last executing test programs: 26m14.174319923s ago: executing program 32 (id=627): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0x4018aee2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r2 = fanotify_init(0x1, 0x101000) unshare(0x6020400) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0xfffffffffffffce3, &(0x7f0000000700)}, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r2, 0x101, 0x8000011, r5, 0x0) ftruncate(0xffffffffffffffff, 0x7000000) ftruncate(r1, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x4000) 24m24.883763901s ago: executing program 33 (id=1056): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x9, [0xc86, 0xe, 0x6, 0xc21e, 0x4, 0x0, 0x400, 0x4, 0x9]}, &(0x7f0000000080)=0x16) write$dsp(r0, &(0x7f00000000c0)="3c8619b2cfeb590c6cfe17341c0ba3d32c2f43d0b6d7209abee8e85b8a6240c0741c07b37f982d2e4d8d513e7f0a1f8850bd06573f2f74ad3b9cc57e9194d9043eb360b3c943a570a3402c405ce8d7b7d852bdd666f2def236065dcdce73dad6025f7fb098b78486619845fb715304737387202b416985f403c1e70e3e425d2a3eef016cd7869f281aec6323a896769b7617dc3041fee249791672bcb5539d3912", 0xa1) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x100}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x3ff, 0xb9, 0x6, 0x101}, {0xa, 0x8, 0xc, 0x6}, {0x4, 0xa7, 0x1, 0x9}, {0x2, 0x1, 0x3, 0x5}, {0x100, 0x9, 0x0, 0x7}]}, 0x10) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x4617}, [@generic={0x0, 0x0, 0xc, 0x2, 0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x21cd, 0x62, &(0x7f0000000300)=""/98, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000380)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xf, 0x252dcefc, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000440)=[{0x0, 0x2, 0x1, 0x5}, {0x1, 0x2, 0x7, 0xb}, {0x0, 0x1, 0x0, 0x4}, {0x5, 0x2, 0x10, 0x3}], 0x10, 0x1}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000540)=[r1, r0, r0, r0], 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000580)=0x4, 0x4) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000880)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[{}, {}], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x4, 0x0, r2}) bind$inet6(r0, &(0x7f0000000900)={0xa, 0x4e20, 0x1d0, @private1, 0x8}, 0x1c) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000940)={@none, 0x4, 0x5, 0x9, 0x9, 0x5, "38d2f50563d1d358509d27e0eedfb7c744acc58ec974bf089ee60962c7a832549d244b66dc96e780058fd44bb5c5662e39b819e6031ef78859695ba071e4ea80cdfeab8d204ef66e3d98ae85ea339a29d5f3c7c38518b012eae15fb50c6a85e169d473860443d40ca07fa9b275526665720c4dbad86480392d1fed750e54104b"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000a00), r4) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0xffffffffffffffff, 0x0, 0x4004) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000a40)={0x1c, 0xffffffffffffffff, 'id0\x00'}) r6 = syz_clone(0x400, &(0x7f0000000ac0)="a8aafcb97d0f92ffe5bab0b75cbf14b55f4a98f21bed7eb58f38f7ff33e8d88942cff145ae0a8a43b03da01ca0854c69c64f35738f684ef1a758d2fefa3990722aac532821ceb299fa725749f1a00d3febde294ab14ea444e8923a4837cd113124b1a1b6294c901371caff9f6b6f9f6d419836c84e13b366af18c73ecb05b7fc2c1f5120db550275ed808801", 0x8c, &(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)="837881877cd2aef110ee659b1e12818acd8946d1867125fa5bc4170a32c6604918bb81dd56c1b719d759369c73cc7ff668ff959c1c9d1de869af93d7001dd00b4c826a478c260c1a") ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000c80)=r6) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, 0xd, 0x6, 0xc06, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) setsockopt$inet6_int(r5, 0x29, 0x0, &(0x7f0000000dc0)=0x10, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, 0xffffffffffffffff, &(0x7f0000000e00)) bind$alg(r0, &(0x7f0000000e40)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000ec0)={0x0, r0}) connect$inet6(r5, &(0x7f0000000f00)={0xa, 0x4e24, 0xb6d, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7}, 0x1c) r7 = accept4$nfc_llcp(r0, 0x0, &(0x7f0000000f40), 0x800) sendmmsg$nfc_llcp(r7, &(0x7f0000001540)=[{&(0x7f0000000f80)={0x27, 0x0, 0x0, 0x7, 0x80, 0x1, "ccd085941c3291fcb97da02d388a7fa354e83818c6591ad9cdd01e81aa0ea63671c7c1deb9b29a2f5c0f89dea24978a441891adcf004405f030cd7ad3d79c6", 0x21}, 0x60, &(0x7f00000014c0)=[{&(0x7f0000001000)="77bc07338193ef481a22a53608355641ab39ab8e5e27dd1f11a5318738594557ec89687dde2e3381ae9ac8dcdf65a357e0da99c0760d773c3e20a9ebef7557ad95cdf9d70f5ddf06ddd6161dff8b0f4d593510f8894c3e594b3e8f6890dc0ca43e99b29d2285543c5dd9dc0aae3643a0115babfee8b8690222a2b324bc9e3e6b4b3fa9a002c86253ff48e253bd76d01d13cf9217d24996fde0", 0x99}, {&(0x7f00000010c0)}, {&(0x7f0000001100)="c47b7520324d98a6da21332fb0b8da182ef0e7ab01c96704682ac015ba12a38d94a8df5623136aed6efdccc669fdd64dab7abaf5c72f7af553ac5f90d3072e02207df1fafaf749c1cb302f7a3dec882c254ae320dd7052f9d9911c3f38a546edea03590119a53f27bccab029161cbc8fbdcc5ef83228773f3bc88e444fa9b025e122b73a31642328ddbe9e7439d3439afcdf29e0007e1e29daccf9c78a7939966366a4427f75f5f7d1d2f3e4", 0xac}, {&(0x7f00000011c0)="5d870d1e52d34948e502c6592f9417812293999dfb46b9bbe02efb9a7fe97bfff10ccaec869b2399a9ab55fc18260d80cbb473819d46e7bca89805b6c0298130a2983976fbdd5e3af39f70aaf023716ac2c5432d2f94a4ddf08fa4b7038a55f4dc145268f7ef5d3d656c4661e2c787ea4c0698579a9b1bb8d6406c35b4752d7937d0102990feaa1167c063d0003babd267a4bb0a116baf3a4ab4e3915f2dff42dceefadeb8217bd71030e3d6b58ef4d160584f6e56c62abea460b8aebc16474386cdaa8a4fcee92bd343ee5cade393bce9c7474c014c1b608f0595e367111fc732cfefc9", 0xe4}, {&(0x7f00000012c0)="2501e19058cdd0495d223c4657ce218a98fa1ade0c58cb9751e6d3dd2cd616318c548f534f35d7f4d07ed5441551d4663890ff256c8f37ca6dc2cdcd452c5a6d97daf1d32c21b842c156dd95326a65c9571b58461dd8f78bb0d8ab8e0c4113535ff8e6b8aea1b09ed8dd3766334d0b3b3e41d07686c7f0af81b71cfa5426b9e1e3363bcd341f936762991aae05051974b27ac345236b91feca8a5d624455825385bbf9e21f5970136be48210b9c992c70c6466084524beb27bf07a734e22e3b545372a62d9137dddac0758641a1006b922b2316413866e690d005140fb6f202e2e26cf20cd69cfbad5d72ead00ae6238d699d10fb5c6aabae1", 0xf9}, {&(0x7f00000013c0)="3c1330c610b33b6525b66f3f22e7afc1eac4e5f5baf132100b96b95975826c2067353e7483728c371e45fe12843bea2cde467c5558481f407d655193838d4b333c477a4ca574588d69bb38e8ef4ee5840877907d9574998f4766f5fcddbd36077533e883f331e8510ea8523022143f50d08cb7094b30cbda9d2b7b94fc60eb55b906", 0x82}, {&(0x7f0000001480)="410829a61bde71d21451b9f69ae074c11132d64d1d9b92586e640734a028b31d", 0x20}], 0x7, 0x0, 0x0, 0x20000004}], 0x1, 0x80) 22m18.85553708s ago: executing program 6 (id=1547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010300000000c0a030000000060000000000a0000060900020073797a31000000000900010073797a3100000400040003802c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100"], 0xc8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 22m18.033432812s ago: executing program 6 (id=1551): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) (async, rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000006340)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x0, 0x4, 0x5}}}}}}, 0x0) (rerun: 32) 22m16.603112896s ago: executing program 6 (id=1556): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) lseek(r1, 0x7, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r3 = syz_io_uring_setup(0x111, 0x0, &(0x7f0000000040)=0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) semtimedop(0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x48, 0x0, 0x10000, 0x3, 0x0, 0xfffffffd, 0x0, 0x1, {0x3}}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_route(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000009000000000000002747000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000001feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095000000000000007ca8dcbfb75c9e92e5a2cd"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x15, &(0x7f0000000140)=""/21, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xc, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0xffffffffffffffff, 0x1, r3], &(0x7f0000000380)=[{0x3, 0x3, 0xf, 0x2}, {0x4, 0x4, 0xf, 0xa}, {0x1, 0x3, 0x2}, {0x1, 0x4, 0x9}, {0x3, 0x4, 0x10, 0x8}, {0x1, 0x4, 0x2, 0x8}], 0x10, 0x7}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x1, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r7, r8, 0x25, 0x18, @val=@tracing={r9, 0x5}}, 0x20) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r10, 0x5452, &(0x7f0000000040)=0xcd8) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) get_mempolicy(&(0x7f0000000780), &(0x7f0000000800), 0xfffffffffffffff7, &(0x7f0000ffd000/0x2000)=nil, 0x3) 22m14.261083012s ago: executing program 6 (id=1564): syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000480)=@known='user.syz\x00', &(0x7f0000000600)=""/202, 0xca) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x16000, 0x0) name_to_handle_at(r2, &(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000340)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0xfffffffffffffffe, 0xfd, 0xfffffffc, 0x25, 0x2, 0x7c15}}, &(0x7f00000003c0), 0x1300) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) timerfd_create(0x4, 0x80000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000000020603000000000000000000050000000c00078008000800000000400900020073797a32000000000500040000000000050005000a00000005000100060000000f0003006c6973743a736574"], 0x54}}, 0x80) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x1000489, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYBLOB="918acccabce73cb63ce16b5b1919cf283ab5de97f6633691dd7ab6aae7ba690339a7ee844608aa278eb92de99d4f4842dd6e1c734ec989caa88386638ac732324edd8d2a5b14c0ed9ee69dd3bee8f25194dd47a7788a5d262090acd101fb0769f822c01c3f920a84b911cceb1d68a260f56ca5b1f43df568f191d9ce63145e61e2fa4660335de37ea0442a15acf7e826dae07fc670ce178bbfadb1bb983ac4728be77925d5313d7e8f", @ANYRES64], 0x1, 0x4b0, &(0x7f0000003400)="$eJzs3V9v01YbAPAnCF6VvDfTNiGE+GPKNgrqgp2OooirKHWLWZpMSSvRqwmNIiEqTYIr+Dj7IPto62SnKUW0SbbRBlW/XwTn2H7qnLSWHx3H5zgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKh11tI0q0W36G0/S07WWRv0NydsH+/vz4+KCe8bUSv/xcJCXB2tuvrth81Xyv8W4/po6XoslMVCvP//la8ef3PxwvjnJzToTLx99/7187293TfzbsicbOS9YtgvNtsbeVIM+0lrdTV98GR9mKwX3Xy4M9zKN5POIG9v9QfJUudekrVaK0ne2Olv9zbW2t18vPLRj800XU2eNn7J24Nhv/fgaWPYeVJ0u0Vvo4opN5cxj8oD8ediK9nK25tJ8vLV3u7KtEaWQdksQc1pQc202cyyZjNbfdh6+ChNL36yIj3icpqm8UnE/A9a5uszn8Hh37vQWUsvZ5fHi9vxLJJjX51Yi0H0Y/OE7QfG+f/7B/nE9z2a/8dZ/uqHzdeiyv83R0s3T8r/J7Tl7F5v4128j9fxPPZiL3bjzdxbdLavjcijF0UMox9FbEa7WpMcrEmiFauxGmn8Gk9iPYaRxHoU0Y08hrETw9iKvDqiOjGIPNqxFf0YRBJL0Yl7kUQWrWjFSiSRRyN2oh/b0YuNWIt2tZeX8ar6va9MaONhUDZLUHNC0D/L/6n8zzE+6/kb/ov9g/4/AAAAcH7VqqvvZf//UtyoautFN0/n3SwAAADgM6q++b9eFpfK2o2o6f8DAADAeVOrxtjVIqIet0a1l/EqInbDRQAAAAA4J6rv/2+WRb2s3Yra4Uwo+v8AAABwTizG/0aVE+fYnzoLf215PP1v8mJUvjiIOJjnt75edPNGp999nMUP1SwD1UiDY/d2qRp+cD9uj6Ju10dl/eM9LpRRWeNxFvdj8eCDLN0piztLx0Q2Z45cKSMB4LxbnJKPZ8n/9+PuKOLutTKZxsVrx2TWVGYFgC/F9GfsTI2o/TSl///14S0Fjfgtfo+9eBHL1WiD6o6DY/daP3IbwvKUqwH1I094WZ7Sy68fedDL7LErZ/CXAICzszglD8+S///a39+vIk7o/9fdUggAX5TDJ9ifYmXenxEA+JgsDQAAAAAAAAAAAAAAX75TGPb33R+nPaBQRUXllCvzPjMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKf+DgAA///LLISK") madvise(&(0x7f0000003000/0xf000)=nil, 0xf000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 22m13.64686858s ago: executing program 6 (id=1571): lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="0200000008000000000000000200000000ebffff010000000000000020"], 0x24, 0x0) 22m11.259805381s ago: executing program 6 (id=1577): memfd_secret(0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000000000000000101001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000c40300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 22m9.336272863s ago: executing program 34 (id=1577): memfd_secret(0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000000000000000101001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000c40300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 21m31.367512418s ago: executing program 7 (id=1696): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@remote, 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x6000000}, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@multicast1, 0x0, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3, 0x0, 0x800, 0x0, 0x1}, {{@in=@multicast1, 0x4, 0x3c}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) 21m31.075863399s ago: executing program 7 (id=1699): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18070000000000155a00c2009500004000000000030096969f501285ddd25234f8f68f170000c615103a46f69559dfd38b79faf1d9ba40217f987243aad3880000002a36c522b15a8f6a6e2f5dc004855af20a7b1cbfc63464398f47a8295353ee6b456b0da7b6e1ac6d2b65fd7da24d956c48c7931b"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="8533c5287eefdb2e585a37498183cd986a71211267179ada7160258404fa3dbede408eb485158adfc4c8c306cea2dc5d12ef995ca023cda1027c77e92c8f9aea52da59a7a55050094ffaf09fd858e27276eba2b1d5332afb87daa0d2996e7e18b9488cb52f0de1abc78583ee535384a5a5a3bdbaf5f050276b53aa1e68961cbfde24ccc1e15405a8c8573a4a1de39f59a94931a5052f8273a63b0053fb11b752922211a229c74be0dd72fcd1f1b9dd54768269bb37a6c50ea648320e891d30bc19793661c90b4229f392d92b2c881e6d56f259be0600b0e45de3c3ab1172eaa931a296f2be1ab7fc05a5d385bd7245f897886820925189b9338719675370ee281151c25f39f6ffcc51994c4c0bdcbd53273241610a4dbf1df807989a4772d2feb77a43776cb4ff6d532c37b369da58c90a6bc134fb2f2aade7e134c451d1daefcd754bcb45d0ddd25c1bdbaff9e439ed910147244a2a77b898d85038f387fc70f26c8f914612b2c31e376844631d925c6b349572fe83c19f0fafa70bbe8f5f89c0baf357ffddcfc8cfbe322dd1e96664bdf7b0897085c798d5327ae8c9665424b81b0dd1844c8f9dd1354ff3214cd76ddc2db3ea529bb6f27a4961184325c295c6a7a9199790caf83ab922f777e8a880ca331b3d54aa0e68b3ef760b11c1e425d915ed6c784f0a7c3c176eaf61fc660b2fe99cdeae97dbe7247b434218a65515e2d16f466fe35dcfb564dd5588cb0c8a938014f9833641600ad01e4f0567bdefe45c37b6690de0c08358a7971f07fba503a83b60724e8385d213ce265212f18c5b3820e51a3141f93cfbece7e7098015708555c56ea54aceae6dc772fc06abbe215729c6142558cf12cf22d1bcc01f66e2137ef7a8e0ed232444bb6c3fa0dc719dfae81b8888628667d3b576ae9aec71785a17947bcc7ed14447a75ebd6cd3b83f169e55dac18e1793c6d15341abd8ca105bcce305ae4717787208e961a06591b668e3e3f733477e78fe38b56bc7cb673983629f09e7b7364be5d78a8e93a886a497f5fc915952d7bfed3a93efb01b8e6e0abbf39bfbc2b0b73d6a6ac0184ff92d418cc5a5fa77b959204d34fbf5facb984b8da7ec35f10417e8726673b8872504cae2dd04c55f34f3e4fb4bd824d513e13e1b3eb619f23ea34703b90a09b02c479a9af97b294a882ba6998b98980a8915c458b237a4ea758155624057d531926733e48fbc6e719b67fab9d34eb959d3f163b93314d44351d7ab6969438ebfd6e0258bebaba74e40505cf82547986ae6dd5e2ee44ab23649689c970647888ab9e7c4255c64589edaed1ff6a142f75a65b9873be980517927f0e3fec4da3d1ccb369fec12f6b772654ee1b76b07f4fcd0c54cdbe166b9d2562d1f09f644cb508b222cdb617cd9af87f47e13a974f4f8657d5520668259f228093ad603fa43d5d3a97cdc3f3f2b9894e607308bb798862b26e02bde615cecf202bb399059be8bc07341652437b72d2cbd39dfea4f1b3952581f073688132e122469f00d0cbd49ae29cfaa938dc0962e5512f665b67114df16e478489157106f046ee8b132eeaeed5b840ac8969473a0d95eabea0c6360c4127c2c67c6fdcf7c6c864abf3a0ca83e2f29192241f594c7a97f4388713e34c27e1c86fd3a2e2d20541f824a373924c61efd4349168cab734454837f0fc89dfa3f3d899301af264d47b491f2a7eeb67bbde24d4f0fd8218bf612b5bb85f9a4fedeb59695f3e3db96aa0a4ef60ce3659acaae67636ac83f3a2ae295b791303dc9e539c1562dfaaaf4ce9cdcd01548ac377b1cabfb27117185eedb8d17afd20ee52e755fe1ee86421107eff1922c1c293c940ac42311a8da64f03b70a4572525c444d5e16e0ceeed791294c46e7df7a2dee94d1c998fdaeaed005efddfbd284bb8b8e4c2468e50714e6bc07db67d056a4120a2aa1e4208106a9051a2e4a72cb94638e82bf7fe88998b884cc51fa39489648ef55a312d2532c26168d122e30f1f8a7c4a68cf3c3333380ead384e92216b7c5c1916012685b759c7eeab1be242c2398a77b07aee00012cc9a695db55405a042d23cd4602734a8e470187dfac00c1a7df76166123532af936607cf94a44d0852469a1413d41242cf2a22f958f77ca42f8f993b115a112a7d6c1e9dd3f1cea258e0b9625afccd59813c43d1ec76fad66beb7062b4da0386169ed9f6755cb9e44851b88559960ec91f2be5bf88629ecef886feb2adce4ff0784f931b470a8b048f11f365d47bc75e2f7253d3963765d20330ab39ff38203f428d761f72293fbf5349524017227e558569c4c344f033191224c800c7a2ffa1325c9e2fca232ed2c889d0d62ae2bb556c4683715", 0x68c}], 0x1}, 0x40810) (async) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="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", 0x68c}], 0x1}, 0x40810) 21m30.791185488s ago: executing program 7 (id=1701): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000001300)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0xfffffffc, @private1, 0x20000}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000b40)="c6", 0x1}], 0x1}}], 0x2, 0x814) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000140)=0x8) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0xff, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0x1f, 0x200008}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0x4, 0x8, 0xc}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 21m29.574396509s ago: executing program 7 (id=1711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) (async) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x49340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21m28.723832082s ago: executing program 7 (id=1716): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21m28.499037782s ago: executing program 7 (id=1718): socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47b6, 0x800000, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff000000000000000000000300"}}) 21m28.129308829s ago: executing program 35 (id=1718): socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47b6, 0x800000, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff000000000000000000000300"}}) 15m16.109109955s ago: executing program 4 (id=3072): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x20044000) 15m15.931588056s ago: executing program 4 (id=3074): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x0, 0x3}) socket$packet(0x11, 0x3, 0x300) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x8, 0x1, [0x0, 0x0], [0x8, 0x4, 0x5, 0x8], [0x7, 0x0, 0x7, 0x6], [0x8, 0xa, 0x0, 0x1000]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r1, 0x80000, 0xffffffffffffffff}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000180)={0x0, 0x1, 0x5, 0x1, &(0x7f0000000140)=[{0x10, 0xa83, 0x37, 0x3}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000001c0)=0x60, 0x4) r4 = syz_open_dev$mouse(&(0x7f0000000200), 0x280000000, 0x84000) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x6, @vbi={0x3, 0x9, 0x1, 0xb5315258, [0x7fff, 0x4], [0x101, 0xfffffff7], 0x1}}) socket$netlink(0x10, 0x3, 0x8) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') keyctl$setperm(0x5, 0x0, 0x4000901) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000003c0)=0x6) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x200, 0x8, 0xa}, 0x18) mknodat$null(r5, &(0x7f0000000480)='./file0\x00', 0x10, 0x103) socket$netlink(0x10, 0x3, 0x6) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000004c0)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r6, r7, r9) prlimit64(r8, 0x5, &(0x7f0000000580)={0x5, 0x9}, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000005c0)={0x3, @sliced={0x0, [0x400, 0x5, 0x7, 0xc6e4, 0x0, 0xb5ae, 0x583, 0x7, 0x6, 0xd, 0x8, 0x200, 0xe771, 0x8, 0xed, 0x4, 0x2, 0x89, 0x8, 0x7, 0x7, 0xfff, 0x5, 0x7, 0x100, 0x0, 0x3, 0xaf, 0x4, 0x6, 0x7f, 0xf49, 0x5, 0x6, 0x8000, 0x2, 0x2, 0x5, 0x7f, 0x9, 0x1, 0x5, 0x5, 0x7ff, 0x81, 0x9, 0x9, 0xe149], 0x9fd}}) socket$inet(0x2, 0x1, 0x900) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r10 = socket$netlink(0x10, 0x3, 0x7) ioctl$BTRFS_IOC_BALANCE_CTL(r10, 0x40049421, 0x0) keyctl$setperm(0x5, 0x0, 0x20500) 15m14.95812634s ago: executing program 4 (id=3079): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x68e020b660a728a5) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000100)=0x8) (async) r1 = socket$inet(0x2, 0x2, 0x1) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10) (rerun: 32) 15m14.567834994s ago: executing program 4 (id=3081): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="500401a06483"], 0x7) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002ff7120c40911001cb0010203010a022400010004100009047e100226d518080905060582020800000000"], 0x0) syz_usb_control_io(r6, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r6, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB='@!\f\x00\x00\x00\f!'], 0x0}, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000340)=0x6) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x3, 0x4f, "0c41920887e8d2b791f19dd026d76d7fcb366b", 0x4, 0x200}) write(r5, &(0x7f0000000200)='G', 0x1) ioctl$TCXONC(r5, 0x540a, 0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x7) r7 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@nolazytime}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) 15m9.285365871s ago: executing program 4 (id=3099): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000180000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000007700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m8.591834303s ago: executing program 4 (id=3101): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'team0\x00', {0x3}, 0x8}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x1, 0x70bd23, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x1, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x8}, @IFLA_CARRIER={0x5}, @IFLA_LINKMODE={0x5, 0x11, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r7}}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r7}}], [], 0x6b}}) 14m53.535883072s ago: executing program 36 (id=3101): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'team0\x00', {0x3}, 0x8}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x1, 0x70bd23, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x1, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x8}, @IFLA_CARRIER={0x5}, @IFLA_LINKMODE={0x5, 0x11, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r7}}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r7}}], [], 0x6b}}) 6m24.688243783s ago: executing program 0 (id=5037): socket$nl_route(0x10, 0x3, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000010c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000200fffc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 6m23.524039783s ago: executing program 0 (id=5042): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="08000000000000eb0900000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000ffa40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000a00000000000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fc0100"/400], 0x190) 6m23.349758314s ago: executing program 0 (id=5044): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r3, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m23.055779756s ago: executing program 0 (id=5048): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000240)={0x20, 0x14, 0x11, "023b48312025c04b028dcb170b2f0547cd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m19.309055855s ago: executing program 0 (id=5060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) capset(0x0, &(0x7f0000000000)={0x9, 0x0, 0x1, 0x4, 0x1}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x6, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x2}, {{@in=@local, 0x0, 0x2b}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x2, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d3, 0x2b}, 0x9, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x1}]}]}, 0x1fc}}, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00', 0x7) r6 = getpid() ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r6}}, 0x3c) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) 6m17.653193439s ago: executing program 0 (id=5063): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x101) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), 0x4) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@private0, @in6=@dev}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@private0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8002, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@access_client}, {@noxattr}, {@loose}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@directio}, {@version_L}, {@noextend}, {@access_client}], [{@audit}, {@subj_role={'subj_role', 0x3d, '[-\xa8'}}, {@fsname={'fsname', 0x3d, '!$]'}}]}}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000380)={@remote, 0x0}, &(0x7f00000003c0)=0x14) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x6, 0x4) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)="09b6b1d44166a23e96b89c0a91bbcffdd653a5b2d1f082cef7dff3321ee9cdcc1320ed73857e05d015e31d78d18b37a3e0868d56f127d5bd24b9addde9158286c0f22bfe0fca7f93b7dca39b2c693f24425cd08abde3011c71f48d1b4de36aff8527a369b18d51c45506b373147bceb10f1e7cdcc987dc8d744f2842fef1563c7f54f5bd8836894db574cb9b8e548a572e", 0x91}, {&(0x7f0000000500)="dc80c37da6c9427af3c7a712f24498c007e5e03afdd303438e575ca1fbe6e0df1d009913c737845c5df7f680f5f06a6be84f516c68aa9effad8f879502e804799eb42a2f1c82afce93b4f5ae4f2ef93791c2e42d65063d9496d7192b3703072caf9a54281b48668e654fa99fdf0ec4a6b726971e53a89daf056a0b9c4287f8aef3589d6c13a7321ec9088d75d4cab47f9fa41a", 0x93}, {&(0x7f00000005c0)="758ef75a56c77ee328d1ad55290bdc534fde11b44c251360aac7f7088ca0c2bbb6a62a7a392b20a76164f7b1b0e643afd113c1805e384ad16ee8bbe72b5959e7c9a2e4f007554a9b9173da8bc03210fbdd3e3b7aebf53f5f86d62d81", 0x5c}, {&(0x7f0000000640)="dc45182b8219981bf3810d44a1ed6b52d4", 0x11}], 0x4, &(0x7f00000006c0)=[@rights={{0x34, 0x1, 0x1, [r1, r0, r2, r2, r1, r1, r0, r2, r2]}}], 0x38, 0x20000000}, 0x40001) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000740)=0x6, 0x4) ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) (async) r5 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000000840)={&(0x7f0000000780)=""/167, 0xa7, 0x4}) openat$audio(0xffffffffffffff9c, &(0x7f0000000880), 0x500c0, 0x0) (async) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000880), 0x500c0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f00000008c0)=0x7) pselect6(0x40, &(0x7f0000000900)={0x28800, 0x9, 0xfffffffffffffffe, 0x83, 0x0, 0x3, 0x2, 0x5}, &(0x7f0000000940)={0x3ff, 0x10000, 0x1, 0xb76, 0x7, 0x2, 0x1, 0x6}, &(0x7f0000000980)={0x6, 0x10, 0x9, 0x6, 0xe, 0x800000000000, 0x2f2, 0x5}, &(0x7f00000009c0)={0x77359400}, &(0x7f0000000a40)={&(0x7f0000000a00)={[0xd39]}, 0x8}) getpeername$l2tp(r0, &(0x7f0000000a80)={0x2, 0x0, @broadcast}, &(0x7f0000000ac0)=0x10) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000b00)={0x14}, 0x14) syz_open_dev$radio(&(0x7f0000000b40), 0x3, 0x2) (async) r7 = syz_open_dev$radio(&(0x7f0000000b40), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000b80)={0xf, 0xaff8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)=@delqdisc={0xb4, 0x25, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffe0, 0x2}, {0x8, 0xe}, {0xa, 0xfff1}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x32}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x38}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd47}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xb4}}, 0x4000) (async) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)=@delqdisc={0xb4, 0x25, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffe0, 0x2}, {0x8, 0xe}, {0xa, 0xfff1}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x32}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x38}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd47}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xb4}}, 0x4000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000001000)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x1b0, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa64e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff00}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2c, 0x3, "6946bf275e3a26b07c948d83f25f8c72ab1bfcbd0e8ab116442f33cf2dee853aa02643ea299a50ea"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1bc}, @TIPC_NLA_NODE_ID={0x22, 0x3, "79e2a314030291a0e262dfb8935d2b62f293e24f78ff76f72dffa65e40b1"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x91, 0x3, "65c4989157969b779cffb196915835d0e4e8fe513c9575012cfbe6011a8e6a812d1e4bce474d9c1221eeda281baac361ef79cfaeb65a3270f5f3491aef9323cfc7d9442ba15389ed5d65420b931e0e8e0b4238ddb34c6fd271af73b7a04681b2b7afc393963de6a48746583469a38f1cf6382bf1cbd85e0b13545b0f28dcb329d0ad34cab88204a9fc47490495"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffc00}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffff98}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4}, 0x5) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000001040)={'mangle\x00', 0x0, [0xbcb3, 0x8, 0x401, 0x40, 0x9]}, &(0x7f00000010c0)=0x54) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001100)={r0}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) (async) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000001140)=@t={0x81, 0x6, 0xb, 0x91, @generic=0x6}) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000001140)=@t={0x81, 0x6, 0xb, 0x91, @generic=0x6}) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000011c0)=[@textreal={0x8, &(0x7f0000001180)="660f79e60f01c2b800008ee00f0172000f69b30700199100902e0fc76b38bad004b83e00ef0f78ca660f380a8e4700", 0x2f}], 0x1, 0x0, &(0x7f0000001200), 0x0) open_tree(r0, &(0x7f0000001240)='./file0\x00', 0x1) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000001280)={0x7, 0xfffffff8}) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000001280)={0x7, 0xfffffff8}) pselect6(0x40, &(0x7f00000012c0)={0x63825b4b, 0x26, 0x1, 0x3, 0x0, 0xdf, 0x6, 0x7fffffff}, &(0x7f0000001300)={0x6, 0xdf66, 0x8, 0x5, 0x8e4b, 0x9, 0x5, 0x200}, &(0x7f0000001340)={0x8000000000000000, 0xffffffffffffffff, 0x0, 0x6, 0x0, 0x7f, 0x0, 0x7}, &(0x7f0000001380)={0x77359400}, &(0x7f0000001400)={&(0x7f00000013c0)={[0x7]}, 0x8}) (async) pselect6(0x40, &(0x7f00000012c0)={0x63825b4b, 0x26, 0x1, 0x3, 0x0, 0xdf, 0x6, 0x7fffffff}, &(0x7f0000001300)={0x6, 0xdf66, 0x8, 0x5, 0x8e4b, 0x9, 0x5, 0x200}, &(0x7f0000001340)={0x8000000000000000, 0xffffffffffffffff, 0x0, 0x6, 0x0, 0x7f, 0x0, 0x7}, &(0x7f0000001380)={0x77359400}, &(0x7f0000001400)={&(0x7f00000013c0)={[0x7]}, 0x8}) 6m2.347558292s ago: executing program 37 (id=5063): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x101) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), 0x4) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@private0, @in6=@dev}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@private0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8002, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@access_client}, {@noxattr}, {@loose}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@directio}, {@version_L}, {@noextend}, {@access_client}], [{@audit}, {@subj_role={'subj_role', 0x3d, '[-\xa8'}}, {@fsname={'fsname', 0x3d, '!$]'}}]}}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000380)={@remote, 0x0}, &(0x7f00000003c0)=0x14) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x6, 0x4) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)="09b6b1d44166a23e96b89c0a91bbcffdd653a5b2d1f082cef7dff3321ee9cdcc1320ed73857e05d015e31d78d18b37a3e0868d56f127d5bd24b9addde9158286c0f22bfe0fca7f93b7dca39b2c693f24425cd08abde3011c71f48d1b4de36aff8527a369b18d51c45506b373147bceb10f1e7cdcc987dc8d744f2842fef1563c7f54f5bd8836894db574cb9b8e548a572e", 0x91}, {&(0x7f0000000500)="dc80c37da6c9427af3c7a712f24498c007e5e03afdd303438e575ca1fbe6e0df1d009913c737845c5df7f680f5f06a6be84f516c68aa9effad8f879502e804799eb42a2f1c82afce93b4f5ae4f2ef93791c2e42d65063d9496d7192b3703072caf9a54281b48668e654fa99fdf0ec4a6b726971e53a89daf056a0b9c4287f8aef3589d6c13a7321ec9088d75d4cab47f9fa41a", 0x93}, {&(0x7f00000005c0)="758ef75a56c77ee328d1ad55290bdc534fde11b44c251360aac7f7088ca0c2bbb6a62a7a392b20a76164f7b1b0e643afd113c1805e384ad16ee8bbe72b5959e7c9a2e4f007554a9b9173da8bc03210fbdd3e3b7aebf53f5f86d62d81", 0x5c}, {&(0x7f0000000640)="dc45182b8219981bf3810d44a1ed6b52d4", 0x11}], 0x4, &(0x7f00000006c0)=[@rights={{0x34, 0x1, 0x1, [r1, r0, r2, r2, r1, r1, r0, r2, r2]}}], 0x38, 0x20000000}, 0x40001) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000740)=0x6, 0x4) ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) (async) r5 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000000840)={&(0x7f0000000780)=""/167, 0xa7, 0x4}) openat$audio(0xffffffffffffff9c, &(0x7f0000000880), 0x500c0, 0x0) (async) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000880), 0x500c0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f00000008c0)=0x7) pselect6(0x40, &(0x7f0000000900)={0x28800, 0x9, 0xfffffffffffffffe, 0x83, 0x0, 0x3, 0x2, 0x5}, &(0x7f0000000940)={0x3ff, 0x10000, 0x1, 0xb76, 0x7, 0x2, 0x1, 0x6}, &(0x7f0000000980)={0x6, 0x10, 0x9, 0x6, 0xe, 0x800000000000, 0x2f2, 0x5}, &(0x7f00000009c0)={0x77359400}, &(0x7f0000000a40)={&(0x7f0000000a00)={[0xd39]}, 0x8}) getpeername$l2tp(r0, &(0x7f0000000a80)={0x2, 0x0, @broadcast}, &(0x7f0000000ac0)=0x10) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000b00)={0x14}, 0x14) syz_open_dev$radio(&(0x7f0000000b40), 0x3, 0x2) (async) r7 = syz_open_dev$radio(&(0x7f0000000b40), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000b80)={0xf, 0xaff8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)=@delqdisc={0xb4, 0x25, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffe0, 0x2}, {0x8, 0xe}, {0xa, 0xfff1}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x32}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x38}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd47}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xb4}}, 0x4000) (async) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)=@delqdisc={0xb4, 0x25, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffe0, 0x2}, {0x8, 0xe}, {0xa, 0xfff1}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x32}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x38}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd47}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xb4}}, 0x4000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000001000)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x1b0, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa64e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff00}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2c, 0x3, "6946bf275e3a26b07c948d83f25f8c72ab1bfcbd0e8ab116442f33cf2dee853aa02643ea299a50ea"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1bc}, @TIPC_NLA_NODE_ID={0x22, 0x3, "79e2a314030291a0e262dfb8935d2b62f293e24f78ff76f72dffa65e40b1"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x91, 0x3, "65c4989157969b779cffb196915835d0e4e8fe513c9575012cfbe6011a8e6a812d1e4bce474d9c1221eeda281baac361ef79cfaeb65a3270f5f3491aef9323cfc7d9442ba15389ed5d65420b931e0e8e0b4238ddb34c6fd271af73b7a04681b2b7afc393963de6a48746583469a38f1cf6382bf1cbd85e0b13545b0f28dcb329d0ad34cab88204a9fc47490495"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffc00}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffff98}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4}, 0x5) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000001040)={'mangle\x00', 0x0, [0xbcb3, 0x8, 0x401, 0x40, 0x9]}, &(0x7f00000010c0)=0x54) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001100)={r0}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) (async) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000001140)=@t={0x81, 0x6, 0xb, 0x91, @generic=0x6}) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000001140)=@t={0x81, 0x6, 0xb, 0x91, @generic=0x6}) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000011c0)=[@textreal={0x8, &(0x7f0000001180)="660f79e60f01c2b800008ee00f0172000f69b30700199100902e0fc76b38bad004b83e00ef0f78ca660f380a8e4700", 0x2f}], 0x1, 0x0, &(0x7f0000001200), 0x0) open_tree(r0, &(0x7f0000001240)='./file0\x00', 0x1) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000001280)={0x7, 0xfffffff8}) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000001280)={0x7, 0xfffffff8}) pselect6(0x40, &(0x7f00000012c0)={0x63825b4b, 0x26, 0x1, 0x3, 0x0, 0xdf, 0x6, 0x7fffffff}, &(0x7f0000001300)={0x6, 0xdf66, 0x8, 0x5, 0x8e4b, 0x9, 0x5, 0x200}, &(0x7f0000001340)={0x8000000000000000, 0xffffffffffffffff, 0x0, 0x6, 0x0, 0x7f, 0x0, 0x7}, &(0x7f0000001380)={0x77359400}, &(0x7f0000001400)={&(0x7f00000013c0)={[0x7]}, 0x8}) (async) pselect6(0x40, &(0x7f00000012c0)={0x63825b4b, 0x26, 0x1, 0x3, 0x0, 0xdf, 0x6, 0x7fffffff}, &(0x7f0000001300)={0x6, 0xdf66, 0x8, 0x5, 0x8e4b, 0x9, 0x5, 0x200}, &(0x7f0000001340)={0x8000000000000000, 0xffffffffffffffff, 0x0, 0x6, 0x0, 0x7f, 0x0, 0x7}, &(0x7f0000001380)={0x77359400}, &(0x7f0000001400)={&(0x7f00000013c0)={[0x7]}, 0x8}) 3m20.734493747s ago: executing program 2 (id=5697): syz_usb_connect(0x3, 0x36, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r3}, 0xc) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000009000f0001000000", 0x24) 3m18.935705711s ago: executing program 2 (id=5702): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000018610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 3m17.89232354s ago: executing program 2 (id=5704): socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, 0x0, &(0x7f0000000040)=0xfffffffffffffee7) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4810) 3m15.409040797s ago: executing program 2 (id=5712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0xffb0}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m14.210673526s ago: executing program 2 (id=5717): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtaction={0x164c, 0x30, 0x200, 0x70bd27, 0x4000, {0x9}, [{0x1638, 0x1, [@m_simple={0xec, 0xc, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x3, 0x20000000, 0x7, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0xfffffff7, 0xffffffffffffffff, 0xfff, 0x9}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x9, 0x3, '.).+\x00'}, @TCA_DEF_DATA={0xb, 0x3, '-]{-[-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3ff, 0x5, 0x20000000, 0xb9, 0x9000000}}, @TCA_DEF_DATA={0xb, 0x3, 'vxcan1\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x100, 0x3, 0xfffffeff, 0x1}}]}, {0x33, 0x6, "a691c4856b4beb2689612ba2c90f82e848f194822815b672b57341e2f621718e5900ec6d8e4021876e402e74d3255c"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0x8c, 0xa, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa6a, 0x9, 0xffffffffffffffff, 0x6, 0xfff}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x3, 0x10000000, 0x6c1, 0x42acea99}, 0x23}}]}, {0x27, 0x6, "e8f26ae1e111b263f592b545dc1b422ab20d3c7aeaa9b7f7a04e40f735a66264e206de"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_vlan={0x80, 0x14, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x4a, 0x6, "a8be588bd70d0358b717ef731dcfde29c21abd2138c56eb24cb2fc424c68995aca57a59f40234aa44875773e6d4f6dd060a1782c268a693e4981d972e3dbb7c28f0e5287c888"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0xb4, 0x12, 0x0, 0x0, {{0x7}, {0x4}, {0x89, 0x6, "fadd61cd2a083cd79fb264440e48d1673f81a26744ac5b4b0e3066238e204995ea1e286780dbd01a7db88fb5530fde831d0debaad6c73a87549022727516cb0a53d5c8dc76125573b726722d23b24649c67ec87ba552b16afbda5c3f01eee144c61f94e8888fd9d61cdf8ab11d87005bcd4797e2756fc3050f8b3f4119e515ca5d7a8d6353"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x17c, 0x1d, 0x0, 0x0, {{0x9}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c55, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x0, 0x8, 0xffffffff, 0x84}}, @TCA_GACT_PARMS={0x18, 0x2, {0x401, 0x2, 0x2, 0x7, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1102}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2f8, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x401, 0x101, 0x2, 0x7, 0xd}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7fff, 0x7fffffff, 0xffffffffdffffffb, 0x48, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe, 0x8, 0x3, 0x6, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x0, 0x4, 0x4, 0x9}}]}, {0x9c, 0x6, "e78dcf6b92cc19dbf7da525277831902c57560e35ab38b8edf22f112791d3ce92b1dc0292091f4ac8799e2251bb77c9b5155b10367510dd646bcaf6f0c09893d696046f2211cdc5c6d8a6727a7deab2ac5dd8b577e47896f69490a45df13d83e0acb5f87377ee8aff1c5d7eb7359e324188bdf87cb17e0dda18b4bed688e7eb03fc5cd571f3f786a17dd8ddefffd6ee33f97e9abec340a9f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x120c, 0x1d, 0x0, 0x0, {{0xb}, {0x1180, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xd202, 0x5, 0x7fff, 0x2, 0x9, 0x5, 0x7000, 0x8, 0x3, 0x7, 0x127, 0x7fffffff, 0x0, 0x0, 0x2, 0x7, 0x5, 0x800, 0x1, 0x69ee, 0x6, 0x0, 0xfffffff9, 0xfffffff5, 0x68, 0xfff, 0xf2, 0x5, 0x6, 0x3, 0x7, 0x1fc0, 0x1, 0xb, 0xfffffff8, 0x80000001, 0x5, 0x6, 0x80000001, 0x2, 0x6, 0x4, 0xccee, 0x9, 0xb86, 0xffff, 0x0, 0x5, 0x4, 0x10, 0x4b, 0x4e954d73, 0x5, 0xc250, 0x10001, 0xf0c, 0x1, 0x8, 0x6, 0xc617, 0x6, 0x5, 0x80, 0x38, 0x0, 0x1ff, 0x8, 0x6, 0x1, 0x4c6c, 0xffff2b45, 0xbf1, 0x23b13029, 0x2, 0x9, 0xffffffff, 0x1, 0xff, 0x5, 0x92, 0x4, 0xc, 0x4, 0x8, 0x7, 0x3, 0x5, 0x7, 0x1, 0xbe000, 0x81, 0x80000000, 0x7fff, 0x10, 0x5, 0x161, 0xd78, 0x3, 0x800, 0xfffffffb, 0x9, 0x4, 0xffff, 0x9, 0xddc0, 0x0, 0x5, 0xa9, 0xfff, 0x5, 0x3f65a5ae, 0x7, 0x2, 0x6, 0x46f76029, 0x7, 0xfffff040, 0xf1, 0x0, 0x0, 0xf, 0x9, 0xfffffffc, 0x6, 0x3, 0x3ff, 0xab27, 0x10001, 0xd, 0x6, 0x5, 0x80000000, 0x80000001, 0x3ff, 0x6, 0x8001, 0x7be, 0x0, 0x96, 0x0, 0x6, 0x546, 0xfff, 0x500, 0x9, 0x2, 0x0, 0x3, 0x49, 0x5, 0x8001, 0x8, 0x0, 0x8, 0xecd, 0x5, 0x6, 0xf0, 0x5, 0xf, 0x200, 0x7, 0x28d, 0x7fffffff, 0x6, 0x3, 0x689, 0xc, 0xff, 0x4c6, 0x2, 0x401, 0xdc, 0x1, 0x7fffffff, 0x8, 0x80000001, 0xffff, 0xb647, 0x390, 0x4, 0x1, 0xfffff236, 0x6, 0x80000000, 0x1, 0x400, 0x86, 0x3, 0x5, 0x1, 0x1000, 0x0, 0x0, 0x9, 0x4, 0x4, 0xe598, 0xc, 0x2023, 0x0, 0x3, 0x6, 0x1, 0x9, 0x8, 0x5, 0x2d, 0xfff, 0x5f2, 0x7ff, 0x4, 0x7, 0xba4, 0x94, 0x3, 0x3, 0xaedb, 0x80000000, 0x5, 0x6, 0x2, 0x2, 0xc, 0x8, 0x8, 0x96, 0x3, 0x6, 0x101, 0x10, 0x0, 0x7ff, 0x81, 0x7ff, 0x6, 0x9, 0x7fffffff, 0x4, 0x8000, 0x62d, 0x5, 0x0, 0x5, 0x3, 0x5, 0x80000001, 0x7, 0x2, 0x2, 0x7, 0x0, 0x7f, 0x8001, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}, @TCA_POLICE_TBF={0x3c, 0x1, {0x17, 0x3, 0x0, 0xfffffffd, 0x2, {0x3, 0x0, 0x99, 0x5, 0x6, 0x10}, {0xfb, 0x0, 0x200, 0x5, 0x5, 0x9}, 0xffffffff, 0xff2f, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x7, 0x9, 0x1, 0x101, 0x401, 0x5, 0x9, 0x6, 0x0, 0x4, 0x9, 0x9, 0x80000000, 0xaa, 0x5b, 0x6, 0x8, 0xca, 0x7, 0x4, 0x800, 0x200, 0x9f9, 0x3, 0xfff, 0x1000, 0x6, 0xfec, 0x6, 0x80000001, 0x4, 0x1, 0x7, 0xfffffff7, 0x8, 0x1ff, 0x3, 0x7f, 0xd2ca, 0x7ff, 0x9, 0x4, 0x80, 0x2, 0x910e, 0x7, 0x9cb, 0x27f6718a, 0x7, 0x9, 0x6, 0x1000, 0x7, 0x8001, 0x4, 0x7, 0x3, 0x3, 0x143, 0x7f, 0x0, 0xfffffff0, 0x6, 0x401, 0x24e, 0x0, 0x0, 0x10001, 0x1, 0x7, 0x4, 0xda, 0x2, 0x0, 0x0, 0x9, 0xd, 0x3, 0x9, 0x1, 0x8000, 0x8, 0x3, 0x80000000, 0x1, 0x3ea, 0xffffffff, 0x4, 0x7, 0x5, 0x40, 0x8c, 0x9, 0x2, 0x785, 0x2, 0x401, 0xfff, 0xc91, 0x5, 0x4, 0x1, 0x0, 0x4, 0x80000, 0x6, 0x3, 0x7, 0x10000, 0x20, 0x9, 0xffffffff, 0x0, 0x3, 0x1b5, 0x400, 0x0, 0x2, 0x2, 0x1, 0x2, 0xd, 0x7fff, 0x1, 0x8, 0x6, 0x3, 0x9, 0x40, 0x2, 0x9a6, 0x10001, 0xffffff00, 0x10001, 0x4, 0x7, 0x9, 0x5, 0x2, 0xb6, 0x6, 0x5, 0x5, 0xfffffeff, 0xb, 0x3, 0x8, 0xb, 0x4, 0x80000001, 0x0, 0x7f, 0x1fc, 0xbd, 0x1a, 0x6, 0x7, 0x6, 0xf8, 0x7, 0x3, 0x6, 0x2, 0x32a, 0x2, 0x0, 0xffff, 0x4, 0x112c, 0x400, 0xb2ac, 0x100, 0x9, 0x9, 0x7, 0x7, 0x4, 0x81, 0x8, 0x67, 0x3, 0xff, 0x9, 0x2, 0x8, 0x6e, 0x8a71, 0xfffffffa, 0x8, 0xffff, 0x56, 0x1ff, 0x80000001, 0x3, 0x100000, 0x5, 0x8a2, 0x1, 0x9, 0x5, 0x10001, 0x1ff, 0x1d5, 0xffffffff, 0x3231, 0x1, 0x1, 0x8b, 0xf, 0x6, 0x8, 0xbe, 0xb7e, 0x0, 0x9, 0x6, 0x87, 0x7e3, 0x11, 0x7, 0x7, 0x4, 0x5, 0x6, 0x5, 0x80, 0x81, 0x8001, 0x7, 0x80, 0x3, 0x3, 0x4000000, 0x6a6, 0x0, 0x5, 0x6, 0x8, 0x7, 0x6, 0x9, 0x4, 0x7fffffff, 0x6, 0x2, 0x5, 0x5d, 0x5, 0x4, 0x2, 0x9, 0x80000001, 0x3, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xffffffffffffffff, 0x1, 0x8, 0x3, {0x6, 0x1, 0x4, 0x6, 0x8000, 0x5}, {0xff, 0x2, 0x8, 0x7, 0x6, 0x9}, 0xc, 0x30d, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1383, 0x10000000, 0x1ff, 0xf, 0x7, {0xf7, 0x2, 0xff, 0x8, 0x4, 0x83}, {0x8, 0x2, 0x4, 0xfff7, 0x2, 0x800}, 0xfffffff4, 0x7, 0x5}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0xffffffffffffffff, 0xed7, 0x9, 0x7, {0x7, 0x0, 0x101, 0x6, 0x1, 0x10001}, {0x3, 0x6, 0x1, 0x4a18, 0x401, 0x1}, 0x0, 0x3, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5000, 0x3, 0x81, 0x6, 0x6, 0x8001, 0x7ff, 0x0, 0x1, 0x8, 0x7ff, 0xff, 0x3a32a729, 0x3, 0x8, 0x6, 0xc, 0x9, 0xe, 0x7ff, 0x7fff, 0xfffffffc, 0xfffffa73, 0x2, 0x5, 0x8, 0x2, 0x1a, 0x0, 0x200, 0x3, 0x8, 0x5, 0x7, 0x2, 0x0, 0x7b91, 0x689a1197, 0xf, 0x9, 0x4, 0xfff, 0x40, 0x6, 0x1, 0x80, 0x3, 0x7fa, 0x7fff, 0x1, 0xfffffff8, 0x400, 0x9, 0x1, 0x7, 0x2, 0x4, 0xfffffff9, 0x8, 0x2, 0x400, 0x4, 0x1, 0x8, 0x2e, 0x2, 0x800, 0x5, 0x8001, 0x80, 0x1, 0x7, 0x0, 0x7, 0x5, 0x1, 0x40, 0x6, 0x1ea, 0x97b, 0x200, 0x3, 0x4, 0x7, 0x4, 0x7ba9, 0xfff, 0x3, 0x6ce7, 0x5, 0x10001, 0x8, 0xf40, 0x0, 0x1, 0x400, 0xc2, 0x6, 0x6, 0xffffff94, 0x3, 0xb0da, 0xac9c, 0x5, 0xc, 0xfffffff7, 0x9, 0x401, 0x5, 0x6, 0x7fffffff, 0x6, 0x7fff, 0x3, 0x3030ad11, 0x8, 0x5, 0x5b, 0x0, 0x4, 0x2, 0x2, 0x9, 0x3, 0x80, 0x9, 0x101, 0x5, 0xb, 0x80000000, 0x24, 0x93, 0x9, 0x0, 0x7, 0x9, 0x4, 0x73ad, 0x50, 0xa, 0x64a4945, 0x3ff, 0x0, 0x1, 0x4, 0x80000000, 0x8, 0x3bf, 0x7, 0xffff, 0x6, 0x5, 0xfffffffa, 0x65, 0x1, 0x6, 0xfffff922, 0xc, 0x7, 0x0, 0x7, 0x9, 0x4000, 0x8, 0x1, 0x5, 0x7, 0x8, 0x4c, 0x9, 0x3, 0xf565, 0x3, 0x6, 0xfffffffa, 0xfffffff7, 0x0, 0x400, 0x2, 0x7, 0x8, 0xc, 0x9, 0x0, 0x8, 0x8893, 0x8, 0xfffffffc, 0xb2, 0x8, 0x9, 0x7, 0x55, 0x6, 0x5, 0x1000, 0x2, 0x1ce, 0x6000000, 0x4, 0x2, 0x8001, 0xfffffff7, 0xdca, 0x4, 0x2, 0x5, 0x71a, 0x9, 0x401, 0xe56f, 0xe, 0x2, 0x8, 0x19, 0x1e9e25c9, 0x800, 0x93200000, 0x2, 0x5, 0x74a1, 0x4, 0x0, 0x1000, 0x7, 0x1, 0x5, 0x1, 0x2, 0xfffffff8, 0x0, 0x200, 0x40, 0xffffdac2, 0x10, 0x7, 0x1, 0xd142, 0x3, 0x40, 0x4d5, 0x400, 0xcdc, 0xe6, 0x7c81, 0xffff, 0xe7, 0x1, 0x4, 0xd, 0x7, 0x7, 0x81, 0x4, 0x5]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x4, 0x101, 0x10, {0x0, 0x0, 0x7, 0x3bc, 0xfff, 0x59}, {0x8, 0x2, 0x0, 0xff, 0x6, 0x4}, 0x7fffffff, 0x7983, 0xffffffff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8f}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x79}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0xf, 0x5, 0x1ff, 0x8, 0x6, 0x8, 0x9, 0x0, 0x4, 0xe4, 0x1, 0x220, 0x8, 0x1, 0x10, 0xffffbb09, 0x8001, 0x6, 0x5, 0x5, 0x5, 0x1, 0x0, 0x3, 0xc, 0x4, 0xb45, 0x8, 0x9, 0x6, 0x1ff, 0x8000, 0x2, 0x8, 0x97cd, 0x5c, 0xd, 0x3, 0x1, 0x6ca6, 0x6, 0xc3195400, 0x0, 0x10, 0x8, 0x101, 0x5, 0x9d7d, 0x5, 0x4, 0x6000000, 0x5, 0x5, 0x10001, 0x10000, 0x9, 0x2, 0x20000000, 0xd257, 0x0, 0x3, 0x101, 0x5, 0x1, 0xb48, 0xffffffff, 0x898b, 0x400, 0x10, 0x5, 0x2, 0x22, 0xffffffff, 0xb40f, 0x32, 0x10, 0x5, 0x7fffffff, 0x3ff, 0x8, 0x70, 0x8, 0x80, 0x5, 0x3, 0x9, 0x7a1, 0x6, 0x10000, 0x7, 0xd, 0x52b8ec04, 0xfffffffb, 0x1000, 0x7f, 0x0, 0x0, 0x10000, 0x8, 0x4, 0x8, 0x8, 0x0, 0x4, 0x2, 0x90, 0x7, 0x40, 0x101, 0x3, 0x6532, 0x40, 0x9, 0xd, 0x4, 0x9, 0x4, 0x1, 0x5, 0x81, 0x6, 0x6, 0x2, 0xc, 0x9, 0x8001, 0x4, 0x8, 0x9, 0x8000, 0x1, 0x2, 0x9, 0x8, 0x1, 0x4, 0x4e7, 0xb, 0x0, 0x5, 0x80000001, 0x4, 0x7, 0x9, 0x2, 0xa7c, 0x3ff, 0x5a, 0x9090, 0x40, 0x401, 0x8, 0x6, 0x3, 0xa8, 0x7fff, 0xfffeffff, 0x2, 0x5, 0x6, 0x3, 0x4, 0x6, 0x5, 0x400, 0x6, 0x5, 0x7, 0x2232, 0x9c06, 0xbabf, 0x8, 0x2149f348, 0x101, 0xfffff800, 0x2b5802b, 0x0, 0x0, 0x1, 0x514, 0x8, 0xbe98, 0x101, 0x6, 0x7, 0x9, 0xfff, 0x0, 0x7, 0x8001, 0x28000, 0x7be7, 0x800, 0xfff, 0x200, 0x401, 0x1e50c3ef, 0x0, 0x2, 0x8, 0x1, 0x1000, 0x81, 0xf, 0xa929, 0x8, 0x2, 0x2, 0x4, 0x5, 0x0, 0x6, 0x0, 0x7ff, 0x5, 0x0, 0x2, 0x80, 0x7, 0x9, 0x9, 0x400, 0xa9, 0x6, 0x9, 0x7, 0x5, 0x9, 0x8, 0x47b, 0x8, 0x0, 0x80000001, 0x3, 0x1, 0x401, 0x7, 0x5d6c, 0xc154, 0x9, 0x10000, 0x1, 0x0, 0x884, 0x9, 0x7, 0x1889994e, 0x400, 0x3, 0x1, 0x7, 0x3, 0x7, 0x800, 0x3f62]}]]}, {0x62, 0x6, "e28b3a27f8a99897169f61b6dcfcb9c9c48c310ae1072a898dfa1fe615248a9d80395420455804cc3aa2102b60076fe4d0fe00157188e3b21bec1cf43c15f52497f82d3125081519265f6cc299d0f5d03c1d26cb51ff3dced71b52e18883"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x164c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbmon(0x0, 0x20bd, 0x294802) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a8fdffffff0d7a9d3ac869f3a86091758e5086f64579f9cd656422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24008094) mkdirat(r0, 0x0, 0x108) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x8041) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file1'}}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) 3m13.563677772s ago: executing program 2 (id=5721): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (rerun: 32) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (rerun: 32) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x3, 0x3, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x2}, 0xff, 0xfe}], 0x20) (async) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000180)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000001c0)) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x2) close(r6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000240)={0x28, 0x3, r10, 0x0, &(0x7f0000000380)="f3", 0x1, 0xfffffffffffffc01}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r8, 0x0, &(0x7f00000001c0)="cd", 0x1, 0x3}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f00000004c0)={0x48, 0x1, r10, 0x0, 0x9}) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) (rerun: 32) 2m57.417033769s ago: executing program 38 (id=5721): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (rerun: 32) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (rerun: 32) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x3, 0x3, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x2}, 0xff, 0xfe}], 0x20) (async) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000180)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000001c0)) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x2) close(r6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000240)={0x28, 0x3, r10, 0x0, &(0x7f0000000380)="f3", 0x1, 0xfffffffffffffc01}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r8, 0x0, &(0x7f00000001c0)="cd", 0x1, 0x3}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f00000004c0)={0x48, 0x1, r10, 0x0, 0x9}) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) (rerun: 32) 16.43193336s ago: executing program 5 (id=6357): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201}, 0x94) 16.314044505s ago: executing program 5 (id=6360): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYRES8=r2], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x0, 0x0, 0x3, 0x100, 0x3}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 15.555919736s ago: executing program 5 (id=6364): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000feff8071ce7af6660c8136c3f600000000002dbb058030192834499b49437db599d932c4fdf5a70fe6ebe3d45741ca0100000006f72c5cbe6f1d1e181eb99260ec3230de2015f19c08611a307667d7444dc2c84f67e835b3138488be93036310b2f55c289876", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) (async) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) (async, rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0xc7) (async, rerun: 32) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) (async) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 15.272461789s ago: executing program 5 (id=6367): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10000, 0x240, 0x240, &(0x7f0000000f80)=[0xfffffffffffffff8, 0x7, 0x3, 0x1, 0xa5ff, 0x4, 0xd, 0x4, 0x9, 0xb, 0x8, 0x3, 0x5, 0x8, 0x8, 0x2, 0x1, 0xffff, 0x7, 0x81, 0x80, 0xb7, 0x5e6, 0x3, 0x10000, 0xb, 0x8, 0xfffffffffffffffa, 0x9, 0x100000001, 0x5, 0x401, 0x8001, 0x1, 0x3, 0x7fff, 0x8, 0x4939, 0x6, 0xff, 0x2, 0x1, 0x8, 0xe, 0x10, 0x0, 0x7, 0x8000000000000000, 0x7fffffffffffffff, 0xffffffff, 0x9, 0x2, 0x1, 0x0, 0xfffffffffffffffd, 0xffffffff, 0xfffffffffffffffc, 0x10000, 0x2, 0x401, 0x4, 0x0, 0x2, 0x6, 0x5, 0x3cf3, 0x0, 0x9, 0xa, 0x4, 0x5, 0x0, 0x8, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x3, 0x9, 0x0, 0x6, 0xb6, 0xfffffffffffffff8, 0xf7, 0xff, 0xff, 0x4, 0x5, 0x6, 0x2, 0x6, 0x1, 0x0, 0x200, 0x3, 0x4, 0xe, 0x9, 0x5, 0x3ab0, 0x401, 0x2, 0x33342fa4, 0x4, 0x3, 0x1c, 0x4a9, 0xcf, 0x1, 0x7, 0x3, 0x3, 0x4, 0x3adc, 0x1, 0x200, 0xffffffffffff0001, 0x5, 0x549, 0x5, 0x0, 0x3, 0x7, 0x5, 0x9, 0x8000000000000001, 0x2e, 0xfffffffffffffffe, 0x6, 0x9]}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x4b}, 0x48) 13.924876252s ago: executing program 5 (id=6369): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7f, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) geteuid() landlock_restrict_self(r1, 0x5) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x6, 0x2, 0x3, "bc57499e007105bf000000011c2540002100", 0x50323234}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13.228443373s ago: executing program 5 (id=6375): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ppoll(&(0x7f0000000140)=[{r0, 0x1076}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x5e, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0) 10.061870171s ago: executing program 1 (id=6386): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6417, r1, &(0x7f00000002c0)="ab", 0x1, 0x6ed}, &(0x7f00000000c0)={0x0, 0x0, 0x1f000000, 0x5, 0x0, r1, 0x0}]) 10.061280096s ago: executing program 1 (id=6387): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0104000001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x20) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000380)={0x80, 0x1e0, 0x80, 0x360, 0x7, 0xacc, 0x20, 0x2, {0x2, 0x9e59}, {0x6, 0x6}, {0x6, 0xffffae5d}, {0x80, 0x8001}, 0x3, 0x40, 0x1, 0x9, 0x1, 0x6, 0x81e0, 0x4, 0x7ff, 0x2, 0x1, 0x4, 0x0, 0x100, 0x3, 0x6}) close(0x3) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, 0x0, 0x0) (async) syz_usb_connect(0x6, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000068e04d206f0e2c5868310102030109022400010000000009048d0002ff47d00009050900000000000009050d00000000000f38d9ab0d95db8776e45138995f810ac31cfd5328ec070abf6fa0b4f7b9035571f00e57bd2519daa94694cbe742e6a7a87756d10a6786ea4245b47e7c2848542884a57ec9ff0d60ffc9460f327f8142b0f6d4070ec6a0ab14e30785d5245aecd4590c8919721f2bf51b9504180b53c0800cd5a570093f76d74f5e75c18533a93b3fcaf0fc0b4fea543fa1a48ec437f9826db6124166862f2154054ead5f0a5566917e7a8769c5e84f605e1bfe9d816c0991c7c0480f69bd0581f8838c08c165c89cb3"], 0x0) 10.046290642s ago: executing program 3 (id=6390): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8088) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000900)={0x1, 0x4, @start={r1, 0x0, "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", "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"}, [0x8, 0x8, 0x9a3, 0xab, 0x0, 0x3, 0x9, 0x8001, 0xee6, 0x240000000000, 0x1, 0xfffffffffffffffa, 0x2, 0x1000, 0x8, 0x7fff, 0x10000, 0x1, 0x10000, 0x6, 0xfff, 0x8, 0x5, 0x6, 0x4a, 0x7fffffff, 0xfffffffffffffffd, 0x0, 0x9, 0xe, 0x8000, 0x800, 0x0, 0x4, 0xa83, 0x6, 0x8, 0x129, 0xd, 0x64792447, 0x2, 0x11, 0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x33, 0x9, 0xc, 0x1000, 0xffff, 0x8000, 0x3, 0x81, 0x6, 0xfffffffffffffff9, 0x6, 0x66, 0x1, 0x2, 0x1, 0xffff, 0x5149977b, 0x52]}) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) 9.212379034s ago: executing program 3 (id=6392): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x28, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffcb1, &(0x7f0000000240)={&(0x7f00000019c0)=@delchain={0x2c, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x2c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_kthread_work_queue_work\x00', r4}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 9.115833241s ago: executing program 1 (id=6393): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) write$uinput_user_dev(r0, &(0x7f0000001680)={'syz0\x00', {0x7, 0x3, 0xb, 0x9}, 0x16, [0x6, 0x5, 0x10, 0xfffffe00, 0x8, 0x7, 0x8, 0x2, 0x8, 0x0, 0x3, 0x3, 0x4, 0x2, 0x3, 0x7, 0x3, 0x9, 0x800, 0x2, 0x7, 0x2, 0x4, 0x157824c6, 0x0, 0x10, 0x7, 0x7fff, 0xf, 0xa, 0x8, 0x7, 0x0, 0x8, 0x7, 0x7, 0x101, 0x9, 0x6, 0xffffff80, 0x20000, 0x2, 0x7, 0x7fff, 0x9, 0x4, 0x200, 0x10, 0x68129fb, 0x3c1f5b7e, 0x10, 0xfffffff9, 0x8000, 0x0, 0x1, 0x8, 0xbd60, 0x7, 0x7, 0xff, 0xa, 0x2, 0xa0, 0xfffdfffb], [0x1000, 0xff, 0x400, 0xb8, 0xb41a, 0x40, 0x8, 0xff, 0x5, 0x8, 0x1, 0xf1, 0x28000, 0xffff, 0x7, 0x7fff, 0xfb, 0x4, 0x8001, 0x3, 0x10, 0x8, 0x800, 0x2, 0x100, 0x40, 0x3, 0xffffffff, 0x1, 0x7, 0x3, 0xfffffffe, 0x1, 0x6, 0x6, 0xf39d, 0x7d, 0x9, 0x5, 0x10, 0x8001, 0x6, 0x6, 0x3, 0x4, 0x2, 0xf, 0x4, 0x0, 0xa, 0x8000, 0x1, 0x2, 0x6, 0x2, 0x8, 0x8, 0x9, 0x407, 0xdc, 0x4, 0x70, 0x9, 0x200], [0x3, 0x80, 0x0, 0x1, 0x7f, 0x9, 0x4, 0x4, 0x4, 0xa0, 0x0, 0x6, 0x8, 0x2, 0xa2a, 0x5d, 0xb, 0x7, 0x9, 0x1, 0xfffffffd, 0xd, 0x9, 0x5, 0x6, 0x1e4a, 0xfffffff8, 0x4, 0x7, 0x9d, 0x80, 0x2, 0x1, 0x1, 0x200, 0x8, 0x3, 0x7, 0x10001, 0x1ff, 0x6, 0x5b, 0x0, 0x2, 0x4, 0x8, 0x8, 0x401, 0x401, 0x0, 0xf9a1, 0xfff, 0x1ff, 0xe, 0x1, 0x81, 0x70, 0x3, 0x6, 0x3, 0xfffffff8, 0x9ae, 0xd9, 0x40], [0xe94, 0x80000000, 0x2, 0x9, 0x810d, 0x4, 0xfffff264, 0x4, 0x2, 0x4, 0x4, 0x7, 0x7, 0x3, 0xffff1446, 0xda, 0x6, 0x80, 0x0, 0xd7400000, 0x3, 0x8001, 0x48d, 0xffffffff, 0xfffffffa, 0xa051, 0x8, 0x407fbdd2, 0x5, 0x5, 0x8, 0xff, 0x10, 0x4, 0xd29, 0x6a3d, 0xfffffff8, 0x0, 0x4, 0x7, 0x80000000, 0x7, 0x5, 0x1, 0x1d9b, 0xfffffffb, 0x7, 0xfffffff8, 0x80, 0x3, 0x7, 0x6, 0x5, 0x0, 0x80, 0x80000000, 0x0, 0x9, 0x1, 0x7, 0xfff, 0x401, 0xffff, 0x4]}, 0x45c) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$uinput_user_dev(r0, &(0x7f0000001040)={'syz1\x00', {0x2000, 0x5, 0x9, 0x2}, 0x31, [0x4, 0xa943, 0x1, 0x7fffffff, 0x9, 0x8, 0xfffffff9, 0x2, 0x3b, 0x8, 0xf, 0x80000000, 0x4, 0x3, 0x8, 0x95eb, 0x1, 0x4, 0x8, 0x8, 0x3, 0x5, 0x9, 0x7, 0x2055, 0x3, 0x6, 0x7, 0x7, 0x10001, 0x6, 0x0, 0xc529, 0x1, 0xb, 0x1, 0x6, 0x10001, 0x7f, 0x7, 0x80000001, 0x2, 0x6, 0x0, 0x9, 0x6, 0xfffff001, 0x80000001, 0x0, 0x7, 0x2, 0x1, 0x2, 0x5, 0x2, 0x28de, 0x8, 0x3, 0x7fffffff, 0x0, 0x10000, 0x8, 0x20f9, 0x9], [0x7f, 0x3, 0x1, 0x94, 0x5, 0x21, 0x8, 0x40, 0xe, 0xa28, 0x8001, 0x9, 0x75dfaa3c, 0x3, 0xffffff7e, 0x0, 0x0, 0xfffffff9, 0x6, 0x10000, 0x0, 0x1, 0xd7, 0x7ff, 0x7, 0x5, 0x4, 0x488, 0x1, 0x7d7d, 0x8001, 0x2, 0x6, 0x400, 0x4, 0x8, 0x9, 0xfffffffc, 0x80, 0x8, 0xfffffff4, 0x9, 0xf, 0x3, 0xb, 0xff, 0x6, 0x8, 0x9, 0x1, 0x3, 0x2, 0x9, 0x401, 0xff, 0x1, 0x584, 0x8a, 0x8001, 0x4, 0x2, 0x3, 0x8, 0x1], [0x10001, 0x37, 0x1, 0x8, 0xd671, 0xfffffffc, 0x4, 0x3, 0x3, 0x2, 0x7, 0xd, 0x6, 0x2, 0xffff7fff, 0x401, 0xfd, 0x7, 0x3, 0xffffffff, 0x5, 0xa79a, 0x5, 0x5, 0x3ff, 0x8000, 0x10000, 0x6, 0x9, 0x1, 0x3, 0x6, 0x8, 0x5, 0x0, 0x0, 0x2, 0x5, 0x9, 0xd, 0xffffff7d, 0xb9, 0x3, 0x3ff, 0xfffffffb, 0x80000001, 0xffff, 0x27, 0xffffffff, 0x7f, 0x0, 0xfffffff9, 0xd, 0x2000000, 0x57, 0x9, 0x10, 0x0, 0x4, 0x14a5, 0xd, 0x8, 0x244, 0xea], [0x8, 0x7, 0x8, 0xfff, 0x7, 0x6, 0x4, 0x8, 0xa, 0x9, 0x3, 0x8, 0xffff, 0x81, 0x8, 0x8, 0x0, 0x4, 0x7f, 0x2, 0x6, 0x5, 0x7, 0xffffa6cd, 0x0, 0x7a13, 0x3, 0x10000, 0x4, 0x8, 0x0, 0xdbb2, 0x3, 0xa, 0x1, 0x3ff, 0xb, 0x3, 0x7, 0xffffffff, 0x3, 0x2b, 0x1000, 0x0, 0x5, 0x80000000, 0x3, 0x7, 0x1ff, 0x7, 0x9, 0x4f8, 0x92c8, 0x5, 0xe, 0x19, 0x8, 0x8, 0x6, 0x1800000, 0x8, 0x5, 0x4, 0x6]}, 0x45c) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x30, 0x4, 0x5}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000f00)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303030302c756d61736b3d30303030303030303030303030303030303030303030302c756e64656c6574652c6c6f6e6761642c73686f727461642c7569643d666f726765742c756e64656c6574652c696f636861727365743d757466382c73686f727461642c696f636861727365743d64656661756c742c7569643d666f726765742c6e6f7374726963742c73657373696f6e3d30303030303030303030303030303030303030302c706172746974696f6e3d30303030303030303030303030303030303030362c00b2e01f5c0b5c8fb2623d8f888e41dfceb3ecf959d23d90b071660660b17884bd109d37086024cf83fa"], 0x2, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r2 = userfaultfd(0x800) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) 8.460054802s ago: executing program 3 (id=6396): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xffffffffffffffc9}, 0x1, 0x0, 0x0, 0x4008041}, 0x0) socket(0x8, 0xa, 0xfffffffd) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) setsockopt$sock_attach_bpf(r6, 0x6, 0x25, &(0x7f0000000040), 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x9f) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xa294}) symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0) syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) 7.879965301s ago: executing program 1 (id=6398): syz_usb_connect(0x3, 0x36, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r3}, 0xc) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0339000000", 0x24) 7.141170382s ago: executing program 3 (id=6401): r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) (async) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000f3"]) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {0x80000000}, {}], 0x9, 0x0, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000200), 0x4, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x2, 0x0, &(0x7f0000000000)) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x100) close(r3) (async, rerun: 32) r4 = socket$pptp(0x18, 0x1, 0x2) (rerun: 32) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471"], 0x0}, 0x94) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000"], 0xf8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000002ffebdf2530000000", @ANYRES32=r10, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x11, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x10001, 0x3b, &(0x7f0000000340)=""/59, 0x41100, 0x8, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000ac0)=[{0x5, 0x3, 0x6, 0x6}, {0x1, 0x1, 0x9, 0xc}, {0x0, 0x4, 0x10, 0x2}, {0x4, 0x5, 0x0, 0x9}, {0x4, 0x1, 0x3}], 0x10, 0x677}, 0x94) (async, rerun: 64) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x24080) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={r1, 0x0, &(0x7f0000000140)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r3, 0x80184151, &(0x7f0000000d00)={0x0, &(0x7f0000000c00)="ae58d89b658cad5e9ea58fd80fd3b3dedfcd495c55884a478d37561c4328c0fa4a999c46374723bd9736f3d7c966f5dc4a2fc43981b312f0675d1def773a7650dbc09d84d797a36fa0471d17fb6bfa1087c695f97f89a8ae754d7d7b3065f3cab217e3bcb20f02939fda3c04912f8b3b4e5c76ea6d3cd1ae475f2a4101f3d8de8586ddfba88eb1d7033db816d7b4e8ae8c2f77c480db1fc20428afe3def15b47c832044bee2b0a979b3d32eab19a8df6b0e11ebf0f50827c7bb2de4b3e329b724cef898c9ae3b1f2264095", 0xcb}) (async, rerun: 64) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000001c0)={{r13, r12, 0x1, [0x0, 0xf7df]}, {r13, r14, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) (async, rerun: 64) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120110f52d40172023040a00e15c010203010902120001000000200904fa0000caa71300"], 0x0) 6.755790904s ago: executing program 8 (id=6402): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2013840, &(0x7f0000000300)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@cpuset_v2_mode}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 5.990151199s ago: executing program 1 (id=6403): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x1cb) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x44042, 0x1ff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) sendfile(r2, r3, 0x0, 0x20fffe82) sendfile(r0, r1, 0x0, 0xfffe82) r4 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file1\x00', 0x30008c0, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRES64=r5, @ANYRES64=r4, @ANYBLOB, @ANYRESDEC=r5], 0x11, 0x2fe, &(0x7f00000004c0)="$eJzs3U1rE0EcBvBndtNma0tdbUXwIFIN2ItovYiXSMmH8CRqk0JxqagtvuChiicRe/fu0aufQbwogud68iSe60FG5iXZl+xuEsnuJvr8oGGzszP7n8zOzkygWRDRf2u9dfD28nf1JwAXLvDyKuAA8IAagBM46e1u72ztBJ12XkEuTtdNLgGTU/Qds7HdScvqweawfPWuhoXoPiqGlPLat6qDoMrp3i/d+M4z+k5Qt71TJ3oVxZfl2ehZfs4B2CsimImS31LiEId4hMXSwiEiookkzPju2HF+wc7fHQdo2MFEz8Ynbfz/W4dVB1A4mZsaGf91u0qh2v2oTgrXe3oJp9Kd7ioxrax3ifczifezMFdWbHYpBq0qdSzO3OZW0LmwcTdoO3iOphU5bFm/ts2l25UXLYCVlLVpjl5pc5mHiPQZ5byuw4yqw5qJ/yGAWPxLuWcsgPgoPosbwscbtHvzv5oUqpl0S/mJljLxX8wuUdfSV0fB3jaazaYTO+SYPskpewZrQC09uFlnnLVlxr4g8AfFqXMdT+Qytbs0INdSaq41vb0KJyPXciyXqs3mVvAh+1SlEK/FdbGCH3iPVmT+76j4GsjtmWGvEQ0zFOhPXPXOeMtG1Bo2RY8cu18Pnpr9/d2l9ynWs0L/lX9PoxG8wm1cweKDx0/uuEHQua82bgXqctUbvT33FuxG0Jl5AUSTJmUDe+GeOqTWd3B3UCozsNWxFqjuHylJqmOFe1QvK7xe6j4wAe1e3Ubr03gupO60IZb0W0pZYnX2bcdIJlV3a6LyhI0+3PEpUx2abqpJhVn/heuVmpnsqRc/dZ4+5BcBtkSp5ti9FVyYV5oZOYAjI63g5rNXcP1rrr41o15znT0PnBv+jL6N8x8hWviCm/z+n4iIiIiIiIiIiIiIiIiIiIiIiIho2pTx/xJV15GIiIiIiIiIiIiIiIiIiIiIiIiIiIiIaNqtezC/e43u838x3PN/k49icc1Pgo/l+b/72+Dzf4mK9ycAAP//m053Mg==") r6 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000080)=[{r6, 0x2}, {r6, 0xa020}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r6, 0x0) shutdown(r6, 0x0) r7 = openat(r2, &(0x7f0000000080)='./file1\x00', 0x212441, 0x1) syz_emit_vhci(&(0x7f0000002c00)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x6}}}}, 0xf) fcntl$setlease(r7, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f00000002c0)=0xe8) mount$binder(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x8281a, &(0x7f0000000800)={[{@max={'max', 0x3d, 0x3}}, {@stats}], [{@dont_appraise}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@flag='async'}, {@dont_measure}, {@seclabel}, {@smackfsfloor={'smackfsfloor', 0x3d, '^@($@\\,)('}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@uid_gt={'uid>', r8}}, {@fsname={'fsname', 0x3d, '*'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) 5.200484417s ago: executing program 8 (id=6404): syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109021b0001000000000904290201b48cbb0009058202400000000039d4178b8d95c00a93fb11733cbcd6c62c32a488e91d2e21eac701e53d4ffada2f100695d025046f969d264692c63159425e7cbd91533550881e05ae5affb0346e9ca1197bcefd86a7ebb0c87a937beac4bdd6bce48fd5ed7dc59803a9b36315a6003fb3a7b0bca8b77e4fb2a08e8347fdb71988a3dd2df864777bf7da54ed3245ebde62d1e2b11f9fce1c58b85a8ab35aab8c7fab6bdf47fc32035d2e4adc2e9601c074f935d942687639a63fcb53953291b50877a352d6601341"], 0x0) 3.515842451s ago: executing program 3 (id=6408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() (async) r3 = getpid() r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r6, 0x1, 0x0, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r6, 0x1, 0x0, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000010) sendmsg$nfc_llcp(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="1c2d077cf5f16ff0554b9c52a6e0ba6dac4bf6edf2ba356762629ffdc5fa6c9d23b0fcb2201e0dca3c308a30ea9d4566e4dedf39ece837c30ce87227cc66c1b8637f6730f679ddb0b08aa9be00a8b158f291fa7a9e3742bef295104137e6e962723be42fb7633f2fcae7322472a895b6b22760c226bbe114dd72e629f8b44b22b437574d", 0x84}, {&(0x7f00000000c0)="9d8057dd017f81b763252dc2f46de44af2585340fc32baaea8218bc499f6818ea8017ef18a9e2b74a0fad8ce2d33b3b1727446e6fc07734f8efa1f538f3b3f525d2ce598ca4e", 0x46}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="98000000000000001601000009000000bd5c1bcc985f8dff25efc0e271156ef89577b607731c44a0793b48909925f59d32665c3eeca8d0eeaf0723c4e680befc9e7532e855a0be4a6d7f22a6a9b447b30c65edc7df3918c775e7689a21d2a4ddb42970caebb66778924321db058e6f6355536ae619321c4d47ef794cd711907a0398ae8a1f5bf61206434400dd03e9b531f8000000000000"], 0x98, 0x10}, 0x40080) (async) sendmsg$nfc_llcp(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="1c2d077cf5f16ff0554b9c52a6e0ba6dac4bf6edf2ba356762629ffdc5fa6c9d23b0fcb2201e0dca3c308a30ea9d4566e4dedf39ece837c30ce87227cc66c1b8637f6730f679ddb0b08aa9be00a8b158f291fa7a9e3742bef295104137e6e962723be42fb7633f2fcae7322472a895b6b22760c226bbe114dd72e629f8b44b22b437574d", 0x84}, {&(0x7f00000000c0)="9d8057dd017f81b763252dc2f46de44af2585340fc32baaea8218bc499f6818ea8017ef18a9e2b74a0fad8ce2d33b3b1727446e6fc07734f8efa1f538f3b3f525d2ce598ca4e", 0x46}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="98000000000000001601000009000000bd5c1bcc985f8dff25efc0e271156ef89577b607731c44a0793b48909925f59d32665c3eeca8d0eeaf0723c4e680befc9e7532e855a0be4a6d7f22a6a9b447b30c65edc7df3918c775e7689a21d2a4ddb42970caebb66778924321db058e6f6355536ae619321c4d47ef794cd711907a0398ae8a1f5bf61206434400dd03e9b531f8000000000000"], 0x98, 0x10}, 0x40080) r9 = syz_pidfd_open(r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setns(r9, 0x24020000) r10 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x10000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="11072abd7000ffdbdf25050000000800030057"], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) 3.008441756s ago: executing program 3 (id=6410): syz_usb_connect(0x6, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1e71, 0x200f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xe0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x16, {0x9, 0x21, 0xfff8, 0x2, 0x1, {0x22, 0x8cc}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x78, 0x7, 0x75}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0x9, 0x80}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x4, 0x81, 0xbf, 0x20, 0x9}, 0x3d, &(0x7f00000000c0)={0x5, 0xf, 0x3d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "038db5dbb574b3c231eb6284e9bf0607"}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x3, 0xf000, 0x1, [0x3f, 0xff0000, 0xc000, 0x30, 0xc000, 0x3fc0]}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x445}}]}) 2.842559183s ago: executing program 1 (id=6411): syz_usb_connect(0x3, 0x2f, 0x0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_GET_CHILD_SUBREAPER(0x25) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) (async) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000040)={{r6}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x93c37d624c907074}, 0x8000) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101, 0x0) socket(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x3, 0x0) write(r11, 0x0, 0x0) (async) write(r11, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="070000000000000000000800000008000300", @ANYRES32=r4], 0x1c}}, 0x0) 2.541573767s ago: executing program 9 (id=6412): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c", 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=@updpolicy={0x164, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x6a6f396b, 0x40800000000000, 0x800000000000000}}, [@policy={0xac, 0x7, {{@in6=@loopback, @in6=@loopback, 0x4e21, 0x9, 0x4e20, 0x401, 0xa, 0x20, 0x80, 0x2c}, {0xfffffffffffffffc, 0x8, 0x8000000000000000, 0x400, 0x5, 0x101, 0x1, 0xfffffffffffffff7}, {0x9, 0x2, 0x8, 0x7}, 0x3, 0x6e6bb1, 0x1, 0x1, 0x2, 0x3}}]}, 0x164}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a0000000210001000000000004000000fc02000000000000000000000000000000000000000000000000000000000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff020000000000000001a800000000010a010100"/42], 0xa0}}, 0x0) 1.6915493s ago: executing program 8 (id=6413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a012000000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003"], 0xec}}, 0x0) 1.577980687s ago: executing program 8 (id=6414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 1.512010992s ago: executing program 9 (id=6415): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x500000b, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x500000b, 0x59032, 0xffffffffffffffff, 0x0) (async) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) (async) 1.457363371s ago: executing program 9 (id=6416): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000000010104000000000000000202000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c000280050001fdffffff001400018008000100e00000010800020000000000080007"], 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, 0x0, 0x40040) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.422593681s ago: executing program 8 (id=6417): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x69, 0x0, 0x0, 0x8c5}, @initr0, @exit, @printk={@x={0x18, 0x0}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0xb0ff, 0x9e}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.271689262s ago: executing program 8 (id=6418): socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x27) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x13200a2, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x7, 0x202, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xb, &(0x7f0000000180)={0x15, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="004e7f0ace1e38dbf63009e371585c7cb407e94976ce6e5e30d1c2876772ae2033d56404ad5524fbaf28ac9b201c4e176fdb72517995343fcec788dd128ac45b3e0f1ca43b35fc307199a01230ed374b06b25f66e60751df707108d4e1404da3c8bc5b499a866ba065610e18c48c1578a92069b5beefa2bd73e27d10c3fd39b41b0f1e802d49b46205fc1eaaefdfb9d71d9a658d8d588c8b38eef72a0c386b845c57e528fbc5a3728bff76b15b22e23fce78a46ec5f556d10db65dc93659cc1aebd985354cd4618b92e4987764e1aa83180adfc215fb1dc43c83137b5abab425303e0259662579df0b66d7ec3292a66b6c4bbbdcacb8063611900c7aa2c6aa103cabd98da200a88800f615e9588991268928a336b537f965606ac48cd231714277c3005e27cc9e173812ef705da78ba16d83404bd3874367ef3ebf7d7894bd372a64a351609b3f8707caf2239f685d62ba6b4559821d2eb84831770b1f308452acfcde68ed38e8d71409d382c29b69b31acde376e151336dafc0937f6eaa8512a3df538674087e16540cabd42445748858ec3d83e8df9d8fa6eff5b31fce1a447883bafd6acb466d7350251052729e14a0ddcb4776cb6046c17e280ee55ad13b36ea5fd075f95df95aa73fba9cb794c8d1d23dff6752dbb5b307"], 0x44, 0x6fd, &(0x7f0000000940)="$eJzs3U1sHHfZAPBn1uuxN5XcbZO01atXitWICBpIbC8lQUIiVAj5UKFIXHpdEqexvHYj20VOhIgLFI5wQjn0UITMoSfUA1IRB0Q5IyFxRblH4h5xYNHMzq73w17vEn8k4feTZuc/M/+PZ57MzM7OxtoA/mctvhOT25HE4sW3t7Llhzu1xsOd2mq7HBFTEWlRuxQRyVpE8nnEtWhNcTpbWVRI9hvnzUeffXThwSe11lK5mPL6pWHtdjWHjLBdTDEbERPFfEzl/fq7EW8N9Hd/rK6TTtxZws63EwcnrTlge5zmI5y3wNPufsTE5B7rqxGnImK6dR9QvCu23rOfaWNd5QAAAODpNHFQhRcfx+PYipnjCQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeD0nrNwOTYiq1y7ORtH//Py3WZdL0hOMd7ssHbP/w1jEFAgAAAAAAAABH4tPii/tzj+NxbMVMe30zyb/zfz1fOJO/vhDvx0YsxXpciq2ox2ZsxnrMR0zOdHWYbtU3N9fnB1v+KrKWzWbzftFyISKqAy0X9gm0dMg7DgAAAAAAAADPpx/HYsycdBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAtiZhozfLpTLtcjVI5IqYjIs3qbUf8sV1+lv3ppAMAAACAo1cp5jPJv1uFZpJ/5n8l/9w/He/HWmzGcmxGI5biZv4soPWpv/S37Vrj4U5tNZsGO/7WP8eKI+8xIibig31GnstrnO20WIzvxPfiYszG9ViP5fhB1GMzlmI2KtlORD2SqFZaTy+q7Tj3jvdaz9L1/tjO9S2/lkdSiVuxnMd2KW6k0Xpsku9DNuZrXaP9Po3oG/GDLDvJNwsj5uhm17/XL4vnMoXmiyP2cTSq+Z5PdjIyl+W+yMZLw3M/5nHSP9J8lDrPoM7sjpIt9o/Uzvn3x8n5qdZsOnv5WW/OD9uYj9L6M7EQpeLoi3ilN+d3vvDg5d7GX/r7n6/fLq2t3L61cfEId+lJzB5UYbJd6M9ErSsTrw4/+opMNLJMbI+eicn+FdOjtjxaaZGN/FI04tXy23mpHq93HYLvxc1YiisxF/NxNebi67EQtc4Rlk1ne/Jarq325iQ/10qD17fKkODPf7Gr0s8PqHy8sry81JXX7itdNd9WrLn2i5jrOvpeHn70jf0ukI3/f0U5G+MnnXecp0FPJoprczu608Mz8etm9rrRWFtZv12/M+J4F4p5dtp+2Htt/s3oUfe/ux+G7HjJrrjlfCnPSaV9vGTbTnei7c1XWnzj0mpXGth2trOtGjOxHN/d90xNi3u4wZ5a217t3vaP3StnWtzftLf13OXEe9HI70L6HHipBuCYnXrjVFp5VPlr5ePKTyu3K29PvzV1der/05j8S/kPE78r/bb0jeSN+Dh+FDMnHSkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPNu7eW6k3GkvrnUJM96950kK671jDC1E6sM7OC6N1GNWI4WMlRSE93H1/FguV6FvT/oWlJ+3504gYUid94uCTsY+xsQtZHg6lw2azldR8TXNijObldqu965RjYzpW6kl5jzNuavcsiOpKvfGvZk/zSnSdMsBz7vLm6p3LG3fvfWV5tf7u0rtLawtXr1y9Uvva/Fcv31puLM21Xk86SuAobNy9N7HH6oFfugUAAAAAAAAAAACeHsX//t/8r/+YoXxAnXR9Y++Rzx33rgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPqMV3YnI7kpifuzSXLT/cqTWyqV3erVmOiFJEJD+MSD6PuBatKapd3SX7jfPmo88+uvDgk9puX+V2/dKwdqPZLqaYjYiJYn6wqT26GezvRmue9tQYS9LZwyxh59uJg5P2nwAAAP//ltf3AQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000480)=ANY=[]) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {r4}}, './file0/file1\x00'}) umount2(&(0x7f00000002c0)='./file2\x00', 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 309.278826ms ago: executing program 9 (id=6419): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="040000000000000063115f00000000000700000000000000950000000900000002d9b6563ab6bac59852b4e98dfa11dc18ec1a9d782462bd2e05d4a380e4b15874c1460bce519b2454de234938104c93baf22dc6c88f81456473848864e2a9faed7e22f664dbb427d92787bcf921745691c026c2691be1d0d97e6d50a4983d"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x102}, 0x23) 199.948579ms ago: executing program 9 (id=6420): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500f308000000850000005e00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x2}, 0x94) 0s ago: executing program 9 (id=6421): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7f, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) landlock_restrict_self(r2, 0x5) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4a23, @private=0xa010101}, 0x10) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x6, 0x2, 0x3, "bc57499e007105bf000000011c2540002100", 0x50323234}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0xb0 [ 1599.194598][ T4589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.194618][ T4589] RIP: 0033:0x7f1d0398eba9 [ 1599.194636][ T4589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1599.194654][ T4589] RSP: 002b:00007f1d01bac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1599.194676][ T4589] RAX: ffffffffffffffda RBX: 00007f1d03bd6180 RCX: 00007f1d0398eba9 [ 1599.194691][ T4589] RDX: 00002000000000c0 RSI: 0000000040505412 RDI: 0000000000000003 [ 1599.194705][ T4589] RBP: 00007f1d01bac090 R08: 0000000000000000 R09: 0000000000000000 [ 1599.194718][ T4589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1599.194731][ T4589] R13: 00007f1d03bd6218 R14: 00007f1d03bd6180 R15: 00007ffc30cfeb38 [ 1599.194767][ T4589] [ 1599.425975][ T4589] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1602.698302][ T4624] NILFS (loop9): device size too small [ 1602.901026][ T5931] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1603.106511][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 1603.134724][ T4637] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1603.144794][ T5931] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1603.144822][ T5931] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.144840][ T5931] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1603.148328][ T5931] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1603.313607][ T4637] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 1603.734352][ T4637] overlayfs: overlapping lowerdir path [ 1603.742675][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.766468][ T5931] usb 6-1: Product: syz [ 1603.774442][ T4637] overlayfs: overlapping lowerdir path [ 1603.789534][ T5931] usb 6-1: Manufacturer: syz [ 1603.794765][ T5931] usb 6-1: SerialNumber: syz [ 1603.804237][ T4637] overlayfs: overlapping lowerdir path [ 1604.261017][ T5931] usb 6-1: 0:2 : does not exist [ 1604.919180][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1604.957364][ T5931] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1604.991035][ T4654] random: crng reseeded on system resumption [ 1605.079126][ T5931] usb 6-1: USB disconnect, device number 66 [ 1605.235742][ T4011] udevd[4011]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1605.442518][ T4677] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1605.452501][ T4677] EXT4-fs (loop9): unable to read superblock [ 1605.473586][ T4677] overlayfs: failed to resolve './file1': -2 [ 1606.986777][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.008380][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.060479][ T4696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1607.142666][ T4696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1607.311039][ T981] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1607.320003][ T5874] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1607.480800][ T981] usb 10-1: device descriptor read/64, error -71 [ 1607.720760][ T981] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1607.871697][ T981] usb 10-1: device descriptor read/64, error -71 [ 1608.010881][ T981] usb usb10-port1: attempt power cycle [ 1608.582726][ T981] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1608.611532][ T981] usb 10-1: device descriptor read/8, error -71 [ 1608.850998][ T981] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1608.881684][ T981] usb 10-1: device descriptor read/8, error -71 [ 1608.913775][ T4727] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5370'. [ 1608.943091][ T4727] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5370'. [ 1609.011202][ T981] usb usb10-port1: unable to enumerate USB device [ 1609.830074][ T4739] befs: (nullb0): No write support. Marking filesystem read-only [ 1609.848271][ T4739] befs: (nullb0): invalid magic header [ 1610.040968][ T4739] net_ratelimit: 2 callbacks suppressed [ 1610.041004][ T4739] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1610.628152][ T4756] program syz.9.5376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1610.647537][ T4755] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1610.657121][ T4755] EXT4-fs (loop8): unable to read superblock [ 1610.691389][ T4755] overlayfs: failed to resolve './file1': -2 [ 1610.962080][ T4760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5378'. [ 1611.800951][ T4776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1614.063028][ T4802] ptm ptm15: ldisc open failed (-12), clearing slot 15 [ 1614.308649][ T4810] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5392'. [ 1616.333933][ T4843] IPVS: Unknown mcast interface: veth0_virt_wifi [ 1616.887448][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5401'. [ 1617.091073][ T3035] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1617.100179][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5401'. [ 1617.143078][ T3035] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1617.158070][ T3035] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1617.172427][ T3035] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1620.828371][ T4891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5411'. [ 1621.349889][ T4904] netlink: 'syz.5.5415': attribute type 4 has an invalid length. [ 1621.358371][ T4904] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.5415'. [ 1622.962230][ T4916] netlink: 'syz.9.5418': attribute type 21 has an invalid length. [ 1622.970141][ T4916] netlink: 128 bytes leftover after parsing attributes in process `syz.9.5418'. [ 1623.081059][ T4916] netlink: 'syz.9.5418': attribute type 4 has an invalid length. [ 1623.088989][ T4916] netlink: 'syz.9.5418': attribute type 3 has an invalid length. [ 1623.322221][ T4916] netlink: 3 bytes leftover after parsing attributes in process `syz.9.5418'. [ 1624.187641][ T5961] kernel write not supported for file /snd/seq (pid: 5961 comm: kworker/1:4) [ 1624.557510][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5422'. [ 1625.657020][ T4971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1625.659930][ T4968] vlan2: entered promiscuous mode [ 1625.747650][ T4979] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5436'. [ 1625.860963][ T30] audit: type=1326 audit(2000000916.028:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.3.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f478eba9 code=0x7ffc0000 [ 1625.883278][ C1] vkms_vblank_simulate: vblank timer overrun [ 1626.056962][ T30] audit: type=1326 audit(2000000916.028:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.3.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe0f478eba9 code=0x7ffc0000 [ 1626.081415][ T30] audit: type=1326 audit(2000000916.028:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.3.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f478eba9 code=0x7ffc0000 [ 1626.103770][ C1] vkms_vblank_simulate: vblank timer overrun [ 1626.111610][ T30] audit: type=1326 audit(2000000916.028:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.3.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe0f478eba9 code=0x7ffc0000 [ 1626.133907][ C1] vkms_vblank_simulate: vblank timer overrun [ 1626.140318][ T30] audit: type=1326 audit(2000000916.028:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.3.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f478eba9 code=0x7ffc0000 [ 1626.167300][ T30] audit: type=1326 audit(2000000916.028:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.3.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe0f478eba9 code=0x7ffc0000 [ 1626.190159][ T30] audit: type=1326 audit(2000000916.028:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.3.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f478eba9 code=0x7ffc0000 [ 1626.672821][ T30] audit: type=1326 audit(2000000916.028:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.3.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fe0f478eba9 code=0x7ffc0000 [ 1626.902507][ T30] audit: type=1326 audit(2000000916.028:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.3.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f478eba9 code=0x7ffc0000 [ 1626.973978][ T30] audit: type=1326 audit(2000000916.028:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.3.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe0f478eba9 code=0x7ffc0000 [ 1627.199219][ T4979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1627.226523][ T4979] bond0 (unregistering): (slave c@0): Releasing backup interface [ 1627.288692][ T4979] bond0 (unregistering): Released all slaves [ 1627.322105][ T5931] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 1627.821962][ T5931] usb 4-1: config 7 has an invalid interface number: 252 but max is 0 [ 1627.835176][ T5931] usb 4-1: config 7 has no interface number 0 [ 1627.856944][ T5931] usb 4-1: config 7 interface 252 has no altsetting 0 [ 1628.597045][ T5931] usb 4-1: string descriptor 0 read error: -22 [ 1628.603532][ T5931] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 1628.613134][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.970316][ T5043] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5443'. [ 1628.980284][ T5043] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1629.079807][ T5043] bond0: entered allmulticast mode [ 1629.085725][ T5043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1629.285701][ T981] usb 4-1: USB disconnect, device number 11 [ 1629.694240][ T5094] NILFS (loop3): device size too small [ 1629.799418][ T5099] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1629.809082][ T5099] EXT4-fs (loop8): unable to read superblock [ 1629.821048][ T5099] overlayfs: failed to resolve './file1': -2 [ 1630.439516][ T5106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5449'. [ 1630.478967][ T5114] fuse: Bad value for 'rootmode' [ 1630.496588][ T5116] fuse: Bad value for 'user_id' [ 1630.549559][ T5116] fuse: Bad value for 'user_id' [ 1633.149953][ T5152] openvswitch: netlink: Message has 14428 unknown bytes. [ 1633.193735][ T5152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1633.247816][ T5152] ceph: No source [ 1633.316376][ T5148] bond0: entered allmulticast mode [ 1633.323436][ T5148] bond_slave_0: entered allmulticast mode [ 1633.330132][ T5148] bond_slave_1: entered allmulticast mode [ 1633.890802][T21409] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1634.008752][ T5187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5469'. [ 1634.051092][T21409] usb 4-1: Using ep0 maxpacket: 16 [ 1634.095874][T21409] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1634.136895][T21409] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1634.166708][T21409] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1634.216714][T21409] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 1634.236162][ T5202] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1634.245720][ T5202] EXT4-fs (loop2): unable to read superblock [ 1634.255498][ T5202] overlayfs: failed to resolve './file1': -2 [ 1634.265126][T21409] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.282316][T21409] usb 4-1: Product: syz [ 1634.288463][T21409] usb 4-1: Manufacturer: syz [ 1634.305295][T21409] usb 4-1: SerialNumber: syz [ 1634.827935][T21409] usb 4-1: config 0 descriptor?? [ 1634.852257][ T5961] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1634.959549][T21409] peak_usb 4-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 1634.993836][T21409] peak_usb 4-1:0.0: unable to read PCAN-USB serial number (err -8) [ 1635.110806][ T5961] usb 6-1: Using ep0 maxpacket: 8 [ 1635.138238][ T5961] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1635.148909][T21409] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -8 [ 1635.180903][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.221545][T21409] usb 4-1: USB disconnect, device number 12 [ 1635.230738][ T5961] usb 6-1: Product: syz [ 1635.234950][ T5961] usb 6-1: Manufacturer: syz [ 1635.250194][ T5961] usb 6-1: SerialNumber: syz [ 1635.279382][ T5961] usb 6-1: config 0 descriptor?? [ 1635.389882][ T5248] gfs2: not a GFS2 filesystem [ 1635.603743][ T5961] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1635.630094][ T5251] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1635.639740][ T5251] EXT4-fs (loop8): unable to read superblock [ 1636.817003][ T5251] overlayfs: failed to resolve './file1': -2 [ 1637.753342][ T5276] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1637.767742][ T5276] hpfs: hpfs_map_sector(): read error [ 1639.330283][ T5961] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1639.382490][ T5961] usb 6-1: USB disconnect, device number 67 [ 1639.711729][ T5311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1639.722229][ T5311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1639.831361][ T5317] vfat: Unknown parameter '|tf8' [ 1640.911443][ T5961] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1641.070716][ T5961] usb 6-1: Using ep0 maxpacket: 16 [ 1641.077888][ T5961] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1641.086846][ T5961] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1641.097392][ T5961] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1641.109337][ T5961] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1641.118579][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.120815][T16228] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1641.127707][ T5961] usb 6-1: Product: syz [ 1641.138964][ T5961] usb 6-1: Manufacturer: syz [ 1641.147798][ T5961] usb 6-1: SerialNumber: syz [ 1641.300964][T16228] usb 10-1: Using ep0 maxpacket: 16 [ 1641.308557][T16228] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1641.319337][T16228] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1641.332633][T16228] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1641.346434][T16228] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.368005][T16228] usb 10-1: Product: syz [ 1641.373454][T16228] usb 10-1: Manufacturer: syz [ 1641.378184][T16228] usb 10-1: SerialNumber: syz [ 1641.627716][ T5961] usb 6-1: 0:2 : does not exist [ 1642.641942][ T5359] vlan2: entered promiscuous mode [ 1643.643524][T16228] usb 10-1: 0:2 : does not exist [ 1643.655365][ T5961] usb 6-1: USB disconnect, device number 68 [ 1643.740450][T16228] usb 10-1: USB disconnect, device number 31 [ 1644.046090][ T5417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5504'. [ 1644.303677][ T5430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1645.235508][ T5421] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 1646.302288][ T5874] Bluetooth: hci3: command 0x0401 tx timeout [ 1648.945237][ T5512] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1648.955138][ T5512] EXT4-fs (loop2): unable to read superblock [ 1648.973075][ T5512] overlayfs: failed to resolve './file1': -2 [ 1651.069508][ T5549] bridge0: entered allmulticast mode [ 1651.096135][ T5549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5532'. [ 1651.150771][ T5549] bridge_slave_1: left allmulticast mode [ 1651.157374][ T5549] bridge_slave_1: left promiscuous mode [ 1651.194239][ T5549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.246618][ T5549] bridge_slave_0: left allmulticast mode [ 1651.253123][ T5549] bridge_slave_0: left promiscuous mode [ 1651.259116][ T5549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.332334][ T5549] bridge0 (unregistering): left allmulticast mode [ 1652.219474][ T5573] vlan2: entered promiscuous mode [ 1652.383555][ T5577] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5540'. [ 1652.967712][ T5586] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1653.062227][ T5586] EXT4-fs (loop5): unable to read superblock [ 1653.136464][ T5585] overlayfs: failed to resolve './file1': -2 [ 1654.447143][ T5618] binfmt_misc: register: failed to install interpreter file ./file1 [ 1654.705861][ T5633] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5551'. [ 1655.798134][ T5652] ip6tnl1: entered promiscuous mode [ 1655.804404][ T5652] ip6tnl1: entered allmulticast mode [ 1655.971178][T16228] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1656.144312][ T5676] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1656.157543][ T5676] EXT4-fs (loop3): unable to read superblock [ 1656.964179][T16228] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.975580][ T5676] overlayfs: failed to resolve './file1': -2 [ 1656.982494][T16228] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.993082][T16228] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1657.006431][T16228] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1657.052599][T16228] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.080842][T16228] usb 10-1: config 0 descriptor?? [ 1657.904788][ T5705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.914114][ T5705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.357379][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5566'. [ 1659.308538][T16228] usbhid 10-1:0.0: can't add hid device: -71 [ 1659.348703][T16228] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1659.396133][T16228] usb 10-1: USB disconnect, device number 32 [ 1659.894448][ T5726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5569'. [ 1660.190878][ T5729] gfs2: not a GFS2 filesystem [ 1661.390893][ T5735] overlayfs: failed to resolve './file1': -2 [ 1661.724252][ T5753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5575'. [ 1661.739190][T16739] kernel write not supported for file /snd/seq (pid: 16739 comm: kworker/1:1) [ 1661.780348][ T5753] vfat: Unknown parameter 'uni_xla' [ 1664.879500][ T5788] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5587'. [ 1664.921726][ T5788] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5587'. [ 1665.115830][ T5793] overlayfs: failed to resolve './file1': -2 [ 1666.537367][ T5811] vfat: Unknown parameter '|tf8' [ 1668.311593][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.319341][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.852828][ T5858] input: syz1 as /devices/virtual/input/input26 [ 1669.910060][ T5858] 9pnet_fd: Insufficient options for proto=fd [ 1670.801201][T21409] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 1671.003305][T21409] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1671.065853][T21409] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1671.120756][T21409] usb 10-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1671.159076][T21409] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.251227][T21409] usb 10-1: config 0 descriptor?? [ 1671.510382][ T5918] vfat: Unknown parameter '|tf8' [ 1672.091924][T21409] bigben 0003:146B:0902.0012: unexpected rdesc, please submit for review [ 1672.161357][ T5923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.200558][ T5921] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1672.210121][ T5921] EXT4-fs (loop3): unable to read superblock [ 1672.232072][ T5921] overlayfs: failed to resolve './file1': -2 [ 1672.238766][T21409] bigben 0003:146B:0902.0012: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.9-1/input0 [ 1672.317233][ T5923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1672.390492][T21409] bigben 0003:146B:0902.0012: missing HID_OUTPUT_REPORT 0 [ 1672.399813][ T5894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.429026][T21409] bigben 0003:146B:0902.0012: no output report found [ 1672.501257][ T5894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1672.619776][ T5940] netlink: 'syz.5.5621': attribute type 4 has an invalid length. [ 1672.653972][ T5944] netlink: 'syz.5.5621': attribute type 4 has an invalid length. [ 1672.670326][ T5961] usb 10-1: USB disconnect, device number 33 [ 1672.720957][ T5944] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5621'. [ 1672.741597][ T5940] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5621'. [ 1672.934747][ T5972] vlan2: entered promiscuous mode [ 1674.100556][ T5998] FAULT_INJECTION: forcing a failure. [ 1674.100556][ T5998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1674.309240][ T5998] CPU: 0 UID: 0 PID: 5998 Comm: syz.3.5632 Not tainted syzkaller #0 PREEMPT(full) [ 1674.309271][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1674.309285][ T5998] Call Trace: [ 1674.309295][ T5998] [ 1674.309306][ T5998] dump_stack_lvl+0x189/0x250 [ 1674.309338][ T5998] ? __pfx____ratelimit+0x10/0x10 [ 1674.309369][ T5998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1674.309395][ T5998] ? __pfx__printk+0x10/0x10 [ 1674.309440][ T5998] should_fail_ex+0x414/0x560 [ 1674.309472][ T5998] _copy_to_user+0x31/0xb0 [ 1674.309498][ T5998] simple_read_from_buffer+0xe1/0x170 [ 1674.309538][ T5998] proc_fail_nth_read+0x1b3/0x220 [ 1674.309570][ T5998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1674.309609][ T5998] ? rw_verify_area+0x2a6/0x4d0 [ 1674.309638][ T5998] ? __lock_acquire+0xab9/0xd20 [ 1674.309666][ T5998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1674.309696][ T5998] vfs_read+0x200/0xa30 [ 1674.309724][ T5998] ? fdget_pos+0x247/0x320 [ 1674.309751][ T5998] ? __pfx___mutex_lock+0x10/0x10 [ 1674.309774][ T5998] ? __pfx_vfs_read+0x10/0x10 [ 1674.309806][ T5998] ? __fget_files+0x2a/0x420 [ 1674.309832][ T5998] ? __fget_files+0x3a0/0x420 [ 1674.309851][ T5998] ? __fget_files+0x2a/0x420 [ 1674.309883][ T5998] ksys_read+0x145/0x250 [ 1674.309917][ T5998] ? __pfx_ksys_read+0x10/0x10 [ 1674.309953][ T5998] ? do_syscall_64+0xbe/0xfa0 [ 1674.309990][ T5998] do_syscall_64+0xfa/0xfa0 [ 1674.310019][ T5998] ? lockdep_hardirqs_on+0x9c/0x150 [ 1674.310051][ T5998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.310072][ T5998] ? clear_bhb_loop+0x60/0xb0 [ 1674.310099][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.310121][ T5998] RIP: 0033:0x7fe0f478d5bc [ 1674.310140][ T5998] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1674.310159][ T5998] RSP: 002b:00007fe0f5603030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1674.310182][ T5998] RAX: ffffffffffffffda RBX: 00007fe0f49d6090 RCX: 00007fe0f478d5bc [ 1674.310198][ T5998] RDX: 000000000000000f RSI: 00007fe0f56030a0 RDI: 0000000000000004 [ 1674.310212][ T5998] RBP: 00007fe0f5603090 R08: 0000000000000000 R09: 0000000000000000 [ 1674.310230][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1674.310243][ T5998] R13: 00007fe0f49d6128 R14: 00007fe0f49d6090 R15: 00007ffe713d7438 [ 1674.310280][ T5998] [ 1675.521797][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5634'. [ 1675.531314][ T6016] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5634'. [ 1676.350236][ T6028] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1676.403492][ T6028] EXT4-fs (loop3): unable to read superblock [ 1676.627801][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 1676.627818][ T30] audit: type=1400 audit(2000000966.798:349): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=73226865645F737769746368 pid=6027 comm="syz.3.5638" [ 1676.989277][ T6043] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1677.059398][ T6043] hfsplus: unable to find HFS+ superblock [ 1678.565324][ T6068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1680.594637][ T6087] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1680.604334][ T6087] EXT4-fs (loop2): unable to read superblock [ 1680.615096][ T6087] overlayfs: failed to resolve './file1': -2 [ 1683.077456][ T6128] netlink: 'syz.3.5663': attribute type 10 has an invalid length. [ 1683.109498][ T6128] team0: Port device netdevsim0 added [ 1683.775724][ C0] vcan0: j1939_tp_rxtimer: 0xffff888040f16800: rx timeout, send abort [ 1684.285803][ C0] vcan0: j1939_tp_rxtimer: 0xffff888040f16800: abort rx timeout. Force session deactivation [ 1686.062703][ T6173] vfat: Unknown parameter '|tf8' [ 1688.014878][ T6193] 9pnet_fd: Insufficient options for proto=fd [ 1688.085640][ T6195] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1688.118881][ T6195] I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1688.137831][ T6195] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1688.178250][ T6195] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1688.189907][ T6195] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1688.222816][ T6195] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1688.238023][ T6195] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1688.326854][ T6195] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1688.353098][ T6195] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1688.390782][ T6195] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1688.405325][ T6195] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1688.451421][ T6195] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1688.518873][ T6195] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1688.577461][ T6195] I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1688.587597][ T6195] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1688.602519][ T6195] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1688.617150][ T6195] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1688.629802][ T6195] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1688.639741][ T6195] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 1689.663314][ T5931] kernel write not supported for file /snd/seq (pid: 5931 comm: kworker/0:5) [ 1690.118350][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5688'. [ 1691.624093][ T5961] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1691.738350][ T6265] bridge0: entered allmulticast mode [ 1691.745982][ T6263] netlink: 'syz.8.5696': attribute type 1 has an invalid length. [ 1691.762793][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5697'. [ 1691.801491][ T5961] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1691.810409][ T5961] usb 4-1: config 1 has no interface number 0 [ 1691.829599][ T6263] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1691.856039][ T5961] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1691.889401][ T6302] bond1: (slave geneve2): making interface the new active one [ 1691.902706][ T6302] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1691.907725][ T5961] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1691.923720][ T6265] bridge_slave_1: left promiscuous mode [ 1691.933080][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1691.952664][ T6263] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1691.971319][ T5961] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1691.995609][ T5961] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1691.996743][ T6265] : left allmulticast mode [ 1692.010244][ T5961] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1692.030819][ T5961] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1692.084826][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.095996][ T6265] : left promiscuous mode [ 1692.106810][ T6265] bridge0: port 1() entered disabled state [ 1692.114782][ T5961] usb 4-1: Product: syz [ 1692.119485][ T5961] usb 4-1: Manufacturer: syz [ 1692.126398][ T5961] usb 4-1: SerialNumber: syz [ 1692.166693][ T6247] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1692.195034][ T6265] bridge0 (unregistering): left allmulticast mode [ 1692.422821][ T6247] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1692.654078][ T6247] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1693.408001][ T6250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1693.432867][ T5961] cdc_ncm 4-1:1.1: bind() failure [ 1693.704852][T16228] usb 4-1: USB disconnect, device number 13 [ 1696.061401][ T5874] Bluetooth: hci6: command 0x0406 tx timeout [ 1698.446273][ T6426] overlayfs: failed to resolve './file1': -2 [ 1698.946975][ T6433] kvm: pic: non byte write [ 1698.952563][ T6433] kvm: pic: non byte write [ 1698.961236][ T6433] kvm: pic: non byte write [ 1698.996727][ T6433] kvm: pic: non byte write [ 1699.055588][ T5874] Bluetooth: unknown link type 255 [ 1699.060966][ T5874] Bluetooth: hci1: connection err: -111 [ 1699.120495][ T6456] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5725'. [ 1699.159946][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059a55800: rx timeout, send abort [ 1699.660093][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805209dc00: rx timeout, send abort [ 1699.668662][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059a55800: abort rx timeout. Force session deactivation [ 1699.699915][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1699.928503][ T6456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1699.939874][ T6456] bond_slave_0: left allmulticast mode [ 1699.949729][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805209c800: rx timeout, send abort [ 1699.980590][ T6456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1700.001555][ T6456] bond_slave_1: left allmulticast mode [ 1700.012341][ T6456] bond0 (unregistering): Released all slaves [ 1700.113434][ T6450] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1700.121719][ T6450] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1700.129005][ T6450] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1700.136843][ T6450] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1700.143428][ T6450] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1700.149661][ T6450] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1700.165915][ T6450] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1700.172522][ T6450] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1700.189396][ T6503] blk_print_req_error: 2 callbacks suppressed [ 1700.189411][ T6503] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1700.221168][ T6503] I/O error, dev loop9, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1700.241244][ T6503] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1700.263935][ T6503] I/O error, dev loop9, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1700.277445][ T6503] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1700.289638][ T6503] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1700.312734][ T6503] I/O error, dev loop9, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1700.326502][ T6503] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1700.339839][ T6503] I/O error, dev loop9, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1700.349851][ T6503] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1700.360342][ T6503] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1700.387126][ T6503] I/O error, dev loop9, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1700.421066][ T6503] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1700.442238][ T6503] I/O error, dev loop9, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1700.457979][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805209c800: abort rx timeout. Force session deactivation [ 1700.471144][ T6503] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1700.482527][ T6503] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1700.492161][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1700.504133][ T6503] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1700.514660][ T6503] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1700.524841][ T6503] UDF-fs: warning (device loop9): udf_fill_super: No partition found (1) [ 1700.747128][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805209fc00: rx timeout, send abort [ 1701.193905][ T6513] overlayfs: failed to resolve './file1': -2 [ 1701.255549][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805209fc00: abort rx timeout. Force session deactivation [ 1701.278969][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1701.314246][ T5874] Bluetooth: hci2: command 0x0c1a tx timeout [ 1701.528958][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805209c400: rx timeout, send abort [ 1701.895044][ T6521] NILFS (loop8): device size too small [ 1702.037277][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805209c400: abort rx timeout. Force session deactivation [ 1702.067583][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1702.141192][ T5874] Bluetooth: hci5: command 0x0406 tx timeout [ 1702.145673][ T5186] Bluetooth: hci3: command 0x0401 tx timeout [ 1702.147655][ T5874] Bluetooth: hci0: command 0x0c1a tx timeout [ 1702.221325][ T6333] Bluetooth: hci1: command 0x0405 tx timeout [ 1702.237390][ T5186] Bluetooth: hci6: command 0x0406 tx timeout [ 1702.317559][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805209f800: rx timeout, send abort [ 1702.760997][T21409] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1702.825936][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805209f800: abort rx timeout. Force session deactivation [ 1702.861503][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1702.930503][ T6541] netlink: 'syz.3.5738': attribute type 12 has an invalid length. [ 1702.960733][ T6541] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5738'. [ 1702.982619][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5738'. [ 1702.985491][T21409] usb 10-1: no configurations [ 1703.007393][T21409] usb 10-1: can't read configurations, error -22 [ 1703.070817][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5738'. [ 1703.111476][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805209f000: rx timeout, send abort [ 1703.261192][T21409] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1703.584078][T21409] usb 10-1: no configurations [ 1703.597876][T21409] usb 10-1: can't read configurations, error -22 [ 1703.619747][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805209f000: abort rx timeout. Force session deactivation [ 1703.646141][T21409] usb usb10-port1: attempt power cycle [ 1703.652519][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1703.902370][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805209ec00: rx timeout, send abort [ 1704.060972][T21409] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1704.107453][T21409] usb 10-1: no configurations [ 1704.145050][T21409] usb 10-1: can't read configurations, error -22 [ 1704.220836][ T6568] overlayfs: failed to resolve './file1': -2 [ 1704.304596][T21409] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1704.313320][ T5186] Bluetooth: hci6: command 0x0406 tx timeout [ 1704.333115][ T5186] Bluetooth: hci1: command 0x0405 tx timeout [ 1704.410680][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805209ec00: abort rx timeout. Force session deactivation [ 1704.445555][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1704.562541][T21409] usb 10-1: no configurations [ 1704.578694][T21409] usb 10-1: can't read configurations, error -22 [ 1704.594216][T21409] usb usb10-port1: unable to enumerate USB device [ 1704.695372][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805209e800: rx timeout, send abort [ 1705.203640][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805209e800: abort rx timeout. Force session deactivation [ 1705.239316][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1705.489194][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805209d400: rx timeout, send abort [ 1705.687443][ T6587] batman_adv: batadv0: Adding interface: dummy0 [ 1705.695150][ T6587] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1705.752160][ T6587] batman_adv: batadv0: Interface activated: dummy0 [ 1705.809908][ T6586] batadv0: mtu less than device minimum [ 1705.819709][ T6586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1705.832414][ T6586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1705.841605][ T6587] netlink: 512 bytes leftover after parsing attributes in process `syz.8.5752'. [ 1705.844597][ T6586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1705.863862][ T6586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1705.875911][ T6586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1705.887873][ T6586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1705.899955][ T6586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1705.912030][ T6586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1705.923987][ T6586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1705.997643][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805209d400: abort rx timeout. Force session deactivation [ 1706.018077][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1706.206398][ T6610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5755'. [ 1706.268044][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805209d800: rx timeout, send abort [ 1706.313956][ T6628] blk_print_req_error: 2 callbacks suppressed [ 1706.313978][ T6628] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1706.352093][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5755'. [ 1706.387407][ T6628] I/O error, dev loop5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1706.407439][ T6628] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1706.429731][ T6628] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1706.452644][ T6628] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 1706.467124][ T6628] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1706.484600][ T6628] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1706.494350][ T6628] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1706.505619][ T6628] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1706.541007][ T6628] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 1706.562449][ T6628] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1706.583798][ T6628] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1706.599298][ T6628] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1706.610479][ T6628] I/O error, dev loop5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1706.631046][ T6628] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 1706.751234][ T6628] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1706.776430][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805209d800: abort rx timeout. Force session deactivation [ 1706.797890][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1706.975376][ T6628] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1706.992234][ T6628] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 1707.003116][ T6628] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 1707.047842][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805209d000: rx timeout, send abort [ 1707.048909][ T6648] overlayfs: failed to resolve './file1': -2 [ 1707.556173][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805209d000: abort rx timeout. Force session deactivation [ 1707.589537][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1707.839543][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805209c000: rx timeout, send abort [ 1708.347828][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805209c000: abort rx timeout. Force session deactivation [ 1708.375181][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1708.625159][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064321800: rx timeout, send abort [ 1709.133514][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064321800: abort rx timeout. Force session deactivation [ 1709.166843][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1709.249985][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5764'. [ 1709.416832][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064321000: rx timeout, send abort [ 1709.560844][ T6673] binder: 6663:6673 ioctl c0306201 0 returned -14 [ 1709.925258][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064321000: abort rx timeout. Force session deactivation [ 1709.946654][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1710.196574][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064323000: rx timeout, send abort [ 1710.704921][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064323000: abort rx timeout. Force session deactivation [ 1710.732328][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1710.982302][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064322c00: rx timeout, send abort [ 1711.333499][ T6704] FAULT_INJECTION: forcing a failure. [ 1711.333499][ T6704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1711.346849][ T6704] CPU: 1 UID: 0 PID: 6704 Comm: syz.9.5770 Not tainted syzkaller #0 PREEMPT(full) [ 1711.346877][ T6704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1711.346890][ T6704] Call Trace: [ 1711.346900][ T6704] [ 1711.346909][ T6704] dump_stack_lvl+0x189/0x250 [ 1711.346941][ T6704] ? __pfx____ratelimit+0x10/0x10 [ 1711.346972][ T6704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1711.346998][ T6704] ? __pfx__printk+0x10/0x10 [ 1711.347044][ T6704] should_fail_ex+0x414/0x560 [ 1711.347076][ T6704] _copy_to_user+0x31/0xb0 [ 1711.347112][ T6704] snd_timer_user_read+0x6d8/0x9d0 [ 1711.347161][ T6704] ? __pfx_snd_timer_user_read+0x10/0x10 [ 1711.347194][ T6704] ? common_file_perm+0x1b5/0x230 [ 1711.347226][ T6704] ? bpf_lsm_file_permission+0x9/0x20 [ 1711.347249][ T6704] ? security_file_permission+0x75/0x290 [ 1711.347271][ T6704] ? rw_verify_area+0x2a6/0x4d0 [ 1711.347306][ T6704] vfs_readv+0x5aa/0x850 [ 1711.347328][ T6704] ? __pfx_snd_timer_user_read+0x10/0x10 [ 1711.347358][ T6704] ? __pfx_vfs_readv+0x10/0x10 [ 1711.347397][ T6704] ? __fget_files+0x2a/0x420 [ 1711.347423][ T6704] ? __fget_files+0x3a0/0x420 [ 1711.347441][ T6704] ? __fget_files+0x2a/0x420 [ 1711.347472][ T6704] do_readv+0x14d/0x2d0 [ 1711.347497][ T6704] ? __pfx_do_readv+0x10/0x10 [ 1711.347524][ T6704] ? do_syscall_64+0xbe/0xfa0 [ 1711.347558][ T6704] do_syscall_64+0xfa/0xfa0 [ 1711.347587][ T6704] ? lockdep_hardirqs_on+0x9c/0x150 [ 1711.347617][ T6704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.347638][ T6704] ? clear_bhb_loop+0x60/0xb0 [ 1711.347663][ T6704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.347683][ T6704] RIP: 0033:0x7fcf3e78eba9 [ 1711.347703][ T6704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1711.347721][ T6704] RSP: 002b:00007fcf3c9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1711.347743][ T6704] RAX: ffffffffffffffda RBX: 00007fcf3e9d6180 RCX: 00007fcf3e78eba9 [ 1711.347759][ T6704] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 1711.347772][ T6704] RBP: 00007fcf3c9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1711.347786][ T6704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1711.347798][ T6704] R13: 00007fcf3e9d6218 R14: 00007fcf3e9d6180 R15: 00007fff3660d748 [ 1711.347834][ T6704] [ 1711.582288][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064322c00: abort rx timeout. Force session deactivation [ 1711.606655][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1711.856612][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064320c00: rx timeout, send abort [ 1712.001581][ T6707] overlayfs: failed to resolve './file1': -2 [ 1712.365002][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064320c00: abort rx timeout. Force session deactivation [ 1712.391348][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1712.641348][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064320000: rx timeout, send abort [ 1713.076547][ T6717] blk_print_req_error: 2 callbacks suppressed [ 1713.076562][ T6717] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1713.092685][ T6717] EXT4-fs (loop3): unable to read superblock [ 1713.149646][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064320000: abort rx timeout. Force session deactivation [ 1713.174037][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1713.423039][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064320800: rx timeout, send abort [ 1713.931357][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064320800: abort rx timeout. Force session deactivation [ 1713.963744][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1714.213708][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064320400: rx timeout, send abort [ 1714.722005][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064320400: abort rx timeout. Force session deactivation [ 1714.760720][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1715.002368][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064322800: rx timeout, send abort [ 1715.510674][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064322800: abort rx timeout. Force session deactivation [ 1715.545068][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1715.795032][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064323400: rx timeout, send abort [ 1716.107612][ T6743] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1716.117831][ T6743] EXT4-fs (loop9): unable to read superblock [ 1716.131260][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5784'. [ 1716.303334][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064323400: abort rx timeout. Force session deactivation [ 1716.328811][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1716.578713][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880595e1c00: rx timeout, send abort [ 1717.040235][ T6758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1717.051449][ T6759] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1717.073030][ T6759] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1717.087017][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880595e1c00: abort rx timeout. Force session deactivation [ 1717.104486][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5786'. [ 1717.113732][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1717.363649][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880595e1400: rx timeout, send abort [ 1717.871951][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880595e1400: abort rx timeout. Force session deactivation [ 1717.899358][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1718.117448][ T5186] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1718.129079][ T5186] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1718.138209][ T5186] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1718.147541][ T5186] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1718.155425][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880595e3c00: rx timeout, send abort [ 1718.165813][ T5186] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1718.655518][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880595e3c00: abort rx timeout. Force session deactivation [ 1718.700909][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1718.750709][T16228] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 1718.922023][T16228] usb 10-1: device descriptor read/64, error -71 [ 1718.951051][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880595e0000: rx timeout, send abort [ 1719.459324][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880595e0000: abort rx timeout. Force session deactivation [ 1719.479769][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1719.729706][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053033c00: rx timeout, send abort [ 1720.238025][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053033c00: abort rx timeout. Force session deactivation [ 1720.272367][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1720.297396][ T6333] Bluetooth: hci7: command tx timeout [ 1720.522363][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053032400: rx timeout, send abort [ 1720.672999][T16228] usb 10-1: new full-speed USB device number 39 using dummy_hcd [ 1720.753515][ T4110] bond0: (slave syz_tun): Releasing backup interface [ 1720.890753][T16228] usb 10-1: device descriptor read/64, error -71 [ 1721.031066][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053032400: abort rx timeout. Force session deactivation [ 1721.053715][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1721.187810][T16228] usb usb10-port1: attempt power cycle [ 1721.303692][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053033000: rx timeout, send abort [ 1721.409719][ T6831] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5797'. [ 1721.811998][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053033000: abort rx timeout. Force session deactivation [ 1721.833050][ T6836] gfs2: not a GFS2 filesystem [ 1721.844402][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1721.998665][T30482] bond0 (unregistering): (slave geneve2): Releasing backup interface [ 1722.073433][ T6840] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5799'. [ 1722.094388][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053032800: rx timeout, send abort [ 1722.332658][T30482] bond1 (unregistering): Released all slaves [ 1722.380580][T30482] bond0 (unregistering): Released all slaves [ 1722.391564][ T6333] Bluetooth: hci7: command tx timeout [ 1722.599981][T30482] tipc: Disabling bearer [ 1722.605514][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053032800: abort rx timeout. Force session deactivation [ 1722.621169][T30482] tipc: Left network mode [ 1722.625700][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1722.804496][T30482] IPVS: stopping master sync thread 18104 ... [ 1722.875681][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053032c00: rx timeout, send abort [ 1723.290842][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5809'. [ 1723.306387][ T6767] chnl_net:caif_netlink_parms(): no params data found [ 1723.384040][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053032c00: abort rx timeout. Force session deactivation [ 1723.413533][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1723.663502][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053033800: rx timeout, send abort [ 1724.171795][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053033800: abort rx timeout. Force session deactivation [ 1724.194190][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805209dc00: connection exists (fe ff). last cmd: 20 [ 1724.444168][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053033400: rx timeout, send abort [ 1724.462842][ T6333] Bluetooth: hci7: command tx timeout [ 1724.788838][T30482] hsr_slave_0: left promiscuous mode [ 1724.800923][T30482] hsr_slave_1: left promiscuous mode [ 1724.822658][T30482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1724.836536][T30482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1724.952466][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053033400: abort rx timeout. Force session deactivation [ 1725.638168][ T7011] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1725.647974][ T7011] EXT4-fs (loop8): unable to read superblock [ 1725.706358][ T7011] overlayfs: failed to resolve './file1': -2 [ 1726.545191][ T6333] Bluetooth: hci7: command tx timeout [ 1727.466565][T30482] team_slave_1 (unregistering): left promiscuous mode [ 1727.480202][T30482] team0 (unregistering): Port device team_slave_1 removed [ 1728.450526][T30482] team_slave_0 (unregistering): left promiscuous mode [ 1728.467279][T30482] team0 (unregistering): Port device team_slave_0 removed [ 1729.688159][ T7055] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5823'. [ 1729.746152][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.752694][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.005876][ T6767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.038220][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.069632][ T6767] bridge_slave_0: entered allmulticast mode [ 1731.086919][ T6767] bridge_slave_0: entered promiscuous mode [ 1731.238271][ T6767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.250753][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.261685][ T6767] bridge_slave_1: entered allmulticast mode [ 1731.269739][ T6767] bridge_slave_1: entered promiscuous mode [ 1732.575437][ T7127] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1732.585064][ T7127] EXT4-fs (loop8): unable to read superblock [ 1732.611626][ T7127] overlayfs: failed to resolve './file1': -2 [ 1733.156206][ T6767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1733.518965][ T7151] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1734.516369][ T6767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1734.641041][T21409] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1734.740355][ T7145] exfat: Unknown parameter '' [ 1734.815467][ T6767] team0: Port device team_slave_0 added [ 1734.852387][T21409] usb 10-1: Using ep0 maxpacket: 8 [ 1734.874561][ T6767] team0: Port device team_slave_1 added [ 1734.881847][T21409] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1734.890250][T21409] usb 10-1: config 179 has no interface number 0 [ 1734.899291][T21409] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1734.911905][T21409] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1735.002684][T21409] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1735.049080][T21409] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1735.086007][T21409] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1735.123955][T21409] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1735.142127][ T6767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1735.163478][ T6767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1735.167003][T21409] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.247886][ T6767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1735.253630][ T7158] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1735.301792][ T6767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1735.315091][ T6767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1735.420075][ T6767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1735.543726][ T7234] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1735.553360][ T7234] EXT4-fs (loop3): unable to read superblock [ 1735.599156][ T7234] overlayfs: failed to resolve './file1': -2 [ 1736.547169][T21409] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input27 [ 1736.643362][T30482] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1736.659482][T30482] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1737.061601][ T5931] usb 10-1: USB disconnect, device number 41 [ 1737.061601][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1737.980304][T30482] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1738.045502][T30482] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.651323][ T7291] FAULT_INJECTION: forcing a failure. [ 1738.651323][ T7291] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.732422][ T7291] CPU: 1 UID: 0 PID: 7291 Comm: syz.9.5841 Not tainted syzkaller #0 PREEMPT(full) [ 1738.732450][ T7291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1738.732463][ T7291] Call Trace: [ 1738.732472][ T7291] [ 1738.732483][ T7291] dump_stack_lvl+0x189/0x250 [ 1738.732513][ T7291] ? __pfx____ratelimit+0x10/0x10 [ 1738.732542][ T7291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1738.732567][ T7291] ? __pfx__printk+0x10/0x10 [ 1738.732608][ T7291] ? __pfx___might_resched+0x10/0x10 [ 1738.732657][ T7291] ? fs_reclaim_acquire+0x7d/0x100 [ 1738.732684][ T7291] should_fail_ex+0x414/0x560 [ 1738.732716][ T7291] should_failslab+0xa8/0x100 [ 1738.732742][ T7291] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1738.732774][ T7291] ? vm_area_dup+0x2b/0x680 [ 1738.732801][ T7291] vm_area_dup+0x2b/0x680 [ 1738.732827][ T7291] __split_vma+0x1a9/0xa00 [ 1738.732857][ T7291] ? mas_next_slot+0xc20/0xcf0 [ 1738.732891][ T7291] ? __pfx___split_vma+0x10/0x10 [ 1738.732942][ T7291] ? mas_find+0xb0e/0xd30 [ 1738.732979][ T7291] vms_gather_munmap_vmas+0x4c6/0x12e0 [ 1738.733027][ T7291] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1738.733065][ T7291] ? mas_find+0xa7d/0xd30 [ 1738.733100][ T7291] mmap_region+0x724/0x1c70 [ 1738.733139][ T7291] ? __lock_acquire+0xab9/0xd20 [ 1738.733175][ T7291] ? __pfx_mmap_region+0x10/0x10 [ 1738.733291][ T7291] ? mm_get_unmapped_area+0xa7/0xd0 [ 1738.733327][ T7291] ? shmem_get_unmapped_area+0x2cf/0x910 [ 1738.733361][ T7291] ? cap_mmap_addr+0xb0/0x100 [ 1738.733383][ T7291] ? bpf_lsm_mmap_addr+0x9/0x20 [ 1738.733407][ T7291] ? security_mmap_addr+0x71/0x270 [ 1738.733438][ T7291] do_mmap+0xc45/0x10d0 [ 1738.733481][ T7291] ? __pfx_do_mmap+0x10/0x10 [ 1738.733506][ T7291] ? down_write_killable+0x178/0x230 [ 1738.733530][ T7291] ? __pfx_vfs_write+0x10/0x10 [ 1738.733560][ T7291] ? __pfx_down_write_killable+0x10/0x10 [ 1738.733584][ T7291] ? apparmor_mmap_file+0xc4/0xe0 [ 1738.733612][ T7291] vm_mmap_pgoff+0x2a6/0x4d0 [ 1738.733649][ T7291] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1738.733672][ T7291] ? ksys_write+0x22a/0x250 [ 1738.733705][ T7291] ? __pfx_ksys_write+0x10/0x10 [ 1738.733737][ T7291] ? ksys_mmap_pgoff+0xf4/0x760 [ 1738.733767][ T7291] ? __x64_sys_mmap+0x7f/0x140 [ 1738.733802][ T7291] do_syscall_64+0xfa/0xfa0 [ 1738.733843][ T7291] ? lockdep_hardirqs_on+0x9c/0x150 [ 1738.733874][ T7291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.733921][ T7291] ? clear_bhb_loop+0x60/0xb0 [ 1738.733946][ T7291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.733966][ T7291] RIP: 0033:0x7fcf3e78eba9 [ 1738.733985][ T7291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1738.734002][ T7291] RSP: 002b:00007fcf3f544038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1738.734024][ T7291] RAX: ffffffffffffffda RBX: 00007fcf3e9d5fa0 RCX: 00007fcf3e78eba9 [ 1738.734040][ T7291] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 1738.734055][ T7291] RBP: 00007fcf3f544090 R08: ffffffffffffffff R09: 0000000000000000 [ 1738.734068][ T7291] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 1738.734081][ T7291] R13: 00007fcf3e9d6038 R14: 00007fcf3e9d5fa0 R15: 00007fff3660d748 [ 1738.734115][ T7291] [ 1738.740273][T30482] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1739.304445][T30482] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.327020][ T7308] NILFS (loop8): device size too small [ 1739.454942][ T6767] hsr_slave_0: entered promiscuous mode [ 1739.471799][ T7314] overlayfs: failed to resolve './file1': -2 [ 1739.479271][ T6767] hsr_slave_1: entered promiscuous mode [ 1739.512972][ T6767] debugfs: 'hsr0' already exists in 'hsr' [ 1739.518779][ T6767] Cannot create hsr debugfs directory [ 1739.692035][T30482] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1739.716344][T30482] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.802571][ T7325] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5848'. [ 1739.867883][ T7329] netlink: 'syz.8.5848': attribute type 11 has an invalid length. [ 1740.130844][ T7343] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1740.295475][ T7343] cramfs: wrong magic [ 1741.268906][ T7360] afs: Bad value for 'source' [ 1742.680517][ T7402] overlayfs: missing 'lowerdir' [ 1743.975814][T16228] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1744.271477][T16228] usb 4-1: Using ep0 maxpacket: 32 [ 1744.327522][T16228] usb 4-1: config 7 has an invalid interface number: 102 but max is 1 [ 1744.482472][T16228] usb 4-1: config 7 has an invalid interface number: 4 but max is 1 [ 1744.547099][T16228] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1744.639181][T16228] usb 4-1: config 7 has an invalid descriptor of length 130, skipping remainder of the config [ 1744.652797][T16228] usb 4-1: config 7 has no interface number 0 [ 1744.658929][T16228] usb 4-1: config 7 has no interface number 1 [ 1744.669728][T16228] usb 4-1: config 7 interface 102 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1744.701747][T16228] usb 4-1: too many endpoints for config 7 interface 4 altsetting 3: 219, using maximum allowed: 30 [ 1744.720572][T16228] usb 4-1: config 7 interface 4 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 1744.739101][T16228] usb 4-1: config 7 interface 102 has no altsetting 0 [ 1744.750742][T16228] usb 4-1: config 7 interface 4 has no altsetting 0 [ 1744.771167][T16228] usb 4-1: New USB device found, idVendor=12d1, idProduct=37cd, bcdDevice=88.37 [ 1744.800398][T16228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.809018][T16228] usb 4-1: Product: ᐇ [ 1744.813611][T16228] usb 4-1: Manufacturer: 䐊 [ 1744.818266][T16228] usb 4-1: SerialNumber: syz [ 1745.130797][T16228] usb 4-1: USB disconnect, device number 14 [ 1745.467914][T30482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1745.483996][T30482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1745.499654][T30482] bond0 (unregistering): Released all slaves [ 1745.746483][T30482] tipc: Disabling bearer [ 1745.807978][T30482] tipc: Left network mode [ 1745.825655][ T7490] NILFS (loop9): device size too small [ 1745.887968][T30482] IPVS: stopping master sync thread 25570 ... [ 1746.197444][ T7506] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1746.208119][ T7506] EXT4-fs (loop5): unable to read superblock [ 1746.221203][ T7506] overlayfs: missing 'lowerdir' [ 1747.626120][ T7541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1748.446370][ T7553] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.5873'. [ 1748.491448][ T6767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1748.662849][ T6767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1748.840434][T30482] hsr_slave_0: left promiscuous mode [ 1749.020497][T30482] veth1_vlan: left promiscuous mode [ 1749.067147][T30482] veth0_vlan: left promiscuous mode [ 1750.011664][ T7586] gfs2: not a GFS2 filesystem [ 1750.330372][ T7589] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1750.393572][ T7589] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 1750.447880][ T7589] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.460195][ T7589] FAT-fs (loop8): unable to read boot sector [ 1751.874464][T30482] team0 (unregistering): Port device team_slave_1 removed [ 1751.928203][T30482] team0 (unregistering): Port device team_slave_0 removed [ 1752.501746][ T6767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1752.512853][ T6767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1752.735651][ T7613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5886'. [ 1753.077120][ T6767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1753.226810][ T6767] 8021q: adding VLAN 0 to HW filter on device team0 [ 1753.296368][ T6399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1753.303595][ T6399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1753.395774][ T6399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1753.403014][ T6399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1754.418476][ T7627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1754.430980][ T7627] net_ratelimit: 10 callbacks suppressed [ 1754.431002][ T7627] batadv0: mtu less than device minimum [ 1754.473603][ T7627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1754.485426][ T7627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1754.497208][ T7627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1754.509167][ T7627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1754.521093][ T7627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1754.533046][ T7627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1754.544945][ T7627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1754.556322][ T7627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1754.564381][ T7639] netlink: 'syz.5.5893': attribute type 15 has an invalid length. [ 1754.568320][ T7627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1754.580937][ T7639] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5893'. [ 1754.610724][ T7627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1754.629144][ T7627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1754.694656][ T7641] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1754.709757][ T7641] EXT4-fs (loop5): unable to read superblock [ 1754.716724][ T7627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1754.728473][ T7641] overlayfs: failed to resolve './file1': -2 [ 1754.740845][ T5931] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1754.811673][ T7627] batman_adv: batadv0: Interface deactivated: dummy0 [ 1754.819085][ T7627] batman_adv: batadv0: Removing interface: dummy0 [ 1754.953157][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 1754.968407][ T5931] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1755.035151][ T5931] usb 4-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40 [ 1755.129916][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.151017][ T5931] usb 4-1: Product: syz [ 1755.155231][ T5931] usb 4-1: Manufacturer: syz [ 1755.178318][ T5931] usb 4-1: SerialNumber: syz [ 1755.546544][ T7668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1755.560542][ T7668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1755.944781][ T7666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1756.012229][ T7666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1757.343615][ T6401] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.378204][ T6401] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.427146][ T6401] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.447484][ T6401] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.536139][ T5931] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input28 [ 1757.592370][ T6767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1757.636987][ T5931] usb 4-1: USB disconnect, device number 15 [ 1757.647040][ T5221] bcm5974 4-1:1.0: could not read from device [ 1757.683763][ T6767] veth0_vlan: entered promiscuous mode [ 1757.710084][ T6767] veth1_vlan: entered promiscuous mode [ 1758.346585][ T6767] veth0_macvtap: entered promiscuous mode [ 1758.524105][ T6767] veth1_macvtap: entered promiscuous mode [ 1758.933833][ T6767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1759.009747][ T6767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1759.219968][ T9459] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.248844][ T9459] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.285657][ T9459] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.307308][ T9459] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.552441][ T7713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1761.071956][ T7738] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20003 [ 1761.125776][ T7737] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1761.135510][ T7737] EXT4-fs (loop8): unable to read superblock [ 1761.153579][ T7737] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1761.163289][ T7737] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1761.299734][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1761.529056][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1761.650698][ T5901] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1761.872362][ T5901] usb 6-1: Using ep0 maxpacket: 8 [ 1761.933414][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1761.954635][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1761.986633][ T5901] usb 6-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1762.038545][ T7977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1762.043827][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.088984][ T7977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1762.114480][ T5901] usb 6-1: config 0 descriptor?? [ 1762.368908][ T5901] usbhid 6-1:0.0: can't add hid device: -71 [ 1762.408745][ T5901] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1762.472144][ T5901] usb 6-1: USB disconnect, device number 69 [ 1762.862188][ T5901] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1762.929417][ T7793] netlink: 'syz.3.5915': attribute type 15 has an invalid length. [ 1762.963520][ T7793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5915'. [ 1763.030751][ T5901] usb 6-1: Using ep0 maxpacket: 8 [ 1763.041146][ T5901] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 1763.069774][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 256, setting to 64 [ 1763.093955][ T7793] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1763.107322][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1763.159032][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1763.179508][ T7793] EXT4-fs (loop3): unable to read superblock [ 1763.208996][ T7793] overlayfs: failed to resolve './file1': -2 [ 1763.209187][ T5901] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1763.288414][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1763.298652][ T5901] usb 6-1: SerialNumber: syz [ 1763.461892][ T5901] usb 6-1: config 0 descriptor?? [ 1763.520879][ T5901] hso 6-1:0.0: Can't find BULK IN endpoint [ 1764.549781][ T5961] usb 6-1: USB disconnect, device number 70 [ 1764.931510][ T7826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1765.817351][ T7838] EXT4-fs: Ignoring removed i_version option [ 1765.837137][ T7838] EXT4-fs: Ignoring removed nobh option [ 1765.887243][ T7838] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1765.929179][ T7838] EXT4-fs (loop8): unable to read superblock [ 1766.428117][ T7845] IPVS: Unknown mcast interface: veth0_virt_wifi [ 1767.553551][ T5186] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1767.564379][ T7852] netlink: 5 bytes leftover after parsing attributes in process `syz.8.5929'. [ 1767.783038][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5930'. [ 1768.247623][ T7890] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1768.295191][ T7890] FAT-fs (loop1): unable to read boot sector [ 1768.348127][ T7890] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1768.398065][ T7890] FAT-fs (loop1): unable to read boot sector [ 1768.466957][ T7890] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1768.556192][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5936'. [ 1768.565516][ T7890] FAT-fs (loop1): unable to read boot sector [ 1768.613314][ T7890] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1768.636558][ T7890] FAT-fs (loop1): unable to read boot sector [ 1768.647572][ T7890] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1768.647667][ T7890] FAT-fs (loop1): unable to read boot sector [ 1768.660475][ T7890] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1768.660567][ T7890] FAT-fs (loop1): unable to read boot sector [ 1768.688414][ T7890] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1768.688501][ T7890] FAT-fs (loop1): unable to read boot sector [ 1768.706996][ T7890] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1768.707106][ T7890] FAT-fs (loop1): unable to read boot sector [ 1768.715118][ T7890] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1768.715206][ T7890] FAT-fs (loop1): unable to read boot sector [ 1768.778951][ T7890] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1768.779039][ T7890] FAT-fs (loop1): unable to read boot sector [ 1768.864847][ T7890] FAT-fs (loop1): unable to read boot sector [ 1768.992612][ T7890] FAT-fs (loop1): unable to read boot sector [ 1769.062657][ T7890] FAT-fs (loop1): unable to read boot sector [ 1769.092880][ T7890] FAT-fs (loop1): unable to read boot sector [ 1769.126429][ T7890] FAT-fs (loop1): unable to read boot sector [ 1769.195732][ T7890] FAT-fs (loop1): unable to read boot sector [ 1769.260172][ T7924] netlink: 'syz.8.5938': attribute type 12 has an invalid length. [ 1769.276791][ T7890] FAT-fs (loop1): unable to read boot sector [ 1769.318320][ T7890] FAT-fs (loop1): unable to read boot sector [ 1769.320570][ T7924] netlink: 9472 bytes leftover after parsing attributes in process `syz.8.5938'. [ 1769.386602][ T30] audit: type=1326 audit(2000001059.558:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.8.5938" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f3347d85b67 code=0x0 [ 1769.388400][ T7890] FAT-fs (loop1): unable to read boot sector [ 1769.459122][ T7890] FAT-fs (loop1): unable to read boot sector [ 1769.536818][ T7890] FAT-fs (loop1): unable to read boot sector [ 1769.569385][ T7939] udevd[7939]: failed to send result of seq 27531 to main daemon: Connection refused [ 1769.620100][ T7890] FAT-fs (loop1): unable to read boot sector [ 1769.667937][ T7890] FAT-fs (loop1): unable to read boot sector [ 1769.735974][ T7890] FAT-fs (loop1): unable to read boot sector [ 1769.769656][ T7890] FAT-fs (loop1): unable to read boot sector [ 1769.784625][ T7890] FAT-fs (loop1): unable to read boot sector [ 1769.799000][ T7890] FAT-fs (loop1): unable to read boot sector [ 1769.846323][ T7890] FAT-fs (loop1): unable to read boot sector [ 1769.902079][ T7890] FAT-fs (loop1): unable to read boot sector [ 1769.944928][ T7890] FAT-fs (loop1): unable to read boot sector [ 1769.970836][ T7890] FAT-fs (loop1): unable to read boot sector [ 1770.031406][ T7890] FAT-fs (loop1): unable to read boot sector [ 1770.067537][ T7890] FAT-fs (loop1): unable to read boot sector [ 1770.099814][ T7890] FAT-fs (loop1): unable to read boot sector [ 1770.126678][ T7890] FAT-fs (loop1): unable to read boot sector [ 1770.148819][ T7890] FAT-fs (loop1): unable to read boot sector [ 1770.202228][ T7890] FAT-fs (loop1): unable to read boot sector [ 1770.235956][ T7890] FAT-fs (loop1): unable to read boot sector [ 1770.288986][ T7890] FAT-fs (loop1): unable to read boot sector [ 1770.316750][ T7890] FAT-fs (loop1): unable to read boot sector [ 1770.328298][ T7890] FAT-fs (loop1): unable to read boot sector [ 1770.340454][ T7890] FAT-fs (loop1): unable to read boot sector [ 1770.352561][ T7890] FAT-fs (loop1): unable to read boot sector [ 1771.816570][ T7968] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5950'. [ 1771.883951][ T7973] EXT4-fs (loop1): unable to read superblock [ 1771.892603][ T7973] overlayfs: failed to resolve './file1': -2 [ 1772.549337][ T7991] EXT4-fs (loop9): unable to read superblock [ 1772.570429][ T7991] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1772.579583][ T7991] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1777.380750][ T8022] vfat: Unknown parameter '|tf8' [ 1777.712825][ T8013] syzkaller0: entered promiscuous mode [ 1777.718548][ T8013] syzkaller0: entered allmulticast mode [ 1777.906602][ T5901] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1778.080923][ T5901] usb 10-1: Using ep0 maxpacket: 8 [ 1778.081591][ T8033] netlink: 196 bytes leftover after parsing attributes in process `syz.5.5961'. [ 1778.100411][ T5901] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1778.139785][ T5901] usb 10-1: config 0 has no interface number 0 [ 1778.145465][ T8043] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5965'. [ 1778.151992][ T5901] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1778.171176][ T5901] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 42911, setting to 1024 [ 1778.191082][T16739] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1778.198301][ T5901] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1778.210844][ T5901] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.235480][ T5901] usb 10-1: config 0 descriptor?? [ 1778.259655][ T8018] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1778.277150][ T5901] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1778.343363][T16739] usb 4-1: device descriptor read/64, error -71 [ 1778.422583][T21409] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1778.485640][ T5901] usb 10-1: USB disconnect, device number 42 [ 1778.516351][ T8043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1778.547685][ T8043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1778.566658][ T8043] bond0 (unregistering): Released all slaves [ 1778.591017][T16739] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1778.730997][T16739] usb 4-1: device descriptor read/64, error -71 [ 1778.843092][T16739] usb usb4-port1: attempt power cycle [ 1779.131011][ T8109] EXT4-fs: Ignoring removed bh option [ 1779.136978][ T8109] ext4: Unknown parameter 'nouser_xattr' [ 1779.273762][T16739] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1779.872852][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5968'. [ 1780.334654][ T8109] hsr0: left promiscuous mode [ 1780.400286][T16739] usb 4-1: device descriptor read/8, error -71 [ 1780.535231][ T8109] bond0: left allmulticast mode [ 1780.565381][ T3557] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.731666][ T3035] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.755890][ T8128] FAULT_INJECTION: forcing a failure. [ 1780.755890][ T8128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1780.782194][ T3035] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.803644][ T8128] CPU: 0 UID: 0 PID: 8128 Comm: syz.8.5972 Not tainted syzkaller #0 PREEMPT(full) [ 1780.803672][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1780.803686][ T8128] Call Trace: [ 1780.803695][ T8128] [ 1780.803705][ T8128] dump_stack_lvl+0x189/0x250 [ 1780.803737][ T8128] ? __pfx____ratelimit+0x10/0x10 [ 1780.803768][ T8128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1780.803806][ T8128] ? __pfx__printk+0x10/0x10 [ 1780.803834][ T8128] ? __might_fault+0xb0/0x130 [ 1780.803875][ T8128] should_fail_ex+0x414/0x560 [ 1780.803906][ T8128] _copy_from_user+0x2d/0xb0 [ 1780.803928][ T8128] ___sys_sendmsg+0x158/0x2a0 [ 1780.803953][ T8128] ? __pfx____sys_sendmsg+0x10/0x10 [ 1780.804011][ T8128] ? __fget_files+0x2a/0x420 [ 1780.804031][ T8128] ? __fget_files+0x3a0/0x420 [ 1780.804062][ T8128] __sys_sendmmsg+0x227/0x430 [ 1780.804090][ T8128] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1780.804120][ T8128] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1780.804160][ T8128] ? ksys_write+0x22a/0x250 [ 1780.804191][ T8128] ? __pfx_ksys_write+0x10/0x10 [ 1780.804227][ T8128] __x64_sys_sendmmsg+0xa0/0xc0 [ 1780.804250][ T8128] do_syscall_64+0xfa/0xfa0 [ 1780.804280][ T8128] ? lockdep_hardirqs_on+0x9c/0x150 [ 1780.804309][ T8128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.804329][ T8128] ? clear_bhb_loop+0x60/0xb0 [ 1780.804353][ T8128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.804373][ T8128] RIP: 0033:0x7f3347d8eba9 [ 1780.804392][ T8128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1780.804409][ T8128] RSP: 002b:00007f3348bbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1780.804431][ T8128] RAX: ffffffffffffffda RBX: 00007f3347fd5fa0 RCX: 00007f3347d8eba9 [ 1780.804446][ T8128] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 000000000000000b [ 1780.804459][ T8128] RBP: 00007f3348bbb090 R08: 0000000000000000 R09: 0000000000000000 [ 1780.804479][ T8128] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 1780.804491][ T8128] R13: 00007f3347fd6038 R14: 00007f3347fd5fa0 R15: 00007ffd1479b7b8 [ 1780.804525][ T8128] [ 1781.068928][ T3035] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.176424][ T8148] netlink: 'syz.9.5978': attribute type 15 has an invalid length. [ 1781.185924][ T8148] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5978'. [ 1781.591181][T16739] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1781.871184][T16739] usb 4-1: Using ep0 maxpacket: 32 [ 1781.879941][T16739] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1781.899563][T16739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.914794][T16739] usb 4-1: Product: syz [ 1781.929885][T16739] usb 4-1: Manufacturer: syz [ 1781.936739][T16739] usb 4-1: SerialNumber: syz [ 1781.952480][ T8153] blk_print_req_error: 35 callbacks suppressed [ 1781.952494][ T8153] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1781.981627][T16739] usb 4-1: config 0 descriptor?? [ 1782.002429][T16739] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1782.010238][ T8153] EXT4-fs (loop9): unable to read superblock [ 1782.026973][ T8148] overlayfs: failed to resolve './file1': -2 [ 1783.329962][T16739] gspca_topro: reg_w err -110 [ 1783.380423][T16739] gspca_topro: Sensor soi763a [ 1783.804694][ T8200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1784.187989][ T1333] usb 4-1: USB disconnect, device number 19 [ 1785.124997][ T8226] overlayfs: failed to resolve './file1': -2 [ 1786.236819][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6002'. [ 1787.231397][ T8258] netlink: 'syz.1.6005': attribute type 15 has an invalid length. [ 1787.239278][ T8258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6005'. [ 1787.714941][ T8261] overlayfs: failed to resolve './file1': -2 [ 1787.814884][ T8262] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1787.825973][ T8262] EXT4-fs (loop1): unable to read superblock [ 1787.956932][ T8260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1787.993414][ T8258] overlayfs: failed to resolve './file1': -2 [ 1788.540444][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6007'. [ 1789.523457][ T5961] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1789.903406][ T8285] NILFS (loop8): device size too small [ 1790.032101][ T5961] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1790.259022][ T5961] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1790.619633][ T5961] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1790.921473][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1791.000859][ T5961] usb 4-1: SerialNumber: syz [ 1791.221138][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.227887][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.365104][ T8314] netlink: 248 bytes leftover after parsing attributes in process `syz.9.6016'. [ 1793.041805][ T5961] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1793.058182][ T5961] usb 4-1: USB disconnect, device number 20 [ 1795.646933][ T8375] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6030'. [ 1795.656272][ T8375] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6030'. [ 1797.213940][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6033'. [ 1797.857615][T16739] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1797.916092][ T8392] overlayfs: failed to resolve './file1': -2 [ 1798.222811][T16739] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1798.236934][T16739] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.247214][T16739] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1798.946821][T16739] usb 4-1: config 1 has no interface number 1 [ 1798.955124][T16739] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1798.969333][T16739] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1798.986177][T16739] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1798.995513][T16739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.005540][T16739] usb 4-1: Product: syz [ 1799.009900][T16739] usb 4-1: Manufacturer: syz [ 1799.015099][T16739] usb 4-1: SerialNumber: syz [ 1799.246352][T16739] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1799.265535][T16739] usb 4-1: MIDIStreaming interface descriptor not found [ 1799.393467][T16739] usb 4-1: USB disconnect, device number 21 [ 1800.030864][ T8455] ./cgroup: Can't lookup blockdev [ 1800.074312][ T8456] overlayfs: failed to resolve './file1': -2 [ 1800.106156][ T8454] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1800.148092][ T8451] netlink: 14 bytes leftover after parsing attributes in process `syz.8.6047'. [ 1800.470772][ T8454] EXT4-fs (loop3): unable to read superblock [ 1800.687318][ T8468] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1800.723769][ T8468] SQUASHFS error: Failed to read block 0x0: -5 [ 1800.750464][ T8468] unable to read squashfs_super_block [ 1801.962250][ T8478] vfat: Bad value for 'shortname' [ 1802.446889][ T8491] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1802.921806][ T8500] ieee802154 phy0 wpan0: encryption failed: -22 [ 1803.547487][ T8509] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6060'. [ 1803.642819][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6063'. [ 1805.384380][ T8520] overlayfs: failed to resolve './file1': -2 [ 1806.761278][ T6333] Bluetooth: hci5: unexpected cc 0x0809 length: 68 > 4 [ 1806.768332][ T6333] Bluetooth: hci5: unexpected event for opcode 0x0809 [ 1807.488170][ T8537] ALSA: mixer_oss: invalid OSS volume '' [ 1809.072036][ T8576] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1809.184217][ T8578] vfat: Unknown parameter '|tf8' [ 1809.770949][ T1333] usb 10-1: new full-speed USB device number 43 using dummy_hcd [ 1809.789919][ T8582] overlayfs: failed to resolve './file1': -2 [ 1809.969607][ T8594] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6083'. [ 1809.977840][ T8589] mkiss: ax0: crc mode is auto. [ 1810.023729][ T8589] binder: 8587:8589 ioctl c0306201 200000000680 returned -14 [ 1810.025431][ T1333] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1810.062859][ T8589] binder: 8587:8589 ioctl 4b71 200000000140 returned -22 [ 1810.127257][ T1333] usb 10-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1810.250898][ T5960] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1810.253072][ T1333] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.567933][ T1333] usb 10-1: config 0 descriptor?? [ 1810.633412][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6086'. [ 1811.150988][ T8568] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1811.260794][ T5960] usb 6-1: Using ep0 maxpacket: 8 [ 1811.304291][ T5960] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1811.313061][ T5960] usb 6-1: config 0 has no interface number 0 [ 1811.350496][ T5960] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1811.372983][ T5960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.389960][ T5960] usb 6-1: Product: syz [ 1811.417488][ T5960] usb 6-1: Manufacturer: syz [ 1811.437615][ T5960] usb 6-1: SerialNumber: syz [ 1811.487956][ T5960] usb 6-1: config 0 descriptor?? [ 1813.167574][ T5960] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1813.205230][ T5960] uvcvideo 6-1:0.31: No valid video chain found. [ 1813.233788][ T5960] usb 6-1: USB disconnect, device number 72 [ 1813.414289][ T8641] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1813.635699][ T1333] usbhid 10-1:0.0: can't add hid device: -71 [ 1813.826064][ T1333] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1813.914351][ T1333] usb 10-1: USB disconnect, device number 43 [ 1813.987943][ T8650] program syz.5.6091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1814.132678][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6092'. [ 1814.167359][ T8661] bridge0: entered allmulticast mode [ 1814.830392][ T8680] ntfs3(loop8): try to read out of volume at offset 0x0 [ 1814.963672][ T8680] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(12) [ 1814.970374][ T8680] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1814.983882][ T8695] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6101'. [ 1814.997016][ T8680] vhci_hcd vhci_hcd.0: Device attached [ 1815.170759][ T5901] vhci_hcd: vhci_device speed not set [ 1815.231006][ T5901] usb 49-1: new full-speed USB device number 3 using vhci_hcd [ 1815.390858][ T1333] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1815.564880][ T1333] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1815.574205][ T1333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.590829][ T1333] usb 6-1: Product: syz [ 1815.595027][ T1333] usb 6-1: Manufacturer: syz [ 1815.599629][ T1333] usb 6-1: SerialNumber: syz [ 1815.634123][ T1333] usb 6-1: config 0 descriptor?? [ 1816.536310][ T1333] usb 6-1: Firmware version (0.0) predates our first public release. [ 1816.555089][ T1333] usb 6-1: Please update to version 0.2 or newer [ 1816.617034][ T1333] usb 6-1: USB disconnect, device number 73 [ 1818.274620][ T8698] vhci_hcd: connection reset by peer [ 1818.325279][ T9459] vhci_hcd: stop threads [ 1818.337079][ T9459] vhci_hcd: release socket [ 1818.390010][ T9459] vhci_hcd: disconnect device [ 1818.800365][ T8776] netlink: 1 bytes leftover after parsing attributes in process `syz.8.6114'. [ 1819.557135][ T8771] NILFS (loop9): device size too small [ 1820.401300][ T5901] vhci_hcd: vhci_device speed not set [ 1820.460676][ T1333] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1821.232878][ T1333] usb 6-1: config 0 has no interfaces? [ 1821.240448][ T1333] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1821.267477][ T1333] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1821.287931][ T1333] usb 6-1: Manufacturer: syz [ 1821.319282][ T1333] usb 6-1: config 0 descriptor?? [ 1821.531529][ T8781] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6118'. [ 1821.589114][ T1333] usb 6-1: USB disconnect, device number 74 [ 1823.341290][ T981] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1823.529775][ T981] usb 10-1: config 1 has an invalid interface number: 3 but max is 2 [ 1824.507141][ T981] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.518481][ T981] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1824.534756][ T981] usb 10-1: config 1 has no interface number 1 [ 1824.541356][ T981] usb 10-1: too many endpoints for config 1 interface 3 altsetting 0: 234, using maximum allowed: 30 [ 1824.552581][ T981] usb 10-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 234 [ 1824.603994][ T981] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1824.630802][ T981] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.654693][ T981] usb 10-1: Product: ␊ [ 1824.658987][ T981] usb 10-1: Manufacturer: ﬖ彏顏㈥⊮헮㞭西拉ޭ⌍䡊ꐶ᫜ [ 1824.709533][ T981] usb 10-1: SerialNumber: 镾ଝꆨ燬哎ꑱ簑鶭懍㝡䱐躵籼伈䜹쓂虔쌋焮熻ꦾ磜柚፩맠쎤㣜ᑪ䜍옴ዽꪒ駑០騢⌮둝拪炠캍䚩匵诤쳗牅ꂓᅁ鼗∏㨽⟊ᡑᮁ쩶ꓚḯ쮋䗍궡緣쐖ᵙ폖㦏頎䞶琡콷吕䛖⨽达ᑖ禌넃逞摹暢褕૾ᄶ뀼뿎偻೏ឋ੗࣏鯅䄴滘즃椭ᢊȶ뭪赛⭸餒쿫벴ⱗ∖嶦 [ 1824.837147][ T8854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1825.273574][ T981] usb 10-1: 0:2 : does not exist [ 1825.363029][ T981] usb 10-1: USB disconnect, device number 44 [ 1826.256194][ T8876] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1826.296277][ T8876] FAT-fs (loop8): unable to read boot sector [ 1827.591131][ T8904] EXT4-fs: Ignoring removed i_version option [ 1827.597650][ T8904] EXT4-fs: Ignoring removed nobh option [ 1827.616497][ T8904] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1827.822485][ T8904] EXT4-fs (loop8): unable to read superblock [ 1832.003933][ T8946] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6153'. [ 1832.137068][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6155'. [ 1832.209186][ T5186] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1832.288733][ T5186] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1832.298637][ T5186] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1832.306669][ T5186] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1832.314351][ T5186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1833.106180][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6163'. [ 1833.423941][ T8956] chnl_net:caif_netlink_parms(): no params data found [ 1833.728525][ T9105] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6167'. [ 1833.787819][ T9112] net_ratelimit: 30 callbacks suppressed [ 1833.787874][ T9112] openvswitch: netlink: Actions may not be safe on all matching packets [ 1833.855328][ T9119] 9pnet_fd: Insufficient options for proto=fd [ 1833.942144][ T9119] vivid-002: disconnect [ 1834.052102][ T9117] vivid-002: reconnect [ 1834.058001][ T8956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1834.076329][ T8956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1834.086441][ T8956] bridge_slave_0: entered allmulticast mode [ 1834.105256][ T8956] bridge_slave_0: entered promiscuous mode [ 1834.117911][ T8956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1834.160305][ T8956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1834.197386][ T8956] bridge_slave_1: entered allmulticast mode [ 1834.223495][ T8956] bridge_slave_1: entered promiscuous mode [ 1834.269373][ T9167] netlink: 208 bytes leftover after parsing attributes in process `syz.1.6172'. [ 1834.320312][ T9180] netlink: 208 bytes leftover after parsing attributes in process `syz.1.6172'. [ 1834.390757][ T5186] Bluetooth: hci0: command tx timeout [ 1835.282885][ T8956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1835.306426][ T8956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1836.462006][ T5186] Bluetooth: hci0: command tx timeout [ 1836.833744][ T8956] team0: Port device team_slave_0 added [ 1836.859861][ T8956] team0: Port device team_slave_1 added [ 1837.018512][ T9241] NILFS (loop1): device size too small [ 1837.044923][ T8956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1837.052156][ T8956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1837.116884][ T8956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1837.292377][ T8956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1837.303169][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6183'. [ 1837.312073][ T8956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1837.312106][ T8956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1837.338141][ C0] vkms_vblank_simulate: vblank timer overrun [ 1837.551577][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6183'. [ 1837.768423][ T9295] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1837.782028][ T9295] EXT4-fs (loop1): unable to read superblock [ 1837.945021][ T8956] hsr_slave_0: entered promiscuous mode [ 1837.957665][ T8956] hsr_slave_1: entered promiscuous mode [ 1837.966210][ T8956] debugfs: 'hsr0' already exists in 'hsr' [ 1837.987380][ T8956] Cannot create hsr debugfs directory [ 1838.334929][ T8956] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1838.346145][ T981] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1838.462560][ T8956] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1838.505405][ T981] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1838.514638][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.523423][ T981] usb 4-1: Product: syz [ 1838.527648][ T981] usb 4-1: Manufacturer: syz [ 1838.532779][ T981] usb 4-1: SerialNumber: syz [ 1838.540144][ T981] usb 4-1: config 0 descriptor?? [ 1838.545952][ T5186] Bluetooth: hci0: command tx timeout [ 1838.597829][ T8956] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1838.658980][ T9398] IPv6: NLM_F_CREATE should be specified when creating new route [ 1838.670030][ T9398] openvswitch: netlink: Tunnel attr 79 out of range max 16 [ 1838.714928][ T8956] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1838.764362][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6187'. [ 1838.779685][ T981] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1838.821432][ T9410] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1838.827873][ T9410] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1838.879698][ T981] usb 4-1: USB disconnect, device number 22 [ 1839.029830][ T8956] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1839.041525][ T8956] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1839.068467][ T8956] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1839.086226][ T8956] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1839.738948][ T8956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1839.784355][ T8956] 8021q: adding VLAN 0 to HW filter on device team0 [ 1839.806676][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1839.813901][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1839.847316][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1839.854569][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1839.918727][ T9460] netlink: 'syz.3.6197': attribute type 3 has an invalid length. [ 1840.052734][ T8956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1840.450210][ T8956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1840.501281][ T9477] netlink: 'syz.8.6201': attribute type 10 has an invalid length. [ 1840.594447][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6204'. [ 1840.621530][ T5186] Bluetooth: hci0: command tx timeout [ 1841.867200][ T9501] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1841.879719][ T8956] veth0_vlan: entered promiscuous mode [ 1841.909346][ T9501] exFAT-fs (loop1): unable to read boot sector [ 1841.920539][ T9501] exFAT-fs (loop1): failed to read boot sector [ 1841.937332][ T9501] exFAT-fs (loop1): failed to recognize exfat type [ 1842.178925][ T9503] hfs: Unknown parameter 'smackfsdef' [ 1842.574976][ T8956] veth1_vlan: entered promiscuous mode [ 1842.720876][ T9521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1842.795759][ T9530] bridge0: entered allmulticast mode [ 1842.801662][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6213'. [ 1842.804266][ T8956] veth0_macvtap: entered promiscuous mode [ 1842.872255][ T9530] bridge_slave_1: left allmulticast mode [ 1842.878144][ T9530] bridge_slave_1: left promiscuous mode [ 1842.887882][ T9530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.905052][ T9530] bridge_slave_0: left allmulticast mode [ 1842.913845][ T9530] bridge_slave_0: left promiscuous mode [ 1842.924237][ T9530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1843.047233][ T9530] bridge0 (unregistering): left allmulticast mode [ 1843.109838][ T8956] veth1_macvtap: entered promiscuous mode [ 1843.213963][ T8956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1843.235179][ T8956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1843.364400][ T347] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.384629][ T347] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.450139][ T6401] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.478318][ T6401] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.645491][ T9575] overlay: ./file0 is not a directory [ 1844.198669][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1844.232554][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1844.534164][ T3035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1844.547191][ T6333] Bluetooth: hci7: command 0x0406 tx timeout [ 1845.123082][ T3035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1845.661721][ T6333] Bluetooth: hci6: command 0x0406 tx timeout [ 1846.428123][ T9628] vfat: Unknown parameter '|tf8' [ 1847.857298][ T9640] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6228'. [ 1849.797261][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6239'. [ 1849.870509][ T1333] libceph: connect (1)[c::]:6789 error -101 [ 1849.895865][ T1333] libceph: mon0 (1)[c::]:6789 connect error [ 1850.159499][ T9678] ceph: No mds server is up or the cluster is laggy [ 1850.259570][ T1333] libceph: connect (1)[c::]:6789 error -101 [ 1850.321655][ T1333] libceph: mon0 (1)[c::]:6789 connect error [ 1852.684053][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.719024][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.298172][ T9737] program syz.3.6251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1853.348182][ T9737] program syz.3.6251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1853.800842][ T981] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1853.980199][ T981] usb 10-1: Using ep0 maxpacket: 32 [ 1854.177093][ T981] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1854.351583][ T981] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1854.443340][ T981] usb 10-1: New USB device found, idVendor=046d, idProduct=c26e, bcdDevice= 0.00 [ 1854.467774][ T981] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.498187][ T981] usb 10-1: config 0 descriptor?? [ 1854.713771][ T9757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.741931][ T9757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.974712][ T981] logitech-hidpp-device 0003:046D:C26E.0013: collection stack underflow [ 1854.994935][ T981] logitech-hidpp-device 0003:046D:C26E.0013: item 0 0 0 12 parsing failed [ 1855.575767][ T981] logitech-hidpp-device 0003:046D:C26E.0013: hidpp_probe:parse failed [ 1855.615046][ T981] logitech-hidpp-device 0003:046D:C26E.0013: probe with driver logitech-hidpp-device failed with error -22 [ 1855.629402][ T9784] program syz.8.6263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1855.672063][ T981] usb 10-1: USB disconnect, device number 45 [ 1856.050407][ T9816] netlink: 'syz.5.6269': attribute type 15 has an invalid length. [ 1856.068037][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6268'. [ 1856.091749][ T9816] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6269'. [ 1856.794928][ T9816] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1856.804907][ T9816] EXT4-fs (loop5): unable to read superblock [ 1857.655339][ T9845] EXT4-fs: Ignoring removed i_version option [ 1857.682787][ T9845] EXT4-fs: Ignoring removed nobh option [ 1857.696101][ T9845] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1857.711707][ T9845] EXT4-fs (loop3): unable to read superblock [ 1859.789866][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6280'. [ 1859.997708][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6283'. [ 1860.194070][ T9897] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6288'. [ 1860.742774][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6297'. [ 1860.759284][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6297'. [ 1861.370730][ T9944] vfat: Unknown parameter '|tf8' [ 1865.600643][ T5186] Bluetooth: hci3: command 0x1003 tx timeout [ 1865.607638][ T6333] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1866.887762][ T9993] netlink: 165 bytes leftover after parsing attributes in process `syz.5.6314'. [ 1866.976073][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6315'. [ 1868.285772][ T9999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6317'. [ 1868.295203][ T9999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6317'. [ 1871.690932][T10075] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6335'. [ 1873.597107][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6345'. [ 1873.606273][T10102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6345'. [ 1873.615270][T10102] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6345'. [ 1873.624361][T10102] netlink: 540 bytes leftover after parsing attributes in process `syz.3.6345'. [ 1874.877585][T10130] EXT4-fs: Ignoring removed i_version option [ 1874.909837][T10130] EXT4-fs: Ignoring removed nobh option [ 1874.930715][T10130] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1874.947254][T10130] EXT4-fs (loop3): unable to read superblock [ 1876.078952][T10189] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6360'. [ 1876.139422][T10189] bond0 (unregistering): Released all slaves [ 1877.243951][T10282] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6366'. [ 1879.011162][ T5960] kernel write not supported for file bpf-prog (pid: 5960 comm: kworker/1:3) [ 1879.473298][T10322] EXT4-fs: Ignoring removed i_version option [ 1879.479518][T10322] EXT4-fs: Ignoring removed nobh option [ 1879.499853][T10322] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1879.517106][T10322] EXT4-fs (loop3): unable to read superblock [ 1881.136495][T10345] netlink: 'syz.1.6387': attribute type 1 has an invalid length. [ 1881.146101][T10345] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6387'. [ 1881.272684][T10308] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1881.275660][ T6333] Bluetooth: hci2: command 0x0c1a tx timeout [ 1882.073459][T10308] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1882.083727][T10308] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1882.089827][T10308] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1882.097380][T10308] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1882.103533][T10308] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1882.112668][T10308] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1882.118705][T10308] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1882.126911][T10308] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1883.194091][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6392'. [ 1883.420742][T10382] input: syz1 as /devices/virtual/input/input30 [ 1883.477432][T10382] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.521013][T10382] I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.541146][T10382] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1883.561853][T10382] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.576841][T10382] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1883.589793][T10382] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1883.603107][T10382] UDF-fs: Scanning with blocksize 512 failed [ 1883.610135][T10382] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.631322][T10382] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.641576][T10382] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1883.652598][T10382] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.662595][T10382] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1883.690691][T10382] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1883.701087][T10382] UDF-fs: Scanning with blocksize 1024 failed [ 1883.714563][T10382] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.740332][T10382] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.766659][T10382] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1883.799772][T10382] I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.828132][T10382] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1883.860653][T10382] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1883.871213][ T5186] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1883.881493][T10382] UDF-fs: Scanning with blocksize 2048 failed [ 1883.888115][T10382] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1883.903022][ T5186] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1883.913712][ T5186] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1883.946966][T10382] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1883.981588][ T5186] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1884.007411][ T5186] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1884.086114][T10382] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1884.136204][T10382] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1884.145034][ T5186] Bluetooth: hci0: command 0x0c1a tx timeout [ 1884.145055][ T6333] Bluetooth: hci7: command 0x0406 tx timeout [ 1884.153056][ T5186] Bluetooth: hci6: command 0x0406 tx timeout [ 1884.157983][ T6333] Bluetooth: hci1: command 0x0405 tx timeout [ 1884.199691][T10382] UDF-fs: Scanning with blocksize 4096 failed [ 1884.280821][T10382] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 1884.608145][T10439] program syz.3.6396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1885.203969][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6398'. [ 1885.253782][T10443] bridge0: entered allmulticast mode [ 1885.301845][T10453] netlink: 'syz.8.6399': attribute type 39 has an invalid length. [ 1885.541248][ T5901] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1885.699773][T10396] chnl_net:caif_netlink_parms(): no params data found [ 1885.750882][ T5901] usb 10-1: Using ep0 maxpacket: 8 [ 1885.773221][ T5901] usb 10-1: config 0 has an invalid interface number: 128 but max is 0 [ 1885.813890][ T5901] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1885.870044][ T5901] usb 10-1: config 0 has no interface number 0 [ 1885.886838][ T5901] usb 10-1: config 0 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1886.060036][ T30] audit: type=1326 audit(2000001176.138:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.8.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3347d8eba9 code=0x7ffc0000 [ 1886.092748][ T6333] Bluetooth: hci3: command tx timeout [ 1886.225184][ T6333] Bluetooth: hci7: command 0x0406 tx timeout [ 1886.436398][ T5901] usb 10-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1886.445649][ T5901] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.457139][ T5901] usb 10-1: config 0 descriptor?? [ 1886.470198][T10578] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1886.565293][ T30] audit: type=1326 audit(2000001176.138:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.8.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3347d8eba9 code=0x7ffc0000 [ 1886.588188][ T30] audit: type=1326 audit(2000001176.148:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.8.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3347d8eba9 code=0x7ffc0000 [ 1886.720130][ T5901] usb 10-1: USB disconnect, device number 46 [ 1886.848142][T10396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1886.861207][T10396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1886.882720][T10664] hfs: can't find a HFS filesystem on dev loop1 [ 1886.896701][T10396] bridge_slave_0: entered allmulticast mode [ 1886.905702][T10396] bridge_slave_0: entered promiscuous mode [ 1886.923338][T10396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1886.948948][T10396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1886.972729][ T6333] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1886.981028][T10396] bridge_slave_1: entered allmulticast mode [ 1886.989980][T10396] bridge_slave_1: entered promiscuous mode [ 1887.221253][T10396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1887.241252][T10396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1887.468561][T10396] team0: Port device team_slave_0 added [ 1887.494936][T10729] EXT4-fs: Ignoring removed i_version option [ 1887.514072][T10396] team0: Port device team_slave_1 added [ 1887.531534][T10729] EXT4-fs: Ignoring removed nobh option [ 1887.547415][T10729] EXT4-fs (loop9): unable to read superblock [ 1888.305859][ T6333] Bluetooth: hci3: command tx timeout [ 1888.566140][T10396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1888.583557][T10396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1888.682749][T10396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1888.686271][T10756] ntfs3(loop9): try to read out of volume at offset 0x0 [ 1888.725621][T10396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1888.744032][T10396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1888.780375][T10396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1889.419390][T10396] hsr_slave_0: entered promiscuous mode [ 1889.438376][T10396] hsr_slave_1: entered promiscuous mode [ 1889.446008][T10396] debugfs: 'hsr0' already exists in 'hsr' [ 1889.461186][T10396] Cannot create hsr debugfs directory [ 1889.830627][ T5961] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 1889.995553][ T5961] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1890.036981][ T5961] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 32, setting to 8 [ 1890.087753][T10396] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1890.100033][T10396] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1890.461067][ T6333] Bluetooth: hci3: command tx timeout [ 1890.815569][T10396] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1890.836736][T10396] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1890.967064][T10396] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1890.987314][T10396] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1891.250853][T10396] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1891.300448][T10396] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1891.560916][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6416'. [ 1892.083518][T10905] blk_print_req_error: 4 callbacks suppressed [ 1892.083538][T10905] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1892.139009][T10905] hfsplus: unable to find HFS+ superblock [ 1892.222271][T10905] overlay: filesystem on ./file0 not supported as upperdir [ 1892.297133][T10396] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1892.544420][ T6333] Bluetooth: hci3: command tx timeout [ 1892.628048][T10396] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1893.013843][T10396] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1893.054400][T30482] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1893.166680][ T5961] usb 4-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.40 [ 1893.183051][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.191653][T10396] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1893.226703][ T5961] usb 4-1: can't set config #1, error -71 [ 1893.281195][ T5961] usb 4-1: USB disconnect, device number 23