0x64010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x18, 0x5af3, 0x8, 0x9, 0xcd}, @private=0xa010100, @multicast1, 0xff}}]}, {0xb1, 0x6, "00dbe2375389f4c61bb80b5c04766adf4c4041ab3363ca93e40c5281d6bb7035fa3fb2838101ae15e668e34175f78ce7df4b1c48d956acfb10ab481c7729ee14cbb37713b8e2a37054e99152bbb3f0c77e56a1f6ab9da61c7f00958a0a8d67f277272c411cba11ef13007927c9c52984e903960081484a463aa2d388d77984fa7968102f600b0936201c9964cff6e2e5e131439b5dd84f40bb377965a4af38c2020711a2fad2ba4e11f442caf2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = getpid() syz_pidfd_open(r1, 0x0) (async) r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="e2", 0x1}, {&(0x7f0000000040)="990e55", 0x3}], 0x3, 0xc, 0x0) (async) process_madvise(r2, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="e2", 0x1}, {&(0x7f0000000040)="990e55", 0x3}], 0x3, 0xc, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r3, 0x0, r3) socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r7}}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r9, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x8, 0x2e, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x5}, {0x0, 0x3, 0x2, '\x00', 0xd7}, {0xf, 0x0, 0x8, '\x00', 0x5}, {0x7, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0x13, 0x7, 0x5}, {0x11, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x19}]}}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) 6.224275157s ago: executing program 7 (id=1991): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$eJzs3MtvVNUfAPDvnbY8fjzaHyIKglbQSHy0tKCycKFGExeamOgCl7UtiAzU0JoIabQYg0tD4t64NPEvcOfGqAtj4lYTl4aEaGNCcTXmvugwnSltaTvS+XyS6ZxzH3PO9957Zs69p/cG0LH60z9JxPaI+DUievPsrQv0529zs9OjN2anR5Oo1d74M8mWuz47PVouWq63rcgcrkRUPkni+WRhuZMXLp4ZqVbHzxf5wamz7w1OXrj41OmzI6fGT42fGz5+/NjRoWefGX56VeJM47q+78OJ/XtfeevKa6Mnrrz9w9dptfYcyOfXx3FbN5oE1ER/utX+qmUa5z26jLrfDXbUpZPuNlaEZemKiHR39WTtvze6Yn7n9cbLH7dec/P6VBBYM+lv0yIteaYGbGBJtLsGQHuUP/Tp+W/5Wqeux3/CtRciNhXpudnp0bmb8XdHpZjes4bl90fEiZl/vkhfsdzrEAAAK5D1bZ5s1v+rxJ7sPR/r2FmMofRFxP8jYldE3BMRuyPi3ohs2fsi4v585VrvEsvvb8gv7P9Urjat8ypJ+3/P1fX95uriL976uorcjiz+nuTk6er4kWKbHI6ezWl+aJEyvn3pl89azavv/6WvtPyyL1hU4Gp3wwW6sZGpkdXaCNcuRezrbhZ/cnMkID0C9kbEvuV99M4ycfrxr/a3Wuj28S9iFcaZal9GPJbv/5loiL+ULD4+ObglquNHBsujYqEff778eqvy7yj+VXDt4AN5Yn7/NyzR+3eSj9f2RLU6fn5y+WVc/u3Tluc0Kz3+NyVvZmPWP72TT/tgZGrq/FDEpuTVLF+e02XTh+fXLfPl8unxf/hQ8/a/q1gnjT/dSulBfCAiHoyIh4q6PxwRByPi0CLxf//iI+8uEn8SSbRv/1+KGGv6/Xfz+O9L6sfrV5DoOvPdN61GzOv3fy1ptf+PxUz2XZvLvv9uY6kVvMPNBwAAAHeFSkRsj6QykKf7t0elMjCQ/w//7vhfpToxOfXEyYn3z43l9wj0RU+lvNLVW3c9dCiZKT4xzw8X14rL+UeL68afd23N8gOjE9WxNscOnW7bre0/yvaf+qOr3bUD1pz7taBzNbb/SpvqAay/pfz+OxeAjenW9r8l/bO1XXUB1pfzf+hczdr/Rw15/X/YmBY+AOj3Jo+sAzYi/X/oXNo/dC7tHzpSfif8lVjJff0rT5Q3C6z8c7Ys+Q7/TkmUT7xYy7K2xvyUqLQ95A5KpC1mfQudf4YKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3ezfAAAA//+5XeWQ") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_THP_DISABLE(0x29, 0x1000000) preadv(r4, &(0x7f0000000000), 0x0, 0x7, 0x3) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2122, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="9b5800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00003166b4820bb7f8000000000000000000002000"/35], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000003c0)={'wg0\x00'}) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r6, r0, 0x0) finit_module(r6, 0x0, 0x0) 5.78183274s ago: executing program 8 (id=1992): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write(r3, &(0x7f0000000180)="a1", 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'M'}, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r8, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000085000000120000009500000000000000c7594931c7ad3de2fed74f3a516fe4b0b4bb2cf207fa79dc7a8351de99a71f057bccaaad5f6105a69551e4545c0dba6f5ce68eac2e45dbcc96fa482967f67ab7cf53e7214a313f92703da27f6fa448611c246517fec01fdf8019d1cd8571482ef3ae16f9c3332ac21fd867ad0f1f9f4e32493229502ddd2e"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa}, 0x94) 5.092878993s ago: executing program 7 (id=1993): open(0x0, 0x4000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000003400850000000f0000001801000064836c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x19}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000208, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 4.918629854s ago: executing program 0 (id=1994): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES16], 0x41}}, 0x2) syz_emit_ethernet(0x4c, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd60010100ff070000fe80000000000000000000770419fd940499148ff6b0f0000000f73147bfd4186670000000000000080000bb00030e22001690780203000000000000ffb00afe4e70"], 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0xfffffffffffffe4c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r8, 0xe0d, 0x4, 0x7, 0x2, 0x8001}, 0x14) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f0000000080)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) 3.401714712s ago: executing program 7 (id=1995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0x9e, &(0x7f0000010140)="$eJzs16GKQkEABdC7L+xu27WIzWzxH/wUsxYxKYJ/4CfaDQa7OMJ7AyLYBIOeEwbuXAam3vKXVtkmZTRYHMrNcrWeTefdGd5Sk+QnyW+SYa/Lx0nXfdV+f9rk/9Hj792LfwsAADyjyfg+X0q9ONcV2IZ+OxLqTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4JNcAAAD//0AHJDI=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r6 = accept4(r5, 0x0, 0x0, 0x800) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000800)="ca7ac5f90fed369c49ed0fb7f4ba", 0xe}], 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x8000) 3.400467418s ago: executing program 8 (id=1996): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x5]}, 0x8) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60f4adf700082c00fc020000000000000000000000000001ff020000000000000000000000000001"], 0x0) unshare(0x400) connect(r1, &(0x7f0000004040)=@pppoe={0x18, 0x0, {0x2, @broadcast, 'veth0_to_bond\x00'}}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xe) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={r2, r3, 0x0, 0x0, 0x4}) 3.399376553s ago: executing program 0 (id=1997): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = signalfd4(r2, &(0x7f0000000400)={[0x84]}, 0x8, 0x800) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000440)={0x80000001, 0xffffff4e, 0xa, 0x8001, 0x2, 0x7}) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) connect$unix(r0, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) io_getevents(0x0, 0x840a, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f0000000300)={r7, r8+10000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r9, 0xc02c564a, &(0x7f0000000000)={0x9, 0x52424752, 0x0, @stepwise}) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = dup(0xffffffffffffffff) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r10, 0x0, 0x0) getdents(r10, &(0x7f0000000380)=""/114, 0x72) close(0x3) 3.181377509s ago: executing program 1 (id=1998): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x31c0, 0x80000) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file5\x00', 0x20040, 0x12a) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file7\x00', 0x200) mknodat(r1, &(0x7f0000000400)='./file5/file0\x00', 0x2, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./file7\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0xc1c0, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file7\x00', 0x11c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000940)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./file7\x00', 0x0) 3.10409298s ago: executing program 8 (id=1999): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) (async) r1 = socket$kcm(0x29, 0x2, 0x0) (async) r2 = syz_open_dev$media(&(0x7f0000000b80), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f0000000240)}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2.37424799s ago: executing program 1 (id=2000): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2d00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0xc048aec8, &(0x7f00000001c0)={0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2d00, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_PIT2(r1, 0xc048aec8, &(0x7f00000001c0)={0x6}) (async) 2.349754132s ago: executing program 7 (id=2001): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) mkdir(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close(0xffffffffffffffff) ioctl$KVM_GET_LAPIC(r6, 0x8400ae8e, &(0x7f0000000540)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040b8) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x40880) 2.253176767s ago: executing program 8 (id=2002): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x10, 0x80003, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.283019106s ago: executing program 7 (id=2003): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendfile(r2, r0, &(0x7f0000000080)=0x101, 0x3ff) timer_create(0x0, 0x0, &(0x7f0000000000)) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x1, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x7fffffff, 0x0}, {0x3, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf41, 0x0}, {0x4, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0xffff, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x104, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r3}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r7}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbd, 0xe5, 0xa4, 0x40, 0x2770, 0x9052, 0x15f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x5c, 0xa}}]}}]}}, 0x0) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x400, 0xbbbc, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}) (async) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b514090582"], 0x0) 1.032884734s ago: executing program 1 (id=2004): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001b40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffc, 0x0, 0x2, r7}) (async) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r7, 0x1}) (async) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r7}) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003b80)=0x0) (async) fstat(r0, &(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003c40)={{0x1, 0x1, 0x18, r3, {0xee00, 0x0}}, './file1\x00'}) sendmmsg$unix(r2, &(0x7f0000003d00)=[{{&(0x7f0000000000)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001a00)=[{&(0x7f00000004c0)="48abb7d2883907d01e0ee2b0015831e040fd5a6259411ad63686342187f99d970e7a70ec9d5c01f2903ca43377e279ada474b39c6d60f8f2e3b9dddbc05a8dada4e61edf2156f43d4076ebfdf819658a2cdd0a6a502a3e7035a683e9ad5188fd8deacd300a1455f18c70e48b0f0e7fb7cd37bf38f3af9624cf0ac9f2beb0729ec8443bb7eb72574b025e143159adcb3e1d6aec81d3e1759d0645ee9275e6de55bcd7c339f188351387cec2e56e6f7261e2270e7c8e6b3373937fd2e8b48d395b8bc8201aca53811921a6c7d7eef12bd4a6df5bec9028e48c3d6a27a406d32c4a9d", 0xe1}, {&(0x7f00000005c0)="6a193c5f5bce7bc84800f9c31d7a6ec309110289e4f9643939ac1f4c9f15ae119f1c1354c7c634024815cc08bb751593d01dc187593b4c2d578e333166143c047ef57397c01aa9d4a09efd2412576862970261a2500395e0609d694b2bc05a7e87e0bce610400638feef5ddf1d3ee3cc8bf457597a525d817509a5458c0dbaccc8f3c59220d82bcb117b8299dec3a42590af3688c68b8cd4f7e5565aea38fffe5c1e8b00ec119b53c3a49280dc7c4647307241bea82419f15f24ac90d5c837ace6ad7635226a7dcab405f76830cc96a62b2c17199aafab99ae12a769e24a0767f9782a07544c35375b429826b1d21f2b", 0xf0}, {&(0x7f00000006c0)="1506f9abdf03ba16e1058221d35c03478155b34e8aef5103745ddd8c201f639205400259c63c7346b70f5d17a0e92716e6833a5df8426268531af5e695dc992ea2c63eb920faa0120fec3a8b87e34d3cdc57f023244796aaf21f119e179a1ce39c11cc9c242ec98ae579023567b28364420b62cea13ffb19db41fa03e7e39e1f147906d9d36d6bd0a68ad4106c0593c576675d035fd9a7eae542e66f130de2c9fb1954f9b3c4af1391144eb0428292a1c6c46abf04b77092fbce9dd46d5f55106fb9c9ed5cae50513666fa5b689e24b081349322120ac5aed86de03387d6251eacdba5532a1b3c028453fefca0ba", 0xee}, {&(0x7f00000007c0)="8a7e3abba82dca74a0a283fa178f9cfa111e3ef3e8cee0606aed890b9ddff4f0731a2b048ccff8334cf204f5b4d2a14ec64445c370cea6c04b20177ea9557719d303e8c736aed529de1dd9a50c1c9ba965552311867bbdf31c3a10b1e95db24f498d15a8112575b9ef47261bb0c7da7a467e9529f774e048b418020930d67c3e6a8c95e424288ca85fe8c53f79b40c493c709c084e5e48b9f0f00ba304f7f3e7dbae0822", 0xa4}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000001880)="902877d989aa7c6dc04ae7959c069a5569da1b5979a37fdfffac06a3ac2951fce3444ec713924f1fba7c343965242a9ac6a6dbffa32dfcc84363cf08155f017b717649256e1629d04c4b30ceb0a896528852c63205c483587ef38540c5272c956c54498da08fb578c52ce84fdd89520250", 0x71}, {&(0x7f0000001900)="c38f0b5f32d3087e34d5275ce042f77a43fded96ecb89fbcf472731dbfc34f8ac7623cc2a08c3300e46bd6110199f4c2f45ce2ef1ac1a53b4dd45af895da40e6120e2bb1e05584f2d699eb89849ccb3f5a7cf71190b74cbcca155c17b9bf8581669aa46a4b03846b73d980c5cfee7fc6be9868e35c8657ccfe768d2e162eee0dddfbe1278bb57b059ac873afed2ee489ce783c8edcc7f63e4ca282d08b6ee5c6a80630c920d6f6d4e687542176dc3479a0c58443043602ff6c39d5da625842d047518687fff3abdf778c8721633ad4cb600338f5a2ee4cbb29744c6d4b", 0xdd}, {&(0x7f0000000240)="2fb3afaf3cb958e49dd82d302458f139666919f5157d52c36fcb863a7a5df79b280cc5e58eea", 0x26}], 0x9, &(0x7f0000003c80)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, r4}}}, @rights={{0x18, 0x1, 0x1, [r6, r2]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x70, 0x840}}], 0x1, 0x80) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r11 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r11, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @in={0x2, 0x0, @multicast1}, @in6={0xa, 0x4e22, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x81}], 0x48) (async) socket(0x10, 0x803, 0x2) socket$unix(0x1, 0x1, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0xb1}, {0x6}]}) 277.405119ms ago: executing program 7 (id=2005): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x70, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x3a, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x2, 0x5}, {0x6, 0x24, 0x1a, 0x4, 0x9}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xab, 0x6a, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x6, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x52, 0x10}}}}}}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d000800080008000400080008"], 0x4c}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6400c0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r3, @ANYRES16=r0, @ANYRESHEX, @ANYRES8=r0], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 276.943322ms ago: executing program 2 (id=2006): syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0x8, "638b2309"}, @global=@item_012={0x2, 0x1, 0x8, "72ee"}, @local=@item_4={0x3, 0x2, 0x4, "d47c37d8"}]}}, 0x0}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)={0x20, 0x41, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x4, 0x31}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x40}]}]}, 0x20}}, 0x4010) 0s ago: executing program 1 (id=2007): unshare(0x28000600) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)={0xe0, 0x10, 0x50b, 0x0, 0x200, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da201adfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d2d287a8dfeff963b29882fbd9423debbb86f9dba4a2dba4dbe076c02262600c43443efd6f5091dfbd56183a567de243ab0d67683f7bb11c9cab3b3eed8a81e93ff163103c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9e4606d0e4cc898739222c5d3a83c00341c5ae846a60cf93ab48d68e8e9467d1cca"}]}, 0xe0}], 0x1, 0x0, 0x0, 0x804}, 0x0) (async) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) (async) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async) socket$kcm(0x10, 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xd24}}, './file0\x00'}) ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x413, &(0x7f0000000240)="23591363adf90f430000000000008c0e09d809cf3525", 0x0, 0x16}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r10, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030004ac0f00"], 0x58}}, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r14, 0x0, r15, 0x0, 0x1, 0x5) kernel console output (not intermixed with test programs): sim2: renamed from eth2 [ 405.932184][T10376] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 406.279769][T10376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.335502][T10376] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.354488][ T5877] Bluetooth: hci5: command tx timeout [ 406.426114][T10376] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 406.471734][T10376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.618273][ T9868] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.625478][ T9868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.691637][ T9868] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.699012][ T9868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.807766][T10479] netlink: 'syz.1.1159': attribute type 1 has an invalid length. [ 406.965737][ T5974] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 407.006599][T10484] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 407.051377][T10484] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 407.109774][T10479] gretap1: entered promiscuous mode [ 407.130808][ T5974] usb 5-1: Using ep0 maxpacket: 32 [ 407.137260][T10479] bond3: (slave gretap1): making interface the new active one [ 407.147449][T10479] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 407.156741][ T5974] usb 5-1: config 2 has an invalid interface number: 121 but max is 0 [ 407.165173][ T5974] usb 5-1: config 2 has no interface number 0 [ 407.170848][T10491] macvlan2: entered promiscuous mode [ 407.172861][ T5974] usb 5-1: config 2 interface 121 has no altsetting 0 [ 407.179795][T10491] macvlan2: entered allmulticast mode [ 407.191151][ T5974] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b0.80 [ 407.191377][T10491] bond3: entered promiscuous mode [ 407.208913][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.212347][T10491] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 407.228410][ T5974] usb 5-1: Product: syz [ 407.232724][ T5974] usb 5-1: Manufacturer: syz [ 407.237573][ T5974] usb 5-1: SerialNumber: syz [ 407.249738][T10491] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 407.268728][T10491] bond3: left promiscuous mode [ 407.360358][T10376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.488841][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 407.488858][ T30] audit: type=1326 audit(1758640189.080:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 407.563727][ T5974] legousbtower 5-1:2.121: interrupt endpoints not found [ 407.603470][ T5974] usb 5-1: USB disconnect, device number 39 [ 407.623698][ T30] audit: type=1326 audit(1758640189.080:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 407.659698][ T30] audit: type=1326 audit(1758640189.110:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faae878d710 code=0x7ffc0000 [ 407.685339][ T30] audit: type=1326 audit(1758640189.110:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 407.710819][ T30] audit: type=1326 audit(1758640189.110:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 407.734785][ T30] audit: type=1326 audit(1758640189.110:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 407.759813][ T30] audit: type=1326 audit(1758640189.110:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 407.804600][ T30] audit: type=1326 audit(1758640189.110:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 407.828834][ T30] audit: type=1326 audit(1758640189.110:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 407.853884][ T30] audit: type=1326 audit(1758640189.110:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 408.311186][T10516] kvm: user requested TSC rate below hardware speed [ 408.784352][ T5885] Bluetooth: hci5: command tx timeout [ 408.972619][T10376] veth0_vlan: entered promiscuous mode [ 408.987661][T10376] veth1_vlan: entered promiscuous mode [ 409.294363][T10376] veth0_macvtap: entered promiscuous mode [ 409.324475][T10376] veth1_macvtap: entered promiscuous mode [ 409.852732][T10376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.872956][T10376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.916512][ T9876] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.959766][ T9876] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.000010][ T9863] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.063062][ T9863] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.644583][ T9869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.678923][ T9869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.159952][ T9863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.226476][ T9863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.602190][T10549] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1129'. [ 411.611819][T10549] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1129'. [ 413.073783][T10570] netlink: 'syz.0.1180': attribute type 1 has an invalid length. [ 413.190882][T10571] vlan0: entered allmulticast mode [ 413.219171][T10571] veth1: entered allmulticast mode [ 413.239791][T10573] netlink: 'syz.4.1181': attribute type 11 has an invalid length. [ 413.249096][T10573] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1181'. [ 414.986733][ T24] kernel write not supported for file /806/loginuid (pid: 24 comm: kworker/1:0) [ 415.156994][ T43] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 415.218995][T10619] netlink: 'syz.4.1191': attribute type 10 has an invalid length. [ 415.230977][T10619] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 415.367082][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 415.404918][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1190'. [ 415.416169][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 415.416187][ T30] audit: type=1326 audit(1758640196.990:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10611 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab518eec9 code=0x7ffc0000 [ 415.445920][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 415.474667][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c121, bcdDevice= 0.00 [ 415.500871][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.530566][ T43] usb 2-1: config 0 descriptor?? [ 415.550560][ T30] audit: type=1326 audit(1758640196.990:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10611 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab518eec9 code=0x7ffc0000 [ 415.576724][ T30] audit: type=1326 audit(1758640196.990:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10611 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f5ab518eec9 code=0x7ffc0000 [ 415.599987][ T30] audit: type=1326 audit(1758640196.990:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10611 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab518eec9 code=0x7ffc0000 [ 415.624994][ T30] audit: type=1326 audit(1758640196.990:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10611 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab518eec9 code=0x7ffc0000 [ 415.648960][ T30] audit: type=1326 audit(1758640196.990:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10611 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5ab518eec9 code=0x7ffc0000 [ 415.673090][ T30] audit: type=1326 audit(1758640197.130:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10611 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab518eec9 code=0x7ffc0000 [ 415.673446][T10609] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 415.697248][ T30] audit: type=1326 audit(1758640197.130:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10611 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab518eec9 code=0x7ffc0000 [ 415.703441][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.776337][ T30] audit: type=1326 audit(1758640197.190:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10611 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ab518eec9 code=0x7ffc0000 [ 415.867383][ T30] audit: type=1326 audit(1758640197.190:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10611 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab518eec9 code=0x7ffc0000 [ 416.184426][T10640] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1195'. [ 416.194563][T10642] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1195'. [ 418.168668][ T10] usb 2-1: USB disconnect, device number 43 [ 418.398451][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 418.405505][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 418.491088][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 418.891005][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 418.909293][T10685] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1202'. [ 420.138924][T10666] ceph: No mds server is up or the cluster is laggy [ 420.236738][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 420.353024][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 420.990933][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 421.142969][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 421.820947][T10718] futex_wake_op: syz.2.1209 tries to shift op by -1; fix this program [ 422.220311][T10700] lo speed is unknown, defaulting to 1000 [ 423.084176][T10709] lo speed is unknown, defaulting to 1000 [ 426.817521][ T5942] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 426.847234][T10800] fuse: Bad value for 'fd' [ 426.996066][ T5942] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 427.010033][ T5942] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 427.017783][T10808] syz_tun: entered promiscuous mode [ 427.030213][T10808] macsec1: entered allmulticast mode [ 427.035877][T10808] syz_tun: entered allmulticast mode [ 427.079701][T10808] syz_tun: left allmulticast mode [ 427.086151][T10808] syz_tun: left promiscuous mode [ 427.095133][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.157188][ T5942] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 427.228721][ T5942] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 427.245263][T10813] netlink: 'syz.0.1232': attribute type 42 has an invalid length. [ 427.349234][ T6876] udevd[6876]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.395701][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'. [ 427.498458][ T981] usb 5-1: USB disconnect, device number 40 [ 427.809310][T10823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.315949][ T981] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 428.324779][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'. [ 428.475630][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 428.482785][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 428.559530][ T981] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 428.593424][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.604075][ T981] usb 2-1: Product: syz [ 428.608804][ T981] usb 2-1: Manufacturer: syz [ 428.613686][ T981] usb 2-1: SerialNumber: syz [ 428.620943][ T981] usb 2-1: config 0 descriptor?? [ 428.630014][ T981] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 428.645335][ T981] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 428.871180][T10846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.039336][ T5958] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 429.073919][T10854] netlink: 'syz.2.1248': attribute type 9 has an invalid length. [ 429.212167][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.235417][T10827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.245799][ T981] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 429.256195][T10827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.281899][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.313721][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 429.313740][ T30] audit: type=1326 audit(1758640210.890:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.5.1250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ab518eec9 code=0x0 [ 429.349460][T10860] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 429.365260][ T5958] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 429.419719][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.490633][ T5958] usb 5-1: config 0 descriptor?? [ 429.963847][T10875] 9pnet_fd: Insufficient options for proto=fd [ 429.973183][T10844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.038173][T10844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.175776][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 430.268868][ T5958] cm6533_jd 0003:0D8C:0022.000F: unbalanced collection at end of report description [ 430.284070][ T5958] cm6533_jd 0003:0D8C:0022.000F: parse failed [ 430.292789][ T5958] cm6533_jd 0003:0D8C:0022.000F: probe with driver cm6533_jd failed with error -22 [ 430.484325][ T981] em28xx 2-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 430.495910][ T981] em28xx 2-1:0.0: board has no eeprom [ 430.766773][T10891] netlink: 'syz.5.1257': attribute type 11 has an invalid length. [ 430.775096][T10891] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1257'. [ 430.895849][ T981] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 430.905320][ T981] em28xx 2-1:0.0: dvb set to bulk mode. [ 430.933291][ T9] em28xx 2-1:0.0: Binding DVB extension [ 431.150521][ T981] usb 2-1: USB disconnect, device number 44 [ 431.182741][ T981] em28xx 2-1:0.0: Disconnecting em28xx [ 431.251953][ T9] em28xx 2-1:0.0: Registering input extension [ 431.260978][ T981] em28xx 2-1:0.0: Closing input extension [ 431.289984][T10889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.317398][ T981] em28xx 2-1:0.0: Freeing device [ 431.388837][T10895] team_slave_1: entered promiscuous mode [ 431.396765][T10895] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 431.404846][T10895] team0: Device macvtap0 is already an upper device of the team interface [ 431.432671][T10895] team_slave_1: left promiscuous mode [ 432.293216][ T5958] usb 5-1: USB disconnect, device number 41 [ 432.449426][T10906] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 432.475920][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.606917][T10906] CIFS mount error: No usable UNC path provided in device string! [ 432.606917][T10906] [ 432.951050][T10906] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 433.348336][T10922] netlink: 'syz.1.1266': attribute type 1 has an invalid length. [ 433.373792][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 433.409260][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 433.450076][T10922] netlink: 'syz.1.1266': attribute type 3 has an invalid length. [ 434.893665][T10950] erspan0: entered promiscuous mode [ 435.619465][T10959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1276'. [ 437.288376][T10992] fuse: Bad value for 'fd' [ 437.436069][ T5942] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 437.466342][ T5958] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 437.706802][ T5958] usb 6-1: Using ep0 maxpacket: 32 [ 437.940165][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.015937][ T5958] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 438.026831][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.040034][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.055294][ T5958] usb 6-1: Product: syz [ 438.060745][ T5958] usb 6-1: Manufacturer: syz [ 438.065369][ T5958] usb 6-1: SerialNumber: syz [ 438.070122][ T5942] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 438.082886][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.092168][ T5958] usb 6-1: config 0 descriptor?? [ 438.101660][ T5958] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 438.111632][ T5942] usb 2-1: config 0 descriptor?? [ 438.371607][ T5958] gspca_sunplus: reg_r err -71 [ 438.378680][ T5958] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 438.397817][ T5958] usb 6-1: USB disconnect, device number 2 [ 438.483296][ T5942] usbhid 2-1:0.0: can't add hid device: -71 [ 438.705961][ T5942] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 439.295950][ T5942] usb 2-1: USB disconnect, device number 45 [ 439.739528][T11053] 9pnet_fd: Insufficient options for proto=fd [ 439.815957][ T5942] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 439.965870][ T5942] usb 2-1: Using ep0 maxpacket: 16 [ 440.033990][ T5942] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 440.072455][ T5942] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 440.102343][ T5942] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 440.127819][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.191457][ T5942] usb 2-1: config 0 descriptor?? [ 440.278438][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.549797][T11061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.536266][T11061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.610581][ T5942] kye 0003:0458:5019.0010: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 441.678469][ T5942] kye 0003:0458:5019.0010: item fetching failed at offset 2/69 [ 441.698625][ T5942] kye 0003:0458:5019.0010: parse failed [ 441.705517][ T5942] kye 0003:0458:5019.0010: probe with driver kye failed with error -22 [ 441.782511][ T5942] usb 2-1: USB disconnect, device number 46 [ 441.892049][T11070] EXT4-fs: Ignoring removed oldalloc option [ 441.936353][T11070] blk_print_req_error: 4 callbacks suppressed [ 441.936372][T11070] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 442.027848][T11070] EXT4-fs (loop5): unable to read superblock [ 442.176209][ T981] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 442.448919][ T981] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 442.497243][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.516290][ T981] usb 5-1: Product: syz [ 442.536970][ T981] usb 5-1: Manufacturer: syz [ 442.548491][ T981] usb 5-1: SerialNumber: syz [ 442.576950][ T981] usb 5-1: config 0 descriptor?? [ 443.455888][ T981] hso 5-1:0.0: Failed to find BULK IN ep [ 443.463750][ T981] usb-storage 5-1:0.0: USB Mass Storage device detected [ 443.576159][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 443.653174][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1312'. [ 443.753889][ T9869] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.762358][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 443.802650][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1312'. [ 443.812260][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.847703][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.898225][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.916062][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 444.024962][T11107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.075041][T11107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.084503][ T981] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 444.106101][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 444.122226][ T9] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 444.141030][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.149638][ T43] usb 5-1: USB disconnect, device number 42 [ 444.214592][ T9] usb 2-1: Product: syz [ 444.247445][ T9] usb 2-1: Manufacturer: syz [ 444.256037][ T981] usb 6-1: Using ep0 maxpacket: 8 [ 444.284516][ T981] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 444.295331][ T9] usb 2-1: SerialNumber: syz [ 444.321227][ T9] usb 2-1: config 0 descriptor?? [ 444.336239][ T981] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 444.354630][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.373480][T11117] openvswitch: netlink: Flow actions attr not present in new flow. [ 444.393451][ T981] usb 6-1: Product: syz [ 444.398074][ T981] usb 6-1: Manufacturer: syz [ 444.402737][ T981] usb 6-1: SerialNumber: syz [ 444.406801][T11118] openvswitch: netlink: Flow actions attr not present in new flow. [ 444.413587][ T981] usb 6-1: config 0 descriptor?? [ 444.427134][ T981] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 444.435497][ T981] usb 6-1: setting power ON [ 444.443641][ T981] dvb-usb: bulk message failed: -22 (2/0) [ 444.460487][ T981] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 444.471667][T11117] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1318'. [ 444.481654][ T981] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 444.481768][ T981] usb 6-1: media controller created [ 444.512776][ T981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 444.560022][T11121] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1318'. [ 444.592465][T11094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.607807][T11094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.610852][ T981] usb 6-1: selecting invalid altsetting 6 [ 444.631102][ T981] usb 6-1: digital interface selection failed (-22) [ 444.634219][T11094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.642096][T11098] dvb-usb: bulk message failed: -22 (3/0) [ 444.654284][ T981] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 444.665853][T11098] dvb-usb: bulk message failed: -22 (5/0) [ 444.744501][T11094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.798643][T11094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.836577][T11098] dvb-usb: bulk message failed: -22 (3/0) [ 444.843136][T11094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.889309][T11094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.936889][T11094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.970195][T11094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.996072][T11094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.147028][ T9] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 445.154550][ T9] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 445.164207][ T981] usb 6-1: setting power OFF [ 445.169535][ T981] dvb-usb: bulk message failed: -22 (2/0) [ 445.183642][ T981] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 445.195910][ T981] (NULL device *): no alternate interface [ 445.265023][ T981] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 445.289949][ T981] usb 6-1: USB disconnect, device number 3 [ 445.326310][T11137] fuse: Bad value for 'fd' [ 445.333626][T11137] fuse: Bad value for 'fd' [ 445.617237][T11145] sg_write: data in/out 210376927/175 bytes for SCSI command 0x53-- guessing data in; [ 445.617237][T11145] program syz.4.1327 not setting count and/or reply_len properly [ 446.781106][ T5958] usb 2-1: USB disconnect, device number 47 [ 447.229196][ T9] page_pool_release_retry() stalled pool shutdown: id 36, 1 inflight 60 sec [ 447.278905][T11169] FAULT_INJECTION: forcing a failure. [ 447.278905][T11169] name failslab, interval 1, probability 0, space 0, times 1 [ 447.298118][T11169] CPU: 0 UID: 0 PID: 11169 Comm: syz.5.1334 Not tainted syzkaller #0 PREEMPT(full) [ 447.298144][T11169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 447.298158][T11169] Call Trace: [ 447.298165][T11169] [ 447.298174][T11169] dump_stack_lvl+0x189/0x250 [ 447.298201][T11169] ? __pfx____ratelimit+0x10/0x10 [ 447.298221][T11169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.298241][T11169] ? __pfx__printk+0x10/0x10 [ 447.298271][T11169] ? __pfx___might_resched+0x10/0x10 [ 447.298292][T11169] ? fs_reclaim_acquire+0x7d/0x100 [ 447.298315][T11169] should_fail_ex+0x414/0x560 [ 447.298343][T11169] should_failslab+0xa8/0x100 [ 447.298363][T11169] kmem_cache_alloc_noprof+0x74/0x6e0 [ 447.298388][T11169] ? sk_prot_alloc+0x57/0x220 [ 447.298413][T11169] sk_prot_alloc+0x57/0x220 [ 447.298430][T11169] ? sk_alloc+0x24/0x370 [ 447.298449][T11169] sk_alloc+0x3a/0x370 [ 447.298470][T11169] inet_create+0x7a0/0x1000 [ 447.298489][T11169] ? inet_create+0x9c/0x1000 [ 447.298511][T11169] __sock_create+0x4b3/0x9f0 [ 447.298546][T11169] udp_sock_create4+0xbe/0x4b0 [ 447.298567][T11169] ? __pfx_udp_sock_create4+0x10/0x10 [ 447.298599][T11169] rxrpc_lookup_local+0xcae/0x1410 [ 447.298633][T11169] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 447.298664][T11169] ? __local_bh_enable_ip+0x12d/0x1c0 [ 447.298690][T11169] ? __local_bh_enable_ip+0x12d/0x1c0 [ 447.298716][T11169] ? do_raw_spin_unlock+0x122/0x240 [ 447.298740][T11169] rxrpc_sendmsg+0x399/0x710 [ 447.298766][T11169] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 447.298786][T11169] __sock_sendmsg+0x21c/0x270 [ 447.298813][T11169] ____sys_sendmsg+0x505/0x830 [ 447.298839][T11169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.298869][T11169] ? import_iovec+0x74/0xa0 [ 447.298890][T11169] ___sys_sendmsg+0x21f/0x2a0 [ 447.298914][T11169] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.298980][T11169] ? __fget_files+0x2a/0x420 [ 447.298996][T11169] ? __fget_files+0x3a0/0x420 [ 447.299025][T11169] __x64_sys_sendmsg+0x19b/0x260 [ 447.299048][T11169] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.299076][T11169] ? __pfx_ksys_write+0x10/0x10 [ 447.299101][T11169] ? do_syscall_64+0xbe/0xfa0 [ 447.299123][T11169] do_syscall_64+0xfa/0xfa0 [ 447.299139][T11169] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.299156][T11169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.299172][T11169] ? clear_bhb_loop+0x60/0xb0 [ 447.299192][T11169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.299213][T11169] RIP: 0033:0x7f5ab518eec9 [ 447.299233][T11169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.299247][T11169] RSP: 002b:00007f5ab6008038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.299269][T11169] RAX: ffffffffffffffda RBX: 00007f5ab53e5fa0 RCX: 00007f5ab518eec9 [ 447.299281][T11169] RDX: 0000000024000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 447.299292][T11169] RBP: 00007f5ab6008090 R08: 0000000000000000 R09: 0000000000000000 [ 447.299302][T11169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.299312][T11169] R13: 00007f5ab53e6038 R14: 00007f5ab53e5fa0 R15: 00007ffc2447f298 [ 447.299344][T11169] [ 447.685809][ T5958] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 447.723611][T11172] netlink: 'syz.4.1335': attribute type 11 has an invalid length. [ 447.732109][T11172] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1335'. [ 448.022460][ T5958] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 448.171595][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.250330][ T5958] usb 2-1: config 0 descriptor?? [ 448.501780][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1336'. [ 448.511090][T11177] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1336'. [ 448.789397][ T5958] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 449.568039][T11183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1340'. [ 449.759767][ T5958] [drm:udl_init] *ERROR* Selecting channel failed [ 449.803054][ T5958] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 449.820598][ T5958] [drm] Initialized udl on minor 2 [ 449.845149][ T5958] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 449.876417][ T5958] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 449.891252][ T43] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 449.908566][ T5958] usb 2-1: USB disconnect, device number 48 [ 449.927732][ T5942] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 449.936496][ T43] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 450.079057][ T5942] usb 5-1: device descriptor read/64, error -71 [ 450.120210][T11189] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1341'. [ 450.285399][T11194] overlayfs: failed to clone upperpath [ 450.285419][T11192] overlayfs: failed to clone upperpath [ 450.331179][ T5885] Bluetooth: hci5: connection err: -111 [ 450.337757][ T5942] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 450.475744][ T5942] usb 5-1: device descriptor read/64, error -71 [ 450.513280][T11201] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (13) [ 450.600793][ T5942] usb usb5-port1: attempt power cycle [ 450.926095][T11205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.955811][ T5942] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 451.036711][ T5942] usb 5-1: device descriptor read/8, error -71 [ 451.234431][T11205] batadv_slave_0: entered promiscuous mode [ 451.286487][T11205] batadv_slave_0: entered allmulticast mode [ 451.336005][ T5942] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 451.359602][ T5942] usb 5-1: device descriptor read/8, error -71 [ 451.487447][ T5942] usb usb5-port1: unable to enumerate USB device [ 451.694500][ T7242] tipc: Subscription rejected, illegal request [ 451.816222][T11215] netlink: 'syz.1.1347': attribute type 11 has an invalid length. [ 451.824187][T11215] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1347'. [ 452.503028][T11228] netlink: 'syz.5.1351': attribute type 1 has an invalid length. [ 452.560681][T11228] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1351'. [ 452.927034][T11234] fuse: blksize only supported for fuseblk [ 454.165261][T11255] Process accounting resumed [ 454.257650][ T5958] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 454.395753][ T5958] usb 6-1: device descriptor read/64, error -71 [ 454.501316][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1361'. [ 454.546773][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1361'. [ 454.557337][T11270] lo speed is unknown, defaulting to 1000 [ 454.639281][ T5958] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 454.795846][ T5958] usb 6-1: device descriptor read/64, error -71 [ 454.906261][ T5958] usb usb6-port1: attempt power cycle [ 455.257527][ T5958] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 455.287936][ T5958] usb 6-1: device descriptor read/8, error -71 [ 455.546439][ T5958] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 455.581508][ T5958] usb 6-1: device descriptor read/8, error -71 [ 455.706351][ T5958] usb usb6-port1: unable to enumerate USB device [ 456.089402][T11301] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1371'. [ 456.697905][T11309] netlink: 'syz.1.1373': attribute type 11 has an invalid length. [ 456.707121][T11309] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1373'. [ 456.781585][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1372'. [ 457.222507][T11317] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 457.583963][T11331] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1378'. [ 457.975875][ T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 458.097431][T11342] netlink: 'syz.1.1381': attribute type 2 has an invalid length. [ 458.143333][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.322438][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 458.508923][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 458.698511][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 458.746936][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 458.777986][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 458.818882][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 458.833767][ T9] usb 6-1: Manufacturer: syz [ 458.842004][ T9] usb 6-1: config 0 descriptor?? [ 459.216422][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 459.367578][T11356] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1385'. [ 459.436713][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 459.709510][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 459.753091][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 459.802534][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 459.823124][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.833262][ T24] usb 2-1: Product: syz [ 459.839582][ T24] usb 2-1: Manufacturer: syz [ 459.848195][ T24] usb 2-1: SerialNumber: syz [ 459.949090][ T24] usb 2-1: config 0 descriptor?? [ 459.974198][ T24] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 459.992647][T11361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1387'. [ 460.017031][ T24] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 460.584681][ T24] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 460.607737][ T24] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 460.776548][T11372] mmap: syz.0.1390 (11372): VmData 37588992 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 460.829942][ T24] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 460.848190][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1391'. [ 460.868600][ T24] em28xx 2-1:0.0: No AC97 audio processor [ 462.245424][ T30] audit: type=1326 audit(1758640243.830:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 462.356226][ T30] audit: type=1326 audit(1758640243.950:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 462.400437][ T24] usb 2-1: USB disconnect, device number 49 [ 462.401212][ T30] audit: type=1326 audit(1758640243.970:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 462.409138][ T24] em28xx 2-1:0.0: Disconnecting em28xx [ 462.467054][ T30] audit: type=1326 audit(1758640244.030:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 462.490291][ T30] audit: type=1326 audit(1758640244.030:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 462.513817][ T24] em28xx 2-1:0.0: Freeing device [ 462.548591][ T30] audit: type=1326 audit(1758640244.140:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 462.599881][ T30] audit: type=1326 audit(1758640244.140:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 462.642348][ T30] audit: type=1326 audit(1758640244.140:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 462.764452][ T30] audit: type=1326 audit(1758640244.140:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 462.795945][ T30] audit: type=1326 audit(1758640244.140:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 462.918059][ T24] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 463.095740][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 463.104470][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 463.125366][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 463.148709][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 463.158480][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.166814][ T24] usb 2-1: Product: syz [ 463.171290][ T24] usb 2-1: Manufacturer: syz [ 463.179508][ T24] usb 2-1: SerialNumber: syz [ 463.230029][ T24] usb 2-1: config 0 descriptor?? [ 463.250397][ T24] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 463.367225][ T24] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 463.590958][T11405] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 463.621467][T11405] batman_adv: batadv0: Adding interface: ip6gretap1 [ 463.630581][T11405] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.658441][T11405] batman_adv: batadv0: Interface activated: ip6gretap1 [ 463.862470][ T24] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 463.872798][ T24] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 463.958271][T11414] 9pnet_fd: Insufficient options for proto=fd [ 464.108200][T11394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.134542][T11394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.158047][ T24] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 464.167232][ T24] em28xx 2-1:0.0: No AC97 audio processor [ 464.190858][ T24] usb 2-1: USB disconnect, device number 50 [ 464.207455][ T24] em28xx 2-1:0.0: Disconnecting em28xx [ 464.214397][ T24] em28xx 2-1:0.0: Freeing device [ 464.252291][T11427] lo speed is unknown, defaulting to 1000 [ 465.062459][T11436] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 465.073578][T11436] overlayfs: missing 'lowerdir' [ 465.977089][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 466.147087][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 466.161601][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 466.176353][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 466.194963][ T9] usb 2-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=94.47 [ 466.204629][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.215604][ T9] usb 2-1: Product: syz [ 466.219920][ T9] usb 2-1: Manufacturer: syz [ 466.226012][ T9] usb 2-1: SerialNumber: syz [ 466.240039][ T9] usb 2-1: config 0 descriptor?? [ 466.246549][T11442] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 467.403579][T11460] fuse: Bad value for 'rootmode' [ 468.059324][ T24] usb 2-1: USB disconnect, device number 51 [ 469.410332][ T9869] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 469.721279][ T5879] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 469.732538][ T5879] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 469.751512][ T5879] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 469.766425][ T5879] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 469.774880][ T5879] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 469.954033][T11513] lo speed is unknown, defaulting to 1000 [ 470.013171][T11520] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1435'. [ 470.022410][T11520] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1435'. [ 470.782395][T11513] chnl_net:caif_netlink_parms(): no params data found [ 470.978130][T11513] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.991338][T11513] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.001540][T11513] bridge_slave_0: entered allmulticast mode [ 471.010428][T11513] bridge_slave_0: entered promiscuous mode [ 471.025016][T11513] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.033177][T11513] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.042089][T11513] bridge_slave_1: entered allmulticast mode [ 471.051199][T11513] bridge_slave_1: entered promiscuous mode [ 471.113263][T11513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.130024][T11513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.211746][T11513] team0: Port device team_slave_0 added [ 471.222814][T11513] team0: Port device team_slave_1 added [ 471.388606][ T5879] Bluetooth: hci6: command 0x1003 tx timeout [ 471.396668][ T5885] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 471.866505][ T5885] Bluetooth: hci7: command tx timeout [ 471.878929][T11513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.886270][T11513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.920784][T11513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.948247][T11513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.963903][T11513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.015791][T11513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.550235][T11513] hsr_slave_0: entered promiscuous mode [ 472.561694][T11513] hsr_slave_1: entered promiscuous mode [ 472.573443][T11513] debugfs: 'hsr0' already exists in 'hsr' [ 472.600700][T11513] Cannot create hsr debugfs directory [ 472.824493][T11551] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.845812][ T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 472.853379][T11551] bridge_slave_1: left allmulticast mode [ 472.859608][T11551] bridge_slave_1: left promiscuous mode [ 472.867285][T11551] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.015773][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 473.035484][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 473.046965][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.072627][ T24] usb 2-1: Product: syz [ 473.085615][ T24] usb 2-1: Manufacturer: syz [ 473.090314][ T24] usb 2-1: SerialNumber: syz [ 473.119688][ T24] usb 2-1: config 0 descriptor?? [ 473.289100][T11513] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 473.302169][T11513] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 473.327749][ T24] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 473.347777][T11513] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 473.378360][T11513] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 473.390444][ T24] usb write operation failed. (-71) [ 473.440435][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 473.468375][ T24] dvbdev: DVB: registering new adapter (Terratec H7) [ 473.475474][ T24] usb 2-1: media controller created [ 473.487313][ T24] usb read operation failed. (-71) [ 473.501146][ T24] usb write operation failed. (-71) [ 473.514289][ T24] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 473.533556][ T24] usb 2-1: USB disconnect, device number 52 [ 473.594709][T11564] program syz.1.1446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.856791][T11513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.704151][ T5885] Bluetooth: hci7: command tx timeout [ 474.996133][T11571] macvtap2: entered allmulticast mode [ 475.001565][T11571] veth0_macvtap: entered allmulticast mode [ 475.344055][ T5879] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 475.358291][ T5879] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 475.369092][ T5879] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 475.387171][ T5879] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 475.401661][ T5879] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 475.414515][T11513] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.490953][T11575] lo speed is unknown, defaulting to 1000 [ 475.509113][ T9868] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.516399][ T9868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.559789][ T7242] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.567069][ T7242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.339196][T11586] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1451'. [ 476.682762][T11575] chnl_net:caif_netlink_parms(): no params data found [ 476.746315][ T5885] Bluetooth: hci7: command tx timeout [ 476.773398][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 476.937515][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 476.953410][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 476.973073][ T10] usb 2-1: config 0 has no interface number 0 [ 477.015472][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 477.043090][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.079625][ T10] usb 2-1: Product: syz [ 477.087285][ T10] usb 2-1: Manufacturer: syz [ 477.092356][ T10] usb 2-1: SerialNumber: syz [ 477.109154][T11575] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.141790][T11606] overlay: ./file1 is not a directory [ 477.155958][T11575] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.169035][T11575] bridge_slave_0: entered allmulticast mode [ 477.177946][T11575] bridge_slave_0: entered promiscuous mode [ 477.180658][ T10] usb 2-1: config 0 descriptor?? [ 477.195337][T11575] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.206288][T11575] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.214203][T11575] bridge_slave_1: entered allmulticast mode [ 477.236438][ T10] smsc95xx v2.0.0 [ 477.247639][T11607] 9pnet: Could not find request transport: rdmaidiC#D# [ 477.260750][T11575] bridge_slave_1: entered promiscuous mode [ 477.518793][ T5885] Bluetooth: hci6: command tx timeout [ 477.562535][T11513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.592956][T11575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.623495][T11575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.726708][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 477.827375][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 477.898615][T11575] team0: Port device team_slave_0 added [ 477.925134][T11575] team0: Port device team_slave_1 added [ 478.060930][T11575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.070524][T11590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.097963][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.176562][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 478.178477][T11590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.217021][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 478.225955][T11575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.238963][T11575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.246113][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.273553][T11575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.284234][T11616] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1457'. [ 478.409024][ T24] usb 2-1: USB disconnect, device number 53 [ 478.550563][T11575] hsr_slave_0: entered promiscuous mode [ 478.557992][T11575] hsr_slave_1: entered promiscuous mode [ 478.569824][T11575] debugfs: 'hsr0' already exists in 'hsr' [ 478.586161][T11575] Cannot create hsr debugfs directory [ 478.827327][ T5885] Bluetooth: hci7: command tx timeout [ 478.886573][T11640] netlink: 'syz.0.1459': attribute type 1 has an invalid length. [ 479.128659][T11640] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.254590][T11642] erspan0: entered allmulticast mode [ 479.299556][T11642] bond2: (slave erspan0): making interface the new active one [ 479.335011][T11642] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 479.562402][ T5885] Bluetooth: hci6: command tx timeout [ 479.877001][T11658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1463'. [ 479.895518][T11658] program syz.1.1463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.384438][T11513] veth0_vlan: entered promiscuous mode [ 480.486989][T11513] veth1_vlan: entered promiscuous mode [ 480.777683][T11575] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 480.826547][T11663] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1465'. [ 480.860590][T11575] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 480.892155][T11575] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 480.933849][T11513] veth0_macvtap: entered promiscuous mode [ 480.943389][T11575] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 481.021687][T11513] veth1_macvtap: entered promiscuous mode [ 481.048700][ T24] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 481.117575][T11679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1468'. [ 481.154245][T11513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.203476][T11681] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1469'. [ 481.213413][T11513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.262932][ T9875] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.290553][ T9875] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.340278][ T9875] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.444626][ T9875] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.463820][ T24] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 481.475507][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.496522][ T24] usb 2-1: config 0 descriptor?? [ 481.519035][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 481.625890][ T5885] Bluetooth: hci6: command tx timeout [ 481.758937][ T9876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.774183][T11575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.787927][ T9876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.867964][ T5885] Bluetooth: hci2: command 0x0c1a tx timeout [ 481.908487][ T24] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 481.922868][T11575] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.967828][ T9868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.001034][ T9874] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.012548][ T9874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.034966][ T9868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.195399][ T9876] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.202978][ T9876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.305812][ T24] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 482.512475][T11691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.626292][T11691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.243929][ T9] usb 2-1: USB disconnect, device number 54 [ 483.710491][ T5885] Bluetooth: hci6: command tx timeout [ 484.675051][T11575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.738494][T11719] jffs2: Unknown parameter 'comprðº7' [ 484.898340][T11724] fuse: Bad value for 'user_id' [ 484.946227][T11724] fuse: Bad value for 'user_id' [ 485.259981][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 485.466208][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 485.477639][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 485.497924][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 485.529693][ T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 485.563373][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.575734][ T9] usb 2-1: Product: syz [ 485.579947][ T9] usb 2-1: Manufacturer: syz [ 485.589101][ T9] usb 2-1: SerialNumber: syz [ 485.605738][ T9] usb 2-1: config 0 descriptor?? [ 485.680485][T11575] veth0_vlan: entered promiscuous mode [ 485.737815][T11575] veth1_vlan: entered promiscuous mode [ 485.851079][T11575] veth0_macvtap: entered promiscuous mode [ 485.864649][T11575] veth1_macvtap: entered promiscuous mode [ 485.920635][T11575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.046789][T11575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.083515][ T7242] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.108665][ T7242] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.339977][ T7242] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.357617][ T7242] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.513658][ T9874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.536149][ T9874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.598749][ T9870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.624104][ T9870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.420965][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1487'. [ 487.430798][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1487'. [ 488.039346][ T5942] usb 2-1: USB disconnect, device number 55 [ 488.440164][T11784] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 488.461045][T11784] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 488.468569][T11784] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 488.488296][T11784] vhci_hcd vhci_hcd.0: Device attached [ 488.513151][T11784] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 488.519976][T11784] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 488.530592][T11784] vhci_hcd vhci_hcd.0: Device attached [ 488.542242][T11784] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 488.557377][T11784] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 488.564115][T11784] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 488.573965][T11784] vhci_hcd vhci_hcd.0: Device attached [ 488.600208][T11784] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 488.606854][T11784] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 488.618643][T11784] vhci_hcd vhci_hcd.0: Device attached [ 488.650497][T11784] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(21) [ 488.657151][T11784] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 488.672076][ T9] vhci_hcd: vhci_device speed not set [ 488.680460][T11796] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 488.685248][T11784] vhci_hcd vhci_hcd.0: Device attached [ 488.724425][T11784] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 488.738712][T11784] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 488.747414][ T9] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 488.787577][T11784] vhci_hcd vhci_hcd.0: port 0 already used [ 488.835699][T11792] vhci_hcd: connection closed [ 488.836655][T11790] vhci_hcd: connection closed [ 488.840757][T11794] vhci_hcd: connection closed [ 488.848590][T11786] vhci_hcd: connection reset by peer [ 488.856433][T11788] vhci_hcd: connection closed [ 488.859104][ T9869] vhci_hcd: stop threads [ 488.903377][ T9869] vhci_hcd: release socket [ 488.927426][ T9869] vhci_hcd: disconnect device [ 488.934772][ T9869] vhci_hcd: stop threads [ 488.939839][ T9869] vhci_hcd: release socket [ 488.962990][ T9869] vhci_hcd: disconnect device [ 488.981796][ T9869] vhci_hcd: stop threads [ 488.987859][ T9869] vhci_hcd: release socket [ 488.993817][ T9869] vhci_hcd: disconnect device [ 489.003853][ T9869] vhci_hcd: stop threads [ 489.012496][ T9869] vhci_hcd: release socket [ 489.019637][ T9869] vhci_hcd: disconnect device [ 489.024855][ T9869] vhci_hcd: stop threads [ 489.035696][ T9869] vhci_hcd: release socket [ 489.041654][ T9869] vhci_hcd: disconnect device [ 490.299625][T11817] overlayfs: failed to clone upperpath [ 490.545847][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 490.706311][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 490.737269][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 490.762925][ T10] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 490.773967][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.791071][ T10] usb 2-1: Product: syz [ 490.797683][ T10] usb 2-1: Manufacturer: syz [ 490.802908][ T10] usb 2-1: SerialNumber: syz [ 490.835220][ T10] usb 2-1: config 0 descriptor?? [ 491.044328][ T10] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input28 [ 491.215333][ T10] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 491.319547][ T10] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 491.366656][ T10] usb 2-1: USB disconnect, device number 56 [ 491.946156][ T5885] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 491.959063][ T5885] Bluetooth: hci6: Injecting HCI hardware error event [ 491.970405][ T5885] Bluetooth: hci6: hardware error 0x00 [ 492.557150][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1513'. [ 492.702168][T11856] RDS: rds_bind could not find a transport for ::9d:0:0:0:1, load rds_tcp or rds_rdma? [ 493.712620][T11865] netlink: 'syz.2.1517': attribute type 1 has an invalid length. [ 493.879654][ T9] vhci_hcd: vhci_device speed not set [ 493.909932][T11875] syz.0.1519(11875): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 494.122361][ T5885] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 494.141797][T11871] syzkaller0: entered promiscuous mode [ 494.147506][T11871] syzkaller0: entered allmulticast mode [ 495.227284][ T5958] usb usb36-port1: attempt power cycle [ 495.829745][ T5958] usb usb36-port1: unable to enumerate USB device [ 496.583513][T11914] netlink: 'syz.0.1530': attribute type 1 has an invalid length. [ 496.584968][T11916] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1530'. [ 496.604310][T11916] unsupported nla_type 65024 [ 499.770674][T11889] kthread_run failed with err -4 [ 499.824059][T11923] lo speed is unknown, defaulting to 1000 [ 500.203904][T11934] syz_tun: entered allmulticast mode [ 500.911622][T11939] netlink: 'syz.1.1536': attribute type 11 has an invalid length. [ 500.920340][T11939] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1536'. [ 502.176335][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.403230][T11946] lo speed is unknown, defaulting to 1000 [ 503.322267][ T5879] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 503.345372][ T5879] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 503.364595][ T5879] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 503.377277][ T5879] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 503.389484][ T5879] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 503.510405][T11963] lo speed is unknown, defaulting to 1000 [ 504.234966][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 504.252810][T11986] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.353173][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 504.640748][T11963] chnl_net:caif_netlink_parms(): no params data found [ 505.237411][T11963] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.245316][T11963] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.252853][T11963] bridge_slave_0: entered allmulticast mode [ 505.261473][T11963] bridge_slave_0: entered promiscuous mode [ 505.271050][T11963] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.333019][T12008] __vm_enough_memory: pid: 12008, comm: syz.2.1549, bytes: 21200412487680 not enough memory for the allocation [ 505.586778][ T5885] Bluetooth: hci8: command tx timeout [ 506.122455][T11963] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.231065][T11963] bridge_slave_1: entered allmulticast mode [ 506.239647][T11963] bridge_slave_1: entered promiscuous mode [ 506.549328][T12025] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 506.682751][T11963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.754446][T11963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.625787][ T5885] Bluetooth: hci8: command tx timeout [ 507.805414][T11963] team0: Port device team_slave_0 added [ 508.041412][T11963] team0: Port device team_slave_1 added [ 508.130855][T11963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.139752][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.168026][T11963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.189833][T11963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.199006][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.226045][T11963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.403101][T11963] hsr_slave_0: entered promiscuous mode [ 508.411924][T11963] hsr_slave_1: entered promiscuous mode [ 508.419705][T11963] debugfs: 'hsr0' already exists in 'hsr' [ 508.427688][T11963] Cannot create hsr debugfs directory [ 509.124615][T12059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'. [ 509.608462][T11963] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 509.624713][T11963] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 509.642791][T11963] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 509.681075][T11963] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 509.711704][ T5885] Bluetooth: hci8: command tx timeout [ 509.935941][T12080] exfat: Deprecated parameter 'utf8' [ 509.958160][T12080] exfat: Deprecated parameter 'namecase' [ 509.980869][T12080] exfat: Deprecated parameter 'utf8' [ 510.050929][T12080] exfat: Bad value for 'gid' [ 510.063039][T11963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.087689][T12080] exfat: Bad value for 'gid' [ 510.206515][T11963] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.339406][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.346770][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.381098][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.388389][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.402802][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 510.402818][ T30] audit: type=1326 audit(1758640291.990:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12079 comm="syz.1.1568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5ad58eec9 code=0x0 [ 511.411242][ T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 511.785878][ T5885] Bluetooth: hci8: command tx timeout [ 511.871230][T11963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.028211][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 512.093827][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.115750][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.144383][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 512.190115][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 512.211316][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.240173][ T24] usb 2-1: config 0 descriptor?? [ 512.481612][T12096] ipvlan2: entered promiscuous mode [ 512.520082][T12096] bridge0: port 3(ipvlan2) entered blocking state [ 512.652580][T12096] bridge0: port 3(ipvlan2) entered disabled state [ 512.662356][ T24] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 512.708383][T12096] ipvlan2: entered allmulticast mode [ 512.713823][T12096] bridge0: entered allmulticast mode [ 512.723511][T12096] ipvlan2: left allmulticast mode [ 512.729043][T12096] bridge0: left allmulticast mode [ 512.824586][ T24] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 512.845781][ T24] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 512.854460][ T24] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 512.877287][ T24] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 512.884809][ T24] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 512.895338][ T24] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 512.920328][ T24] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 512.935924][ T24] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 512.943293][ T24] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 513.052716][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0011/input/input29 [ 513.095861][ T24] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 513.334477][T11963] veth0_vlan: entered promiscuous mode [ 513.382941][T11963] veth1_vlan: entered promiscuous mode [ 513.458597][ T9] usb 2-1: USB disconnect, device number 57 [ 513.521187][T11963] veth0_macvtap: entered promiscuous mode [ 513.604085][T11963] veth1_macvtap: entered promiscuous mode [ 513.744394][T11963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.807177][T11963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.851190][ T66] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.918640][ T66] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.962290][T12121] bond0: entered promiscuous mode [ 513.975657][T12121] bond_slave_0: entered promiscuous mode [ 513.991124][T12121] bond_slave_1: entered promiscuous mode [ 514.010057][T12121] team0: entered promiscuous mode [ 514.024979][T12121] team_slave_0: entered promiscuous mode [ 514.035513][T12121] team_slave_1: entered promiscuous mode [ 514.054191][T12118] lo speed is unknown, defaulting to 1000 [ 514.098260][ T66] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.122171][ T66] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.468976][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.480804][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.871187][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.820168][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.927123][T12141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1584'. [ 515.953680][T12141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1584'. [ 515.983242][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1584'. [ 516.144668][T12153] trusted_key: encrypted_key: keylen parameter is missing [ 516.236384][T12157] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 516.428472][T12159] hfsplus: Unknown parameter 'ukd' [ 516.636181][T12163] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1590'. [ 516.655283][T12163] journal_path: Non-blockdev passed as './file0' [ 516.662346][T12163] EXT4-fs: error: could not find journal device path [ 517.022471][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1591'. [ 517.122574][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1593'. [ 518.358793][T12184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1598'. [ 518.457558][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 518.748997][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 518.761257][ T10] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 518.811570][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 518.879543][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 518.938975][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 518.999198][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.049150][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 519.060039][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.278404][ T10] usb 9-1: usb_control_msg returned -32 [ 519.292622][ T10] usbtmc 9-1:16.0: can't read capabilities [ 520.499809][T12217] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 520.591220][T12220] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1607'. [ 520.808815][T12225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1608'. [ 521.129893][ T9] usb 9-1: USB disconnect, device number 2 [ 521.256922][ T24] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 521.439135][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.451495][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.463085][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 521.496034][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.552463][ T24] usb 2-1: config 0 descriptor?? [ 522.215688][T12247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.227477][T12247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.712547][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1613'. [ 523.013085][ T981] libceph: connect (1)[c::]:6789 error -101 [ 523.045988][ T981] libceph: mon0 (1)[c::]:6789 connect error [ 523.061864][T12259] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 523.310176][T12261] ceph: No mds server is up or the cluster is laggy [ 523.338037][ T9] libceph: connect (1)[c::]:6789 error -101 [ 523.346884][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 524.190713][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 524.209031][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 524.247769][ T24] usb 2-1: USB disconnect, device number 58 [ 524.311981][T12292] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 524.426293][ T5885] Bluetooth: hci5: command 0x0406 tx timeout [ 524.591084][T12299] nfs4: Unknown parameter '/file0' [ 524.817640][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 526.095018][T12326] bridge_slave_0: left allmulticast mode [ 526.116885][T12326] bridge_slave_0: left promiscuous mode [ 526.128279][T12326] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.128513][T12306] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 526.167748][T12306] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 526.174812][T12306] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 526.208101][T12326] bridge_slave_1: left allmulticast mode [ 526.213796][T12326] bridge_slave_1: left promiscuous mode [ 526.226771][T12306] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 526.232958][T12306] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 526.244007][T12326] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.270239][T12306] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 526.280405][T12306] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 526.294744][T12326] bond0: (slave bond_slave_0): Releasing backup interface [ 526.309989][T12306] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 526.354881][T12326] bond0: (slave bond_slave_1): Releasing backup interface [ 526.369267][T12306] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 526.395106][T12306] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 526.445436][T12306] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 526.474239][T12326] team0: Port device team_slave_0 removed [ 526.541719][T12326] team0: Port device team_slave_1 removed [ 526.558588][T12326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.609578][T12326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.659427][T12326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.689764][T12326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.720831][T12326] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 526.825745][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 526.996175][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 527.015276][ T10] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 527.035006][ T10] usb 9-1: config 0 has no interface number 0 [ 527.048032][ T9] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 527.097038][ T10] usb 9-1: config 0 interface 51 has no altsetting 0 [ 527.142514][ T10] usb 9-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.d5 [ 527.198888][T12359] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1644'. [ 527.206945][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.244366][ T10] usb 9-1: Product: syz [ 527.251180][ T10] usb 9-1: Manufacturer: syz [ 527.258702][ T10] usb 9-1: SerialNumber: syz [ 527.269362][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 527.294787][ T10] usb 9-1: config 0 descriptor?? [ 527.309643][ T10] usb 9-1: bad CDC descriptors [ 527.316729][ T9] usb 2-1: config 128 has an invalid interface number: 236 but max is 0 [ 527.335157][ T9] usb 2-1: config 128 has no interface number 0 [ 527.350025][ T9] usb 2-1: config 128 interface 236 has no altsetting 0 [ 527.363397][ T9] usb 2-1: New USB device found, idVendor=12d1, idProduct=e51c, bcdDevice=3c.b8 [ 527.382504][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.414968][ T9] usb 2-1: Product: syz [ 527.450103][ T9] usb 2-1: Manufacturer: Э [ 527.454724][ T9] usb 2-1: SerialNumber: syz [ 527.518436][ T981] usb 9-1: USB disconnect, device number 3 [ 527.625801][ T5885] Bluetooth: hci1: command 0x0c1a tx timeout [ 527.851466][ T9] option 2-1:128.236: GSM modem (1-port) converter detected [ 527.941568][ T9] usb 2-1: USB disconnect, device number 59 [ 527.972428][ T9] option 2-1:128.236: device disconnected [ 528.055637][ T981] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 528.185863][ T5885] Bluetooth: hci2: command 0x0c1a tx timeout [ 528.192481][ T5885] Bluetooth: hci3: command 0x0c1a tx timeout [ 528.268535][ T5879] Bluetooth: hci5: command 0x0406 tx timeout [ 528.345862][ T5885] Bluetooth: hci7: command 0x0c1a tx timeout [ 528.426041][ T5885] Bluetooth: hci8: command 0x0c1a tx timeout [ 528.707225][ T981] usb 9-1: Using ep0 maxpacket: 16 [ 528.720296][ T981] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 528.733499][ T981] usb 9-1: config 0 has no interface number 0 [ 528.765942][ T981] usb 9-1: config 0 interface 51 has no altsetting 0 [ 528.783270][ T981] usb 9-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.d5 [ 528.837632][ T981] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.886031][ T981] usb 9-1: Product: syz [ 528.891918][ T981] usb 9-1: Manufacturer: syz [ 528.922103][ T981] usb 9-1: SerialNumber: syz [ 529.146577][ T981] usb 9-1: config 0 descriptor?? [ 529.157298][ T981] usb 9-1: bad CDC descriptors [ 529.380176][T12384] iso9660: Unknown parameter '0000000000000000118600000000000000000000010' [ 529.483647][ T24] usb 9-1: USB disconnect, device number 4 [ 530.386034][ T5885] Bluetooth: hci5: command 0x0406 tx timeout [ 530.426223][ T5885] Bluetooth: hci7: command 0x0c1a tx timeout [ 530.433914][T12406] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1654'. [ 530.584754][ T5885] Bluetooth: hci8: command 0x0c1a tx timeout [ 531.829688][T12423] netlink: 'syz.8.1658': attribute type 11 has an invalid length. [ 531.837672][T12423] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1658'. [ 532.400206][T12413] sctp: [Deprecated]: syz.1.1657 (pid 12413) Use of int in maxseg socket option. [ 532.400206][T12413] Use struct sctp_assoc_value instead [ 532.505801][ T5885] Bluetooth: hci7: command 0x0c1a tx timeout [ 532.598615][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1661'. [ 532.669489][ T5885] Bluetooth: hci8: command 0x0c1a tx timeout [ 533.495900][ T30] audit: type=1326 audit(1758640315.070:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 533.602650][ T30] audit: type=1326 audit(1758640315.110:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 533.626288][ T30] audit: type=1326 audit(1758640315.130:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 533.650028][ T30] audit: type=1326 audit(1758640315.130:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 533.673492][ T30] audit: type=1326 audit(1758640315.130:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 533.759051][ T30] audit: type=1326 audit(1758640315.140:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 533.759639][T12451] netlink: 'syz.8.1667': attribute type 21 has an invalid length. [ 533.781601][ T30] audit: type=1326 audit(1758640315.140:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 533.781649][ T30] audit: type=1326 audit(1758640315.140:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 533.781689][ T30] audit: type=1326 audit(1758640315.140:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 533.781728][ T30] audit: type=1326 audit(1758640315.140:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 534.284916][T12473] netlink: 'syz.8.1672': attribute type 11 has an invalid length. [ 534.293031][T12473] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1672'. [ 534.331319][ T9] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 534.946063][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 535.157779][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.169251][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.182967][ T9] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 535.201226][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.205997][ T5872] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 535.220507][ T9] usb 2-1: config 0 descriptor?? [ 535.349459][ T5872] usb 9-1: device descriptor read/64, error -71 [ 535.528604][T12493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.576217][T12493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.595766][ T5872] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 535.808272][ T5872] usb 9-1: device descriptor read/64, error -71 [ 535.927493][ T5872] usb usb9-port1: attempt power cycle [ 536.277122][ T5872] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 536.358539][ T5872] usb 9-1: device descriptor read/8, error -71 [ 536.845685][ T5872] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 536.867703][ T5872] usb 9-1: device descriptor read/8, error -71 [ 536.987265][ T5872] usb usb9-port1: unable to enumerate USB device [ 537.264530][T12511] overlay: Unknown parameter 'rootcontext' [ 537.597464][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 537.604842][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 537.670259][T12514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1684'. [ 537.702192][ T9] usb 2-1: USB disconnect, device number 61 [ 537.829348][T12518] netlink: 'syz.8.1685': attribute type 11 has an invalid length. [ 537.837478][T12518] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1685'. [ 538.641203][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'. [ 538.676044][T12525] bridge_slave_1: left allmulticast mode [ 538.681830][T12525] bridge_slave_1: left promiscuous mode [ 538.729005][T12525] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.781711][T12525] bridge_slave_0: left allmulticast mode [ 538.789695][T12525] bridge_slave_0: left promiscuous mode [ 538.800335][T12525] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.980066][T12529] bond4: entered promiscuous mode [ 538.988973][T12529] 8021q: adding VLAN 0 to HW filter on device bond4 [ 539.001434][T12529] bond0: (slave bond4): Enslaving as an active interface with an up link [ 539.042288][T12532] bond5: entered promiscuous mode [ 539.064139][T12532] 8021q: adding VLAN 0 to HW filter on device bond5 [ 539.296057][T12532] bond0: (slave bond5): Enslaving as an active interface with an up link [ 540.362960][T12562] netlink: 'syz.7.1698': attribute type 11 has an invalid length. [ 540.371202][T12562] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1698'. [ 540.435877][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1697'. [ 540.446448][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1697'. [ 540.886770][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 540.985488][T12571] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 541.135469][T12571] hfsplus: unable to find HFS+ superblock [ 541.145737][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 541.163321][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 541.244911][ T9] usb 2-1: config 168 has an invalid interface number: 95 but max is 0 [ 541.429632][ T9] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 541.605300][ T9] usb 2-1: config 168 has no interface number 0 [ 541.691649][ T9] usb 2-1: config 168 interface 95 altsetting 8 bulk endpoint 0x7 has invalid maxpacket 32 [ 541.705139][ T9] usb 2-1: config 168 interface 95 altsetting 8 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 541.727618][ T9] usb 2-1: config 168 interface 95 altsetting 8 endpoint 0x8 has invalid wMaxPacketSize 0 [ 541.855082][ T9] usb 2-1: config 168 interface 95 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 541.875059][ T9] usb 2-1: config 168 interface 95 has no altsetting 0 [ 541.886945][ T9] usb 2-1: New USB device found, idVendor=53ee, idProduct=aa41, bcdDevice=37.61 [ 541.898072][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.908722][ T9] usb 2-1: Product: syz [ 541.912976][ T9] usb 2-1: Manufacturer: syz [ 541.920267][ T9] usb 2-1: SerialNumber: syz [ 541.935747][T12558] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 542.745449][T12614] netlink: 'syz.8.1711': attribute type 11 has an invalid length. [ 542.753672][T12614] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1711'. [ 543.359515][ T9] usb 2-1: USB disconnect, device number 62 [ 545.558679][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 545.558695][ T30] audit: type=1326 audit(1758640327.150:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 545.605825][ T30] audit: type=1326 audit(1758640327.150:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 545.687097][ T30] audit: type=1326 audit(1758640327.150:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 545.709448][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.715861][ T30] audit: type=1326 audit(1758640327.150:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 545.738277][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.758105][ T30] audit: type=1326 audit(1758640327.150:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 545.796818][ T30] audit: type=1326 audit(1758640327.170:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 545.834185][ T30] audit: type=1326 audit(1758640327.170:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae878eec9 code=0x7ffc0000 [ 545.857005][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.926019][ T30] audit: type=1326 audit(1758640327.170:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faae87c1785 code=0x7ffc0000 [ 545.954041][ T30] audit: type=1326 audit(1758640327.170:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faae878d710 code=0x7ffc0000 [ 545.977005][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.060816][ T30] audit: type=1326 audit(1758640327.170:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faae878d710 code=0x7ffc0000 [ 546.416308][T12658] veth1_macvtap: left promiscuous mode [ 546.422106][T12658] macsec0: entered allmulticast mode [ 546.652690][T12661] veth1_macvtap: entered promiscuous mode [ 546.658736][T12661] veth1_macvtap: entered allmulticast mode [ 546.664618][T12661] macsec0: left allmulticast mode [ 546.670104][T12661] veth1_macvtap: left allmulticast mode [ 546.949625][T12666] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1726'. [ 546.968061][T12665] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 546.980719][T12665] EXT4-fs (loop1): unable to read superblock [ 547.271405][T12669] netlink: 'syz.2.1727': attribute type 20 has an invalid length. [ 547.872204][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1729'. [ 551.737361][T12725] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1740'. [ 551.781284][T12725] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 553.250576][T12748] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1747'. [ 554.095351][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.130641][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.211721][T12770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.424135][T12774] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1756'. [ 554.566900][T12774] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1756'. [ 554.590247][T12774] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1756'. [ 554.715518][T12776] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1745'. [ 554.802667][T12778] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 555.157561][T12786] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1761'. [ 556.022076][T12785] delete_channel: no stack [ 556.551532][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'. [ 556.570087][T12816] hsr0: entered promiscuous mode [ 556.576891][T12816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1768'. [ 557.005004][T12801] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 557.029886][T12801] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 557.039921][T12801] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 557.053259][T12801] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 557.060014][T12801] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 557.072310][T12801] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 557.180041][T12830] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 557.824759][ T24] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 557.939542][T12840] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1775'. [ 557.987362][ T24] usb 9-1: device descriptor read/64, error -71 [ 558.306810][ T24] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 558.616546][ T24] usb 9-1: device descriptor read/64, error -71 [ 558.697222][T12852] netlink: 'syz.1.1780': attribute type 2 has an invalid length. [ 558.744885][T12852] netlink: 'syz.1.1780': attribute type 11 has an invalid length. [ 558.785158][T12852] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1780'. [ 558.809176][ T5885] Bluetooth: hci1: command 0x0c1a tx timeout [ 558.846003][ T24] usb usb9-port1: attempt power cycle [ 559.137591][T12869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.237188][ T24] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 559.245567][ T5885] Bluetooth: hci8: command 0x0c1a tx timeout [ 559.253040][ T5885] Bluetooth: hci7: command 0x0c1a tx timeout [ 559.258264][ T5879] Bluetooth: hci5: command 0x0406 tx timeout [ 559.260792][ T5885] Bluetooth: hci2: command 0x0c1a tx timeout [ 559.265304][ T5879] Bluetooth: hci3: command 0x0c1a tx timeout [ 559.301275][ T24] usb 9-1: device descriptor read/8, error -71 [ 559.725004][ T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 559.781842][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 559.781896][ T30] audit: type=1800 audit(1758640340.931:530): pid=12875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1779" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 560.081273][ T24] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 560.113974][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 560.124322][ T24] usb 9-1: device descriptor read/8, error -71 [ 560.128972][ T10] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 560.149515][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.161153][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.177966][ T10] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 560.188418][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.200861][ T10] usb 2-1: config 0 descriptor?? [ 560.226275][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input30 [ 560.311220][ T24] usb usb9-port1: unable to enumerate USB device [ 560.531656][ T5942] usb 2-1: USB disconnect, device number 63 [ 560.723261][ T24] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 561.514232][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 561.530361][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 7 [ 561.543410][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024 [ 561.566307][ T24] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 561.577137][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.587081][ T24] usb 9-1: Product: syz [ 561.592784][ T24] usb 9-1: Manufacturer: syz [ 561.599090][ T24] usb 9-1: SerialNumber: syz [ 561.613382][ T24] usb 9-1: config 0 descriptor?? [ 561.781288][ T24] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 561.842680][T12906] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1794'. [ 562.097555][ T9] usb 9-1: USB disconnect, device number 13 [ 562.098921][ T7101] usb 9-1: Failed to submit usb control message: -71 [ 562.110238][T12880] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1786'. [ 562.124424][T12880] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1786'. [ 562.144139][ T7101] usb 9-1: unable to send the bmi data to the device: -71 [ 562.152160][ T7101] usb 9-1: unable to get target info from device [ 562.159890][ T7101] usb 9-1: could not get target info (-71) [ 562.167067][ T7101] usb 9-1: could not probe fw (-71) [ 562.247254][T12914] netlink: 'syz.2.1796': attribute type 29 has an invalid length. [ 562.255403][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1796'. [ 563.135034][ T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 563.364278][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 563.372008][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.382318][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.416787][ T9] usb 9-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 563.428989][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.437160][ T9] usb 9-1: Product: syz [ 563.450030][ T9] usb 9-1: Manufacturer: syz [ 563.454672][ T9] usb 9-1: SerialNumber: syz [ 563.462710][ T9] usb 9-1: config 0 descriptor?? [ 563.479386][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 563.512520][ T9] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 563.607703][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.657929][T11943] udevd[11943]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.696883][ T10] usb 9-1: USB disconnect, device number 14 [ 563.985286][T12945] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1805'. [ 564.015503][T12952] overlayfs: failed to resolve './bus': -2 [ 564.701478][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1816'. [ 565.160946][ T5958] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 565.261593][T12989] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1818'. [ 565.348868][ T5958] usb 2-1: unable to get BOS descriptor or descriptor too short [ 565.379673][ T5958] usb 2-1: not running at top speed; connect to a high speed hub [ 565.403267][ T5958] usb 2-1: config 1 has an invalid descriptor of length 36, skipping remainder of the config [ 565.423237][ T5958] usb 2-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 565.457919][ T5958] usb 2-1: config 1 interface 0 has no altsetting 0 [ 565.621456][ T5958] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 565.630666][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.640971][ T5958] usb 2-1: Product: syz [ 565.653111][ T5958] usb 2-1: SerialNumber: syz [ 565.841891][ T5958] cdc_ether 2-1:1.0: skipping garbage [ 565.848111][ T5958] cdc_ether 2-1:1.0: skipping garbage [ 565.854149][ T5958] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 565.949743][T12979] random: crng reseeded on system resumption [ 566.158627][ T5958] usb 2-1: USB disconnect, device number 64 [ 566.895696][ T24] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 567.108347][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 567.140934][ T24] usb 9-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=20.b0 [ 567.213786][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.237791][ T24] usb 9-1: Product: syz [ 567.242159][ T24] usb 9-1: Manufacturer: syz [ 567.249767][ T24] usb 9-1: SerialNumber: syz [ 567.271885][ T24] usb 9-1: config 0 descriptor?? [ 567.293017][ T24] usb 9-1: ucan: probing device on interface #0 [ 567.300134][ T24] usb 9-1: ucan: invalid endpoint configuration [ 567.306661][ T24] usb 9-1: ucan: probe failed; try to update the device firmware [ 567.494655][T13030] netlink: 'syz.2.1828': attribute type 39 has an invalid length. [ 567.506409][T13031] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 567.511802][ T24] usb 9-1: USB disconnect, device number 15 [ 567.857363][T13036] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 567.868981][T13036] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 568.180492][T13050] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1833'. [ 569.243496][ T30] audit: type=1326 audit(1758640350.011:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13059 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 569.300851][ T30] audit: type=1326 audit(1758640350.011:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13059 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 569.323655][ T30] audit: type=1326 audit(1758640350.020:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13059 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 569.355660][ T30] audit: type=1326 audit(1758640350.020:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13059 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 569.380618][ T30] audit: type=1326 audit(1758640350.020:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13059 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 569.403051][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.411732][ T30] audit: type=1326 audit(1758640350.020:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13059 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 569.435778][ T30] audit: type=1326 audit(1758640350.030:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13059 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 569.458122][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.468870][ T30] audit: type=1326 audit(1758640350.030:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13059 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 569.491276][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.498325][ T30] audit: type=1326 audit(1758640350.030:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13059 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 569.521991][ T30] audit: type=1326 audit(1758640350.030:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13059 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdef78eec9 code=0x7ffc0000 [ 569.544705][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.351247][T13061] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 570.384665][T13061] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 570.393714][T13061] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 570.401803][T13061] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 571.442399][T13105] tipc: Enabling of bearer rejected, failed to enable media [ 571.518883][T13107] tipc: Enabling of bearer rejected, failed to enable media [ 571.563576][T13108] tipc: Enabling of bearer rejected, failed to enable media [ 571.749610][T13115] minix: Unknown parameter 'minix' [ 573.014223][T13133] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1852'. [ 575.596945][T13153] input: syz1 as /devices/virtual/input/input31 [ 575.622266][T13161] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1859'. [ 575.631769][T13161] bond0: Unable to set down delay as MII monitoring is disabled [ 575.700856][T13153] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1858'. [ 576.582511][T13174] netlink: 'syz.0.1864': attribute type 21 has an invalid length. [ 576.645684][T13177] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1864'. [ 576.699045][T13172] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 576.733834][T13174] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1864'. [ 576.862772][T13182] overlayfs: failed to clone upperpath [ 577.197242][T13192] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1870'. [ 577.210762][T13192] netlink: 'syz.2.1870': attribute type 6 has an invalid length. [ 577.230523][T13192] netlink: 'syz.2.1870': attribute type 5 has an invalid length. [ 577.238795][T13192] netlink: 'syz.2.1870': attribute type 4 has an invalid length. [ 577.351929][T13197] netlink: 'syz.7.1871': attribute type 13 has an invalid length. [ 578.119710][T13199] netlink: 'syz.8.1872': attribute type 1 has an invalid length. [ 578.246683][T13199] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1872'. [ 578.311595][ T9873] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.363302][ T9873] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.394704][ T9873] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.411292][ T9873] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.860272][T13210] netlink: 'syz.7.1875': attribute type 9 has an invalid length. [ 578.868404][T13210] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1875'. [ 579.092317][T13210] macvlan2: entered promiscuous mode [ 579.131953][T13210] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 579.213494][T13210] macvlan2: entered allmulticast mode [ 579.215008][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 579.215023][ T30] audit: type=1804 audit(1758640359.259:548): pid=13223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1878" name="file0" dev="ramfs" ino=44866 res=1 errno=0 [ 579.219059][T13210] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 579.277067][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 579.487841][ T10] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 579.520682][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.533995][ T10] usb 2-1: Product: syz [ 579.540832][ T10] usb 2-1: Manufacturer: syz [ 579.546157][ T10] usb 2-1: SerialNumber: syz [ 579.582397][ T10] usb 2-1: config 0 descriptor?? [ 579.644550][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 579.904215][T13221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.983326][T13221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.033985][ T10] gspca_sunplus: reg_r err -71 [ 580.045552][ T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 580.090830][ T10] usb 2-1: USB disconnect, device number 65 [ 580.247181][T13233] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1880'. [ 581.205035][T13233] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1880'. [ 581.532676][T13242] syz_tun: left allmulticast mode [ 581.565617][ T5942] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 581.671830][T13246] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 581.758716][ T5942] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.773737][ T5942] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.944248][ T5942] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 582.470050][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.487640][ T5942] usb 2-1: Product: syz [ 582.492063][ T5942] usb 2-1: Manufacturer: syz [ 582.498164][ T5942] usb 2-1: SerialNumber: syz [ 582.754942][ T5942] usb 2-1: 0:1 : does not exist [ 582.787905][T13261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.802936][T13261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.858817][ T5942] usb 2-1: USB disconnect, device number 66 [ 584.083117][T13270] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1892'. [ 584.907356][ T5942] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 585.096731][ T5942] usb 9-1: Using ep0 maxpacket: 8 [ 585.110157][ T5942] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.123790][ T5942] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.134101][ T5942] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 585.151876][ T5942] usb 9-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 585.167218][ T5942] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.182633][ T5942] usb 9-1: config 0 descriptor?? [ 585.454639][T13289] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1898'. [ 585.464862][T13289] netlink: 'syz.1.1898': attribute type 1 has an invalid length. [ 585.472985][T13289] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1898'. [ 585.562890][T13289] new mount options do not match the existing superblock, will be ignored [ 585.671616][ T5942] hid_parser_main: 5 callbacks suppressed [ 585.671633][ T5942] elecom 0003:056E:00FE.0012: unknown main item tag 0x4 [ 585.686654][ T5942] elecom 0003:056E:00FE.0012: unknown main item tag 0x6 [ 585.694642][ T5942] elecom 0003:056E:00FE.0012: unknown main item tag 0x5 [ 585.702020][ T5942] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 585.711555][ T5942] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 585.719118][ T5942] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 585.728310][ T5942] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 585.735562][ T5942] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 585.744109][ T5942] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 585.751503][ T5942] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 585.762980][ T5942] elecom 0003:056E:00FE.0012: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.8-1/input0 [ 586.239143][T13294] vfat: Unknown parameter '|tf8' [ 586.755447][ T10] usb 9-1: USB disconnect, device number 16 [ 587.171249][ T9] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 587.449301][ T9] usb 2-1: config 4 has an invalid interface number: 63 but max is 1 [ 587.470717][ T9] usb 2-1: config 4 has an invalid interface number: 97 but max is 1 [ 587.490677][ T9] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 587.501266][ T9] usb 2-1: config 4 has no interface number 0 [ 587.507372][ T9] usb 2-1: config 4 has no interface number 1 [ 587.515772][ T9] usb 2-1: config 4 interface 97 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 587.532606][ T9] usb 2-1: config 4 interface 63 has no altsetting 0 [ 587.540891][ T9] usb 2-1: config 4 interface 97 has no altsetting 0 [ 587.552115][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=2c.2c [ 587.651472][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.679621][ T9] usb 2-1: Product: syz [ 587.686184][ T9] usb 2-1: Manufacturer: syz [ 587.692066][ T9] usb 2-1: SerialNumber: syz [ 588.139406][ T5872] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 588.332605][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1900'. [ 588.393246][T13321] could not open pipe file descriptor [ 588.481486][ T5872] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.663481][ T5872] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.791547][ T5872] usb 9-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 588.847146][ T5872] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.920866][ T5872] usb 9-1: config 0 descriptor?? [ 589.261177][T13342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.310772][T13342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.474551][ T5872] usbhid 9-1:0.0: can't add hid device: -71 [ 589.528489][ T5872] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 589.558879][ T5872] usb 9-1: USB disconnect, device number 17 [ 589.802551][T13360] netlink: 'syz.2.1916': attribute type 1 has an invalid length. [ 589.928270][ T5872] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 590.115026][ T9] usb 2-1: USB disconnect, device number 67 [ 590.131520][ T5872] usb 9-1: device descriptor read/64, error -71 [ 590.220448][T13374] syz_tun: left allmulticast mode [ 590.409690][ T5872] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 590.562444][ T5872] usb 9-1: device descriptor read/64, error -71 [ 590.701312][ T5872] usb usb9-port1: attempt power cycle [ 591.011176][T13394] netlink: 'syz.1.1926': attribute type 10 has an invalid length. [ 591.030207][T13394] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 591.049319][T13394] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 591.148409][ T5872] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 591.180197][ T5872] usb 9-1: device descriptor read/8, error -71 [ 591.436199][ T5872] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 591.460312][ T5872] usb 9-1: device descriptor read/8, error -71 [ 591.578241][ T5872] usb usb9-port1: unable to enumerate USB device [ 592.163383][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 592.356259][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 592.390105][ T9] usb 2-1: config 0 has an invalid descriptor of length 236, skipping remainder of the config [ 592.412956][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 592.426977][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 592.438081][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.451141][ T9] usb 2-1: config 0 descriptor?? [ 592.462171][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 592.942513][T13430] ptrace attach of "./syz-executor exec"[13429] was attempted by "./syz-executor exec"[13430] [ 593.074998][ T5872] usb 2-1: USB disconnect, device number 68 [ 593.341787][T13444] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 593.507231][T13445] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.521581][T13445] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 594.125973][T13445] overlay: filesystem on ./bus not supported [ 594.382963][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1941'. [ 594.539149][T13445] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1941'. [ 594.586567][T13445] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1941'. [ 594.596534][T13445] 8021q: VLANs not supported on ip6gre0 [ 594.785671][T13465] netlink: 4400 bytes leftover after parsing attributes in process `syz.8.1945'. [ 596.454302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.987558][T13499] sctp: [Deprecated]: syz.0.1956 (pid 13499) Use of struct sctp_assoc_value in delayed_ack socket option. [ 596.987558][T13499] Use struct sctp_sack_info instead [ 597.317382][T13508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.341324][T13508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.564429][ T5942] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 597.748586][T13515] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 598.708510][T13521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 599.627812][ T5942] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 599.824893][ T5942] usb 2-1: too many configurations: 105, using maximum allowed: 8 [ 599.854973][ T5942] usb 2-1: config index 0 descriptor too short (expected 65512, got 72) [ 599.879072][ T5942] usb 2-1: config index 1 descriptor too short (expected 65512, got 72) [ 599.900477][ T5942] usb 2-1: config index 2 descriptor too short (expected 65512, got 72) [ 599.919770][ T5942] usb 2-1: config index 3 descriptor too short (expected 65512, got 72) [ 599.946137][ T5942] usb 2-1: config index 4 descriptor too short (expected 65512, got 72) [ 599.962127][ T5942] usb 2-1: config index 5 descriptor too short (expected 65512, got 72) [ 599.975072][ T5942] usb 2-1: config index 6 descriptor too short (expected 65512, got 72) [ 599.996707][ T5942] usb 2-1: config index 7 descriptor too short (expected 65512, got 72) [ 600.018338][ T5942] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 600.046728][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.056276][ T5942] usb 2-1: Product: syz [ 600.062066][ T5942] usb 2-1: Manufacturer: syz [ 600.069686][ T5942] usb 2-1: SerialNumber: syz [ 600.086536][ T5942] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 600.175171][ T5872] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 600.235007][T13567] EXT4-fs: Ignoring removed nomblk_io_submit option [ 600.258948][T13567] EXT4-fs: Ignoring removed bh option [ 600.298250][T13567] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 600.309797][T13567] EXT4-fs (loop7): unable to read superblock [ 601.328980][ T5872] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 601.867913][ T5872] ath9k_htc: Failed to initialize the device [ 601.922284][ T5872] usb 2-1: ath9k_htc: USB layer deinitialized [ 601.954669][T13584] use of bytesused == 0 is deprecated and will be removed in the future, [ 602.003731][T13584] use the actual size instead. [ 602.084595][T13594] netlink: 'syz.0.1976': attribute type 21 has an invalid length. [ 602.092941][T13594] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1976'. [ 602.488704][ T5989] usb 2-1: USB disconnect, device number 70 [ 602.672698][ T30] audit: type=1800 audit(1758640381.271:549): pid=13606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1979" name="bus" dev="tmpfs" ino=410 res=0 errno=0 [ 603.086035][T13621] tipc: Started in network mode [ 603.091235][T13621] tipc: Node identity , cluster identity 4711 [ 603.152993][T13621] tipc: Failed to set node id, please configure manually [ 603.160980][T13621] tipc: Enabling of bearer rejected, failed to enable media [ 603.185293][T13618] tipc: Started in network mode [ 603.191645][T13618] tipc: Node identity , cluster identity 4711 [ 603.209153][T13618] tipc: Failed to set node id, please configure manually [ 603.217269][T13618] tipc: Enabling of bearer rejected, failed to enable media [ 603.734375][ T5872] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 603.916203][T13635] fuse: Invalid rootmode [ 604.038566][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 604.136095][ T5872] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 604.156514][ T5872] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 604.176732][ T5872] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 604.253073][ T5872] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 604.311714][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.320187][ T5872] usb 2-1: Product: syz [ 604.419313][ T5872] usb 2-1: Manufacturer: syz [ 604.424211][ T5872] usb 2-1: SerialNumber: syz [ 604.741495][T13646] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 604.942138][ T5872] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 604.993929][T13646] EXT4-fs (loop7): unable to read superblock [ 605.139226][T13627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.382864][T13627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.441686][T13650] Invalid ELF header magic: != ELF [ 605.484392][T13651] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 606.341289][T13661] fuse: Unknown parameter '' [ 607.401645][ T5872] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 607.420740][T13663] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 607.483341][ T5872] usb 2-1: USB disconnect, device number 71 [ 610.836552][ T31] INFO: task syz.4.1356:11248 blocked for more than 143 seconds. [ 610.857224][ T31] Not tainted syzkaller #0 [ 610.863530][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 610.874371][ T31] task:syz.4.1356 state:D stack:25960 pid:11248 tgid:11245 ppid:5869 task_flags:0x440140 flags:0x00080002 [ 610.895175][ T31] Call Trace: [ 610.911049][ T31] [ 610.914881][ T31] __schedule+0x1798/0x4cc0 [ 610.924403][ T31] ? __pfx___schedule+0x10/0x10 [ 610.929669][ T31] ? schedule+0x91/0x360 [ 610.934513][ T31] schedule+0x165/0x360 [ 610.939061][ T31] schedule_preempt_disabled+0x13/0x30 [ 610.945568][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 610.951325][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 610.957417][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 610.964057][ T31] ? page_cache_ra_order+0x3a2/0xe70 [ 610.969961][ T31] down_read+0x98/0x2e0 [ 610.974487][ T31] page_cache_ra_order+0x3a2/0xe70 [ 610.979838][ T31] filemap_get_pages+0x468/0x1de0 [ 610.987942][ T31] ? folio_batch_move_lru+0x39b/0x420 [ 610.997852][ T31] ? __pfx_lru_add+0x10/0x10 [ 611.004692][ T31] ? __pfx_filemap_get_pages+0x10/0x10 [ 611.013993][ T31] ? folios_put_refs+0x58b/0x670 [ 611.019329][ T31] ? __pfx___might_resched+0x10/0x10 [ 611.027252][ T31] ? mlock_drain_local+0x79/0x490 [ 611.032947][ T31] ? mlock_drain_local+0x28e/0x490 [ 611.039900][ T31] filemap_splice_read+0x581/0xc60 [ 611.045262][ T31] ? __pfx_filemap_splice_read+0x10/0x10 [ 611.051450][ T31] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 611.059824][ T31] ? alloc_pipe_info+0x374/0x4d0 [ 611.068231][ T31] ? __pfx_filemap_splice_read+0x10/0x10 [ 611.074260][ T31] splice_direct_to_actor+0x4a9/0xcc0 [ 611.083123][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 611.090518][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 611.108091][ T31] do_splice_direct+0x181/0x270 [ 611.113246][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 611.118752][ T31] ? common_file_perm+0x1b5/0x230 [ 611.125453][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 611.131594][ T31] ? bpf_lsm_file_permission+0x9/0x20 [ 611.138107][ T31] ? security_file_permission+0x75/0x290 [ 611.143943][ T31] ? rw_verify_area+0x255/0x4d0 [ 611.149022][ T31] do_sendfile+0x4da/0x7e0 [ 611.153533][ T31] ? strncpy_from_user+0x257/0x290 [ 611.159272][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 611.165016][ T31] ? __se_sys_futex+0x36f/0x400 [ 611.170101][ T31] __se_sys_sendfile64+0x13e/0x190 [ 611.175315][ T31] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 611.183680][ T31] ? do_syscall_64+0xbe/0xfa0 [ 611.189463][ T31] do_syscall_64+0xfa/0xfa0 [ 611.194880][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 611.201170][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.208213][ T31] ? clear_bhb_loop+0x60/0xb0 [ 611.214704][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.221101][ T31] RIP: 0033:0x7f728678eec9 [ 611.227114][ T31] RSP: 002b:00007f7287582038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 611.236811][ T31] RAX: ffffffffffffffda RBX: 00007f72869e6090 RCX: 00007f728678eec9 [ 611.248569][ T31] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000000000000000d [ 611.264825][ T31] RBP: 00007f7286811f91 R08: 0000000000000000 R09: 0000000000000000 [ 611.276516][ T31] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 611.287062][ T31] R13: 00007f72869e6128 R14: 00007f72869e6090 R15: 00007fff0aed7768 [ 611.298347][ T31] [ 611.302059][ T31] INFO: task syz.5.1380:11336 blocked for more than 143 seconds. [ 611.314632][ T31] Not tainted syzkaller #0 [ 611.320352][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 611.344417][ T31] task:syz.5.1380 state:D stack:26632 pid:11336 tgid:11335 ppid:10376 task_flags:0x440040 flags:0x00080002 [ 611.359131][ T31] Call Trace: [ 611.362710][ T31] [ 611.367449][ T31] __schedule+0x1798/0x4cc0 [ 611.373692][ T31] ? __pfx___schedule+0x10/0x10 [ 611.378700][ T31] ? schedule+0x91/0x360 [ 611.385562][ T31] schedule+0x165/0x360 [ 611.389920][ T31] schedule_preempt_disabled+0x13/0x30 [ 611.395869][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 611.401528][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 611.408600][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 611.415166][ T31] ? page_cache_ra_order+0x3a2/0xe70 [ 611.420747][ T31] down_read+0x98/0x2e0 [ 611.425282][ T31] page_cache_ra_order+0x3a2/0xe70 [ 611.430903][ T31] do_sync_mmap_readahead+0x25e/0x7a0 [ 611.436887][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 611.443102][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 611.454049][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 611.461913][ T31] filemap_fault+0x6b9/0x12b0 [ 611.469319][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 611.476868][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 611.484993][ T31] ? __handle_mm_fault+0x2789/0x5400 [ 611.492942][ T31] __do_fault+0x138/0x390 [ 611.499033][ T31] __handle_mm_fault+0x35e3/0x5400 [ 611.504439][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 611.512128][ T31] ? follow_page_pte+0x7ef/0x13e0 [ 611.519492][ T31] handle_mm_fault+0x40a/0x8e0 [ 611.526852][ T31] __get_user_pages+0x165c/0x2a00 [ 611.532633][ T31] populate_vma_page_range+0x29f/0x3a0 [ 611.538310][ T31] ? __pfx_populate_vma_page_range+0x10/0x10 [ 611.545222][ T31] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 611.551242][ T31] ? down_read+0x1ad/0x2e0 [ 611.556219][ T31] __mm_populate+0x24c/0x380 [ 611.560851][ T31] ? __pfx___mm_populate+0x10/0x10 [ 611.566162][ T31] ? up_write+0x1c4/0x420 [ 611.570574][ T31] vm_mmap_pgoff+0x387/0x4d0 [ 611.575897][ T31] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 611.581286][ T31] ? __fget_files+0x2a/0x420 [ 611.586316][ T31] ? __fget_files+0x2a/0x420 [ 611.591057][ T31] ? __fget_files+0x2a/0x420 [ 611.595863][ T31] ksys_mmap_pgoff+0x51f/0x760 [ 611.600846][ T31] do_syscall_64+0xfa/0xfa0 [ 611.608033][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 611.617653][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.626917][ T31] ? clear_bhb_loop+0x60/0xb0 [ 611.634274][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.644452][ T31] RIP: 0033:0x7f5ab518eec9 [ 611.653515][ T31] RSP: 002b:00007f5ab6008038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 611.664382][ T31] RAX: ffffffffffffffda RBX: 00007f5ab53e5fa0 RCX: 00007f5ab518eec9 [ 611.675010][ T31] RDX: 0000000001000006 RSI: 0000000000b34902 RDI: 0000200000000000 [ 611.686483][ T31] RBP: 00007f5ab5211f91 R08: 0000000000000004 R09: 0000000000000000 [ 611.697224][ T31] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 611.705962][ T31] R13: 00007f5ab53e6038 R14: 00007f5ab53e5fa0 R15: 00007ffc2447f298 [ 611.715301][ T31] [ 611.718595][ T31] [ 611.718595][ T31] Showing all locks held in the system: [ 611.773706][ T31] 2 locks held by kworker/0:1/10: [ 611.778977][ T31] 1 lock held by khungtaskd/31: [ 611.786891][ T31] #0: ffffffff8e33d260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 611.799137][ T31] 2 locks held by getty/5626: [ 611.803889][ T31] #0: ffff8880347540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 611.815287][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 611.827357][ T31] 2 locks held by syz.3.1059/10096: [ 611.834184][ T31] 1 lock held by syz.4.1356/11248: [ 611.839486][ T31] #0: ffff8880234294c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3a2/0xe70 [ 611.850865][ T31] 1 lock held by syz.5.1380/11336: [ 611.894723][ T31] #0: ffff8880234294c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3a2/0xe70 [ 611.914203][ T31] 1 lock held by syz.6.1484/11740: [ 611.920536][ T31] #0: ffff8880234294c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3a2/0xe70 [ 611.933814][ T31] 2 locks held by syz.0.1997/13672: [ 611.940404][ T31] 1 lock held by syz.8.2002/13688: [ 611.946786][ T31] #0: ffffffff8e342bc0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 611.958592][ T31] [ 611.962103][ T31] ============================================= [ 611.962103][ T31] [ 611.991081][ T31] NMI backtrace for cpu 1 [ 611.991104][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 611.991124][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 611.991134][ T31] Call Trace: [ 611.991141][ T31] [ 611.991149][ T31] dump_stack_lvl+0x189/0x250 [ 611.991178][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.991198][ T31] ? __pfx__printk+0x10/0x10 [ 611.991232][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 611.991260][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 611.991286][ T31] ? __pfx__printk+0x10/0x10 [ 611.991310][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 611.991334][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 611.991363][ T31] watchdog+0xf60/0xfa0 [ 611.991390][ T31] ? watchdog+0x1e2/0xfa0 [ 611.991417][ T31] kthread+0x711/0x8a0 [ 611.991443][ T31] ? __pfx_watchdog+0x10/0x10 [ 611.991463][ T31] ? __pfx_kthread+0x10/0x10 [ 611.991483][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 611.991501][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 611.991517][ T31] ? __pfx_kthread+0x10/0x10 [ 611.991536][ T31] ret_from_fork+0x4bc/0x870 [ 611.991562][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 611.991591][ T31] ? __switch_to_asm+0x39/0x70 [ 611.991610][ T31] ? __switch_to_asm+0x33/0x70 [ 611.991628][ T31] ? __pfx_kthread+0x10/0x10 [ 611.991647][ T31] ret_from_fork_asm+0x1a/0x30 [ 611.991692][ T31] [ 611.991724][ T31] Sending NMI from CPU 1 to CPUs 0: [ 612.144109][ C0] NMI backtrace for cpu 0 [ 612.144139][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 612.144158][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 612.144169][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 612.144193][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 4a 23 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 612.144207][ C0] RSP: 0018:ffffffff8e007d80 EFLAGS: 000002c6 [ 612.144222][ C0] RAX: e1a57fe837110e00 RBX: ffffffff8196a2b7 RCX: e1a57fe837110e00 [ 612.144234][ C0] RDX: 0000000000000001 RSI: ffffffff8dba2d53 RDI: ffffffff8c03aa60 [ 612.144245][ C0] RBP: ffffffff8e007ea8 R08: ffff8880b8632fdb R09: 1ffff110170c65fb [ 612.144257][ C0] R10: dffffc0000000000 R11: ffffed10170c65fc R12: ffffffff8fc39670 [ 612.144269][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1c12a38 [ 612.144280][ C0] FS: 0000000000000000(0000) GS:ffff8881259e7000(0000) knlGS:0000000000000000 [ 612.144293][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.144303][ C0] CR2: 000055558a3555c8 CR3: 00000000552b2000 CR4: 00000000003526f0 [ 612.144318][ C0] Call Trace: [ 612.144326][ C0] [ 612.144333][ C0] default_idle+0x13/0x20 [ 612.144354][ C0] default_idle_call+0x73/0xb0 [ 612.144377][ C0] do_idle+0x1e7/0x510 [ 612.144402][ C0] ? __pfx_do_idle+0x10/0x10 [ 612.144431][ C0] cpu_startup_entry+0x44/0x60 [ 612.144451][ C0] rest_init+0x2de/0x300 [ 612.144473][ C0] start_kernel+0x3ae/0x410 [ 612.144498][ C0] x86_64_start_reservations+0x24/0x30 [ 612.144517][ C0] x86_64_start_kernel+0x143/0x1c0 [ 612.144535][ C0] common_startup_64+0x13e/0x147 [ 612.144569][ C0] [ 612.336904][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 612.343883][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 612.353101][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 612.363447][ T31] Call Trace: [ 612.366747][ T31] [ 612.369688][ T31] dump_stack_lvl+0x99/0x250 [ 612.374305][ T31] ? __asan_memcpy+0x40/0x70 [ 612.379019][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.384423][ T31] ? __pfx__printk+0x10/0x10 [ 612.389057][ T31] vpanic+0x237/0x6d0 [ 612.393052][ T31] ? __pfx_vpanic+0x10/0x10 [ 612.397653][ T31] ? preempt_schedule_common+0x83/0xd0 [ 612.403126][ T31] panic+0xb9/0xc0 [ 612.406924][ T31] ? __pfx_panic+0x10/0x10 [ 612.411545][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 612.416944][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 612.423455][ T31] watchdog+0xf9f/0xfa0 [ 612.428155][ T31] ? watchdog+0x1e2/0xfa0 [ 612.432591][ T31] kthread+0x711/0x8a0 [ 612.436860][ T31] ? __pfx_watchdog+0x10/0x10 [ 612.441745][ T31] ? __pfx_kthread+0x10/0x10 [ 612.446448][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 612.451766][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 612.457170][ T31] ? __pfx_kthread+0x10/0x10 [ 612.461995][ T31] ret_from_fork+0x4bc/0x870 [ 612.466602][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 612.471722][ T31] ? __switch_to_asm+0x39/0x70 [ 612.476671][ T31] ? __switch_to_asm+0x33/0x70 [ 612.481514][ T31] ? __pfx_kthread+0x10/0x10 [ 612.486157][ T31] ret_from_fork_asm+0x1a/0x30 [ 612.491912][ T31] [ 612.495341][ T31] Kernel Offset: disabled [ 612.499682][ T31] Rebooting in 86400 seconds..